This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: ZlL3woLP5t+4Cds/DJ39kc5ZyJDtjzcHr4Rz8xPkngs=
Subject key identifier: F2:2C:4C:16:01:42:E2:E3:89:A4:0D:AF:6D:67:45:E3:05:59:BA:B8
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019BF619BB88EB8131A98225502C6ED01203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 165F
Signing time: Sun 25 Jan 2026 17:00:40 +0000
Manifest this update: Sun 25 Jan 2026 17:00:40 +0000
Manifest next update: Mon 26 Jan 2026 17:00:40 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: pU4pS5eOjZ0njOiBXxBDLkovtZabNFu3iHR75M+Dpl0=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:19:bb:88:eb:81:31:a9:82:25:50:2c:6e:d0:12:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jan 25 17:00:40 2026 GMT
Not After : Jan 26 17:00:40 2026 GMT
Subject: CN=f22c4c160142e2e389a40daf6d6745e30559bab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:84:f7:b6:37:91:45:62:ae:e9:98:ee:61:
cc:4a:07:76:06:db:49:cc:05:91:7f:d7:9a:fd:a3:
31:0d:ca:17:8a:cd:c7:eb:1e:8b:c8:96:c5:db:50:
e6:c6:21:a7:7e:91:8a:c8:5f:99:84:21:b4:67:18:
84:ac:f6:ba:3c:27:14:28:ea:6f:36:b8:a7:38:e0:
96:3b:8e:22:55:04:24:73:07:8d:34:87:00:ea:f3:
c6:fe:c2:8a:c2:20:a9:c1:21:35:d6:d4:de:c6:d9:
ca:89:11:7e:b6:79:24:b1:61:ab:fe:7f:5b:47:98:
96:86:17:78:30:d4:81:38:08:8e:3d:ae:c7:a2:3f:
70:67:8a:1d:68:4a:68:7a:a4:ab:e7:1f:20:d7:69:
0e:ff:13:d1:d7:d7:ff:28:29:30:40:6f:89:f2:fa:
c4:76:16:41:71:9b:0b:e0:a7:66:22:fe:95:18:aa:
53:26:fc:bc:e3:97:9a:c7:5f:d2:a1:db:2c:2e:0a:
ea:8b:53:2e:87:f0:7c:80:cc:c3:fe:f7:d8:d6:af:
00:9b:68:8c:e3:1a:e5:bc:4f:5c:59:0b:13:89:eb:
85:95:c1:40:75:c2:1b:33:a6:5c:b3:98:e2:eb:2b:
fd:1f:4d:a1:c4:61:59:41:9a:0e:3a:53:a6:9f:75:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:4C:16:01:42:E2:E3:89:A4:0D:AF:6D:67:45:E3:05:59:BA:B8
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:11:2d:fc:99:75:5b:b3:84:69:d3:76:b6:4f:e7:ae:60:
bd:6e:05:ae:5f:6d:f6:73:4c:0b:a3:e3:1d:9d:cf:74:2c:19:
f4:25:ab:c5:18:fe:82:71:97:a3:63:28:b1:ed:f6:a2:54:e7:
08:45:2c:44:eb:1f:e8:d6:bc:bf:60:b0:52:09:a7:6e:9e:e8:
62:2e:4e:d7:be:f9:8c:ce:b3:30:da:75:58:d2:f3:e6:f8:26:
90:62:27:04:0a:e7:05:3b:8d:65:22:99:2f:e6:83:91:bb:cc:
33:e0:de:79:98:6c:9c:88:ed:af:41:d2:e7:af:b6:03:19:d0:
55:6b:13:9d:63:7f:23:41:c6:26:ef:47:9c:5c:50:5e:22:a2:
66:bc:68:6b:ef:4f:93:32:2c:31:92:e0:51:fa:41:b8:3a:b2:
dd:9c:95:66:95:53:27:76:b2:e0:b2:85:f5:24:73:34:e8:93:
a3:2b:8c:1d:29:7b:06:57:16:d8:09:92:08:72:d2:b3:2b:73:
e9:cd:b7:5a:97:e5:a8:32:86:e3:f6:36:14:6f:73:d6:42:68:
9e:2a:2a:03:d1:e3:25:b7:3c:2a:c9:a1:ae:3e:6d:bc:1a:80:
bd:1c:d0:e4:5f:7e:d4:b2:e8:af:af:fe:57:78:d6:45:a8:b1:
70:4b:bd:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2GbuI64ExqYIlUCxu0BIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjYwMTI1MTcwMDQwWhcNMjYwMTI2MTcwMDQwWjAzMTEwLwYDVQQD
EyhmMjJjNGMxNjAxNDJlMmUzODlhNDBkYWY2ZDY3NDVlMzA1NTliYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgaE97Y3kUVirumY7mHMSgd2BttJ
zAWRf9ea/aMxDcoXis3H6x6LyJbF21DmxiGnfpGKyF+ZhCG0ZxiErPa6PCcUKOpv
NrinOOCWO44iVQQkcweNNIcA6vPG/sKKwiCpwSE11tTextnKiRF+tnkksWGr/n9b
R5iWhhd4MNSBOAiOPa7Hoj9wZ4odaEpoeqSr5x8g12kO/xPR19f/KCkwQG+J8vrE
dhZBcZsL4KdmIv6VGKpTJvy845eax1/SodssLgrqi1Muh/B8gMzD/vfY1q8Am2iM
4xrlvE9cWQsTieuFlcFAdcIbM6Zcs5ji6yv9H02hxGFZQZoOOlOmn3XYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIsTBYBQuLjiaQNr21nReMFWbq4MB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbsRLfyZ
dVuzhGnTdrZP565gvW4Frl9t9nNMC6PjHZ3PdCwZ9CWrxRj+gnGXo2Mose32olTn
CEUsROsf6Na8v2CwUgmnbp7oYi5O1775jM6zMNp1WNLz5vgmkGInBArnBTuNZSKZ
L+aDkbvMM+DeeZhsnIjtr0HS56+2AxnQVWsTnWN/I0HGJu9HnFxQXiKiZrxoa+9P
kzIsMZLgUfpBuDqy3ZyVZpVTJ3ay4LKF9SRzNOiToyuMHSl7BlcW2AmSCHLSsytz
6c23WpflqDKG4/Y2FG9z1kJonioqA9HjJbc8Ksmhrj5tvBqAvRzQ5F9+1LLor6/+
V3jWRaixcEu94Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:19:27 2026 by rpki-client