This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: /S472MH4RJHLRTRpF0OKWVIqKqKZLRYbkwCRRac8N9U=
Subject key identifier: 3D:0B:53:39:02:20:2C:9B:29:F0:02:95:37:E5:25:2A:4F:B2:13:74
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 019C41D89C24E8636E903230BC15DDE281E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 10:00:40 +0000
Manifest this update: Mon 09 Feb 2026 10:00:40 +0000
Manifest next update: Tue 10 Feb 2026 10:00:40 +0000
Files and hashes: 1: 3uI2T4FscmS1g4BxDBywDIRN1EM.roa (hash: GmArLm5Y723dPyhpNiMZSbQoSTY/TP5XBjOwFVSZTfc=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: A6JiyDbO4nr/NnWJvNAmWtiy6OsVw1ro02SrOBQFPDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:9c:24:e8:63:6e:90:32:30:bc:15:dd:e2:81:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Feb 9 10:00:40 2026 GMT
Not After : Feb 10 10:00:40 2026 GMT
Subject: CN=3d0b533902202c9b29f0029537e5252a4fb21374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:6e:30:65:9d:89:d9:4e:4f:d1:6f:48:67:
53:7f:7c:59:bf:17:99:e9:fb:f7:d1:b4:0d:69:25:
db:50:85:1c:0d:d8:2c:40:fb:31:71:e3:1d:fb:40:
4c:d4:74:14:4e:1d:9e:29:c1:3d:35:a0:a3:85:ca:
f3:d8:88:21:ab:41:f7:42:e5:d3:ce:56:e7:eb:a0:
d6:42:58:f9:12:46:3a:7b:5a:1f:c5:c9:73:cd:43:
12:79:3e:c3:fa:1e:2f:87:68:ca:54:bd:5b:84:35:
25:19:4f:8d:80:b5:46:3a:6d:67:66:ad:90:af:15:
e8:23:e3:95:1e:3e:cf:ba:5f:58:f9:ce:fa:95:8d:
75:3c:b1:14:71:ae:28:03:bf:95:8e:ab:1c:0e:11:
54:2d:ac:cd:29:97:fa:ce:9e:f3:54:0d:48:9f:43:
98:34:0a:0e:27:eb:d2:79:75:2c:95:05:dd:a9:16:
86:e9:58:d5:00:ba:ba:81:4b:3f:1a:f4:06:ab:7b:
96:5b:dd:e7:da:28:d2:82:8d:a1:6d:71:26:9b:d1:
39:c5:36:28:27:3c:1a:03:31:38:a6:31:c7:a3:46:
ba:25:1f:7d:db:1c:4b:22:ff:dd:1d:06:ab:22:0a:
d6:d5:10:e1:f2:4c:64:90:18:4a:f3:3b:8e:e5:94:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:53:39:02:20:2C:9B:29:F0:02:95:37:E5:25:2A:4F:B2:13:74
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:78:1f:0c:11:e0:94:84:19:19:d2:11:a0:53:68:6e:b5:4c:
a5:6f:cb:f2:29:6c:1d:4e:06:d8:a0:d0:ed:61:28:8d:8f:a5:
ea:4a:22:0e:77:d9:c3:ef:e4:30:73:03:04:90:4c:bc:5b:17:
49:af:cb:4b:fb:33:61:ae:d0:4a:1a:61:67:0f:85:3c:73:62:
33:3d:df:8b:d5:4f:63:ae:ca:08:7d:74:f3:25:de:3c:20:46:
32:6e:f6:86:92:bd:09:c5:d3:17:ed:af:1a:e8:29:16:63:76:
d6:e8:17:7a:2b:de:85:7d:54:52:0c:1c:21:f8:60:61:27:ec:
53:d7:31:9a:bd:73:ed:dd:7f:e2:35:14:35:bd:e6:d0:ec:e0:
bf:00:b4:c0:61:89:9f:4e:25:90:08:78:57:16:47:24:81:d3:
2b:b7:4a:5e:23:b6:bc:ba:2b:fe:41:0b:e8:02:3c:b1:8a:08:
d3:bb:36:f9:3e:94:f7:19:60:25:46:4a:bc:27:a1:22:4e:5e:
02:f8:09:dd:c5:bd:aa:70:6b:d9:67:08:02:a7:99:ed:5b:e8:
02:17:cf:e4:d4:d6:29:0e:3d:d3:21:05:56:30:a7:df:98:16:
7c:f9:df:22:16:79:31:c8:27:76:36:87:81:7c:08:48:d0:70:
d5:95:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:49 2026 by rpki-client