This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: NH9QyO9PRYjV7G9v+byCxyTkd2IqV3+xC0DcQ4obnIM=
Subject key identifier: A9:84:EA:F4:10:DE:1F:CD:85:F2:C5:19:7B:58:AC:9E:5E:55:E6:9E
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 019C420FB08A1F0A1CF893FC4B77B3C6F197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:50 +0000
Manifest this update: Mon 09 Feb 2026 11:00:50 +0000
Manifest next update: Tue 10 Feb 2026 11:00:50 +0000
Files and hashes: 1: 3V9wiUwvfamuLVADXY0C4Wev7bI.roa (hash: l+RFmyKJ2p1Pn5PCTCrdi1at5JyBh4SapJ5re9I2vYw=)
2: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: Zekjupqit1KIZtCkrDQqEHs0xuQ65B8YPpOOHuEuhSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:b0:8a:1f:0a:1c:f8:93:fc:4b:77:b3:c6:f1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Feb 9 11:00:50 2026 GMT
Not After : Feb 10 11:00:50 2026 GMT
Subject: CN=a984eaf410de1fcd85f2c5197b58ac9e5e55e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:6a:7b:5e:d7:86:60:99:5d:cc:7b:ef:1e:
0f:f7:ef:82:bf:b2:b2:d8:0f:3d:f2:b5:fe:9a:5e:
eb:82:e7:e2:4b:b8:02:e5:ad:31:bc:aa:f3:5f:c8:
52:9b:13:31:af:2f:f3:c8:9f:f8:4c:0c:88:9a:6c:
e4:e4:a7:85:bc:c4:42:f9:45:fc:1e:7f:27:79:ba:
80:1f:61:6e:cc:4a:59:2c:25:f0:0d:9c:d7:19:ac:
26:66:57:b8:93:56:c5:a5:37:38:45:24:d0:c8:ec:
f3:a5:42:fd:94:c5:09:b0:ed:0e:f5:06:f5:02:85:
19:ad:04:24:5c:c2:df:e9:14:98:84:5f:26:10:1e:
32:de:06:0b:04:79:35:04:f2:d7:56:c1:23:e0:10:
6b:9d:f7:c5:d6:cc:c2:6b:6d:bb:87:82:2a:ee:90:
42:cf:cb:40:5e:ce:73:2c:2f:f9:07:e3:9a:2d:c0:
a1:45:4f:84:7f:9d:69:8a:88:be:48:a7:6a:c3:5b:
df:d8:82:e6:74:3e:c0:01:8e:87:df:ff:4a:f7:bd:
a1:55:18:5d:f1:1d:4c:1c:a0:c2:42:e1:03:b3:2a:
f8:be:3a:6e:dc:6f:79:6e:b2:c5:82:f6:32:4a:e5:
5a:9a:f5:05:9d:1c:1c:1c:9a:0a:69:20:8e:80:e5:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:EA:F4:10:DE:1F:CD:85:F2:C5:19:7B:58:AC:9E:5E:55:E6:9E
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b6:29:ca:b9:0f:53:95:27:3f:8b:ff:ef:5f:27:1a:c0:4a:
57:b3:e2:7e:8c:83:0d:d4:15:9b:a1:11:9a:1f:a5:bf:bd:a0:
4d:cc:15:5e:fb:8b:c4:15:a5:70:48:54:ab:ea:ac:61:16:a7:
ea:a3:0a:83:5f:61:3b:bc:87:d1:1d:cc:be:4f:7e:84:f2:f9:
b8:1c:88:7a:75:5b:2b:a3:1a:be:e4:cc:4d:c1:15:c5:33:fc:
f2:44:2f:de:45:36:ac:0c:fc:26:12:6c:2a:b8:16:54:3e:27:
e4:9d:bd:e7:e4:9f:c7:de:d0:da:aa:0e:4d:0c:66:68:8e:f2:
a7:c4:e4:3b:af:28:e1:42:b2:2c:0f:7a:9b:0f:95:7c:7c:7c:
d1:72:d6:5d:16:65:f8:64:c8:ab:e1:70:1f:29:f1:15:67:a0:
ed:cb:fb:5c:cb:e0:99:6a:0b:38:cf:47:85:ad:3a:87:7f:21:
b2:4f:c9:f1:1b:74:1d:39:39:73:35:90:1c:52:fa:bf:c1:12:
52:67:3a:38:d2:34:4e:4d:e5:58:d2:dd:ef:6d:b6:88:3f:ea:
0c:23:3b:7c:e6:78:6a:48:9c:fb:5f:5e:ee:01:d9:4e:6a:04:
0e:52:cd:56:bf:76:26:ce:20:95:b6:c5:7d:df:3c:69:31:d5:
7a:3f:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:17 2026 by rpki-client