This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: +PcDTnVmPQAJ7OaBHOPWTRqGIwHJxjAzB5h4TVKZ0C8=
Subject key identifier: A6:C5:76:3C:BA:55:A3:0C:5A:DB:C2:60:1F:82:A6:33:41:81:AF:47
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 019C40FD72F569DD95EA660875E7A1A8D450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 0CEC
Signing time: Mon 09 Feb 2026 06:01:17 +0000
Manifest this update: Mon 09 Feb 2026 06:01:17 +0000
Manifest next update: Tue 10 Feb 2026 06:01:17 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: UMDIUVht8qCPsdnKBXr8I/fgR+gD3ALiVxzZg2yqjfc=)
2: SkKZfC38ghmrpySCpGvRpFixxKU.roa (hash: o3RJWOBJfQjmbxei+seF+/aOYTLshRFp1ICoacA0zAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:72:f5:69:dd:95:ea:66:08:75:e7:a1:a8:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: Feb 9 06:01:17 2026 GMT
Not After : Feb 10 06:01:17 2026 GMT
Subject: CN=a6c5763cba55a30c5adbc2601f82a6334181af47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:d8:78:b4:a0:e3:4e:25:aa:ae:05:ee:76:
de:6f:77:32:a0:2b:60:55:5a:e6:f8:82:80:d3:d3:
c0:82:3f:d3:2c:66:e9:a7:5f:9e:48:31:7c:da:2c:
3a:20:fe:60:b2:08:39:a7:9a:07:9f:f5:f0:e0:16:
2e:a6:0b:7c:41:87:b6:3e:6a:72:21:78:07:05:bd:
47:ed:3f:98:e0:dc:a4:4c:d0:10:e4:5a:06:a6:4b:
98:2c:54:d3:6c:fd:95:04:0c:40:ae:8f:7f:02:5a:
86:96:21:8c:8d:8d:4c:ce:42:b6:bd:ab:39:dd:be:
7b:ca:9c:84:9d:3e:e2:68:52:58:cc:43:0a:92:74:
c8:0f:3a:8e:d7:f4:0d:d5:23:d8:e4:8d:69:90:ba:
e1:9b:6f:87:23:be:80:f3:10:c7:43:b2:f2:f8:98:
ac:35:58:34:54:70:1b:69:32:fc:a3:59:b1:82:31:
83:69:fd:cf:0d:b8:e6:e6:0d:94:99:bd:7d:51:19:
05:4c:33:71:53:f7:1d:9f:42:58:12:7c:28:8d:55:
98:87:78:e9:45:ed:87:75:9b:a3:8f:5c:df:57:4c:
d8:36:4d:4e:fe:fa:e5:a6:de:02:3b:4a:9e:45:9b:
1a:e6:0b:69:41:a1:0b:a2:60:5f:40:63:65:bc:27:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:76:3C:BA:55:A3:0C:5A:DB:C2:60:1F:82:A6:33:41:81:AF:47
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:23:c6:1e:16:a5:67:f7:1e:7d:7b:0f:eb:d8:9f:52:dd:e4:
f4:e4:ac:c2:24:74:63:39:35:a4:ef:af:44:7e:91:a0:38:6f:
b8:f3:bd:bd:b8:3e:a7:b3:14:b7:1c:a4:3f:dc:68:3f:aa:e7:
07:e1:c8:e5:f9:fe:94:56:08:27:68:b4:e1:ba:e6:af:54:db:
03:c9:d9:f7:45:2f:19:24:dc:84:40:ad:bf:89:2d:a4:6e:a4:
33:fe:88:1a:9d:df:3b:0e:f8:5a:d3:26:e6:fe:39:7d:ec:b0:
9b:b1:bb:df:a6:a1:4a:16:68:80:97:04:11:27:72:31:76:93:
54:be:95:2d:35:a3:d4:42:70:14:39:f6:54:c0:2a:a6:78:67:
d7:72:22:47:2d:b8:c6:b6:e7:92:dd:d3:d1:82:83:a6:f1:6a:
d0:c1:4e:80:32:dc:cc:46:8b:fe:1e:5d:5a:0d:80:73:0f:28:
49:d3:6e:49:1d:2f:34:fb:66:58:00:2e:54:a2:57:80:9c:4a:
fa:83:fb:d9:19:bf:a9:48:52:97:f5:d0:27:49:57:3d:c2:a7:
8a:1f:f5:29:f2:36:26:7f:78:da:60:2e:ee:46:35:9e:e2:f5:
45:ea:9f:6c:70:16:9d:4e:1a:28:c9:96:34:57:81:3c:2a:3f:
49:83:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:47 2026 by rpki-client