This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: rTqUnSNP2XzIQaPgh4NFfvV5KMWCqBJ7W1NDsO1d8BM=
Subject key identifier: B2:8F:E6:D8:46:5D:1F:6A:3F:CD:1D:5F:C7:6E:56:B0:FB:FB:67:F3
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019C329CCA663B120351F1AC683BCD2A8D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 17C1
Signing time: Fri 06 Feb 2026 11:01:02 +0000
Manifest this update: Fri 06 Feb 2026 11:01:02 +0000
Manifest next update: Sat 07 Feb 2026 11:01:02 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: +eAnTe6z04Ph90OkcB92D5py5klfPNPJFoIMC1N7uTo=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:9c:ca:66:3b:12:03:51:f1:ac:68:3b:cd:2a:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Feb 6 11:01:02 2026 GMT
Not After : Feb 7 11:01:02 2026 GMT
Subject: CN=b28fe6d8465d1f6a3fcd1d5fc76e56b0fbfb67f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:76:06:91:a6:d3:7f:7d:4c:11:08:6d:90:
e8:2e:06:87:e1:56:6f:5e:a5:51:a5:f1:7c:da:ac:
09:d4:00:c6:88:5a:9b:27:3c:d1:06:cc:d0:56:e1:
36:0e:c4:4d:cb:cf:0a:24:90:23:bd:2c:69:be:39:
3d:6e:ad:76:b8:b1:a8:5c:f5:88:88:87:a0:39:a7:
22:a5:d6:d5:ba:69:84:08:55:b0:94:9b:38:b1:83:
39:03:90:9e:85:8b:e5:ee:db:ce:a2:4f:df:c9:76:
f7:82:05:d2:74:58:3c:a6:0b:46:c8:ce:f6:bb:fd:
6c:99:d5:cb:05:c4:1f:18:45:8a:1e:12:e3:b5:e9:
c6:cb:1d:8b:43:a6:13:27:73:2f:e2:50:bc:81:9c:
e5:4b:8f:41:86:f3:4e:d3:02:34:4a:7f:15:54:47:
ed:81:18:ec:ad:93:17:31:5c:51:f3:7e:98:8c:45:
42:5c:de:18:e1:43:64:2c:0c:a5:11:f2:de:5f:c9:
de:24:f3:38:d5:85:5b:7e:33:61:a7:5f:32:bc:29:
4d:43:61:24:cd:34:e0:22:fb:08:70:06:e7:3f:62:
b7:87:4d:c6:33:b0:13:c5:39:15:3f:42:80:19:15:
12:ea:e5:7f:d2:c4:0e:56:70:84:d0:ad:e1:5e:6e:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:E6:D8:46:5D:1F:6A:3F:CD:1D:5F:C7:6E:56:B0:FB:FB:67:F3
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f2:92:70:77:de:e3:3e:db:2c:d6:3a:de:d9:a1:25:a1:21:
cf:6c:9e:12:52:bc:65:bf:67:cd:e6:67:ba:36:d2:fe:98:40:
b8:32:9b:d6:61:6c:22:05:a7:b0:3d:8e:39:0c:28:ee:fc:a7:
c6:e8:c8:1b:fd:a3:e3:ca:7b:28:87:7e:de:06:6f:2c:7d:8d:
61:65:ea:11:f1:28:94:f9:4f:2a:50:55:3b:d6:84:81:58:6c:
e6:10:6f:36:18:cf:19:f5:ec:92:c2:31:98:59:28:25:09:45:
80:bb:cc:a4:74:1d:99:84:8e:f1:25:18:a5:5d:16:66:54:79:
0c:f0:0f:c5:bc:2b:8c:ce:7c:87:4e:c2:37:9b:8e:a6:40:08:
fe:3a:65:83:c2:8d:25:17:df:45:1b:85:4a:8a:2b:00:cb:50:
f1:c6:67:ed:2a:c4:27:ca:15:7c:19:cc:92:97:8c:1f:d6:f3:
26:fd:fa:56:30:bf:fa:79:85:b0:56:c3:a5:b2:f9:06:da:30:
08:96:1a:55:d5:8d:d4:8b:e9:bb:3f:41:25:55:3b:76:3e:76:
46:f6:89:9e:01:e3:ae:3c:99:7f:e4:96:6f:00:54:b2:4a:3e:
f4:13:b4:cf:ae:37:25:cd:12:84:17:5a:24:12:07:e1:ca:a8:
37:5a:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 15:32:49 2026 by rpki-client