This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: jCRgmqwhFRbhFsi525wRlw4dPUnElFd9pqu9ajc7SZE=
Subject key identifier: C4:52:D3:AF:21:34:1C:48:35:E6:9B:6D:85:49:8C:F3:C5:F3:5D:91
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019BFCF7E17C4E864DE21A01C2A991267BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 17EC
Signing time: Tue 27 Jan 2026 01:01:01 +0000
Manifest this update: Tue 27 Jan 2026 01:01:01 +0000
Manifest next update: Wed 28 Jan 2026 01:01:01 +0000
Files and hashes: 1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: oZDzSecLmGMAgGEOfdfe2fk4CTvwVRYdtdSeGkicuJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:f7:e1:7c:4e:86:4d:e2:1a:01:c2:a9:91:26:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Jan 27 01:01:01 2026 GMT
Not After : Jan 28 01:01:01 2026 GMT
Subject: CN=c452d3af21341c4835e69b6d85498cf3c5f35d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:54:58:86:47:06:d6:52:ca:cb:b2:ef:66:
ff:2a:10:3a:2b:3e:35:b1:4b:fc:f7:1e:ee:09:87:
ef:89:4b:22:a3:8f:f6:34:80:02:00:a7:24:cb:65:
c1:03:71:06:52:14:44:b3:54:1f:27:36:42:0b:58:
49:67:da:2c:dd:20:ec:7e:e0:2b:46:c3:ed:62:04:
df:0c:0b:80:9d:f6:6c:0d:0c:50:4e:97:17:aa:e5:
97:ba:7e:5c:13:84:72:2a:40:c3:4b:dc:a2:dd:0c:
56:8f:d5:67:b9:38:e2:c5:15:34:ce:32:ab:ee:5d:
88:f1:1c:4f:85:80:e4:08:5b:b0:18:c5:0c:01:f0:
cb:35:02:28:1b:6f:11:83:e7:a7:5e:3c:d8:10:1d:
50:fb:45:84:c6:59:c6:bb:68:45:22:b0:47:8b:5f:
20:13:06:98:9e:91:03:57:ab:30:46:e4:ef:78:9a:
86:1e:c4:02:7c:ee:cb:f0:32:71:7e:86:c2:9d:7d:
a7:01:96:26:75:21:0a:5d:58:fc:bf:44:92:0d:cc:
55:fc:26:8a:79:3d:e2:35:41:51:ac:84:f1:70:60:
95:2d:7e:a3:97:10:99:9c:67:7c:6d:f0:e8:bc:6c:
93:af:4f:0a:fc:0e:39:0a:fd:9c:be:3f:69:8a:9c:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:D3:AF:21:34:1C:48:35:E6:9B:6D:85:49:8C:F3:C5:F3:5D:91
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:2e:17:a1:3e:f7:a4:c4:13:5c:d8:84:e4:69:a1:d2:c4:
71:12:bc:43:a7:92:8a:69:3a:a1:8d:e1:f1:b7:43:99:4b:65:
c3:c9:db:c5:3a:8a:36:d2:3f:73:05:11:7c:1b:47:ab:db:cc:
d8:22:4c:bf:59:7e:4e:63:d4:ff:1e:cc:e2:bc:bb:8b:a8:65:
3a:17:61:9e:2b:d5:26:59:19:ec:51:7b:3d:39:8c:2f:e4:5f:
3e:3c:78:0d:8d:5d:8f:26:32:6f:5f:5f:55:13:0d:29:ee:b5:
fc:95:7b:8e:83:1e:49:ad:a4:3f:30:3f:13:e2:99:03:c9:d8:
b7:9c:c5:0f:70:bf:63:a0:3c:e6:8e:43:6f:93:c9:20:84:21:
23:c6:5b:2e:38:a8:ab:ef:ae:87:bf:9c:0c:d0:ec:0e:48:e2:
ce:c9:41:eb:35:59:cb:33:9a:e8:13:e3:0d:c2:9f:8b:86:fb:
56:39:cd:dd:32:81:e2:57:f0:67:d6:ff:da:15:db:9f:0c:7d:
c9:93:eb:ab:a6:a9:c1:68:ab:82:a6:e0:2f:47:c4:5b:58:a9:
8c:85:93:99:4a:5d:65:38:c4:2f:ed:46:93:41:db:76:5b:f1:
43:19:af:57:e5:63:a6:c3:77:b3:73:ff:3a:09:0c:55:62:74:
61:4f:fa:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv89+F8ToZN4hoBwqmRJnu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNmNDlkNmNjNjUwY2Q2ZDY1NDgyMzQ4ZTFkNmQwYjhm
ZDdlYWEwHhcNMjYwMTI3MDEwMTAxWhcNMjYwMTI4MDEwMTAxWjAzMTEwLwYDVQQD
EyhjNDUyZDNhZjIxMzQxYzQ4MzVlNjliNmQ4NTQ5OGNmM2M1ZjM1ZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliBUWIZHBtZSysuy72b/KhA6Kz41
sUv89x7uCYfviUsio4/2NIACAKcky2XBA3EGUhREs1QfJzZCC1hJZ9os3SDsfuAr
RsPtYgTfDAuAnfZsDQxQTpcXquWXun5cE4RyKkDDS9yi3QxWj9VnuTjixRU0zjKr
7l2I8RxPhYDkCFuwGMUMAfDLNQIoG28Rg+enXjzYEB1Q+0WExlnGu2hFIrBHi18g
EwaYnpEDV6swRuTveJqGHsQCfO7L8DJxfobCnX2nAZYmdSEKXVj8v0SSDcxV/CaK
eT3iNUFRrITxcGCVLX6jlxCZnGd8bfDovGyTr08K/A45Cv2cvj9pipyb5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRS068hNBxINeabbYVJjPPF812RMB8GA1UdIwQY
MBaAFIMj9J1sxlDNbWVII0jh1tC4/X6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYt
NWNmOTE5NGQxNzAyLzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYtNWNmOTE5NGQxNzAy
LzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9QuF6E+
96TEE1zYhORpodLEcRK8Q6eSimk6oY3h8bdDmUtlw8nbxTqKNtI/cwURfBtHq9vM
2CJMv1l+TmPU/x7M4ry7i6hlOhdhnivVJlkZ7FF7PTmML+RfPjx4DY1djyYyb19f
VRMNKe61/JV7joMeSa2kPzA/E+KZA8nYt5zFD3C/Y6A85o5Db5PJIIQhI8ZbLjio
q++uh7+cDNDsDkjizslB6zVZyzOa6BPjDcKfi4b7VjnN3TKB4lfwZ9b/2hXbnwx9
yZPrq6apwWirgqbgL0fEW1ipjIWTmUpdZTjEL+1Gk0HbdlvxQxmvV+VjpsN3s3P/
OgkMVWJ0YU/6Ug==
-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:24 2026 by rpki-client