This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: IXL3ygNcPvgq+h2UbpvjfQ6MedpT+u0k8AWXV14UyBU=
Subject key identifier: 91:48:B0:20:9C:14:3B:BB:0C:DD:48:1E:BD:63:9C:4C:DA:D0:3E:F4
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019C41A2544EFF5E5FB3637BE7D3D9CE7D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0A33
Signing time: Mon 09 Feb 2026 09:01:23 +0000
Manifest this update: Mon 09 Feb 2026 09:01:23 +0000
Manifest next update: Tue 10 Feb 2026 09:01:23 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: fhlH6G+eyP+n16bvygWGGatFHGgWOuhV3ViQkjJgY0k=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:54:4e:ff:5e:5f:b3:63:7b:e7:d3:d9:ce:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Feb 9 09:01:23 2026 GMT
Not After : Feb 10 09:01:23 2026 GMT
Subject: CN=9148b0209c143bbb0cdd481ebd639c4cdad03ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:71:93:98:c5:a4:26:27:f3:27:a1:9a:08:
62:6c:0a:05:aa:94:af:7a:72:11:e6:87:d5:2a:9f:
52:3d:aa:32:42:55:c6:e4:10:aa:cf:22:94:b1:bf:
b8:6e:a3:60:bb:9b:eb:be:15:4c:d1:ea:30:32:cf:
7d:d1:12:69:b4:ff:96:f2:af:25:d8:2d:a7:08:9f:
55:be:60:ba:fc:82:8f:a2:53:00:1f:05:35:3b:59:
4b:55:d7:40:1a:69:3d:d9:e8:1e:6e:89:07:42:72:
d3:f8:66:78:92:90:56:1c:89:43:45:9c:db:b5:74:
4e:61:2d:3f:aa:f5:8a:58:c0:01:cf:b9:03:88:77:
35:d6:d8:81:a6:79:e0:26:0b:86:84:59:29:58:42:
26:06:6d:cf:31:f7:9c:93:23:b4:77:91:2f:ce:32:
12:f6:55:cc:a2:57:07:5d:98:21:be:91:e6:8c:30:
83:45:c6:65:70:9e:f1:61:c4:c3:62:f9:ee:3e:89:
79:3f:ec:61:ed:d5:ee:92:da:57:5d:0c:c0:d5:20:
aa:c9:2e:8e:e0:c9:2f:1f:fd:d0:44:7e:51:2a:b4:
ca:a5:65:68:2a:37:d0:e2:2f:a2:35:32:7b:70:b4:
a6:8b:f2:73:0a:27:ef:5a:17:1d:a8:97:4f:c8:ff:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:B0:20:9C:14:3B:BB:0C:DD:48:1E:BD:63:9C:4C:DA:D0:3E:F4
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2e:a3:5a:6c:c6:8a:46:cd:3e:2f:b4:86:12:b9:ee:ab:a1:
fd:b6:66:ae:6a:c7:72:48:39:98:f8:5a:d5:a9:20:c4:81:3b:
61:20:5b:42:d0:bf:b8:d6:28:7b:4e:cc:06:30:ca:1a:67:2a:
af:0e:56:cf:5c:88:30:0e:0b:ab:09:6f:8b:e1:14:fe:2c:4d:
90:88:5a:7c:20:a1:d4:0f:1f:10:12:9e:ab:c3:f1:64:e8:43:
58:4a:73:4a:9a:9b:86:c2:9c:e1:bb:96:9c:94:e8:36:07:25:
ae:76:a6:82:9f:7f:5d:75:72:09:65:cc:88:34:94:37:c0:8d:
81:5f:08:2a:bd:f6:59:88:09:4f:66:07:d2:79:23:97:64:01:
7d:ce:8b:a3:c5:fc:1f:c2:63:77:a3:ed:89:90:65:bb:24:91:
e3:e9:e7:8b:70:df:4f:d8:59:de:f2:18:93:f7:ee:82:12:fc:
5e:86:2f:90:04:67:68:f0:1f:67:ec:13:41:ac:0d:14:47:27:
fe:81:87:21:78:96:9d:fa:42:8e:c8:be:76:1f:ec:c3:16:91:
04:4e:3c:7a:cb:30:99:b5:20:ea:d9:95:43:70:af:f8:05:9d:
0c:d4:bd:ff:23:6e:1b:e6:08:a8:c0:d9:a0:bb:f9:e8:ce:64:
b4:46:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:37 2026 by rpki-client