This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File: GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier: ZbZjiSBZucvron/BiEi722xpK5Jzc4pD1QRD4QVGwX4=
Subject key identifier: BB:7F:8E:66:F3:0E:B3:DC:11:3A:DB:05:D6:7E:B2:70:09:63:36:75
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 019BFB400B387A999E3E5967850DBDDEE071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number: 17EE
Signing time: Mon 26 Jan 2026 17:00:36 +0000
Manifest this update: Mon 26 Jan 2026 17:00:36 +0000
Manifest next update: Tue 27 Jan 2026 17:00:36 +0000
Files and hashes: 1: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (hash: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM=)
2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: PrSy30Z4AxkHTMK0CrkD5E3cIo+t8kRQc29XEzu4S8M=)
3: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (hash: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw=)
4: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (hash: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig=)
5: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (hash: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU=)
6: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (hash: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:40:0b:38:7a:99:9e:3e:59:67:85:0d:bd:de:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 26 17:00:36 2026 GMT
Not After : Jan 27 17:00:36 2026 GMT
Subject: CN=bb7f8e66f30eb3dc113adb05d67eb27009633675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:39:43:cf:3f:8d:ed:56:29:38:30:e5:5c:
32:cc:b2:02:15:6e:1e:3b:56:9d:e9:6e:ec:85:54:
49:d0:55:35:e9:79:75:a4:8d:23:8f:4f:01:b1:a7:
87:62:d8:b7:63:d3:04:d1:fa:dd:63:d7:41:0c:9a:
05:f5:ff:b4:b3:0c:3d:c3:2d:98:b4:ac:9a:b4:0c:
5f:7a:cd:be:9e:5b:8d:1e:e1:6c:5e:40:84:bb:53:
78:98:df:95:f7:e9:9e:f0:f5:53:52:f5:4c:45:b3:
59:8c:97:82:60:10:f2:0c:7e:7b:d1:ac:b1:8e:69:
99:a4:2d:ce:40:49:5e:94:3c:e9:2c:e1:c8:c6:bc:
6e:a3:9f:68:4c:a0:4a:67:12:0b:77:84:58:44:b9:
0c:da:4f:1d:0a:b5:cb:52:d1:77:3b:f1:fe:2d:c0:
00:3d:9e:6d:7e:ed:20:10:23:c0:6c:8b:bd:87:be:
f8:c2:24:64:30:96:9e:88:55:4b:f6:29:70:80:4c:
84:46:fb:95:3e:2a:2f:f8:ab:c3:b3:03:fa:51:93:
b5:c4:bf:4f:3b:a5:fa:d2:b1:c6:52:31:95:c9:da:
25:8c:0a:3d:44:47:a3:74:34:56:19:4c:7e:35:56:
28:dd:0f:fa:ce:45:ea:9d:1a:61:e8:64:a6:b3:98:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:8E:66:F3:0E:B3:DC:11:3A:DB:05:D6:7E:B2:70:09:63:36:75
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c7:6b:c0:f7:a0:9d:0f:35:53:be:f0:aa:84:e7:10:e8:9c:
c4:19:ec:8d:a1:db:45:e2:71:16:56:0c:12:5b:d3:3f:19:63:
a1:92:3e:c5:3c:d8:35:31:a4:a2:30:42:06:f9:10:b6:cb:c4:
8f:5f:f4:a2:2e:69:03:fd:ab:a4:63:b0:83:10:90:ea:c2:cf:
84:3d:f9:a3:79:46:cf:04:47:20:c3:d9:d0:ea:58:0c:ee:fb:
fb:0d:6a:35:67:9b:f6:cd:fe:98:37:5a:34:c9:aa:cd:0e:61:
ce:0e:2e:8a:7c:d8:2f:93:42:02:17:cb:2a:ac:d6:63:6c:63:
92:ac:b8:84:c0:fb:f7:ba:ab:57:d9:8c:d0:f1:16:c7:7f:7f:
64:e5:e0:5d:69:e0:14:18:2f:ce:3b:7a:45:0f:21:76:90:0b:
b1:1e:6e:31:5c:85:a7:6b:d8:36:78:e7:5a:22:2b:6f:ef:f4:
37:53:e5:38:1b:09:7c:2f:e8:37:29:ae:4c:6c:33:ea:6f:17:
e4:ea:7f:60:84:b5:9f:5b:8e:cc:d4:c8:2e:68:dc:ef:01:fd:
16:27:2f:11:f8:7c:90:55:71:2a:ae:9a:0c:00:1d:a5:5a:6d:
2a:ac:0b:b9:61:0c:db:e9:40:45:42:f5:c7:19:73:12:f4:a1:
0c:9d:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:02 2026 by rpki-client