This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: 8BF+QnGzRpb2uogBcrm22H0dZ4Fyj2ICVYyxccPhkDc=
Subject key identifier: 3D:70:18:45:B1:2C:C9:97:4D:1D:29:B5:2C:F3:07:32:31:DB:43:25
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019BF5E30C7A014086DC642858FE0632B92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 17E7
Signing time: Sun 25 Jan 2026 16:00:56 +0000
Manifest this update: Sun 25 Jan 2026 16:00:56 +0000
Manifest next update: Mon 26 Jan 2026 16:00:56 +0000
Files and hashes: 1: CX4SjTdi-WVaIel19sRIG6HUUUw.roa (hash: UDsW/lOEequNbC4ieUO0oqmh57jt4K+cQMjTjOFaxBs=)
2: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: l7WUOTl6ln4fH6oh1K4mxQHTKaNJdFiattJjP93at4g=)
3: Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa (hash: 3Z8PMQ8sh56/aP3O9W1H0byuePE1WYuRdcvV9nD8Q2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:0c:7a:01:40:86:dc:64:28:58:fe:06:32:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Jan 25 16:00:56 2026 GMT
Not After : Jan 26 16:00:56 2026 GMT
Subject: CN=3d701845b12cc9974d1d29b52cf3073231db4325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:15:2d:f9:22:53:5c:88:33:7c:db:54:98:
0a:46:35:58:ad:11:35:20:ce:25:d6:ea:84:60:8d:
47:7e:14:83:ea:64:c7:13:4a:c8:4f:01:7d:fa:71:
84:9b:b8:91:4a:1e:cc:71:ba:52:6f:cb:20:bf:83:
db:a5:7e:37:ed:b6:c6:38:06:15:84:3c:2e:05:18:
2d:90:20:46:d6:46:e7:fc:c1:5d:65:ca:d3:b8:dd:
0c:af:5f:2e:cd:e0:ed:32:d2:9e:08:0c:f0:e7:bd:
2f:84:d0:88:49:41:f8:bc:5d:40:2e:99:00:4d:70:
78:3f:63:09:e5:27:45:e3:be:ab:0f:b8:01:85:c6:
e3:c5:ec:3c:49:c3:70:39:99:1e:93:07:44:27:b5:
5a:69:d3:0b:bd:3b:02:bb:eb:28:ad:23:f4:55:3d:
2b:55:91:c1:9a:51:68:c9:ac:27:ca:19:2e:83:a8:
ab:51:9c:0c:43:cd:40:05:15:d7:e8:43:98:7f:a3:
f8:7a:7b:21:b4:e4:25:02:73:47:0d:f0:1a:ea:84:
b0:7c:57:0c:8a:1d:ae:79:c5:78:68:d2:b6:03:bf:
37:81:14:dc:8e:c0:d8:dd:b3:93:e3:4d:10:7e:9d:
68:b4:34:4f:2b:d8:5e:54:de:bf:9d:25:41:31:a5:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:18:45:B1:2C:C9:97:4D:1D:29:B5:2C:F3:07:32:31:DB:43:25
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:75:38:f9:0b:ea:9f:de:1d:3d:6b:e4:91:b2:11:66:a1:3d:
a3:e6:fe:aa:27:be:ce:2e:8f:f5:e3:49:8b:b0:5b:6e:3f:53:
0a:f9:e8:2d:a7:83:e3:27:90:66:2c:9c:db:80:f3:71:8e:fc:
0a:d0:8c:04:0a:c9:fa:68:25:b2:5f:12:7a:7c:10:dd:b6:26:
88:85:fa:79:97:63:94:71:02:f0:85:13:0f:6f:53:34:66:ca:
20:74:f3:a4:ce:2e:10:08:ae:8f:08:4d:bb:c2:43:7d:89:a7:
e3:32:49:5c:c7:51:3a:21:98:b0:7b:92:87:4e:18:b8:62:d9:
ae:c8:df:7c:fa:41:cf:c9:ab:f2:99:2b:12:12:1e:d1:ff:09:
38:b6:75:10:08:b9:d1:f3:74:06:c8:a5:a4:9a:dd:ba:1b:45:
93:4f:c0:48:81:e6:99:b5:74:ed:6b:70:6a:96:1e:5f:89:c2:
59:17:e9:68:ef:88:99:61:9f:b6:c9:d8:53:f8:90:f5:be:f1:
17:58:0d:75:55:cf:f2:bf:47:28:a2:2f:09:fc:b2:9b:1f:41:
4b:0f:75:30:9c:e0:fc:ea:73:d0:9e:0a:3f:8f:c1:08:0b:43:
ca:ee:d0:b4:2f:ae:b9:76:68:3f:c2:95:f2:e8:f1:3c:f2:f2:
71:b9:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:58 2026 by rpki-client