This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File: GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier: 9sfmGyEZ8p2gX3VqYsV6m+KcVw+nRGdhvVR8+t051Jc=
Subject key identifier: 52:38:40:72:9D:36:29:ED:E7:0D:6B:A7:6C:C6:2B:46:59:1F:A7:64
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 019BFD2E610DE2E8E9D0FDF0094E60465265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number: 17EF
Signing time: Tue 27 Jan 2026 02:00:33 +0000
Manifest this update: Tue 27 Jan 2026 02:00:33 +0000
Manifest next update: Wed 28 Jan 2026 02:00:33 +0000
Files and hashes: 1: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (hash: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM=)
2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: gbjXFtrMW3w9Xn1WMJ6rEqGz6mEIkAddrGH8WfUlA5A=)
3: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (hash: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw=)
4: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (hash: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig=)
5: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (hash: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU=)
6: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (hash: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:2e:61:0d:e2:e8:e9:d0:fd:f0:09:4e:60:46:52:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 27 02:00:33 2026 GMT
Not After : Jan 28 02:00:33 2026 GMT
Subject: CN=523840729d3629ede70d6ba76cc62b46591fa764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:31:00:88:6b:2a:f0:6c:fa:1c:ba:8f:0d:
5d:ed:d5:bd:07:f0:df:35:19:e1:3a:58:21:41:37:
ec:e3:cf:54:64:53:ca:42:c4:bd:06:e8:8e:e7:c2:
e5:fa:5a:78:9a:b0:3c:08:79:12:3c:49:4e:4e:f7:
4f:1d:03:20:26:dc:3e:0b:90:93:a5:a1:4a:13:0d:
70:54:bb:9c:a3:dd:32:e8:5e:cf:cb:e4:a1:dd:30:
cf:57:35:22:d0:f3:65:17:54:f4:09:74:17:11:a2:
a3:b9:05:54:3f:6b:75:21:3c:e1:e8:5e:f1:e0:4f:
b6:09:60:a2:73:ac:75:29:90:33:76:e5:50:2c:55:
e5:18:2a:e3:d3:a5:28:60:a0:88:d4:1f:f2:01:4a:
8d:a5:36:e2:f1:09:ca:b4:48:2c:26:bf:20:22:b9:
8a:ed:4a:f1:0e:e7:77:33:0a:ae:d0:cc:96:95:51:
47:bb:73:24:d4:51:de:26:97:be:7a:28:75:46:21:
fe:27:a5:bb:80:04:e3:d1:20:62:3e:98:12:6b:15:
03:0a:2d:ca:88:2d:49:9e:37:4f:a1:46:c5:72:92:
b5:67:9b:15:ef:da:b7:ad:43:df:1d:c1:02:69:11:
95:aa:20:0a:47:ac:dd:7a:fc:ae:06:8f:8d:d8:3d:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:40:72:9D:36:29:ED:E7:0D:6B:A7:6C:C6:2B:46:59:1F:A7:64
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:c7:cd:3e:47:19:3d:f0:54:8f:f0:fd:42:ed:5f:44:28:
2c:ef:e6:aa:d9:83:06:2f:fb:65:86:e5:67:bb:f6:09:08:59:
fa:e2:27:56:53:b8:d5:54:0d:6e:42:88:53:af:4c:42:f8:69:
67:d0:ff:ec:88:e4:26:b6:d7:19:bb:c7:06:93:d8:d1:ee:07:
72:37:3f:46:fa:be:a8:91:f1:c1:ad:66:6d:4a:c5:48:35:0e:
90:ac:dd:bf:da:95:6d:84:50:f9:d6:b6:9c:43:e1:0a:23:31:
2b:c7:f2:6b:1c:e2:13:f3:28:f1:5b:f7:c1:a4:fe:62:80:9c:
2c:09:82:a7:f0:9e:82:ff:7f:aa:37:8b:63:cb:f3:38:a1:78:
69:06:19:dc:11:08:77:48:8e:3f:ad:9a:32:4c:cd:46:ff:c2:
42:df:f3:c6:e5:58:97:82:ba:0a:38:bb:11:4b:89:fc:2c:65:
a9:b4:2b:84:e8:e0:7d:68:eb:70:aa:f8:4b:49:43:13:32:78:
83:92:96:b8:87:8d:00:a6:b4:3f:ee:b4:14:e5:7b:5f:ae:45:
32:9c:a9:08:8f:f5:6f:f0:88:94:a7:51:e8:86:eb:b4:ae:b3:
cc:61:66:16:03:fc:01:6f:da:6d:34:b3:d0:48:62:1e:0c:d9:
8c:84:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:26:47 2026 by rpki-client