This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: XcvtW1IHrIG8fLIad+2H0pAMR2paEcRcpGkj7dtHdIA=
Subject key identifier: CB:5B:D0:55:C4:69:41:D5:48:E2:ED:1E:23:1F:74:07:8F:9A:6D:CE
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 019BFA2DFB5809535E91D6E94D8906C1BC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 123A
Signing time: Mon 26 Jan 2026 12:01:15 +0000
Manifest this update: Mon 26 Jan 2026 12:01:15 +0000
Manifest next update: Tue 27 Jan 2026 12:01:15 +0000
Files and hashes: 1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: RlDtOC/RZ8WENliYOS1kZm53HKCbRLE+3I47q2Jo4Dc=)
4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:2d:fb:58:09:53:5e:91:d6:e9:4d:89:06:c1:bc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Jan 26 12:01:15 2026 GMT
Not After : Jan 27 12:01:15 2026 GMT
Subject: CN=cb5bd055c46941d548e2ed1e231f74078f9a6dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:32:e2:37:c6:4b:8a:d6:ab:ae:7a:8b:e8:
77:f4:f8:af:98:85:bd:f2:bf:b3:4d:f6:0e:22:89:
55:48:14:20:ee:2f:cc:15:8b:26:89:f0:41:bf:79:
18:9f:a2:fd:82:44:ff:b1:2c:a2:d2:e5:52:33:85:
2c:e2:12:f9:e5:ba:f1:78:7c:5c:14:e6:a6:a5:d2:
da:7f:35:38:a9:fa:65:49:2f:21:3a:57:fb:29:61:
b7:ae:58:fb:7c:be:08:76:e7:de:f2:c0:b2:5c:2d:
c7:a1:b9:4b:8f:09:58:bb:4c:e6:79:41:e2:16:80:
71:90:8a:30:14:83:e1:c7:7a:10:67:61:81:27:41:
16:14:84:2e:fc:8c:12:40:c6:86:cc:00:30:1a:fc:
75:7b:2e:36:99:92:f5:26:71:42:9b:96:fc:65:10:
6d:33:84:56:9f:b7:74:f3:84:b5:83:cb:61:82:0a:
07:cb:12:87:2e:88:41:43:5b:cc:8f:50:70:fb:c9:
43:a1:da:36:e1:ca:a4:28:aa:2d:05:b0:a1:ce:8a:
de:ff:6d:02:68:e1:51:6e:98:dc:e4:eb:98:98:81:
d7:e9:3f:cb:8d:34:7f:0a:2f:aa:d7:cc:ff:15:e9:
25:2c:74:38:2f:92:7d:3f:f3:90:3c:c8:f0:fd:6d:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5B:D0:55:C4:69:41:D5:48:E2:ED:1E:23:1F:74:07:8F:9A:6D:CE
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:7e:b9:96:dc:63:32:f8:4a:38:91:fe:61:4e:fb:26:13:
84:b5:d9:aa:e7:47:ff:80:87:8a:50:cc:d8:a7:e7:cb:eb:3f:
f5:43:e8:ff:c7:30:0d:fd:59:29:4b:ed:9f:b4:37:0e:85:61:
1c:4a:35:17:b5:04:6b:39:83:b3:79:73:cd:d2:de:47:72:a7:
07:f0:07:31:47:54:db:07:20:09:9a:a4:a4:66:e9:b2:2c:0c:
df:b0:51:c6:70:5f:69:4b:06:53:fe:a3:87:39:c4:ef:dd:63:
77:92:71:1b:25:60:c0:78:ca:b6:d9:65:d1:34:d3:60:de:e8:
c6:13:5f:f1:0c:c5:b1:5c:09:3d:e4:2c:00:1b:00:c3:2e:07:
77:8f:9e:c0:bd:12:3d:26:63:89:a5:81:33:19:c5:12:bc:5f:
bb:d4:89:ea:25:68:72:2f:88:4f:de:89:fd:ab:14:e2:7e:4d:
9b:38:86:5e:88:45:81:14:c7:70:c2:b5:7a:0f:7e:c5:f2:ca:
47:ce:4c:5d:a9:07:e5:73:9e:e1:1a:99:ce:83:2e:c2:0b:31:
4b:eb:44:ce:6e:c9:04:54:84:63:1b:cd:44:cd:40:a8:9c:d3:
d4:9c:e8:8f:0e:d1:2e:aa:26:f9:82:f0:64:b4:1a:aa:9d:40:
bb:d3:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:26:22 2026 by rpki-client