This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: gaMRFeXvwfsOs1qz8GuqscLqUlDYLBA7yzXVcjerBMc=
Subject key identifier: 11:69:8F:77:4E:8F:85:0F:05:D3:C1:5D:D9:D4:B7:C6:F5:9E:C1:89
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019C24E12C9324630133BD7C2CADA00A08CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 104E
Signing time: Tue 03 Feb 2026 19:01:02 +0000
Manifest this update: Tue 03 Feb 2026 19:01:02 +0000
Manifest next update: Wed 04 Feb 2026 19:01:02 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: prHXPD3K0ud6llZ2S0L3UNtM25zddnt2Dkr2vOnRkfE=)
7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:e1:2c:93:24:63:01:33:bd:7c:2c:ad:a0:0a:08:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 3 19:01:02 2026 GMT
Not After : Feb 4 19:01:02 2026 GMT
Subject: CN=11698f774e8f850f05d3c15dd9d4b7c6f59ec189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:ec:fb:26:0d:a5:f6:ae:71:1d:dd:40:a4:
03:c7:b2:cd:22:ea:bf:20:29:44:f8:82:f5:c8:3d:
50:a1:d8:27:8a:38:86:bd:dd:c8:68:fc:c1:dc:22:
c6:47:d2:49:ea:aa:25:da:79:ea:47:26:12:1e:7b:
c4:8e:2b:66:7e:f7:ef:70:68:9d:7c:57:c1:9d:8b:
a7:c7:bb:86:51:f8:d6:99:2e:30:29:01:c1:22:31:
97:ea:93:dd:82:09:33:36:4b:86:48:2c:5c:b4:e4:
51:8c:77:ca:6a:b4:d5:f1:23:66:30:6b:8d:89:ca:
d7:94:18:50:ea:67:dd:e2:d8:7a:08:40:db:62:38:
9c:5b:f6:dd:e3:6b:ba:dc:c1:44:b0:25:87:8f:4b:
8f:a6:64:93:de:34:b2:a0:90:b7:3f:80:98:87:8f:
d8:e9:55:fa:8c:77:82:ea:9d:a4:04:b0:eb:9f:a9:
5d:6c:a9:bc:8f:b9:59:29:5b:ae:9e:b4:8c:e5:0d:
cb:52:48:ab:f4:ce:85:25:65:bc:d4:f8:73:df:55:
84:ff:2c:78:74:fd:b4:32:2f:00:eb:db:29:b6:3a:
1a:5c:0b:bd:00:d3:6f:1d:73:b8:3d:c5:8a:c5:4e:
a3:78:6b:2a:31:3a:d0:61:ce:b4:0b:a3:97:9b:6d:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:8F:77:4E:8F:85:0F:05:D3:C1:5D:D9:D4:B7:C6:F5:9E:C1:89
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:00:39:53:26:22:b1:5b:22:1e:21:af:8d:0e:7f:a3:5e:
d1:c4:2c:96:d4:d2:2c:8b:d0:f5:ff:0c:c1:8c:54:ba:d2:34:
49:5d:03:08:e9:69:c4:f6:b1:00:6f:91:98:29:bc:40:e4:8a:
6f:9f:26:fc:3f:d7:9c:b6:8f:b5:83:b7:54:68:72:6d:fe:ee:
3b:3d:31:b0:45:3b:9d:24:1c:12:6d:04:4b:8e:2f:b9:49:54:
5e:a5:68:63:c8:db:c0:82:3c:df:17:27:10:64:6a:d2:34:db:
14:54:51:0b:b5:fa:f4:60:d9:4a:c3:6f:f9:55:ad:82:b2:aa:
95:c1:0c:11:cc:13:64:bc:25:6a:1f:86:47:88:dc:56:54:46:
1e:35:ae:d1:4b:e7:92:d0:3d:67:38:1d:aa:ff:93:9d:f2:96:
9f:6f:8e:19:09:12:c8:c7:5b:70:d7:5b:2d:5a:61:96:35:91:
7e:64:24:44:07:19:f3:de:9f:6d:2d:4d:cf:44:b9:e8:a5:45:
0d:28:3d:6c:80:34:7d:72:a9:22:5e:61:48:77:65:70:77:0e:
e9:60:50:c1:17:51:f0:6d:82:e3:93:f2:cc:73:03:56:4e:93:
6d:41:98:7d:05:6b:85:43:dc:fc:18:3e:8e:d8:17:27:09:33:
48:dd:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 05:39:43 2026 by rpki-client