This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: juzw7N7BGHlUCcN/jms5Fix6Zga/BkANZf24mdB/6y0=
Subject key identifier: 64:BA:88:DC:73:D4:FB:72:CE:55:26:5B:36:BA:92:0E:88:6E:61:B6
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019BF42BEABFC2046FF75CBF66FE0401EA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 098E
Signing time: Sun 25 Jan 2026 08:01:17 +0000
Manifest this update: Sun 25 Jan 2026 08:01:17 +0000
Manifest next update: Mon 26 Jan 2026 08:01:17 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: j/zztPNiDGLpmfxd1esvIBvPuM6JvpcGC1rsxpAo6hQ=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2b:ea:bf:c2:04:6f:f7:5c:bf:66:fe:04:01:ea:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Jan 25 08:01:17 2026 GMT
Not After : Jan 26 08:01:17 2026 GMT
Subject: CN=64ba88dc73d4fb72ce55265b36ba920e886e61b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:c5:dc:6f:0c:af:61:dc:36:87:d5:20:80:
1d:6c:98:f0:54:47:8b:7e:39:5a:7e:3d:e5:2d:d6:
a2:cd:21:bc:3b:11:af:e4:2a:9c:a6:8a:0d:9b:c9:
1a:90:05:92:f4:b9:9b:c8:5f:07:6e:76:1a:44:f3:
e0:68:23:d9:c9:8e:b3:7c:d2:80:10:58:cc:15:3e:
d1:20:8b:f7:05:96:4e:0b:91:12:05:70:41:26:55:
4c:d0:1e:23:1c:df:45:00:24:fb:d5:56:1f:38:fe:
e6:3b:ad:7a:ea:84:7e:72:af:32:73:bb:e3:b3:2c:
c5:aa:ed:bf:d7:aa:86:31:96:4e:ad:b3:ae:db:2a:
57:71:20:29:50:34:a8:9f:c0:f4:d3:30:0b:dc:5a:
77:23:3b:2b:33:39:90:d3:f7:22:af:39:79:63:0b:
88:55:2e:a8:2f:60:98:e2:7e:ef:d1:28:b3:1f:c8:
6b:41:cf:3e:40:d0:cd:9c:5e:df:b9:ae:df:5a:4d:
cd:36:8a:03:02:32:12:df:fc:7f:90:2a:55:05:b6:
41:5e:72:9b:05:27:8c:e1:ff:4b:34:97:b3:f3:0e:
06:9c:7a:00:39:b5:59:f4:0a:7c:bf:cf:80:32:ba:
86:e3:02:80:89:c2:34:f9:b6:e2:5e:55:79:af:18:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:88:DC:73:D4:FB:72:CE:55:26:5B:36:BA:92:0E:88:6E:61:B6
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9e:1e:cc:b7:a0:7d:b9:16:4a:9a:87:0d:e4:40:7f:22:76:
2e:be:c7:84:11:dd:2c:81:eb:56:21:78:fa:16:61:31:bc:ed:
8d:ca:98:e4:71:59:4e:6c:42:19:11:1a:c7:e3:88:4f:38:ff:
4d:09:46:a7:9e:4e:d8:2f:e5:f9:b4:10:a7:c5:20:c9:61:92:
4a:56:ec:50:72:64:dd:1b:78:b3:fe:de:18:b7:2c:c2:b1:bf:
78:fa:b6:e1:49:52:48:27:28:f4:bc:1f:82:12:7a:dc:e2:04:
38:04:dd:f9:20:7d:42:ff:5f:9e:33:27:32:0a:28:01:e0:ff:
06:b3:90:8a:6a:42:10:0a:a4:6e:be:b6:f4:60:cc:89:a4:67:
b5:be:a7:8c:a4:3a:68:bf:d9:d2:52:0c:18:f6:b6:a9:d3:fc:
a1:6a:66:c8:ea:b5:03:4b:b4:fe:5b:ef:0c:01:e6:ae:c1:95:
23:30:68:0a:91:5f:80:ad:df:bb:aa:2d:04:61:5f:54:a6:ef:
7c:02:05:82:af:f2:23:76:f9:6a:21:1f:6a:7f:85:5c:a4:68:
90:f4:4a:86:b7:eb:85:eb:cc:24:17:7e:11:17:a5:05:8a:4a:
e0:65:85:b6:b3:d0:c0:a2:d8:09:cd:45:eb:07:c2:be:69:92:
1f:f0:62:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:48 2026 by rpki-client