This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: EUTbBEHLLZ2Mt1obTB2PppgJrVngwgXjYU6GyNezVco=
Subject key identifier: F7:09:73:4B:B9:7C:E3:33:4A:14:4A:3C:C5:3D:7A:DC:62:C6:EB:01
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 019C42102077F72DC3D3C1C53DB43B33EF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 07F3
Signing time: Mon 09 Feb 2026 11:01:18 +0000
Manifest this update: Mon 09 Feb 2026 11:01:18 +0000
Manifest next update: Tue 10 Feb 2026 11:01:18 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: 4O2a8mTPSebIitMSu9r/WGjCGRmC5s1uz7PNWtMx7PA=)
2: PRWWZTPfSbsdOcFDzXqI07gWKnM.roa (hash: o3ezVQcMSQ90jhxByB5K6ib9QZEeV8XrQMqvctluruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:20:77:f7:2d:c3:d3:c1:c5:3d:b4:3b:33:ef:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Feb 9 11:01:18 2026 GMT
Not After : Feb 10 11:01:18 2026 GMT
Subject: CN=f709734bb97ce3334a144a3cc53d7adc62c6eb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:8a:c7:79:3c:00:f0:b0:60:06:e2:38:b9:
70:3b:6e:26:8a:01:55:9c:32:0a:13:92:80:62:91:
eb:f3:02:ba:f6:2b:68:2b:66:28:f2:4e:1d:16:46:
08:b5:94:c3:54:85:b8:fe:d9:02:e9:1d:13:9e:8f:
ca:75:f7:c4:b7:8f:6d:42:05:09:c2:0e:27:0e:b2:
29:00:43:c9:b3:73:68:d3:a0:a5:a9:e2:73:e7:75:
d4:a1:09:76:0a:5b:71:bc:4a:cb:a2:4e:46:14:27:
51:0b:da:a7:7a:6d:ae:e3:bf:90:8b:8e:1e:98:d8:
a1:83:8a:85:f4:d8:6a:56:84:dc:ee:5f:af:57:e0:
e0:34:5c:f0:f7:75:ba:7a:94:a5:9a:d0:9b:ae:d6:
e2:a0:a3:e7:8d:b1:1c:72:85:77:21:76:c7:f3:c0:
b8:b6:1e:6d:d6:cf:eb:ab:f3:8a:f1:8d:42:a1:b7:
6c:90:b8:b7:88:f1:c1:a9:91:55:d5:4f:47:96:d1:
67:e1:b2:6c:8f:c9:a0:40:8e:f7:4c:0a:83:47:ac:
36:f2:30:33:8b:3b:7b:c6:14:2a:19:ba:84:cb:2a:
66:d9:21:25:d9:f5:6e:cf:be:3d:ca:eb:39:c0:3e:
79:4c:f5:5a:f1:32:01:00:ea:da:84:02:84:97:56:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:73:4B:B9:7C:E3:33:4A:14:4A:3C:C5:3D:7A:DC:62:C6:EB:01
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c0:d4:59:30:bf:cd:99:6a:9b:1b:a1:51:6d:17:30:3f:e5:
a7:41:b4:ba:a1:09:c2:23:ad:e2:3f:1e:78:e3:a4:21:41:06:
33:10:88:b4:fb:db:ea:83:02:d7:7b:6a:69:9d:91:71:93:3d:
7c:6a:28:29:28:33:55:04:53:81:97:a9:a1:10:94:a4:f5:a9:
d0:66:ee:ce:50:da:66:6e:3d:e8:a9:39:e7:01:bc:a3:b8:dc:
a4:80:f4:aa:c7:28:2a:7d:46:ac:99:c4:94:f0:3e:80:76:ad:
26:8e:82:58:fd:89:e2:58:6c:12:df:97:cb:5a:ad:9f:e8:94:
12:ac:ef:1c:38:24:16:52:b7:95:39:f4:af:a4:0f:13:3a:bc:
94:4c:a6:03:87:03:95:18:37:b8:bb:b8:7a:62:42:be:e2:ec:
16:51:d9:82:0c:29:2b:b4:50:6e:10:82:4d:e2:9c:a2:8c:3d:
12:e3:69:71:15:90:5f:50:a7:1c:46:58:d9:d4:99:f8:ee:88:
90:21:10:1f:d9:c2:a2:d4:87:73:51:2c:94:54:6a:e5:f2:9f:
1c:f1:cd:af:49:7d:e6:22:dc:1d:70:7c:60:71:3e:2d:bd:e6:
9b:8c:e2:45:99:3d:00:8c:94:fd:94:9c:0b:16:47:ac:42:2e:
5d:a1:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:34 2026 by rpki-client