This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier: LALFWx8tmS7/3HSWx0HwJspTaBOcV9u/2QLVjAdOc2k=
Subject key identifier: 90:7B:80:1D:ED:29:C1:CB:9B:DF:78:67:CF:56:2C:FC:A9:2B:F7:5B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019BF2E230C90E7B954E9BAFF96A3335C25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number: 17EE
Signing time: Sun 25 Jan 2026 02:01:08 +0000
Manifest this update: Sun 25 Jan 2026 02:01:08 +0000
Manifest next update: Mon 26 Jan 2026 02:01:08 +0000
Files and hashes: 1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=)
2: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=)
3: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=)
4: 3qpvQqdQ3EDcZoaGOx2riVpcq8c.roa (hash: qTNQamHZ5asC3z3/r7JuROMu5QHj7RNHNTAIVoifaqU=)
5: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=)
6: 9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa (hash: oEqQojHh2aVK9IWAizqhwBRsxK4M9mlqa6pebuySDfE=)
7: AYC1piyu_K4ZhGKQg7A8mJ43fsA.roa (hash: ncXVxHVxZ9wYi/bTO+uuRSfatAGsH5pfP5JojKWGVfg=)
8: Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa (hash: r/oRyoO8ZH4/jVinfaTnLetdrLoBZnt11pFEZIFP7VY=)
9: DvPTjOqlVSzNmVM6OOe5niz3dOM.roa (hash: d/5dKSEtJ17pNb1brsQ69f7rjX4Bvuri7lYKe2ywqec=)
10: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: rlQIFTzMDNw2f7zQ6WQyIwcfui33ZbTwoEMeaYJIgpg=)
11: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (hash: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ=)
12: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=)
13: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=)
14: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=)
15: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=)
16: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=)
17: Z3V9TUK8r_FHToolycVMTDaUt6s.roa (hash: P5lyG9E35XlKCrzdnPlPZUSNkm6dswkn04uQqnS0qVI=)
18: ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa (hash: q9igcRUqon9S/2eYkbsUmIWEB+JdxtvBxWbuRQimv3Y=)
19: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=)
20: n-5zEzSs351qrnGuBMspmFZCEI0.roa (hash: MYJupN5IEmr6ZufnYdbMso7OMy/8DIghG/NxlYmVwKI=)
21: okyZecfvIRqZODTkhqFVtVBqWlo.roa (hash: JURGYJBnqyW45CKjgzH7wE+F8JuOD/bJVrdaAV1cAA4=)
22: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:30:c9:0e:7b:95:4e:9b:af:f9:6a:33:35:c2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 25 02:01:08 2026 GMT
Not After : Jan 26 02:01:08 2026 GMT
Subject: CN=907b801ded29c1cb9bdf7867cf562cfca92bf75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:36:21:e4:66:25:ae:5e:eb:0e:92:4b:ea:
c2:f4:3e:4a:9e:d4:4d:7e:33:dc:e1:2d:bc:b7:f1:
07:d0:c8:75:79:61:88:4e:28:a5:7b:3c:5a:14:09:
79:22:3d:b5:3d:b3:d5:6c:8b:db:5a:ca:03:d5:8d:
3c:c9:2f:16:d6:ac:df:4d:e3:4c:04:d1:77:59:a7:
df:04:8f:53:ce:42:27:dd:dd:27:61:22:a7:0b:ed:
f7:88:8a:18:3e:9b:86:65:b9:5f:34:91:61:ce:0b:
c7:85:9b:9f:87:13:b9:9b:34:9d:72:f1:75:44:74:
f7:c1:ea:14:bb:8d:13:2b:5f:07:6c:52:7c:02:d8:
f0:b2:3c:b0:6e:9c:34:55:c2:69:cf:63:4d:e9:aa:
46:56:c5:76:3d:2c:77:c1:f1:32:80:02:0d:5d:8e:
46:a5:c7:e6:81:0b:40:e4:ab:07:2d:f2:ce:10:67:
60:63:56:c2:b2:68:e0:de:4b:1d:5a:79:4e:e2:e5:
09:3f:5e:29:ae:16:13:15:97:bd:9f:91:7a:dd:ba:
46:66:3c:08:1d:87:7b:f6:b5:d8:8f:b2:f4:9d:08:
71:90:a9:25:ce:aa:a7:51:57:c7:5a:e5:e3:87:ad:
fa:7b:75:ad:5b:fe:2f:22:b8:32:6a:f2:8c:fe:11:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:80:1D:ED:29:C1:CB:9B:DF:78:67:CF:56:2C:FC:A9:2B:F7:5B
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:96:d1:7b:a9:8b:9b:2c:1a:e5:eb:7c:a6:b2:58:f4:5a:df:
f1:9f:74:72:c3:b9:f4:c3:9d:fc:86:09:46:00:cc:2d:b4:ec:
96:ee:47:60:25:97:8e:cb:8b:f7:5b:2a:27:0e:53:ea:6e:40:
e9:99:49:e3:ed:5c:8b:2e:9e:04:ce:de:85:d1:aa:de:9c:55:
e1:59:73:00:90:d4:95:d9:d5:17:c0:01:8c:0c:13:cb:69:0e:
91:95:f9:2b:61:9f:5b:cb:c7:de:a5:e1:28:30:60:6b:ed:cf:
da:9b:16:dc:ce:ce:f8:6e:7a:57:3c:be:87:b7:c7:68:40:23:
a4:fa:ca:3d:2a:19:26:a5:e2:64:c2:30:44:1f:96:3d:0e:fc:
09:61:f7:82:3a:40:2d:42:77:36:54:df:9e:4d:b0:15:5c:7e:
e5:3e:0a:3a:39:84:e9:81:4f:73:f2:3b:38:03:88:1c:9f:25:
49:80:65:d0:31:74:ac:54:d1:0f:dd:39:17:bc:40:eb:b7:a3:
c1:ac:a3:73:50:07:f3:f8:14:42:f3:77:df:3e:c6:64:d7:26:
02:7c:b3:6a:b6:88:56:05:ad:5f:69:b9:84:30:72:89:85:e6:
e8:0f:9a:e9:2d:61:af:d3:ff:7b:bf:f2:e8:1a:48:3f:ff:01:
d8:ec:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:09 2026 by rpki-client