This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
File: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft (raw, json)
Hash identifier: E5g/B6024OAnILod631mY/KIaOBmqKmmsleisxF+BNQ=
Subject key identifier: 13:9C:AF:4D:97:EB:CF:1E:A5:0C:CA:49:49:A9:64:C8:1D:32:06:C8
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Certificate issuer: /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial: 48457B9C96BF72F6E6CA1EDE6BEC5976EA5275C4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access: rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
Manifest number: 6D
Signing time: Sun 25 Jan 2026 01:58:17 +0000
Manifest this update: Sun 25 Jan 2026 01:53:17 +0000
Manifest next update: Mon 26 Jan 2026 03:11:17 +0000
Files and hashes: 1: 326131343a373538303a336666653a3a2f34382d3438203d3e203434383232.roa (hash: fOomgPnkxPgBzURmASJKUZ+RYP9k6NrKcBNGVrv8WMY=)
2: 326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa (hash: Kicy9HxyZzEtWNVt6uGQnpFMpN2VWc9gbNotwWywYxs=)
3: 326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa (hash: Z8b3CXR+NYpLiWL8vo85cxs+rnI+69wtmeZr+Sekgos=)
4: 9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl (hash: syj4RDy3UvcLMa+dCHztva7bzo8vvMKomy7LyvdK5+M=)
5: 326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa (hash: B+B2Yl/O36Gn5Y+oNxHVV8LhWuDlCy4ZF9J305MP6uY=)
Validation: OK
Signature path: rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 01:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:45:7b:9c:96:bf:72:f6:e6:ca:1e:de:6b:ec:59:76:ea:52:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Validity
Not Before: Jan 25 01:53:17 2026 GMT
Not After : Jan 26 03:11:17 2026 GMT
Subject: CN=139CAF4D97EBCF1EA50CCA4949A964C81D3206C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:ac:54:ae:f8:a8:d7:91:99:c2:10:f9:45:
f7:ec:ef:a3:dd:6f:fa:4c:6b:fb:84:6a:27:bf:b7:
5f:3e:71:0d:9b:3e:73:91:58:0f:fc:06:45:4c:26:
0a:78:43:fa:9a:9a:c3:db:28:7e:76:98:2b:a9:7a:
c3:ad:71:d8:fc:cd:10:2e:ab:4f:17:2e:e3:83:64:
c7:45:ad:69:26:2e:40:61:6c:4c:1a:17:f2:61:39:
8e:30:91:c3:72:09:82:cf:1d:05:ec:fc:27:69:79:
32:bd:09:f2:4a:9d:e1:1d:3b:d5:78:48:2a:15:c2:
c9:8f:c7:1e:c0:af:df:05:da:3f:09:be:e0:f6:6d:
b0:db:45:7b:5e:5a:2c:82:94:bc:2f:6d:96:ce:79:
b9:49:ab:03:c4:6d:0a:13:b9:05:b1:43:51:9a:03:
3b:b3:c7:0a:46:26:0a:fc:59:c1:29:76:f4:a4:8f:
7b:a6:f7:ec:1d:bf:89:4d:76:31:ac:72:9f:f7:73:
df:92:99:06:21:61:23:55:5f:bd:fa:a0:6f:b4:13:
32:32:14:37:b9:50:be:a4:59:a3:27:fd:50:2c:20:
80:4d:fc:5c:9e:f5:f2:26:65:36:ca:7e:1b:78:8a:
a0:44:85:16:d2:05:7e:da:34:41:6a:e4:cb:19:7c:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:AF:4D:97:EB:CF:1E:A5:0C:CA:49:49:A9:64:C8:1D:32:06:C8
X509v3 Authority Key Identifier:
keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ac:8c:45:33:d0:3e:e3:b7:1f:05:7d:72:4d:1a:31:e3:5a:
e7:6f:ff:c2:6b:d3:55:14:9b:16:c7:a4:c9:28:21:6b:4a:c7:
8d:59:f2:ae:bb:35:ec:13:83:ef:c7:c1:84:fb:d4:c9:f6:53:
0c:40:e4:83:ee:df:85:40:02:1b:18:dc:e6:ed:06:16:ee:a9:
2a:bd:dd:68:7a:8c:3b:cd:77:3c:63:db:9c:b7:82:8a:d6:b2:
05:3f:0c:ee:08:c4:6a:e0:73:19:2a:61:b2:45:ff:b7:53:43:
22:d6:f6:75:59:fc:1a:4a:77:fd:9e:be:c8:d9:da:8f:8a:b2:
a1:7a:75:ea:78:0a:a6:e9:74:a4:da:ab:73:a1:56:38:62:43:
c5:db:2e:e2:49:d4:22:9b:f4:56:a0:0b:d7:37:11:80:b9:e6:
6a:37:68:88:c6:8b:1f:e2:98:57:69:ad:b3:01:15:e8:7a:17:
4f:c4:51:5c:ea:a2:9c:10:d1:47:04:3f:c6:a9:2a:87:f9:c3:
f7:9c:5d:00:85:1a:50:f4:dd:43:c7:af:81:1b:90:27:fb:d9:
dd:f9:36:da:ef:44:dd:88:f5:4f:9b:a7:5a:f1:a5:86:45:03:
cb:49:76:75:7e:45:3b:03:e8:65:72:56:e9:70:b1:e3:3a:52:
3a:84:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:34 2026 by rpki-client