This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: Jbmk/OT9tDqFN4Uzzo5SKqSQWWMhAN15SKsQ2Gv3xQ0=
Subject key identifier: 2C:6E:76:0A:B0:FF:39:A3:28:A6:34:50:BD:8D:E0:FB:CE:32:53:D0
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 019C42B44E56EFF513273DC3BE22CB52309B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 0433
Signing time: Mon 09 Feb 2026 14:00:38 +0000
Manifest this update: Mon 09 Feb 2026 14:00:38 +0000
Manifest next update: Tue 10 Feb 2026 14:00:38 +0000
Files and hashes: 1: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: CPzpeUunS3d74ypY77px9VhSq/BjdVYwck4yHKn4Yzo=)
2: uX9RFldD_ZI14WBF0_J3zmXVSmY.roa (hash: 5VQ5HAdHZFYwUc79OmQg0PEjho46iWIuaIrNO9hQGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:4e:56:ef:f5:13:27:3d:c3:be:22:cb:52:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: Feb 9 14:00:38 2026 GMT
Not After : Feb 10 14:00:38 2026 GMT
Subject: CN=2c6e760ab0ff39a328a63450bd8de0fbce3253d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:06:a1:f7:93:4c:f3:2e:39:bf:08:19:14:
cf:b7:6b:c6:d1:b9:3d:69:c7:b2:6c:b1:0c:c5:39:
28:aa:3b:e3:fd:29:ae:a8:22:94:1f:05:98:25:8f:
81:02:7b:c2:a7:2f:ba:f2:1f:51:56:c5:9b:91:dd:
7d:2c:c2:43:95:d5:34:91:8f:ba:f4:fb:ec:09:73:
5b:21:41:d4:82:32:41:bf:ea:4b:33:e8:ab:4e:00:
e2:a2:a4:31:4d:2d:86:a3:24:df:61:da:b6:bf:7f:
be:7f:b2:de:7f:61:1a:7b:81:6d:13:9a:1a:4b:d1:
0b:3d:43:b3:68:c2:fb:e7:d6:16:24:97:dc:5f:35:
2b:dd:62:14:fe:35:bf:f6:1b:ff:fb:e2:f9:75:b6:
5e:e3:47:bc:00:cc:9a:32:d5:c1:28:ae:ae:d8:e5:
a1:62:a3:d3:ba:26:4b:82:f7:08:fe:f9:01:02:73:
61:10:fa:86:1f:ed:9d:f1:fc:ad:71:1b:3f:1d:be:
bc:49:a3:7c:30:c7:c5:0c:d0:98:b0:f9:44:97:10:
41:c9:80:e1:ba:79:a9:06:93:fb:0c:ef:a8:fd:b9:
6c:7c:b8:29:0c:3a:5c:21:38:68:20:da:1d:ea:b2:
53:d6:ac:c8:2f:83:aa:2e:89:af:51:dd:95:89:3f:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:76:0A:B0:FF:39:A3:28:A6:34:50:BD:8D:E0:FB:CE:32:53:D0
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:62:45:49:f6:0a:c6:1f:0c:82:90:83:1e:a8:ce:82:30:
6c:94:14:8d:bc:e2:cc:de:3e:8c:26:b6:a6:93:e5:f0:b4:c3:
7c:13:9a:ed:78:9a:0f:a0:38:be:8c:a3:3a:6d:6d:a7:dc:2a:
bc:80:11:04:51:e1:d5:1d:a0:d7:c6:54:48:e2:fa:b3:5f:3c:
3b:29:65:31:72:43:c2:c0:4b:74:91:f4:e1:70:e2:1c:11:a9:
e2:ed:cc:8c:b8:6e:13:03:28:21:2e:da:9e:ee:b0:b7:23:59:
a6:03:02:15:48:8c:92:d1:ca:a6:b4:86:e8:92:e0:16:ee:31:
b4:08:f0:c3:41:dc:b7:de:f3:6e:4a:5c:eb:34:ed:35:33:9e:
bf:a2:bd:fa:e4:8d:3a:48:ab:6a:d8:5f:8f:b5:5e:26:5d:9d:
f8:e1:4e:04:51:8e:ad:64:b6:2d:d9:2a:a9:8e:f4:f5:d9:79:
6d:02:d1:14:05:07:2f:8d:fa:b9:af:ce:95:cc:aa:cc:83:5c:
62:e0:09:05:10:d1:2c:38:92:dd:87:ae:1b:33:c2:91:49:99:
8d:3b:df:6c:97:ed:15:e8:ab:f9:d0:d7:bb:d1:84:8d:a9:4e:
94:73:93:51:a6:65:dc:ed:9b:61:30:f7:55:0f:25:e4:07:64:
01:9b:5c:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtE5W7/UTJz3DviLLUjCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWNmYjY0YmRhNTIxMzcwOGZmNjdiYWQ0YzgzOTUwYjFm
ZmRjMzgwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD
EygyYzZlNzYwYWIwZmYzOWEzMjhhNjM0NTBiZDhkZTBmYmNlMzI1M2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEIGofeTTPMuOb8IGRTPt2vG0bk9
aceybLEMxTkoqjvj/SmuqCKUHwWYJY+BAnvCpy+68h9RVsWbkd19LMJDldU0kY+6
9PvsCXNbIUHUgjJBv+pLM+irTgDioqQxTS2GoyTfYdq2v3++f7Lef2Eae4FtE5oa
S9ELPUOzaML759YWJJfcXzUr3WIU/jW/9hv/++L5dbZe40e8AMyaMtXBKK6u2OWh
YqPTuiZLgvcI/vkBAnNhEPqGH+2d8fytcRs/Hb68SaN8MMfFDNCYsPlElxBByYDh
unmpBpP7DO+o/blsfLgpDDpcIThoINod6rJT1qzIL4OqLomvUd2ViT9jVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxudgqw/zmjKKY0UL2N4PvOMlPQMB8GA1UdIwQY
MBaAFIPs+2S9pSE3CP9nutTIOVCx/9w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEt
MWZjZmQwYzhiZGY1LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEtMWZjZmQwYzhiZGY1
LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQdiRUn2
CsYfDIKQgx6ozoIwbJQUjbzizN4+jCa2ppPl8LTDfBOa7XiaD6A4voyjOm1tp9wq
vIARBFHh1R2g18ZUSOL6s188OyllMXJDwsBLdJH04XDiHBGp4u3MjLhuEwMoIS7a
nu6wtyNZpgMCFUiMktHKprSG6JLgFu4xtAjww0Hct97zbkpc6zTtNTOev6K9+uSN
Okirathfj7VeJl2d+OFOBFGOrWS2LdkqqY709dl5bQLRFAUHL436ua/OlcyqzINc
YuAJBRDRLDiS3YeuGzPCkUmZjTvfbJftFeir+dDXu9GEjalOlHOTUaZl3O2bYTD3
VQ8l5AdkAZtc5w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:51 2026 by rpki-client