This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier: 8z+ch9tClAAMczJnd+bfzMvLglXiGMyKV40Uv7HxFxA=
Subject key identifier: 51:2A:ED:FB:37:EA:A8:45:2A:D1:07:89:5D:1E:9B:3C:09:8B:B9:B6
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 019BF988E7B6372AA84EB992E7809FAB698D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number: 17E8
Signing time: Mon 26 Jan 2026 09:00:57 +0000
Manifest this update: Mon 26 Jan 2026 09:00:57 +0000
Manifest next update: Tue 27 Jan 2026 09:00:57 +0000
Files and hashes: 1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: X2MJF2BeGypSMTQIg7gHOh49NI+Iw4DurNO8bGw1XVQ=)
4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:88:e7:b6:37:2a:a8:4e:b9:92:e7:80:9f:ab:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jan 26 09:00:57 2026 GMT
Not After : Jan 27 09:00:57 2026 GMT
Subject: CN=512aedfb37eaa8452ad107895d1e9b3c098bb9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:0e:6a:74:36:a0:11:f0:7f:f3:24:0c:12:
9f:ee:57:df:81:bf:33:7c:83:d4:f7:df:82:1a:61:
cd:72:88:b2:90:a8:76:3d:fb:05:c3:91:41:11:cd:
da:bd:d1:f4:81:9c:30:b5:a5:37:d3:ee:73:de:ef:
be:29:34:eb:56:eb:6b:4b:7e:30:14:5c:60:90:49:
23:8a:86:30:25:27:c2:28:15:9d:15:62:e1:84:bc:
86:aa:50:5b:52:7b:f5:07:dd:43:b0:5c:f5:0e:9e:
db:7e:9e:ae:5f:35:99:97:ad:a0:cf:6b:fc:ee:87:
13:ef:f5:93:3e:c3:3b:db:7c:f2:32:c4:34:01:90:
63:1a:cd:c9:53:06:c0:d5:0c:b2:01:ae:32:a3:d1:
ec:f6:ca:ad:e8:20:4f:9b:ea:84:c7:fe:95:8d:68:
49:1c:13:8f:9c:d7:51:ea:e3:73:4b:30:ff:a3:51:
2f:45:14:ff:23:02:7e:ea:67:90:0b:76:c8:19:06:
38:04:d9:79:28:ac:db:a8:0b:dc:50:2b:29:3c:72:
76:bf:cf:5b:b8:a5:e9:34:02:35:7a:22:53:ba:ec:
79:86:7b:b0:0d:88:f9:7f:11:33:50:55:f3:9f:b3:
1f:a7:db:f0:ee:90:93:55:04:47:e0:40:eb:3a:3f:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:ED:FB:37:EA:A8:45:2A:D1:07:89:5D:1E:9B:3C:09:8B:B9:B6
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:f7:84:72:cb:9d:af:61:80:4c:68:4f:2b:c8:a8:db:08:
4b:50:1c:3f:34:82:3c:82:ba:2a:6b:3b:27:67:f0:70:03:c4:
fd:ce:3b:2c:fc:35:f6:eb:a0:75:09:c3:db:77:6a:08:d5:b1:
b5:f6:d9:35:33:37:d7:cf:d0:6a:12:2b:d6:9a:5e:68:1b:4a:
a8:64:98:8b:33:d8:d4:46:ba:a9:c1:e0:85:b2:bd:e5:a9:71:
78:cf:ed:05:1b:dd:4c:3b:29:4c:5a:3c:cb:a2:64:04:67:77:
fb:5a:dd:d3:23:e9:72:4b:a2:ed:d1:c3:f0:87:41:8e:d1:80:
ab:54:b2:49:b8:c5:b5:f4:82:0b:c6:a7:06:db:29:9f:76:f9:
a8:e2:5a:19:69:a3:c0:93:d3:c4:a3:1f:09:67:43:bd:ce:7a:
54:2e:e6:ef:a8:34:93:16:16:b7:54:a9:69:cf:ca:43:96:d5:
e0:6b:96:52:e1:44:d8:af:ee:74:06:e2:fc:8b:ff:6c:4a:df:
d1:8b:9f:89:7b:67:82:7d:ae:0e:d4:5b:4d:3a:88:47:79:c1:
51:45:36:37:a0:80:cc:d5:d0:6a:3b:cd:81:17:7b:18:58:09:
d8:a3:77:3c:ed:b0:e7:7d:cf:c8:ec:03:57:c1:1e:55:76:7a:
36:bd:7a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5iOe2NyqoTrmS54Cfq2mNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj
YTk2NmMwHhcNMjYwMTI2MDkwMDU3WhcNMjYwMTI3MDkwMDU3WjAzMTEwLwYDVQQD
Eyg1MTJhZWRmYjM3ZWFhODQ1MmFkMTA3ODk1ZDFlOWIzYzA5OGJiOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ0OanQ2oBHwf/MkDBKf7lffgb8z
fIPU99+CGmHNcoiykKh2PfsFw5FBEc3avdH0gZwwtaU30+5z3u++KTTrVutrS34w
FFxgkEkjioYwJSfCKBWdFWLhhLyGqlBbUnv1B91DsFz1Dp7bfp6uXzWZl62gz2v8
7ocT7/WTPsM723zyMsQ0AZBjGs3JUwbA1QyyAa4yo9Hs9sqt6CBPm+qEx/6VjWhJ
HBOPnNdR6uNzSzD/o1EvRRT/IwJ+6meQC3bIGQY4BNl5KKzbqAvcUCspPHJ2v89b
uKXpNAI1eiJTuux5hnuwDYj5fxEzUFXzn7Mfp9vw7pCTVQRH4EDrOj9F4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEq7fs36qhFKtEHiV0emzwJi7m2MB8GA1UdIwQY
MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt
M2ZkMzA5ODhmNjc3LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3
LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY/3hHLL
na9hgExoTyvIqNsIS1AcPzSCPIK6Kms7J2fwcAPE/c47LPw19uugdQnD23dqCNWx
tfbZNTM318/QahIr1ppeaBtKqGSYizPY1Ea6qcHghbK95alxeM/tBRvdTDspTFo8
y6JkBGd3+1rd0yPpckui7dHD8IdBjtGAq1SySbjFtfSCC8anBtspn3b5qOJaGWmj
wJPTxKMfCWdDvc56VC7m76g0kxYWt1Spac/KQ5bV4GuWUuFE2K/udAbi/Iv/bErf
0YufiXtngn2uDtRbTTqIR3nBUUU2N6CAzNXQajvNgRd7GFgJ2KN3PO2w533PyOwD
V8EeVXZ6Nr16PQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:50 2026 by rpki-client