This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: 3uBC8QYn6xpdO39y+mZlEzK4jfAdRQRJTssRHac0GUM=
Subject key identifier: 63:F6:70:9C:BC:92:2F:19:8A:25:81:C6:51:9D:48:13:A4:E2:F6:CF
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 019BF6BEC791E01EC40E709E7B2ECC2C0BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 17EB
Signing time: Sun 25 Jan 2026 20:00:56 +0000
Manifest this update: Sun 25 Jan 2026 20:00:56 +0000
Manifest next update: Mon 26 Jan 2026 20:00:56 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: sRlC+MF3ch4SmVnHgkLRYNeaCCAZrsj71xICFz4dEc8=)
2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:c7:91:e0:1e:c4:0e:70:9e:7b:2e:cc:2c:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Jan 25 20:00:56 2026 GMT
Not After : Jan 26 20:00:56 2026 GMT
Subject: CN=63f6709cbc922f198a2581c6519d4813a4e2f6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:84:83:33:f2:1a:f3:f4:5b:fa:29:0d:15:
9f:5a:df:3c:95:fc:b7:75:65:ad:1f:01:fe:b7:22:
e7:ae:10:b1:60:63:a4:68:54:6c:2a:d1:00:6a:4a:
cd:eb:99:f2:b1:b9:f5:bb:77:d4:73:3e:df:b7:e5:
c3:9b:db:86:6d:2d:c5:11:97:dc:d3:00:17:6f:6e:
97:bf:f7:4e:6e:1c:f7:21:6f:7e:3c:f9:e4:f1:3b:
ea:25:14:14:15:87:b2:18:71:c8:8d:0d:5a:60:96:
0b:90:e7:47:5f:4a:d7:40:76:c3:4a:15:f3:70:4f:
4e:db:75:44:d4:8a:68:f6:d7:03:54:1d:45:80:bb:
87:19:b4:61:fd:03:87:74:44:61:cd:58:e1:b5:c3:
0e:47:36:35:07:11:0d:3a:17:c0:38:24:68:47:08:
ee:62:f0:1a:4a:ab:51:a4:8e:f2:a2:52:51:56:42:
f4:27:7b:b7:14:4c:62:19:9c:0f:19:b8:50:cf:9c:
a1:40:58:e6:38:58:c4:d9:b2:d3:87:63:58:45:af:
94:15:d0:d2:a6:99:28:87:f7:b6:89:62:ea:5f:90:
b5:14:c8:f9:f9:a2:cd:fb:aa:f9:7f:9f:da:2f:43:
66:78:05:88:51:a3:ba:fd:d9:d1:bf:0d:93:89:be:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F6:70:9C:BC:92:2F:19:8A:25:81:C6:51:9D:48:13:A4:E2:F6:CF
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:28:5f:51:89:9b:30:bb:f1:3e:cb:b5:63:8b:fb:e0:19:7b:
cc:41:f2:81:d8:f0:88:49:ea:61:75:d3:aa:52:14:4f:c0:c7:
c2:81:32:99:7a:aa:a2:d6:a7:6b:69:67:bf:8d:cd:fc:65:0c:
62:43:4c:3d:2e:36:74:8f:1a:4b:b8:1e:41:31:57:39:06:20:
ef:8e:b6:6e:14:40:88:80:2d:15:48:27:30:5f:db:e7:d0:8a:
3e:ee:2d:0c:69:c4:2c:b9:03:76:28:54:60:20:f8:b9:70:53:
22:7a:0b:c7:39:d6:99:68:4c:f0:c7:2e:da:f6:3d:41:88:31:
30:a7:c5:9d:c1:c5:7d:4a:35:21:82:72:9b:88:ba:95:26:87:
6d:92:90:4e:32:5e:31:2a:de:37:d3:56:be:68:ea:62:92:91:
b6:46:13:96:42:60:98:55:14:bc:ff:7b:16:f1:fb:78:70:e1:
93:dd:21:47:fa:3a:4c:45:7f:48:bd:a3:bf:2f:aa:20:11:44:
00:85:f5:f4:b8:0f:34:95:6a:28:fe:6c:dd:a0:9e:21:ce:f8:
0b:4c:6a:71:5a:69:c0:c6:b2:3d:02:b0:45:ca:ae:3f:a4:c9:
35:b1:5e:04:ce:e0:42:34:c0:31:26:3f:1f:58:a5:8d:0a:05:
16:4d:13:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vseR4B7EDnCeey7MLAvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjYwMTI1MjAwMDU2WhcNMjYwMTI2MjAwMDU2WjAzMTEwLwYDVQQD
Eyg2M2Y2NzA5Y2JjOTIyZjE5OGEyNTgxYzY1MTlkNDgxM2E0ZTJmNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKSEgzPyGvP0W/opDRWfWt88lfy3
dWWtHwH+tyLnrhCxYGOkaFRsKtEAakrN65nysbn1u3fUcz7ft+XDm9uGbS3FEZfc
0wAXb26Xv/dObhz3IW9+PPnk8TvqJRQUFYeyGHHIjQ1aYJYLkOdHX0rXQHbDShXz
cE9O23VE1Ipo9tcDVB1FgLuHGbRh/QOHdERhzVjhtcMORzY1BxENOhfAOCRoRwju
YvAaSqtRpI7yolJRVkL0J3u3FExiGZwPGbhQz5yhQFjmOFjE2bLTh2NYRa+UFdDS
ppkoh/e2iWLqX5C1FMj5+aLN+6r5f5/aL0NmeAWIUaO6/dnRvw2Tib7d7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP2cJy8ki8ZiiWBxlGdSBOk4vbPMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0
LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhChfUYmb
MLvxPsu1Y4v74Bl7zEHygdjwiEnqYXXTqlIUT8DHwoEymXqqotana2lnv43N/GUM
YkNMPS42dI8aS7geQTFXOQYg7462bhRAiIAtFUgnMF/b59CKPu4tDGnELLkDdihU
YCD4uXBTInoLxznWmWhM8Mcu2vY9QYgxMKfFncHFfUo1IYJym4i6lSaHbZKQTjJe
MSreN9NWvmjqYpKRtkYTlkJgmFUUvP97FvH7eHDhk90hR/o6TEV/SL2jvy+qIBFE
AIX19LgPNJVqKP5s3aCeIc74C0xqcVppwMayPQKwRcquP6TJNbFeBM7gQjTAMSY/
H1iljQoFFk0Tag==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:23 2026 by rpki-client