This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: CEBTzhzkEI7sVCXVmIkNDishTx5LtOAogVkppNMExnQ=
Subject key identifier: 5C:58:87:03:99:76:17:06:F9:EC:AF:01:84:55:5D:A1:11:6B:8B:2B
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 019C42EADC5F33D135732B64C518334D1EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0F21
Signing time: Mon 09 Feb 2026 15:00:13 +0000
Manifest this update: Mon 09 Feb 2026 15:00:13 +0000
Manifest next update: Tue 10 Feb 2026 15:00:13 +0000
Files and hashes: 1: BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa (hash: P0fFfmYNK2It6Tl9zJcGnv6bBKn+rvutapJMqLPRBXA=)
2: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: EXImRnTtOKrh4g0esO/sw8Q4tpufcufxf7cjw9dp1oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:dc:5f:33:d1:35:73:2b:64:c5:18:33:4d:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Feb 9 15:00:13 2026 GMT
Not After : Feb 10 15:00:13 2026 GMT
Subject: CN=5c58870399761706f9ecaf0184555da1116b8b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:19:19:6b:37:00:d6:fc:56:48:a8:ce:b7:
67:48:ba:ad:5f:2e:2a:9d:bb:b0:14:e9:f4:9c:12:
a1:9a:3f:cc:f3:1c:b2:28:44:e1:8a:75:91:d2:07:
4a:38:6b:ea:0e:9b:61:b1:2f:69:b7:ac:88:39:6e:
e7:3a:06:a7:b3:05:33:e1:f5:a1:81:63:c8:c9:cc:
9e:bd:a3:eb:fb:8f:e7:e5:e7:43:fe:2c:6d:1f:ac:
12:de:bf:a1:ab:ab:a3:8f:fa:bc:0c:7d:12:b3:5a:
47:52:74:57:cf:f9:96:25:9c:9b:4e:bf:dc:35:c3:
25:39:0b:03:2a:f0:c5:08:e8:bd:fc:f1:bc:0d:66:
e4:a8:79:a2:46:fb:a7:81:66:b9:8e:1e:9e:0a:1f:
f9:6a:a1:48:d3:4b:fc:fb:12:43:6e:b9:15:69:cb:
51:03:be:ac:36:44:21:45:68:6a:97:08:84:80:b3:
91:4e:e0:98:b9:49:6b:37:8b:58:c7:56:b9:62:bb:
35:18:d5:4b:0c:1a:eb:bc:69:7f:c2:12:71:cb:e0:
8a:71:17:66:bf:94:ad:ce:17:fc:02:14:ea:b8:53:
c0:6a:4e:94:30:41:fd:8f:4a:2d:ce:35:18:02:3a:
d7:7d:41:e0:4c:ae:93:f9:e4:a5:fd:e9:9c:7e:3e:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:87:03:99:76:17:06:F9:EC:AF:01:84:55:5D:A1:11:6B:8B:2B
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:91:5e:c9:3c:be:c9:e0:55:e9:9f:60:1e:37:cd:5b:82:
94:16:be:85:40:fc:c8:ed:25:a7:3a:88:ab:55:0a:68:a2:16:
28:3a:c9:f7:ed:01:25:72:97:19:3e:f4:fc:04:71:61:fd:b5:
fa:53:0a:86:0a:96:08:b5:81:2e:68:e6:ac:a5:ce:2b:1c:07:
1a:fa:f9:dc:2b:db:53:88:03:3e:c0:65:1d:ba:e9:11:5a:85:
24:1a:0b:4f:c9:8b:9b:9f:84:3b:12:5c:ba:60:f0:d7:04:06:
c6:ae:72:9a:b7:38:89:10:a0:84:e9:a5:39:3b:0d:6a:e3:f1:
ce:80:cd:a8:2f:97:21:b4:e1:c3:7d:62:be:fb:c0:b5:26:26:
4a:f4:70:78:43:2a:b7:4e:1e:38:3c:8e:d2:98:26:6f:97:cb:
08:53:64:3d:8c:cc:5f:15:38:6e:72:d4:f7:bf:a6:7c:89:a0:
7f:bb:28:d5:b3:2e:a7:70:01:04:46:22:9d:41:fe:51:3c:15:
99:fa:5e:cd:d0:2c:14:19:ea:cf:90:c5:fd:4b:06:1e:2c:79:
00:ae:32:81:88:fb:9a:a4:01:0c:79:fc:75:82:62:d4:3a:63:
7d:95:45:e8:3f:83:fd:22:98:e9:e6:01:39:70:5a:1c:b4:7f:
dc:98:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:01 2026 by rpki-client