This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: zoqui21u/t7uo7XJYnbrrPNG52s/MbcT3JUCq2NnYa8=
Subject key identifier: 5E:1E:AF:D6:7D:E6:99:C9:55:37:1E:E2:26:4D:5E:A2:45:C1:19:40
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 019C432202028FC111EE02CF7F6E83ACD790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 16:00:28 +0000
Manifest this update: Mon 09 Feb 2026 16:00:28 +0000
Manifest next update: Tue 10 Feb 2026 16:00:28 +0000
Files and hashes: 1: YloCVVdJvKAa6gh8GBgiy4QFkXE.roa (hash: tCIg8TvhbolaLTZuF9TlFnkt+KTSjavmZ7JDjM42MsM=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: rgAihKxs3BKKqfP9vx7YyAKMkh0S5osjrvIKhuXF2NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:02:02:8f:c1:11:ee:02:cf:7f:6e:83:ac:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Feb 9 16:00:28 2026 GMT
Not After : Feb 10 16:00:28 2026 GMT
Subject: CN=5e1eafd67de699c955371ee2264d5ea245c11940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:97:0c:5d:6d:13:d9:de:a3:90:8f:c7:cb:
59:94:85:4b:10:15:29:a9:f0:f2:f8:7c:fa:60:a1:
61:ac:d5:7d:b4:b2:ea:e5:67:27:fe:1c:f5:c3:fc:
63:d9:16:8c:fb:a0:83:a5:6f:d9:b1:76:89:b6:b4:
0e:ac:6d:e9:8d:4c:8d:b8:ec:64:d4:ab:99:5e:9e:
3f:7b:22:4a:61:33:bd:78:f0:b0:ff:56:9b:4a:8b:
cd:f9:70:ae:6f:2f:21:50:b0:89:c7:a1:55:1c:96:
71:75:91:c5:58:97:87:9a:a8:fe:bd:22:e6:7b:73:
16:e0:ca:1c:c0:a4:e2:d0:a5:51:84:35:e1:10:3f:
80:f8:95:fb:d4:ff:e3:2d:0f:5e:57:39:af:58:f2:
97:e6:29:85:a0:d9:c6:43:a6:cf:25:45:dd:4c:38:
78:ff:f3:89:94:99:a4:02:ee:91:2d:cd:5b:0c:60:
1f:1b:6b:e3:c9:eb:3b:56:2d:3c:e7:cc:23:42:5c:
30:2c:c8:43:9e:23:76:9c:31:0e:34:46:8d:b4:bc:
1c:3a:2b:9b:95:27:a8:72:a9:85:21:97:f2:65:62:
33:f6:f4:af:78:c8:8c:96:a4:75:c9:70:2b:61:71:
4c:ab:9c:62:19:ff:be:82:dc:cc:e5:e5:15:3b:5f:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1E:AF:D6:7D:E6:99:C9:55:37:1E:E2:26:4D:5E:A2:45:C1:19:40
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:04:8e:a3:9a:1b:59:ed:a9:8f:87:57:84:76:12:5e:3a:d6:
6c:2a:ee:82:9f:11:b6:73:91:2f:4b:9b:5a:05:88:0e:c5:ce:
30:4b:98:54:19:5a:7a:9d:8d:6d:a9:7f:b3:83:6e:46:92:b0:
b5:85:82:a5:cb:06:1d:3e:f1:34:c7:84:ea:28:7f:6b:bb:bd:
e3:08:5c:27:75:4c:0d:e6:74:81:79:ff:da:a2:55:32:2a:67:
2b:52:fc:7e:72:dc:e8:7e:6f:b7:ac:34:42:3d:43:db:55:9b:
69:1c:6d:9f:a6:71:6c:6d:3d:1c:8d:f5:ea:ee:7a:08:95:a8:
e3:40:b9:e3:8f:18:04:7e:97:08:10:b6:e5:20:e5:59:4f:4e:
9c:76:05:11:03:e4:41:5d:55:e3:8a:6e:0e:2b:42:c5:19:6d:
36:c9:23:6d:20:c9:44:7f:73:c9:bb:23:da:51:21:1b:c9:7c:
e1:71:51:46:de:26:38:61:e3:d2:9a:a9:e8:4e:ea:66:7a:5e:
7b:9a:f8:85:da:e5:8e:ec:a5:03:b0:68:0e:dc:34:79:d8:bf:
0b:27:e2:95:d8:35:70:d5:55:3d:0d:de:0f:94:ff:c5:0e:8b:
2d:f7:7d:ff:1d:49:a0:26:e8:39:40:d9:99:93:bc:02:16:b4:
07:f8:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:51 2026 by rpki-client