This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier: /Vcmu1n6em56Vj0QCxxMVUR/m4MEPNsCSrflubVrqSE=
Subject key identifier: DD:A4:10:7B:C7:E6:A0:CB:CB:71:45:A1:7B:86:74:81:4F:3A:A6:E2
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019BFC5338DE28CEB913327339959E7BB14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number: 13D0
Signing time: Mon 26 Jan 2026 22:01:10 +0000
Manifest this update: Mon 26 Jan 2026 22:01:10 +0000
Manifest next update: Tue 27 Jan 2026 22:01:10 +0000
Files and hashes: 1: 07_NQbnw-Kx0dnvw6zOptxROCyU.roa (hash: A/UlhZ2waVacA5T0TuCbqf/sj35e9LCPvpamAesCh0U=)
2: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=)
3: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=)
4: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: MkJAPsn/V4kr6bPgqpyDMkXf/u8D8yzXrNxy6ZZd9Ac=)
5: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=)
6: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=)
7: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=)
8: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=)
9: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=)
10: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=)
11: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=)
12: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:53:38:de:28:ce:b9:13:32:73:39:95:9e:7b:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 26 22:01:10 2026 GMT
Not After : Jan 27 22:01:10 2026 GMT
Subject: CN=dda4107bc7e6a0cbcb7145a17b8674814f3aa6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:23:0e:f3:a4:34:56:58:d2:5b:9c:c0:1c:
67:47:65:e8:a0:0b:cd:b6:00:16:a8:47:b5:70:5e:
c6:91:97:d9:90:56:8a:16:47:58:b4:f4:3d:f9:a9:
cd:dd:90:5f:19:36:3e:c3:d5:f7:e2:66:24:44:e0:
a0:8e:41:a0:41:ea:b9:44:dd:8e:c7:0c:90:65:cf:
b3:74:e3:23:d2:66:ce:61:6d:0b:12:1f:ef:f4:0a:
3f:25:e0:8a:36:fb:63:2d:74:4c:58:60:58:1d:25:
89:8e:15:9a:3d:07:2e:0d:1e:ba:4a:08:58:61:60:
b4:0b:f0:61:1d:4c:5d:2e:92:4e:3f:2e:2e:ae:88:
2f:2d:7b:72:6a:bb:37:0d:c5:cc:f7:bf:04:f8:d5:
57:58:20:d6:0b:b4:a8:21:36:92:4a:20:bc:e7:2c:
16:f4:eb:7b:5f:fc:fc:61:e2:fb:3b:42:57:71:b7:
d1:da:cd:0d:da:4b:a2:82:f4:45:61:64:83:6c:68:
42:7f:96:b0:31:c2:2f:af:f2:99:11:76:e0:b1:cf:
4d:e8:d4:ba:54:48:bf:61:85:bd:aa:3b:7d:95:3b:
96:b1:8a:96:19:d2:48:04:f8:57:c3:bf:c9:dc:22:
84:51:c9:31:94:1d:bd:8e:3f:1d:db:97:78:ac:77:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:10:7B:C7:E6:A0:CB:CB:71:45:A1:7B:86:74:81:4F:3A:A6:E2
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:10:ab:e6:16:cb:74:bd:83:59:aa:d3:c7:60:96:82:7a:
3f:34:2b:bc:19:c9:ee:06:fc:c7:3e:a0:a1:45:4e:aa:d1:ae:
d6:bd:05:db:41:ab:86:6f:2a:d4:0d:84:6b:5a:51:84:48:77:
d1:45:ac:c8:e2:15:c2:0a:96:35:78:51:dc:42:39:6c:93:40:
4c:7b:86:01:38:88:15:e7:75:a7:48:4e:73:d2:c5:37:2d:b3:
4a:89:8c:47:c7:d8:12:ba:50:fe:46:ca:0f:ad:8c:e8:4a:1a:
62:90:7d:be:92:5a:2e:fd:fc:77:ea:14:0c:05:ce:af:fc:a9:
94:fc:c5:1a:68:83:52:0c:bb:8f:d8:66:51:52:ad:fa:fd:15:
4e:26:d3:ca:78:ef:62:38:c5:1c:95:11:e0:41:d0:e7:57:48:
1a:65:af:1a:05:f4:1b:6c:fb:8d:42:61:67:df:6b:97:69:59:
4c:3c:58:ed:41:91:e7:b4:94:ea:58:0f:7b:e7:bf:4d:22:2e:
b3:d0:fc:c4:3e:41:19:d3:8a:4e:e3:25:a0:8b:35:1d:0e:5c:
89:94:b4:83:f9:ac:cd:5a:08:01:27:90:4f:d3:a9:ac:5f:64:
30:62:ad:76:c6:89:97:7e:ed:3d:16:db:16:4c:dc:21:d5:37:
5c:a4:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:36:51 2026 by rpki-client