This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: KEkSQqrh5jwgtXVuDPKP3clVPsYpiV1ZvBNqXtKt+n8=
Subject key identifier: 48:22:0A:C3:EA:C6:B1:D6:86:86:E8:19:79:C7:83:8B:5E:4B:33:53
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019C42EB7D14D3377C77EB0E634B5B7F35F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0BCD
Signing time: Mon 09 Feb 2026 15:00:55 +0000
Manifest this update: Mon 09 Feb 2026 15:00:55 +0000
Manifest next update: Tue 10 Feb 2026 15:00:55 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: kLMLWnAafIv5EuxSXsiDhZIyDfkCFk2DLtnTvlHKCTg=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:7d:14:d3:37:7c:77:eb:0e:63:4b:5b:7f:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Feb 9 15:00:55 2026 GMT
Not After : Feb 10 15:00:55 2026 GMT
Subject: CN=48220ac3eac6b1d68686e81979c7838b5e4b3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:59:10:d5:c4:05:02:e3:51:a0:2e:27:d4:
9b:15:cb:ae:93:98:26:59:85:19:2d:3d:36:c9:9b:
8a:82:5e:90:33:30:ae:a3:40:0b:ce:08:88:80:a9:
c7:40:93:9f:3f:66:20:ee:0a:20:1d:7d:c7:6a:26:
4c:39:3c:be:c0:85:5a:b8:b9:85:c1:1e:99:cb:f5:
0b:e4:bb:f3:6a:dc:49:34:9d:12:db:f6:b0:4a:c4:
a3:1f:79:c8:10:f7:7f:e2:35:d8:86:79:8e:4c:ba:
8b:d8:39:d0:4d:f2:13:fe:3d:6e:aa:e2:fb:59:00:
14:23:ef:cb:1e:8e:7a:61:e9:69:2d:40:11:ec:c4:
f7:5f:e8:ff:1f:ed:6d:85:25:be:cb:9b:8b:97:66:
3e:a0:bf:ca:c3:98:35:c2:11:44:97:99:11:ed:ea:
8a:b5:7e:4a:0e:59:76:33:0c:d0:16:6f:4d:9b:a8:
b1:01:38:73:4d:22:99:c8:3d:da:ed:1a:bc:8b:ba:
26:17:a9:78:a2:91:c7:3d:ca:7f:5c:64:55:bc:9f:
48:c4:9a:20:c4:d6:c4:ce:dd:4e:b1:cd:d4:90:59:
24:04:e1:5d:f5:d8:29:55:c8:4f:9b:41:39:14:ed:
43:88:ef:7b:a0:da:3f:6f:bc:9d:5c:1d:c6:55:6c:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:0A:C3:EA:C6:B1:D6:86:86:E8:19:79:C7:83:8B:5E:4B:33:53
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e4:96:ec:1c:82:0d:8d:74:5c:e9:ab:6b:eb:45:54:d0:42:
ae:14:c6:e0:6e:c0:b2:df:d6:1a:50:16:7f:67:6f:43:56:e4:
64:65:94:87:3c:bc:79:af:b8:b7:39:19:81:8f:e9:5a:a5:e1:
b0:69:a8:94:93:c1:74:a6:b7:70:ce:ef:64:41:0d:f2:a5:70:
ea:e6:a9:63:77:bd:0c:92:f6:bf:b4:e4:7e:98:5e:e1:13:26:
2e:22:0f:45:86:7e:72:ae:d6:da:19:09:09:be:4e:99:c0:02:
20:08:db:0e:34:ca:42:0e:71:45:93:56:37:a3:04:a9:77:63:
47:dc:55:14:18:7e:ae:83:d3:00:69:36:b5:d8:eb:2a:72:30:
f0:72:54:05:5d:e6:43:a3:85:d0:5a:54:24:b6:a9:c9:34:5c:
ed:e4:ea:f6:82:77:62:44:ff:c6:29:6e:6f:14:40:e2:d5:ba:
a9:b8:7a:23:d5:dd:92:68:7a:b7:58:c8:6c:6e:ae:eb:54:5d:
33:96:1b:67:b5:e9:a5:f7:f4:07:4c:b6:63:2b:b1:98:56:50:
7b:06:22:4f:08:43:81:d1:c5:01:92:0e:b4:4d:98:a0:d0:85:
9f:8b:0c:99:27:3f:95:68:d5:b4:25:7b:16:03:b0:a9:1d:c9:
da:42:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:09 2026 by rpki-client