This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File: g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier: 3ElHqy5W7TpgSodbz7xIWqmFA2p+d2z/TMUWCuDwyFc=
Subject key identifier: 70:A5:1D:78:79:66:FA:4B:74:BB:2D:47:7D:0E:68:F3:5F:4B:7F:AF
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 019BF6880EBA3FCDC9E92C5593836196AE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number: 17EB
Signing time: Sun 25 Jan 2026 19:01:10 +0000
Manifest this update: Sun 25 Jan 2026 19:01:10 +0000
Manifest next update: Mon 26 Jan 2026 19:01:10 +0000
Files and hashes: 1: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: tRp5AcnjHgdkStYsGmx7aQhi1g197l86Jph5ZRpMuXs=)
2: jpn75Yfp2rf8iixY-pf9HBQZtFQ.roa (hash: 2FkfOX5PwPIaVt0unZh3WoxL9QILOq0nkQ+r0zmQiMM=)
3: u0rrwecw3ubOxlMWibDzWHGFQeE.roa (hash: PPKjE8PKmukpw4GpWagL0x0PZuUxYtWJ2kQC/cAQIfc=)
4: wWxKrvdoWqK7y69DimZbYdEbApE.roa (hash: yfTG7KBZH/Uzc3GBeio5iSYvohaMSnZRgVyybf7lC/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:0e:ba:3f:cd:c9:e9:2c:55:93:83:61:96:ae:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Jan 25 19:01:10 2026 GMT
Not After : Jan 26 19:01:10 2026 GMT
Subject: CN=70a51d787966fa4b74bb2d477d0e68f35f4b7faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:7c:21:b2:fa:49:dd:17:1f:20:9e:b1:9e:
72:aa:4f:4c:e8:61:9f:84:4a:17:45:45:42:8e:de:
5a:b2:5b:70:30:bd:22:87:a8:fd:99:1f:50:10:47:
9a:e4:a2:c9:b3:87:05:33:10:d4:e4:50:65:09:cf:
6b:31:aa:5c:3a:b1:70:90:25:91:1f:21:91:c4:6b:
bf:1f:4a:f5:ba:88:a1:03:51:06:59:6f:a1:9b:5d:
cd:cb:c6:3c:62:2b:ed:fc:48:ee:e6:30:76:a4:5a:
0c:b6:4d:f2:05:c7:ce:f0:37:7b:b8:d8:7b:86:58:
05:24:32:8d:a2:6a:b1:3c:ea:25:ca:56:b9:75:87:
36:8a:57:a4:cb:58:74:e6:c3:d6:c2:e1:d4:c2:46:
26:c1:df:00:17:7e:1b:51:c9:7f:9c:84:30:ee:0b:
9c:a2:bd:b9:7f:48:7f:93:97:d8:53:6d:6f:8d:36:
81:6b:c5:8f:b4:48:0f:1e:6b:7d:c7:3f:6c:0c:20:
d7:69:41:e8:8c:dc:6a:23:f1:c7:19:83:ff:84:cb:
d8:c8:85:34:e9:08:58:fd:7f:20:d7:cf:3f:ff:00:
7b:e6:cd:b5:a8:89:e6:9d:41:65:74:6d:1a:36:1b:
44:df:bf:e3:dd:f0:a2:ae:ef:5b:f8:7a:d9:a6:cd:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A5:1D:78:79:66:FA:4B:74:BB:2D:47:7D:0E:68:F3:5F:4B:7F:AF
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a8:2c:27:86:86:d2:09:3b:37:aa:59:27:31:48:67:29:09:
3a:06:20:08:73:7f:5a:8c:ef:27:d8:e8:bd:a1:d0:65:eb:69:
55:32:e6:aa:97:f0:c3:41:2f:d5:86:4f:f1:69:f6:47:0d:e7:
aa:b1:92:e6:6f:03:ef:c2:9b:42:37:77:79:2c:17:ed:0c:bb:
a3:1a:f9:2f:4c:53:73:f3:ed:ab:7f:45:40:20:29:c8:ee:8c:
2a:51:d2:0e:a2:84:32:7f:1f:df:6e:cb:c0:a4:cb:31:b4:c7:
dc:b9:9e:a7:36:d5:8f:e9:72:38:5e:d9:8b:48:0c:63:c5:0b:
90:e0:c5:7b:82:c6:51:d2:09:79:63:73:25:51:1b:1e:bc:9e:
d1:00:27:1c:6a:b7:93:ea:93:ea:f0:25:19:70:2c:ce:5d:29:
b3:8b:66:19:5f:1e:87:b4:d9:37:b7:fd:25:12:d7:83:fb:a7:
44:99:11:de:08:ee:7d:0d:14:3c:b3:a7:15:08:fd:a1:ef:6f:
22:30:a9:a5:e1:ea:79:8c:0d:8d:96:0b:67:2e:2a:04:3a:78:
a9:d9:6d:d8:20:85:13:f8:e9:2c:1c:32:8f:b8:0e:b3:67:6a:
31:87:81:ea:23:b6:44:00:55:f5:13:a6:97:57:27:6a:e4:8e:
60:28:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:52 2026 by rpki-client