This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: lVOqWgjXCwGssJEOtITj/qCLBsMGEdcPNXppnRiCV+4=
Subject key identifier: AC:05:59:3A:AC:DE:05:2A:28:CD:0E:F8:E7:92:41:17:2E:36:6A:C9
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019C43221C221BAE95BE9C3DD0E44021C3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 08EB
Signing time: Mon 09 Feb 2026 16:00:34 +0000
Manifest this update: Mon 09 Feb 2026 16:00:34 +0000
Manifest next update: Tue 10 Feb 2026 16:00:34 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: /oL2btoeeDgqBLUX/GfXhvI6FBi7/MCpA2BQMzvjJ3g=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:1c:22:1b:ae:95:be:9c:3d:d0:e4:40:21:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Feb 9 16:00:34 2026 GMT
Not After : Feb 10 16:00:34 2026 GMT
Subject: CN=ac05593aacde052a28cd0ef8e79241172e366ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:50:cd:92:06:ba:38:b9:71:f8:7f:e7:de:
06:fc:47:b0:e6:0d:80:59:7c:c6:68:b0:66:ec:49:
8e:80:3d:d0:00:74:bb:d2:40:cc:12:f7:66:98:c6:
61:74:6f:ab:35:30:cc:19:92:d8:d4:b6:aa:26:17:
80:76:78:39:30:1f:d0:30:18:fd:1a:23:17:e6:8d:
2d:a4:3b:c6:40:7b:1d:53:8a:97:07:fb:38:b1:c5:
5f:a8:0e:fc:f3:b7:cb:e9:56:7b:9f:08:59:e1:da:
04:81:0a:98:1b:b2:e8:76:ae:21:9e:e9:39:2a:ba:
06:cc:12:6e:6c:d9:2d:de:83:2d:dc:41:bf:b5:00:
86:91:db:ee:1e:54:25:d2:c6:06:44:09:19:29:df:
d5:99:30:7b:77:4e:66:f9:62:7b:a0:9b:74:63:81:
9e:a7:40:75:01:2e:db:e6:69:1d:ac:bb:04:66:c7:
dc:3d:2b:3c:f1:a2:55:84:7d:4e:a0:32:8c:e5:a2:
dc:81:bf:ec:ea:e0:da:8a:38:c5:52:b3:25:61:5f:
ae:d0:9f:1b:2f:fe:ea:f5:88:5e:32:98:cd:ea:80:
b1:33:b3:92:89:41:69:17:d1:ec:8a:f2:e6:55:f0:
bf:fb:e1:d8:e3:a0:ea:85:30:f4:67:bb:93:0b:e6:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:59:3A:AC:DE:05:2A:28:CD:0E:F8:E7:92:41:17:2E:36:6A:C9
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e3:ac:d6:93:fe:9b:47:09:90:91:e5:3f:7b:1f:42:4e:54:
61:e2:54:df:54:a1:4c:0c:e1:62:e0:9b:0d:bb:fd:5b:d7:44:
c9:70:b0:62:e8:57:43:69:1a:20:9e:29:8f:26:eb:28:23:14:
85:cc:31:e0:80:b6:1d:01:ec:9b:47:d1:d9:90:0c:92:c0:bc:
36:df:cd:a5:19:9b:fc:f9:9f:e8:73:10:eb:8c:af:b6:23:1a:
e7:c4:7e:3f:bc:92:50:01:56:93:f7:b5:35:d6:f6:21:39:ac:
77:6e:76:05:ac:d1:44:94:8a:f7:1a:8c:46:0c:dc:42:f6:79:
ed:12:88:6c:17:50:f7:35:85:a5:83:91:f1:8c:d5:22:ef:9c:
56:9c:d9:88:fc:fd:05:63:3c:b4:99:3e:07:ff:62:cd:7c:3a:
7d:d2:48:0e:de:a0:da:4b:36:6b:a4:db:15:53:5d:bf:a2:43:
47:b0:87:25:a2:08:05:b3:ee:76:52:c8:9f:89:bd:ec:fa:24:
f9:84:34:79:20:53:d1:3c:9c:c8:37:0c:8e:32:bc:03:77:61:
70:03:11:14:1e:7b:c1:6f:c7:42:c3:04:b5:32:b8:a9:6f:f2:
c5:04:26:fa:4b:de:2f:1d:ec:fd:03:2e:fd:8c:16:23:76:19:
5f:15:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:43 2026 by rpki-client