This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier: AJgZAbnxbleIm5P+thFvN4xsQJZkdJt5+eeHcX4Eek0=
Subject key identifier: 1F:8D:0C:C2:2C:70:C2:C8:49:13:42:CD:D8:62:51:03:BD:96:C3:7C
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 019C40FD370B0461F32B96AA19AF700F3231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number: 0897
Signing time: Mon 09 Feb 2026 06:01:02 +0000
Manifest this update: Mon 09 Feb 2026 06:01:02 +0000
Manifest next update: Tue 10 Feb 2026 06:01:02 +0000
Files and hashes: 1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: qKISw8LgHHwzHvMbkJO6/M0uXUT/OTaFWFGVvNuA4kU=)
2: iNGJGnpRp8AcxHMxmP8wegfWCeU.roa (hash: ya12mt8QfVnZ29wP+KlJW9WEehxF6+N/fh0r/gblNNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:37:0b:04:61:f3:2b:96:aa:19:af:70:0f:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Feb 9 06:01:02 2026 GMT
Not After : Feb 10 06:01:02 2026 GMT
Subject: CN=1f8d0cc22c70c2c8491342cdd8625103bd96c37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:86:58:5b:2c:85:ad:75:4d:9c:e1:13:ae:
44:1a:97:cf:90:30:50:02:80:be:1a:5e:e7:1f:30:
f1:2d:15:04:2c:f4:57:40:83:61:11:ba:1d:2b:16:
15:00:10:18:a2:0a:01:b8:f7:21:df:18:a7:83:92:
87:e1:f2:d4:7f:d0:7d:81:35:81:ef:33:69:4d:69:
a4:b3:17:57:1e:ca:5e:0e:41:1e:6f:97:e2:57:ab:
c9:de:7a:db:7b:ed:0e:8d:0e:2e:51:81:f1:87:1d:
53:d9:39:ba:23:27:27:59:c9:88:34:cf:91:e7:d4:
f8:41:f7:80:d1:c7:08:e6:85:25:42:8b:ed:ce:33:
07:51:3c:69:ac:38:62:7c:82:41:e7:61:3f:26:85:
2a:af:69:2a:e5:e9:83:6b:d1:1a:2c:2f:af:2f:3b:
4c:9d:79:ed:e9:ab:2e:2f:42:98:42:6f:ee:54:82:
5d:b0:c2:7e:07:23:f0:43:0c:df:a3:a5:b2:26:86:
0d:a0:95:cb:64:b6:1c:c3:53:bc:26:18:a9:c2:a6:
52:bf:89:cd:68:c9:01:d7:82:f1:da:45:9e:a8:e7:
37:14:4f:5a:83:f4:b4:9a:0c:b5:6f:84:e6:9f:87:
69:28:47:ae:81:10:06:e6:8b:b8:8b:de:49:a2:93:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:0C:C2:2C:70:C2:C8:49:13:42:CD:D8:62:51:03:BD:96:C3:7C
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:72:39:b8:39:2b:68:94:02:f7:40:bd:a4:b0:5c:2b:6e:
95:43:16:d6:25:b9:9c:3a:84:92:cd:8b:a4:d8:1e:d9:ae:2e:
3a:59:ef:44:19:43:9c:25:00:d0:fc:c0:cb:f6:bc:9c:15:a5:
0d:51:85:5a:97:55:cd:e4:b6:7e:97:31:af:07:0c:1e:d9:e7:
77:df:38:7e:d8:57:93:1e:7c:65:24:7d:e1:c0:e2:4f:93:d1:
57:a4:43:43:92:87:62:c9:87:8b:be:4e:80:70:c2:70:c9:d9:
d9:e2:26:61:40:47:32:93:91:a7:74:31:4f:15:a4:fe:d2:37:
e0:f2:72:78:4d:af:6a:3e:50:70:d0:e6:78:78:f1:6e:f4:76:
fb:38:cf:26:6d:cd:9c:9a:b0:35:c4:78:6c:bd:18:fd:18:69:
5f:f8:52:da:56:f1:3e:bd:2c:b4:c3:80:1e:d6:67:d8:00:6f:
9e:65:e6:dd:2c:1c:2b:8e:4d:5e:6b:61:79:e1:69:93:5f:6b:
b8:39:12:cd:d3:30:4d:66:31:13:0b:7d:42:10:f5:fd:e6:d6:
95:88:47:67:6e:41:1e:6c:0b:28:76:93:62:60:8d:50:c4:93:
59:19:54:a4:ef:fc:6d:f3:6f:55:e0:2c:b3:0f:f0:1e:c9:4b:
2a:b0:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:47 2026 by rpki-client