This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: qKjRDmC4Iet8iQf6CFCTJQD9oCs95QCRt0DznrhL4ig=
Subject key identifier: E0:CC:D7:3E:61:59:DE:69:AB:4E:68:61:D7:76:6F:AA:48:8E:F5:0F
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 019C42B4664291835D40EC00963F2192B7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 14:00:44 +0000
Manifest this update: Mon 09 Feb 2026 14:00:44 +0000
Manifest next update: Tue 10 Feb 2026 14:00:44 +0000
Files and hashes: 1: 9QydodLxK9rUXP9S5hg2oY8e164.roa (hash: 9FAzjdLFT8fn52nXr1/CoNt7SxfwNxZtFTZWh8c6oZI=)
2: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: cfCq6d8Z+eZox5Pc3eddl6+ozpEy1/AkTWhic4xcQBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:66:42:91:83:5d:40:ec:00:96:3f:21:92:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Feb 9 14:00:44 2026 GMT
Not After : Feb 10 14:00:44 2026 GMT
Subject: CN=e0ccd73e6159de69ab4e6861d7766faa488ef50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:26:7c:42:8d:f6:88:48:e6:d3:6d:8c:3b:
2a:8b:19:b2:ba:e3:e6:02:a7:a1:7e:c1:ce:ba:ee:
b7:b9:a0:5a:e7:fa:34:b8:78:29:73:c4:a9:a8:2a:
ed:56:c6:ce:36:db:70:99:59:eb:e1:d2:6c:c0:9f:
ce:31:d4:e3:08:5a:38:78:78:29:75:74:ef:15:90:
b9:2a:79:6b:c9:76:a9:82:44:b2:ec:9f:25:d3:a7:
c8:08:91:2c:36:f1:ed:1e:2d:44:4a:5e:c4:bc:de:
bd:d4:f3:ea:7c:6b:3e:d0:13:9d:2b:eb:11:2d:38:
b9:b8:f7:4f:e9:4c:f9:e0:c7:0d:0d:bf:bb:80:70:
d6:97:87:92:a9:8b:5e:8b:ba:03:11:92:62:00:2d:
c3:1f:6a:2c:55:06:1b:c7:96:a7:a9:31:ed:66:2f:
f0:83:7c:6e:b5:8e:2f:d8:0f:7b:6f:a8:1f:85:9a:
1d:a9:1f:e2:8c:44:9e:22:78:5c:20:d9:af:63:60:
4b:ef:1a:fc:c7:03:f8:38:e2:59:c7:7d:a1:9c:ff:
4e:79:c9:fe:46:9a:bb:6b:3e:5c:a2:e7:4c:3f:51:
a6:24:51:14:8b:bf:2c:09:74:7d:73:e4:88:2a:a0:
84:a1:ff:b0:00:bc:ff:eb:ee:23:c0:bb:de:d2:4b:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:D7:3E:61:59:DE:69:AB:4E:68:61:D7:76:6F:AA:48:8E:F5:0F
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:87:da:d2:d5:8f:e6:ae:23:8f:76:b1:8d:30:0c:4f:41:
1e:7b:4e:72:5b:5b:d0:77:c8:55:a2:c8:56:5a:15:b8:74:bf:
4a:13:83:5c:4a:e0:0c:5c:4c:a5:16:97:02:20:0c:68:2f:a8:
53:f3:45:fe:58:72:4b:7a:39:bd:4d:57:92:fb:f4:c8:77:0d:
6d:24:4b:1b:7a:fc:e4:53:74:9c:52:7e:aa:e3:b6:45:4b:d7:
ba:19:75:82:e1:f2:44:a0:91:7d:b9:96:87:89:a2:e9:f8:e3:
ba:b8:c9:9a:7a:5e:2f:e7:a1:a8:9c:b4:9b:59:46:17:66:76:
74:a2:4b:ca:5c:d7:12:7a:a8:67:4f:bc:26:d4:6e:e0:64:62:
2b:7d:bd:29:a7:ea:94:5d:90:27:a9:e5:37:7e:d8:88:00:50:
e9:48:e3:8b:8c:bb:ff:eb:87:de:5d:c7:eb:63:75:21:4b:41:
31:72:9a:25:ca:1e:9e:16:7b:96:da:57:9e:55:ee:8a:49:de:
0a:c3:be:21:5f:b6:09:c1:76:3a:10:f4:7f:e7:66:61:85:e9:
cc:36:71:a7:21:23:b1:fa:fc:6b:e7:1e:0f:71:89:70:25:93:
71:0e:a8:d3:c2:eb:68:6c:61:fb:a5:f4:f3:b5:32:85:90:79:
82:2c:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:33 2026 by rpki-client