This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: 7g1c/0hM6rNYdz0bKSYx8xCWl6cwmQ63iBYrIvxgxUU=
Subject key identifier: 0B:44:51:23:B2:6C:A2:FE:07:A0:BC:5F:01:E0:58:C6:DF:8B:7F:8A
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019C175C71066D88F1263DAC788AECC13DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 1047
Signing time: Sun 01 Feb 2026 04:01:00 +0000
Manifest this update: Sun 01 Feb 2026 04:01:00 +0000
Manifest next update: Mon 02 Feb 2026 04:01:00 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: DtGZ2bq+q5Fp27nCetjmdkdPJDyy58VrcFSY39E8d/E=)
7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:17:5c:71:06:6d:88:f1:26:3d:ac:78:8a:ec:c1:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 1 04:01:00 2026 GMT
Not After : Feb 2 04:01:00 2026 GMT
Subject: CN=0b445123b26ca2fe07a0bc5f01e058c6df8b7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:da:e4:b7:9e:c3:75:b1:16:3f:27:26:a1:
47:9f:7f:3a:58:9f:4f:e2:5c:93:c5:87:d0:84:bb:
11:d6:66:87:17:f3:ed:44:e9:30:f5:e8:49:02:9e:
30:dc:66:7a:2a:ea:2a:c4:ab:47:3c:7e:e9:31:0e:
cb:a3:ad:64:a1:40:ae:37:97:3f:06:af:09:22:5c:
6f:6b:15:4e:7a:0b:84:9b:93:55:46:4f:99:cd:ef:
00:b3:c7:6e:84:94:26:a7:d0:3a:fa:47:b3:86:9a:
4f:90:87:79:dd:e4:38:65:33:ae:8b:0f:5f:50:0c:
94:f7:93:d1:d0:f1:bb:ec:06:d3:45:c9:61:e6:fc:
a9:bc:cf:b9:b1:76:ea:bd:f9:5c:a1:31:1e:6f:17:
22:9b:44:0c:9d:73:d2:8e:a2:1c:81:e9:10:07:53:
c4:26:12:02:c8:d4:f1:ae:90:2b:d3:e5:ef:a7:e3:
d6:4c:97:b3:90:69:a0:fd:a2:b1:ce:53:96:bf:18:
e8:89:01:24:11:e1:53:6b:34:f7:32:b3:ce:f9:92:
bf:5f:0a:91:73:c9:64:2e:e7:56:0d:b8:6b:ce:c8:
86:d9:0d:fb:16:b6:da:bb:0f:57:97:5f:eb:34:2f:
67:e9:53:df:36:cb:d5:a4:a9:2c:06:3e:be:09:e8:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:51:23:B2:6C:A2:FE:07:A0:BC:5F:01:E0:58:C6:DF:8B:7F:8A
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:45:82:7a:5e:59:50:ab:6c:e5:df:96:c7:af:4f:a3:29:
18:5e:90:14:16:bc:91:87:47:e8:39:cb:ba:0e:e8:e7:75:df:
ef:f0:3e:36:f6:51:ae:7f:c0:59:99:70:31:1c:87:4f:6f:9e:
6c:5e:2a:63:81:b5:d1:50:59:88:df:3e:ca:e1:bd:02:64:29:
9e:82:d2:1d:b8:8a:7c:58:e1:3c:d8:f5:bb:a7:1e:76:a1:d8:
cd:62:7b:02:59:00:53:6e:4c:60:d9:cc:99:52:e4:f1:30:c3:
84:94:0a:f3:39:95:8d:ca:a3:a1:c8:31:62:ff:14:5a:7a:88:
40:01:5e:57:d2:f6:3f:e8:3d:98:77:17:b1:66:43:f5:9b:00:
67:09:18:73:ba:99:5d:79:db:8d:96:4d:41:78:45:1a:7f:38:
0a:2e:1f:49:0f:67:99:fa:00:30:68:3d:ef:79:db:ff:5e:b4:
3d:bb:9c:07:ed:25:65:bb:97:e6:6b:e3:09:76:89:58:74:04:
36:31:07:7d:4d:97:49:95:52:c0:e3:71:f6:f1:0b:d1:43:59:
09:a2:02:70:57:90:da:7f:03:6d:ce:57:78:1b:3b:2e:ad:ff:
8b:96:d3:e0:9c:7f:fd:e0:20:f6:9e:ab:75:4f:a4:77:83:9b:
fa:a0:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 12:38:33 2026 by rpki-client