This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: MFup4l3Qq4+XAGHrtFrcZC3lD+kS7KIkc6DjtrLJFEk=
Subject key identifier: 7B:CF:81:C1:15:D7:3C:72:6A:64:14:5B:6C:DE:14:88:0B:7D:BC:92
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 019C4322AEC85D5665191B7762360F28227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 0B3C
Signing time: Mon 09 Feb 2026 16:01:12 +0000
Manifest this update: Mon 09 Feb 2026 16:01:12 +0000
Manifest next update: Tue 10 Feb 2026 16:01:12 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: 2j92295cYtZyUdNRqEfzLxduNxT0IVhpRBD4oH6Ifsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:ae:c8:5d:56:65:19:1b:77:62:36:0f:28:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Feb 9 16:01:12 2026 GMT
Not After : Feb 10 16:01:12 2026 GMT
Subject: CN=7bcf81c115d73c726a64145b6cde14880b7dbc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:c9:1a:ff:b4:f8:9b:02:03:75:9c:70:6d:
5c:fb:52:1a:db:3c:a2:20:af:46:a9:8d:52:7e:4e:
1a:14:bb:59:27:bd:59:e0:cb:e2:c2:94:4c:67:df:
27:9f:9e:0a:36:02:1d:0c:c2:7c:21:73:07:57:71:
f8:35:ca:20:ac:5d:a5:7e:15:95:cc:3d:10:ab:0d:
a4:c7:2c:ff:a1:27:11:09:e4:81:f5:c3:9d:a5:26:
69:7d:20:13:cd:09:27:84:03:ba:93:c8:16:75:01:
38:31:bc:91:6c:35:dc:4e:76:ed:60:04:ea:55:e9:
54:fd:c0:21:aa:75:c3:39:08:26:cf:d9:3f:31:40:
5f:dd:f6:f8:0f:d6:26:09:36:0d:2e:3e:04:8d:76:
c3:fa:25:10:5b:13:0d:b9:27:05:b7:69:55:72:a2:
f9:20:15:fc:fe:07:eb:01:ae:c6:7a:ed:ee:71:42:
99:90:d5:56:5e:24:f3:35:ad:b5:c9:0a:5a:f3:d9:
b0:86:9c:be:e8:a6:f3:47:9a:23:40:1c:bc:8d:48:
86:f8:bd:e7:1a:9c:57:35:3e:df:d3:c0:47:09:33:
26:26:fd:75:7c:ce:29:3b:89:21:b6:87:d6:3e:0c:
fd:a6:4e:e7:3d:a3:05:4b:1f:a5:65:bb:0b:0e:3f:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:81:C1:15:D7:3C:72:6A:64:14:5B:6C:DE:14:88:0B:7D:BC:92
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3c:b7:1a:e5:d2:e6:32:97:63:7a:b6:7c:9d:c4:2a:b0:75:
50:4b:8b:a4:6e:c7:c8:45:7e:a6:af:c7:f6:32:29:7d:52:c0:
59:5d:cc:cf:d2:93:df:21:8f:c8:41:44:55:e4:bc:67:fd:d4:
5a:2a:02:62:8c:b0:a5:1b:87:bf:3c:bc:e9:79:0d:46:c9:df:
cb:e5:3f:af:e1:a6:fb:7e:7a:b0:d3:16:fd:01:c8:e2:dd:58:
91:42:3c:92:90:6b:bf:42:14:61:a4:58:be:8f:8b:c2:f1:cf:
76:5b:5b:89:59:1a:92:69:86:d7:fe:6a:0e:e1:af:c1:94:e0:
d0:84:59:0c:85:be:72:3c:98:97:fc:70:b1:f7:5f:e3:8a:77:
01:5f:fd:e5:08:b8:5c:a3:40:ec:1c:0c:18:06:0b:29:0a:f3:
ce:b1:99:f6:57:d9:1f:0c:8a:5d:64:11:f0:c7:f2:72:36:90:
b6:29:b9:6e:15:96:de:82:cb:8d:72:c4:ac:4b:4a:a8:7f:bc:
e8:7c:44:b6:58:06:39:ef:19:1e:7a:d8:e5:7a:1c:d9:47:b7:
3f:ac:d8:bc:2e:cc:e0:1b:f1:b9:df:4a:30:15:78:b6:4e:e4:
05:4c:95:ac:f8:b6:55:44:a7:35:cf:7c:21:9b:15:62:f6:da:
e7:17:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:50 2026 by rpki-client