This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: w/if/dIHoiLdNa/70aFAHrYYrt2uy2SSXUJkdX2R+Uo=
Subject key identifier: DF:6E:5F:77:CA:8D:BF:FF:BE:6F:ED:C8:0A:3E:A6:6E:23:81:ED:58
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019BFB77236A641C8A0CFD75146D1FA81C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 17EF
Signing time: Mon 26 Jan 2026 18:00:47 +0000
Manifest this update: Mon 26 Jan 2026 18:00:47 +0000
Manifest next update: Tue 27 Jan 2026 18:00:47 +0000
Files and hashes: 1: 4nuDucz_0bFEirmxExrUk31onXI.roa (hash: bvlmYpnQ+5yUhsAQFov12edmygJjaiwbJsbbg7Ct5yk=)
2: 7jXzyl-cnKTE3ScB2oKx8G-v0X8.roa (hash: Ghrf0CTHZ+10oEi1U0BOWezzYINKW7bywRELMjy2uFU=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: Hz0yrlSmQixADTzrqr+X6AiCqXE7Vs9SrS2d3MW3jQE=)
4: xXiMv43g5gZyliPARvzZ7xyyW2k.roa (hash: lpdFA5yCXN5/FwIwDvBqyIeXJAPjPFSrUa0qNDgv7fQ=)
5: xe9JexTqWxeyzxE1j0Qz0XcC_Qo.roa (hash: xXSsGBvegc8qYSSStq7A7yikuTgP5mU9F9Gcd6J66RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:77:23:6a:64:1c:8a:0c:fd:75:14:6d:1f:a8:1c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jan 26 18:00:47 2026 GMT
Not After : Jan 27 18:00:47 2026 GMT
Subject: CN=df6e5f77ca8dbfffbe6fedc80a3ea66e2381ed58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:d5:29:c0:a3:cb:fa:b6:42:ad:7a:a2:e0:
b2:6d:6f:e0:df:d8:e6:41:f4:5f:20:a2:cb:d7:85:
c1:97:40:58:65:7f:51:28:4b:50:b9:af:43:6e:49:
30:dd:cc:0d:36:19:5f:db:35:5a:9a:aa:58:cb:f7:
b9:01:94:4e:0a:41:05:8c:38:11:30:8a:c8:0a:9a:
94:e0:4a:c7:fd:1e:94:3c:3d:f3:b7:aa:a0:6b:60:
fa:22:65:7c:4a:b4:05:90:15:d6:14:3b:71:ec:96:
c9:ce:46:f8:ee:03:a1:b8:c5:a8:58:82:62:ed:9c:
65:39:9c:25:9c:f4:c2:20:74:43:f4:d3:ad:ef:b4:
6d:e2:f7:1d:4b:d2:d8:aa:9a:cf:3f:a1:75:01:83:
52:ab:47:6e:d4:5d:93:f8:6d:ca:df:77:14:50:56:
12:8a:da:9c:7a:a3:00:0b:38:77:fc:c3:ba:ae:17:
96:c8:55:fa:b6:13:f0:f9:10:23:3c:fc:43:82:28:
90:bb:9d:61:63:e9:c6:47:7f:8a:96:b9:e2:0b:4b:
8a:16:42:4a:35:67:ad:e2:a2:77:39:78:c4:78:de:
1c:a1:87:9b:bc:04:99:6b:36:55:d1:6d:f0:33:a1:
6a:ff:d9:24:a5:d9:0d:de:01:62:60:27:c4:35:c6:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:5F:77:CA:8D:BF:FF:BE:6F:ED:C8:0A:3E:A6:6E:23:81:ED:58
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3d:39:1d:cb:99:07:a4:46:ff:8a:f2:b5:47:ed:bb:8f:e4:
49:2c:bb:f8:b0:b7:ed:48:9d:1d:84:45:ab:5d:32:58:7a:9f:
ec:3f:8e:62:0e:e0:06:c0:52:34:39:d6:a2:ef:ce:c3:26:0d:
ad:de:bd:75:b4:67:4d:d0:93:82:03:b3:88:d0:5e:99:91:f0:
e5:e3:d5:91:a2:ae:21:53:cb:84:1f:93:54:ff:ab:2a:08:a1:
66:d3:05:9c:29:4f:81:16:ec:73:0f:3f:32:88:6a:de:36:1f:
d0:23:6e:d7:ff:11:50:76:5b:1b:a1:0f:56:e5:22:18:2d:de:
57:d4:3d:4c:50:26:ca:ce:0d:dd:3c:3a:90:f4:4c:29:b8:c1:
fc:58:44:f3:af:a3:bf:ad:6b:4f:ba:6d:ec:96:b2:78:2c:ea:
79:b6:b4:1b:43:5e:ad:58:d7:e3:b9:51:ff:bb:5b:7b:b7:2a:
68:09:a7:d9:16:fc:ad:4b:67:bb:07:f5:81:71:a3:df:27:8f:
4c:e1:35:14:41:60:20:01:b5:62:39:a5:98:16:ed:fb:0c:4b:
f4:14:5c:f6:6f:aa:6e:41:64:f8:8c:1f:23:28:08:06:40:41:
02:0c:4e:8f:cc:7a:7b:f8:b7:19:8e:c8:bc:05:8a:d7:e6:96:
b5:63:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:36:10 2026 by rpki-client