This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: 8B88hfk3UjJk+SD06qadg0t9Xy77/Q6VneI8OKBQdPI=
Subject key identifier: 7B:9F:72:D1:3C:E1:71:60:17:F1:AF:3C:64:6C:7C:41:BE:C0:FF:9C
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019C4322059D3375EC5B6CF809C056BAC0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0D7B
Signing time: Mon 09 Feb 2026 16:00:28 +0000
Manifest this update: Mon 09 Feb 2026 16:00:28 +0000
Manifest next update: Tue 10 Feb 2026 16:00:28 +0000
Files and hashes: 1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 8p83AMJTH1w8wlJbnIfGpwFcfgWpDNhNph7HjJ6m1eU=)
2: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (hash: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:05:9d:33:75:ec:5b:6c:f8:09:c0:56:ba:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Feb 9 16:00:28 2026 GMT
Not After : Feb 10 16:00:28 2026 GMT
Subject: CN=7b9f72d13ce1716017f1af3c646c7c41bec0ff9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:7c:e4:58:8a:98:6c:a1:9a:e6:51:34:7a:
72:dc:e1:14:9f:9e:e0:2d:80:83:a5:8b:ff:81:7a:
d2:0e:01:33:3f:55:b6:2b:f8:34:b1:b5:d4:42:eb:
45:88:dc:f2:ee:47:c3:bc:45:4f:ad:d3:6f:40:b8:
64:ce:c2:67:b5:06:72:34:06:87:ba:d9:42:10:1a:
ee:8e:0c:07:c1:a4:88:91:e2:85:06:84:c9:97:4e:
b2:3b:bd:d6:47:5e:3d:b7:81:c6:c7:c6:d5:32:d0:
5f:25:23:0e:d8:36:87:84:f9:14:da:1e:e7:91:05:
8c:06:90:bb:ac:7e:1f:77:16:36:9e:87:ca:52:c1:
63:2b:a5:63:dd:6e:85:64:a0:54:e6:7b:c5:ae:3d:
83:f4:7b:6b:36:8c:f8:37:a7:b5:a3:b1:eb:0b:a4:
d5:dd:3d:b7:52:c3:52:cc:99:43:f6:76:b3:06:b3:
d0:88:74:45:22:5c:69:9a:8e:6d:09:53:32:c3:16:
76:7c:37:9f:40:ec:04:5c:cd:c1:f1:b2:c9:55:d8:
f2:f5:34:94:6d:49:24:44:93:e6:55:06:56:f1:8d:
f9:d1:50:a8:c9:3c:f7:2a:31:db:5b:b4:c2:45:61:
91:64:e5:a4:48:f9:94:5f:6a:85:3c:14:36:a0:c6:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9F:72:D1:3C:E1:71:60:17:F1:AF:3C:64:6C:7C:41:BE:C0:FF:9C
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:cf:15:e0:f5:65:3d:b7:91:b8:41:0e:db:67:6d:02:99:
40:20:d8:cb:03:08:10:a8:73:25:39:42:52:3c:bf:48:da:04:
c4:76:42:1e:ec:b9:44:96:30:e1:ce:0d:52:82:84:8d:7f:ed:
8f:af:3c:39:3b:c8:05:cd:4d:55:a1:24:c5:a0:37:6f:ef:01:
0c:f2:08:29:d2:83:4c:7a:9d:34:4f:55:5d:e0:aa:69:cf:b0:
89:26:14:97:d0:06:b9:ee:fd:76:66:7b:f0:4f:1b:0d:66:7c:
6a:9c:13:e6:1e:36:a4:2b:60:cb:c2:ef:e0:b5:f8:76:7d:f4:
25:ed:9e:73:8e:16:e7:90:38:fc:65:8e:a8:aa:13:b7:c2:f0:
be:2d:21:51:b1:d2:17:7f:f7:e1:d3:5b:e1:f1:10:d4:de:5c:
c6:8a:b5:c0:e7:f0:8f:fc:f3:b6:34:74:cc:4d:3d:f3:0d:06:
52:e9:4a:51:ff:07:59:5f:5f:07:96:c7:42:65:a6:f5:3f:b9:
f3:1d:da:27:22:25:29:41:3d:bf:12:87:92:c9:ff:3c:bb:2f:
26:34:01:83:0e:59:6d:7d:37:27:52:1a:13:85:48:e7:f6:15:
23:24:90:eb:bc:5d:39:ce:84:a4:73:56:67:91:c0:89:d5:1c:
5d:a6:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:32 2026 by rpki-client