This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
File: goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json)
Hash identifier: 1fw8km8iKbqJmlQP1fpXP3JpmgBDFPt9LuZdOBWSpGg=
Subject key identifier: 15:62:55:CF:3C:6D:2B:92:C7:0D:32:FD:E2:9E:FB:A1:24:40:23:7A
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 019C42EB834D47AC3236BEFD12F80893F43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
Manifest number: 0F63
Signing time: Mon 09 Feb 2026 15:00:56 +0000
Manifest this update: Mon 09 Feb 2026 15:00:56 +0000
Manifest next update: Tue 10 Feb 2026 15:00:56 +0000
Files and hashes: 1: FKqb6xzvddOBKsdPHF3mhYAJS0k.roa (hash: 910PvDYWRjp0nPe0uzUMCv2AassoiwccQm9jYSF+i2c=)
2: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: tFhqoB/wo+KWsOqHUwfFNs79d3/pxN59worugP4rQhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:83:4d:47:ac:32:36:be:fd:12:f8:08:93:f4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Feb 9 15:00:56 2026 GMT
Not After : Feb 10 15:00:56 2026 GMT
Subject: CN=156255cf3c6d2b92c70d32fde29efba12440237a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:0f:e2:b8:4a:e4:b2:70:7e:6e:30:e1:d1:
34:6a:eb:d8:b9:f6:82:f7:e2:57:14:6d:27:7c:eb:
91:90:d8:8f:0f:0b:5a:eb:e2:c7:dd:6a:69:45:83:
07:7b:f4:8f:57:d1:60:4c:b3:d2:24:ba:04:1b:9c:
69:9f:6b:bd:9e:f8:e0:08:11:8d:e4:9d:26:cc:ab:
27:73:e6:81:2a:b7:d0:c1:c8:9e:a4:04:54:c2:61:
ee:d2:14:cc:b7:bc:e3:86:06:b9:8a:ed:99:a4:08:
e9:4f:cb:73:9f:d0:c4:9a:d4:db:34:45:6e:8b:c2:
9f:50:9f:d1:ce:89:d6:09:13:78:7b:73:51:6c:70:
17:4a:59:c6:41:7c:74:07:71:23:86:df:52:23:9b:
66:59:5c:84:17:61:e8:7b:f3:da:d1:c8:1a:8c:e6:
6f:18:8e:79:29:ab:50:e1:41:62:5a:a7:12:fd:52:
b5:2a:91:03:61:13:d5:59:10:79:72:d3:f9:77:ec:
60:52:1e:74:17:a8:61:c2:c5:92:47:52:5f:7e:e6:
ab:1a:1e:ca:76:33:ca:64:7a:09:da:f6:b6:76:9e:
fb:60:bd:0e:ee:a5:7e:64:c2:37:1b:61:a0:d1:78:
b1:3c:b3:03:53:72:b3:d9:fb:6e:1e:64:b8:62:02:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:55:CF:3C:6D:2B:92:C7:0D:32:FD:E2:9E:FB:A1:24:40:23:7A
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:81:06:8a:b5:45:ff:a1:f2:94:92:6b:b8:a5:98:c7:72:
36:8d:b0:b3:51:3f:f4:00:c3:ab:72:91:02:d7:8d:4b:99:e6:
a4:ed:84:8e:28:da:90:a7:16:63:33:f5:82:37:fb:1a:a1:37:
24:44:1a:3e:68:de:37:7a:8b:80:44:3c:e8:43:a6:54:74:99:
6a:d6:c2:8c:ea:20:3a:2d:41:a3:eb:c1:cc:c9:17:6c:b7:92:
da:fc:50:01:d5:2d:e9:5d:ba:e6:b3:8f:9c:ee:f5:b7:3d:e4:
61:91:2e:fa:9c:94:1f:11:8c:8c:ba:1f:d8:36:f1:95:1e:14:
00:1a:d1:82:8c:7e:37:61:a8:10:57:90:d1:be:42:20:26:79:
a7:b5:e3:8d:9e:17:55:53:d2:01:59:b1:09:32:0b:96:89:3b:
0d:7d:8b:b8:80:21:50:e0:f9:65:8f:b7:86:25:58:8e:67:da:
1b:db:6d:a3:c7:c3:a6:c2:9d:b6:db:a4:6d:17:e6:c4:c4:4f:
4e:28:bf:a2:87:fb:f9:be:b6:f2:e7:f7:4c:70:e0:a7:63:6e:
41:4d:e5:90:f7:44:54:5f:9b:be:9e:96:63:7f:4f:d5:1b:04:
da:d2:f0:aa:b2:89:90:be:8d:30:ab:77:e8:a5:59:e7:82:b5:
0b:c2:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:41 2026 by rpki-client