This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: /8wfbLrj7YJOV7S1pkg9m4MwRzHJvNIcsSrXpmg6vZo=
Subject key identifier: 19:31:C8:2B:CF:3C:A3:2E:3B:84:A4:02:E6:16:E0:17:88:23:00:51
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019C45B5C0764FD019645A767CD980C07F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 105F
Signing time: Tue 10 Feb 2026 04:01:05 +0000
Manifest this update: Tue 10 Feb 2026 04:01:05 +0000
Manifest next update: Wed 11 Feb 2026 04:01:05 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: ABWISxZEVDX8fzor9Q2nLZjc/gdmYpUy9e+gY/Tfd94=)
7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:b5:c0:76:4f:d0:19:64:5a:76:7c:d9:80:c0:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 10 04:01:05 2026 GMT
Not After : Feb 11 04:01:05 2026 GMT
Subject: CN=1931c82bcf3ca32e3b84a402e616e01788230051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b2:47:9b:e6:33:bf:c8:57:31:c9:b4:dc:67:
da:fa:61:bc:5b:ec:96:52:5d:3c:65:f2:c2:dd:b9:
83:7a:b9:b7:4f:ee:69:d6:7e:54:e4:5c:9a:ed:5a:
fe:22:7d:a7:a7:72:eb:cd:5e:b5:c1:c9:6f:59:d0:
e5:be:6d:ad:89:0f:20:94:9f:c4:86:dc:b3:06:30:
d6:c1:f7:e9:97:8b:56:8c:8c:2e:10:26:f8:71:31:
a3:24:1b:86:ca:28:1f:11:6b:00:d2:db:e0:10:bb:
76:c0:57:df:3d:fe:af:5c:aa:ca:b0:e8:04:cd:cc:
30:b5:40:93:68:f6:55:24:83:ee:70:32:48:16:69:
53:0a:af:4e:aa:c4:e4:ed:f8:ee:d6:cb:42:f9:8e:
d5:08:90:5f:8b:df:a5:3b:e1:bc:3f:c2:1c:7d:db:
a9:6d:e6:22:44:c8:1b:36:2a:15:da:db:f0:32:07:
33:bb:38:8f:65:70:d9:0c:aa:f4:50:3d:66:9b:44:
d2:a7:73:a1:59:d7:66:65:29:52:9b:0e:a0:60:49:
bb:38:2d:46:7a:aa:64:8a:ce:88:b1:6f:80:5d:1b:
fa:14:70:63:cd:0d:31:d0:10:1f:53:6a:76:38:11:
50:74:7f:00:22:9e:52:48:f4:dd:69:d9:5f:67:7d:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:C8:2B:CF:3C:A3:2E:3B:84:A4:02:E6:16:E0:17:88:23:00:51
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2c:0b:96:b3:d9:06:73:21:52:28:06:77:88:38:72:d9:d6:
47:ea:8d:58:3e:fa:6a:bf:36:f5:7d:da:75:b6:64:f0:e2:6f:
da:90:8d:02:1f:c1:7c:94:f9:f4:a6:d1:d8:0b:dc:22:5f:da:
69:bf:b7:40:ab:49:df:1a:69:bc:bb:49:9e:a0:5c:90:a3:6c:
79:6d:e6:9e:11:15:5c:c3:0c:36:77:d9:37:e0:e0:a3:31:71:
27:53:30:be:7c:20:2b:86:b3:5e:bd:83:37:64:f3:dc:e3:03:
aa:af:fb:a0:59:cb:78:6d:73:47:32:92:b6:54:7a:f9:8f:94:
d4:95:88:bb:cf:1f:a8:fa:31:32:c1:56:e6:da:46:f5:e8:4d:
11:00:2d:d3:c7:4d:83:8d:9f:86:b4:de:53:ab:80:ca:8a:f3:
e2:10:5e:38:9a:5d:28:24:8d:ff:b6:bf:e0:c1:ae:5e:ca:36:
92:22:c2:bd:48:d0:11:37:e7:fd:72:96:55:43:99:0c:e6:30:
cd:8b:9b:f6:52:6a:b5:26:cc:4d:90:8b:e1:7f:e8:50:6c:1f:
08:4f:29:e2:6f:c2:ea:78:62:de:55:81:46:70:1f:12:b8:5f:
50:05:19:7f:3e:3a:0b:1e:31:1b:0a:c0:0b:d8:99:4a:06:6b:
15:10:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:19 2026 by rpki-client