This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: Eb8f/Sv7HL+PtO9RCzCi0EMSQ1Xvcx2PO3d0Y4Q73C4=
Subject key identifier: 4F:1D:31:38:9F:B4:C3:A8:B2:82:89:EB:AD:72:E9:27:26:F1:8E:0D
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019C427DB546641DF26CBF4BC27DA869A420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 06D6
Signing time: Mon 09 Feb 2026 13:01:00 +0000
Manifest this update: Mon 09 Feb 2026 13:01:00 +0000
Manifest next update: Tue 10 Feb 2026 13:01:00 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: Qy4BFQBhvCfuuaL6NUoIsxDnmS+QB8xLZ63HVBDqc84=)
2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b5:46:64:1d:f2:6c:bf:4b:c2:7d:a8:69:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Feb 9 13:01:00 2026 GMT
Not After : Feb 10 13:01:00 2026 GMT
Subject: CN=4f1d31389fb4c3a8b28289ebad72e92726f18e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:69:c4:17:ff:d9:be:cb:97:2c:0a:b1:e1:52:
97:f7:03:ff:2d:19:2b:e0:14:ad:df:04:cc:c9:ec:
5f:ce:c1:48:58:46:52:7e:2e:c0:1e:be:56:f0:c4:
b7:e9:76:a2:d8:a8:33:ac:ae:2d:7f:09:0e:46:84:
9a:63:eb:b6:8f:da:70:4c:ea:e1:49:66:c2:74:3b:
08:19:e8:0d:0d:69:e4:8e:c7:40:21:28:62:92:f4:
0f:72:61:ab:9f:4e:7f:2b:dd:0d:32:31:4d:bb:2c:
71:6a:c4:d3:56:00:57:df:6c:a5:a5:a4:5f:d9:92:
a8:18:5a:ea:7e:71:44:45:fb:b9:11:04:5f:47:3b:
99:c1:6b:ac:a2:b3:47:6a:74:6e:7f:47:e9:1f:86:
aa:5a:a0:1d:06:77:cc:3c:c0:68:b6:e1:45:c3:48:
41:8a:22:e3:92:ed:95:e0:e6:a7:a3:2d:bf:54:6d:
17:02:af:9a:a0:75:6b:ed:bb:87:60:84:ff:e2:0e:
e3:8c:a6:ea:97:e5:d7:33:b1:94:fe:e2:7c:8c:86:
fc:be:c7:ff:ef:03:39:82:8d:17:a4:9d:04:38:09:
10:00:bf:a5:ce:07:bc:5e:f3:c2:30:d6:6e:cb:60:
15:80:b1:89:18:ba:22:a9:16:a4:14:12:7f:26:50:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:31:38:9F:B4:C3:A8:B2:82:89:EB:AD:72:E9:27:26:F1:8E:0D
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:bc:9f:f0:28:79:3e:06:a5:b0:62:0d:18:8b:4e:13:6c:
e0:d3:3f:ff:8c:df:e2:62:e5:f9:a4:f2:5a:e7:78:e7:25:cb:
b0:de:fd:7f:a2:7e:99:c9:d3:77:77:b5:be:6f:10:4d:4e:8e:
03:c9:8b:15:4e:d3:7f:16:52:93:2a:f5:34:ae:29:5e:9e:ca:
8d:1e:43:d3:8b:24:f4:31:77:c6:ff:e2:84:89:b9:02:b5:c9:
7f:b3:bb:b6:64:b0:22:e6:8a:0e:42:90:ac:f3:6f:51:7c:84:
51:f4:79:b7:82:25:e3:49:1c:f6:0a:d1:6d:47:5d:19:03:da:
c4:78:67:2a:d0:17:c3:97:57:f0:cc:04:8f:0d:8b:94:b5:c8:
ae:33:44:66:e8:e1:00:ad:1e:46:88:e9:c7:dd:1e:8e:d7:4e:
c4:d0:e9:58:d9:1f:b7:1e:1c:f1:55:10:45:55:05:c0:f1:42:
13:d8:a5:87:c1:e2:bc:72:b1:e2:67:03:2d:3a:92:b3:69:2a:
6a:9b:a4:71:e1:3c:e8:b5:f7:dd:0d:ef:0c:d6:bc:e4:27:3a:
22:67:d8:75:64:80:5a:d8:7b:f7:58:32:20:f2:3b:26:77:85:
f0:d7:ed:59:70:32:dd:e5:17:0e:68:03:3d:0d:9f:32:87:3f:
74:ce:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:54 2026 by rpki-client