This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
File: gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft (raw, json)
Hash identifier: om763PTeu8OuF0fCYHR3L7IZuhlMy0CnCx0Uuy0yUXI=
Subject key identifier: 74:A9:7D:16:FE:2E:7B:9B:4C:3A:22:4E:B9:32:70:13:31:00:F2:76
Authority key identifier: 80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
Certificate issuer: /CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Certificate serial: 019C41D8F2684144352F803C1F203DD54F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
Manifest number: 010A
Signing time: Mon 09 Feb 2026 10:01:02 +0000
Manifest this update: Mon 09 Feb 2026 10:01:02 +0000
Manifest next update: Tue 10 Feb 2026 10:01:02 +0000
Files and hashes: 1: gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl (hash: /vPATjbzFWN3QsD3Vf7oEpZzYTkMxWnivnCzL6VCtvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:f2:68:41:44:35:2f:80:3c:1f:20:3d:d5:4f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Validity
Not Before: Feb 9 10:01:02 2026 GMT
Not After : Feb 10 10:01:02 2026 GMT
Subject: CN=74a97d16fe2e7b9b4c3a224eb93270133100f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:05:ce:d0:d6:9b:f4:bf:59:37:f1:74:02:
b5:40:f2:56:1a:b5:4d:03:56:ee:c6:5b:0e:86:27:
91:e8:cf:9d:2a:1e:01:c5:ca:e1:fe:d6:a1:57:08:
c3:a0:89:be:ea:5b:03:2a:15:eb:09:65:98:d1:9f:
67:95:b4:89:68:bc:b3:d8:00:f8:0a:96:4a:53:a5:
86:27:a6:b5:68:b0:0a:88:41:63:3f:5e:62:5a:1a:
52:24:fa:ff:4d:9d:bd:54:f5:20:8f:32:27:fc:9a:
d7:73:3a:83:ed:b5:3e:32:ab:39:55:4d:fc:59:eb:
5b:92:7a:56:13:2a:ea:0d:e4:4e:91:2b:57:01:ff:
f3:e0:c2:e1:ca:a2:99:17:f5:b0:63:29:09:ab:10:
72:22:40:75:ae:06:de:32:57:3d:25:96:9d:de:02:
07:a2:58:b9:2e:23:ad:76:06:1c:10:be:03:4a:b0:
6f:0c:3d:87:9e:30:c4:2e:30:bf:95:60:a8:ed:20:
ac:ba:d2:a5:84:c6:b6:87:ac:8c:64:b0:04:8e:fb:
dd:dd:1e:68:a4:3e:86:0c:38:da:1b:fa:ac:04:ed:
8d:91:a2:88:b1:ff:8b:d8:3b:d2:dd:33:d5:2e:c1:
c5:50:ae:73:8b:b2:40:8b:33:4d:0a:31:14:57:e0:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:7D:16:FE:2E:7B:9B:4C:3A:22:4E:B9:32:70:13:31:00:F2:76
X509v3 Authority Key Identifier:
keyid:80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b2:48:b2:5a:90:db:b1:0e:e6:ba:db:4c:86:65:d8:c9:f8:
fc:c5:c2:9f:c1:21:c6:e8:e8:39:3e:aa:a9:e4:56:e3:50:64:
06:a5:1e:ac:4d:2d:e3:e9:ec:aa:44:4e:f3:5e:ec:31:3b:b4:
a5:66:29:a0:87:c5:19:ec:44:de:df:f1:a0:e3:af:52:12:a3:
35:c5:5c:39:89:c6:ca:b1:c0:6e:80:fa:e1:1b:f0:d5:89:ba:
8a:cd:78:a1:eb:1a:b8:a7:4e:b0:8c:6b:87:83:cc:c6:0a:a0:
a8:ec:24:3b:8c:02:82:d9:ee:91:61:7c:7a:bd:7a:ff:48:f1:
d4:b9:de:f7:da:96:cc:05:de:c3:ce:c6:33:82:f6:b7:1b:ea:
46:c7:ef:9c:db:c4:ed:c6:cc:be:93:c9:33:29:9d:89:b7:8c:
a7:11:e2:43:34:93:55:7d:4e:91:48:e3:3a:f7:3f:75:1a:6b:
d8:73:c3:bd:a0:1f:2f:3e:be:88:ce:46:32:aa:88:2e:db:c8:
a7:16:bf:16:ee:57:67:6e:51:0f:6f:80:00:d8:6e:ff:f6:58:
d4:d1:38:b2:1d:11:8e:85:70:04:78:b9:cd:c2:7a:e6:0b:09:
61:a3:36:a0:7c:79:ba:68:ff:82:55:f0:82:89:e5:90:23:32:
3b:0e:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:19 2026 by rpki-client