This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: pMu76M1cMSmSOwUwCYJn3OomebuavYebyxpzcldgBfI=
Subject key identifier: F7:AD:79:3F:6E:B7:32:79:02:2A:F0:CF:A7:F5:E8:EA:53:8E:BF:69
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019C4246112C170BE5D218C66CF49DA499D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1824
Signing time: Mon 09 Feb 2026 12:00:13 +0000
Manifest this update: Mon 09 Feb 2026 12:00:13 +0000
Manifest next update: Tue 10 Feb 2026 12:00:13 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: Zgfxgx4TfoY3RGN42Iyl4nJwWr3eVfN26vQz6VTUwY0=)
2: xZZ6A9FhzVjUHjjcECobqnGLhZQ.roa (hash: cy4xVlTfzq9NKB+7J2CEw0j0mIEjSMo5krchMjy3t84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:11:2c:17:0b:e5:d2:18:c6:6c:f4:9d:a4:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Feb 9 12:00:13 2026 GMT
Not After : Feb 10 12:00:13 2026 GMT
Subject: CN=f7ad793f6eb73279022af0cfa7f5e8ea538ebf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:35:ee:2c:30:01:90:ed:34:b5:8f:70:3b:
ca:5a:47:3c:88:db:07:b0:da:3f:31:c0:6a:c9:0f:
b1:bd:37:65:55:69:ab:3a:4d:87:b2:fa:00:c5:72:
b8:6e:a6:c4:dc:d1:f7:94:aa:0b:d0:92:a2:96:fd:
6c:67:29:3e:31:cd:46:8e:a0:dd:96:eb:aa:9a:a1:
66:36:20:94:90:c3:91:d4:a0:b6:16:c5:58:70:61:
7c:bb:a3:b5:1e:03:28:0d:3e:46:ba:93:42:da:f6:
33:c7:ee:09:3a:1e:30:64:5a:cf:b5:3f:6e:e2:46:
df:dc:b5:b4:44:cf:54:57:cf:55:3c:18:60:25:91:
bb:78:92:75:2f:97:4e:93:0a:24:6d:a0:7e:af:d0:
d4:5c:2b:c0:ca:a3:f8:21:18:48:c1:14:84:54:56:
5d:63:9d:d3:c8:6e:da:dd:5d:b0:fa:1d:53:9f:8f:
67:e0:25:ef:c3:f5:33:fa:6d:ba:5c:ec:d1:4b:ce:
06:a2:af:46:5a:9b:57:31:0f:7b:dc:10:fe:81:66:
09:d6:21:a0:e2:b1:5b:5c:b0:ab:66:15:6e:63:67:
22:f5:42:bf:50:63:de:9b:22:6b:f8:b5:1c:34:db:
4c:87:e8:ce:5a:03:76:47:f1:94:69:9a:0f:2a:7d:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:79:3F:6E:B7:32:79:02:2A:F0:CF:A7:F5:E8:EA:53:8E:BF:69
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3f:9d:08:32:f3:d1:61:d3:04:1d:f5:32:53:08:ad:f3:67:
68:86:c8:8a:25:34:b1:b9:81:a6:1c:d4:5f:e1:45:46:48:c3:
59:00:e8:59:cb:63:e9:de:4c:3e:b5:3d:3d:96:59:b6:37:60:
da:b7:ec:a4:00:eb:d0:2f:69:b8:6a:94:57:bd:70:f5:b2:04:
3f:35:cd:93:bb:2b:07:13:49:ce:70:6f:11:41:04:64:ad:f1:
5d:a5:b8:c9:db:fb:df:e4:62:4b:d1:c7:67:f7:92:97:97:ca:
8f:9e:43:19:93:91:b5:42:cc:61:bd:02:39:ca:f7:b8:31:ea:
8f:28:70:02:a1:4c:d4:d8:83:29:bf:39:a0:ab:82:25:8c:c0:
ff:0a:10:28:1a:2e:51:5b:57:40:27:bc:d6:df:3a:b2:e0:aa:
00:f4:d0:d0:8d:dc:dc:14:6c:71:e4:36:16:8f:4e:82:7f:dd:
b9:7a:71:62:f2:4f:da:ca:93:75:2f:9d:7d:14:d2:80:17:75:
52:89:27:8d:d5:cd:50:ed:56:7e:27:f4:1e:05:e1:a9:ad:40:
4e:ba:a9:50:21:53:3a:4c:aa:3b:18:e2:67:72:e9:24:b1:15:
03:b5:1a:8a:bc:78:b2:b9:35:d0:74:ae:96:8d:7c:fc:b9:1f:
91:bc:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:08 2026 by rpki-client