This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: TXHe+srwF68/SjsoHonR2NfnmVOGkLbd8iNGpGsV8nI=
Subject key identifier: C2:61:62:93:54:68:A8:EA:88:CC:BA:09:18:0D:30:B8:F4:11:F1:8B
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 019C427E0B7C18296E76EDCAECD4E9E5B5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 07C8
Signing time: Mon 09 Feb 2026 13:01:22 +0000
Manifest this update: Mon 09 Feb 2026 13:01:22 +0000
Manifest next update: Tue 10 Feb 2026 13:01:22 +0000
Files and hashes: 1: BrA8u2faJKSWsAITat9kgoQt3WE.roa (hash: gxZOLWmQMlnhj/neNAY1nmBM8bF2InZz8Umo3wa3Z6A=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: Env1Yyv2seFfNOOlJWsUoIMPxeQviMUT/Ql9sCGiKFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:0b:7c:18:29:6e:76:ed:ca:ec:d4:e9:e5:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Feb 9 13:01:22 2026 GMT
Not After : Feb 10 13:01:22 2026 GMT
Subject: CN=c26162935468a8ea88ccba09180d30b8f411f18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:05:07:b0:de:4f:7b:51:65:64:ca:c8:ac:
54:fc:16:86:c8:07:a5:75:33:0e:60:63:44:6c:4d:
fe:8a:fb:4e:4d:2b:df:eb:ba:53:cc:a8:9d:47:d0:
5f:3f:eb:ec:23:c3:08:83:a1:13:8a:7c:df:e3:5f:
a0:60:81:73:80:0e:63:d8:ae:e3:1b:50:84:c3:e5:
c1:9d:e6:ee:6c:9a:6f:70:c3:76:4f:2f:84:5f:ed:
d9:bf:d3:44:17:ff:34:ed:45:03:02:3c:91:37:5c:
b9:80:b0:d2:78:ba:ee:b9:37:f8:de:ea:f9:44:33:
60:f6:2d:cf:5f:fc:27:c8:92:21:e1:f6:c8:9d:9e:
25:8d:15:83:1e:63:df:b4:32:50:e6:0a:57:cd:66:
19:41:49:a3:23:11:bf:91:9e:01:03:10:41:8a:d6:
0c:06:d6:dd:18:71:28:49:79:f1:64:2d:31:87:a3:
30:09:3b:c5:49:3b:ab:97:bf:52:25:20:bb:86:21:
ff:78:8d:bc:cb:9a:88:b3:9c:ef:4a:49:6d:90:1b:
9c:46:4a:3d:a7:d9:fa:6f:cf:41:46:3a:56:3b:bd:
d8:de:cb:43:30:05:94:75:7c:1c:ab:bf:67:43:09:
f5:e9:09:89:44:32:b3:e1:2a:4e:91:e1:49:48:c9:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:62:93:54:68:A8:EA:88:CC:BA:09:18:0D:30:B8:F4:11:F1:8B
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:4d:1d:a9:bb:bf:6f:90:a8:41:8e:9c:cc:ab:82:c7:a5:
c2:76:75:47:5f:7c:ee:3a:88:06:b4:a5:f1:4d:ec:0e:f9:41:
ef:64:18:a1:ca:3e:66:0b:5b:aa:c6:99:e5:18:0a:db:ce:a1:
52:5f:7b:d6:96:a0:ee:6a:6b:41:61:68:90:bb:6c:44:f8:50:
c5:81:4c:aa:f0:32:13:c7:6e:08:8d:60:16:b5:c6:15:11:4c:
f7:77:e8:47:cf:ee:53:80:09:ba:89:17:5c:e2:df:aa:fa:4e:
fe:cc:e4:e4:f3:ce:9f:fc:48:78:48:15:7c:85:c5:0a:c4:04:
04:47:ef:2e:37:7e:26:59:74:8f:04:7f:23:7e:80:36:af:e0:
f5:8f:8b:41:1b:9e:e0:65:4e:c2:95:16:22:27:2d:e6:b9:2b:
41:80:15:f9:bc:33:c5:8f:ac:7b:f1:b3:5c:45:55:fa:b4:e2:
e6:e8:a0:60:00:c5:21:dd:2e:22:f7:d4:37:da:c5:2e:a2:a5:
a3:61:98:35:e9:68:6a:a5:e2:f1:1a:c1:ad:1c:b2:73:c8:9a:
f4:95:ac:fc:b5:d3:3f:26:8b:71:f6:3d:af:61:93:4d:75:81:
0b:a9:9c:18:d9:16:f2:cb:c5:28:45:79:bc:a7:de:2b:57:08:
e6:b8:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:58 2026 by rpki-client