This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: +FclzhG9JupbQJrpYO9pR3m2mVraHNbE0oUX7tPgJqc=
Subject key identifier: F5:4A:EA:AB:70:7A:71:3C:E4:13:B8:74:46:74:2A:A7:F4:C3:87:C1
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019BF5079DAC2139126C829D7F88C8FD23F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 1182
Signing time: Sun 25 Jan 2026 12:01:15 +0000
Manifest this update: Sun 25 Jan 2026 12:01:15 +0000
Manifest next update: Mon 26 Jan 2026 12:01:15 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: FFxzlYan21DOgsYZ5i6NrMJhLz2wUS7Wh1xEHPNx6t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:9d:ac:21:39:12:6c:82:9d:7f:88:c8:fd:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jan 25 12:01:15 2026 GMT
Not After : Jan 26 12:01:15 2026 GMT
Subject: CN=f54aeaab707a713ce413b87446742aa7f4c387c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a6:6f:76:d8:36:36:4f:bf:5d:cc:18:57:61:
4f:8d:d4:40:9d:1c:82:f0:50:4d:0b:ea:62:ea:cb:
e5:ec:2f:6b:1f:1c:1d:8f:b8:b3:0e:5d:51:97:cc:
3f:77:63:81:ed:2f:9e:2e:c2:a7:82:c4:60:a2:ce:
d4:20:d6:dc:63:4a:e1:f9:c6:84:66:6e:2d:00:04:
d3:27:40:cf:72:b1:31:e5:bf:f7:a9:50:93:c4:fc:
79:e8:ed:7f:3d:fd:f0:b5:42:2b:17:e2:54:7f:ad:
56:99:5f:2e:ed:db:81:21:9f:6c:f9:52:1c:3a:36:
c9:26:5f:9a:e7:70:84:19:59:64:51:c6:ae:53:90:
1b:d6:33:f1:4c:68:a5:91:40:24:44:51:82:16:30:
1b:1a:d1:ed:ec:e5:f6:b5:f5:e9:e3:16:a3:e0:2d:
c9:09:33:69:92:b4:72:22:ba:3c:4b:f8:65:bd:40:
0c:6a:3d:6e:18:f7:ac:8c:45:b2:b5:46:c4:5b:73:
86:66:ab:cd:43:39:9e:5f:94:90:ad:93:83:52:03:
61:ab:66:81:b2:47:d2:ad:3b:19:84:f7:24:33:f9:
93:6d:04:91:fa:32:43:ca:52:81:2a:68:e8:22:40:
c2:3a:b2:42:76:40:c3:7e:ce:17:36:20:28:73:2c:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:EA:AB:70:7A:71:3C:E4:13:B8:74:46:74:2A:A7:F4:C3:87:C1
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:36:16:24:76:bd:08:b9:9d:29:64:dc:1e:9b:5b:30:e3:
93:a1:8e:03:3a:82:83:09:3e:e2:dc:c6:da:75:60:ab:30:e7:
de:aa:5d:86:80:24:58:e9:e8:5c:ad:af:21:4f:50:d0:2c:c6:
d7:c0:cc:2c:06:a5:4f:64:fe:ab:d2:63:53:e4:84:ff:47:af:
dc:2c:2e:91:40:5b:31:b1:32:b7:06:09:ed:e2:c0:50:96:95:
f1:0b:1d:57:13:d3:42:8e:5f:c8:0b:c3:91:fd:d2:5c:a5:13:
30:e7:5c:b8:ea:61:33:f3:29:a5:ef:57:b6:7e:ff:5e:ae:28:
52:7d:23:08:d2:66:a4:b1:51:4c:69:56:f1:6e:43:64:66:16:
8b:2e:df:ef:03:2c:94:02:e8:4a:52:2c:4e:bb:ff:76:71:d9:
2b:c8:8e:74:5c:05:8c:49:95:85:41:50:83:31:f7:e5:29:19:
13:4e:b0:a6:e1:42:cf:82:97:d9:b7:2a:21:bb:64:4c:28:a0:
98:c3:eb:e8:f1:b7:d3:f3:c3:fe:c4:59:ce:4c:a6:b3:84:2b:
e7:45:30:fe:c0:2e:e7:4d:47:c8:45:66:fc:41:56:dc:95:5f:
b3:cf:9e:0b:d4:86:cb:44:00:f5:be:34:9b:e4:22:a7:be:02:
6c:c5:df:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1B52sITkSbIKdf4jI/SPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz
NDIyMzIwHhcNMjYwMTI1MTIwMTE1WhcNMjYwMTI2MTIwMTE1WjAzMTEwLwYDVQQD
EyhmNTRhZWFhYjcwN2E3MTNjZTQxM2I4NzQ0Njc0MmFhN2Y0YzM4N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86Zvdtg2Nk+/XcwYV2FPjdRAnRyC
8FBNC+pi6svl7C9rHxwdj7izDl1Rl8w/d2OB7S+eLsKngsRgos7UINbcY0rh+caE
Zm4tAATTJ0DPcrEx5b/3qVCTxPx56O1/Pf3wtUIrF+JUf61WmV8u7duBIZ9s+VIc
OjbJJl+a53CEGVlkUcauU5Ab1jPxTGilkUAkRFGCFjAbGtHt7OX2tfXp4xaj4C3J
CTNpkrRyIro8S/hlvUAMaj1uGPesjEWytUbEW3OGZqvNQzmeX5SQrZODUgNhq2aB
skfSrTsZhPckM/mTbQSR+jJDylKBKmjoIkDCOrJCdkDDfs4XNiAocyxzhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVK6qtwenE85BO4dEZ0Kqf0w4fBMB8GA1UdIwQY
MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut
YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4
LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzY2FiR2
vQi5nSlk3B6bWzDjk6GOAzqCgwk+4tzG2nVgqzDn3qpdhoAkWOnoXK2vIU9Q0CzG
18DMLAalT2T+q9JjU+SE/0ev3CwukUBbMbEytwYJ7eLAUJaV8QsdVxPTQo5fyAvD
kf3SXKUTMOdcuOphM/Mppe9Xtn7/Xq4oUn0jCNJmpLFRTGlW8W5DZGYWiy7f7wMs
lALoSlIsTrv/dnHZK8iOdFwFjEmVhUFQgzH35SkZE06wpuFCz4KX2bcqIbtkTCig
mMPr6PG30/PD/sRZzkyms4Qr50Uw/sAu501HyEVm/EFW3JVfs8+eC9SGy0QA9b40
m+Qip74CbMXfnQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:49 2026 by rpki-client