This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: xcnv2+BGYQaPUIiRuRJPE3mtwhA8euyv1NJ5Yx48NW0=
Subject key identifier: 39:50:3D:7E:A9:60:A7:9B:51:E0:3B:EA:93:B8:EA:9B:81:59:01:8A
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019BF72D32B9F84438BCDCB877BDC74C5811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 14FE
Signing time: Sun 25 Jan 2026 22:01:32 +0000
Manifest this update: Sun 25 Jan 2026 22:01:32 +0000
Manifest next update: Mon 26 Jan 2026 22:01:32 +0000
Files and hashes: 1: 7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa (hash: TjqR9pBqeAaKXzawGJajC/5EzIOxqUpNkIWNRPKzQiY=)
2: 9_XCzJVQ0vHT8hA7DULO66uGe5o.roa (hash: cJQG6xW1gdrrjMHUKHp2S/TQBEdZhKtS4GkWHUfZeGc=)
3: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=)
4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=)
5: ay0VUntTWjhODm52u9TFTTH4EJw.roa (hash: 7gFOBHTqvfcaglUxfgHe1x48kCbMp0iTpGgti6zIr4k=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: JpLEY4NbB3FxgyGeFntIPVTxjTyMnovxaTk1rmxcXG8=)
7: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=)
8: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=)
9: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=)
10: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:32:b9:f8:44:38:bc:dc:b8:77:bd:c7:4c:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 25 22:01:32 2026 GMT
Not After : Jan 26 22:01:32 2026 GMT
Subject: CN=39503d7ea960a79b51e03bea93b8ea9b8159018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:f9:89:39:82:6a:b2:c8:13:d4:da:c6:cd:
58:8e:e5:de:40:6d:49:95:02:88:78:5d:34:f2:a1:
34:37:ca:60:56:62:7b:2b:39:00:a9:da:c0:89:80:
66:b0:87:99:9c:6b:eb:95:89:43:6d:3e:25:6c:11:
09:78:ca:8a:56:f8:9a:8c:84:3d:e9:0b:fe:25:d5:
e7:66:32:9e:1c:f4:b6:b6:c3:00:07:19:b8:90:6e:
19:c5:04:21:d8:1a:29:63:a0:41:b5:43:4d:d9:95:
48:21:68:19:e8:b6:27:61:a8:d6:0a:f1:49:82:c2:
0f:7a:76:b5:a5:29:fa:77:c5:03:5a:c5:c1:7a:70:
e1:60:a2:81:b0:b7:3c:99:0c:6b:7f:8e:54:51:26:
7c:6a:51:24:74:99:f7:88:cb:ce:e1:76:24:38:8c:
e8:af:01:2a:35:d5:e5:d6:87:09:28:1d:7e:27:11:
43:f6:af:44:29:bc:3f:07:d2:5e:19:83:37:b8:71:
45:b8:9e:15:13:7e:81:07:c2:e0:17:ec:ad:b0:55:
22:38:75:d6:ae:ce:7b:56:e7:d6:8f:a8:04:66:96:
5a:03:c7:0c:59:40:e5:e5:2e:cd:e4:1c:af:4f:90:
15:99:db:27:2f:9f:43:dd:34:56:bd:29:6c:1a:c5:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:3D:7E:A9:60:A7:9B:51:E0:3B:EA:93:B8:EA:9B:81:59:01:8A
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5a:94:24:e7:c6:fd:9e:e9:0e:06:cf:d2:69:d6:41:28:a5:
32:b2:f7:cf:e7:f3:e1:c8:21:b7:84:ec:1f:06:0d:ef:ab:fa:
23:cb:b9:35:9d:34:45:03:3d:05:24:cc:b4:26:17:7b:b8:9a:
af:25:e1:16:54:8b:d5:68:62:10:c9:57:87:80:6d:cf:37:b9:
fa:64:4a:83:38:d8:16:e7:de:cc:e3:ba:77:2d:ad:f6:e9:5f:
2b:a7:a4:63:2b:80:50:4c:61:45:f0:af:fd:32:c8:9b:44:fb:
5d:00:fe:01:f2:ed:0a:c2:07:c0:f1:0d:a9:31:c7:69:6e:4f:
f6:8e:d8:f4:6c:f7:67:2c:cc:18:cb:a1:04:4c:c9:d3:8a:98:
aa:1e:13:6c:fc:60:63:9a:fd:6c:7b:e0:72:dc:43:95:e8:fc:
2b:80:79:a1:3e:a5:02:bf:1b:1f:e1:5b:ef:80:c2:22:41:b4:
b4:6e:30:a8:2f:21:2c:0a:48:99:bd:42:23:1a:34:be:13:7d:
8d:ec:c1:ca:79:94:43:76:6a:4b:eb:78:8f:6a:51:36:19:89:
c0:d9:da:15:58:52:87:81:b0:97:c3:bd:0f:29:28:59:fc:39:
ea:aa:dd:c0:0c:8a:01:65:f1:ae:74:84:51:04:66:00:3e:96:
e3:46:62:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LTK5+EQ4vNy4d73HTFgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjYwMTI1MjIwMTMyWhcNMjYwMTI2MjIwMTMyWjAzMTEwLwYDVQQD
EygzOTUwM2Q3ZWE5NjBhNzliNTFlMDNiZWE5M2I4ZWE5YjgxNTkwMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoj5iTmCarLIE9Taxs1YjuXeQG1J
lQKIeF008qE0N8pgVmJ7KzkAqdrAiYBmsIeZnGvrlYlDbT4lbBEJeMqKVviajIQ9
6Qv+JdXnZjKeHPS2tsMABxm4kG4ZxQQh2BopY6BBtUNN2ZVIIWgZ6LYnYajWCvFJ
gsIPena1pSn6d8UDWsXBenDhYKKBsLc8mQxrf45UUSZ8alEkdJn3iMvO4XYkOIzo
rwEqNdXl1ocJKB1+JxFD9q9EKbw/B9JeGYM3uHFFuJ4VE36BB8LgF+ytsFUiOHXW
rs57VufWj6gEZpZaA8cMWUDl5S7N5ByvT5AVmdsnL59D3TRWvSlsGsXA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlQPX6pYKebUeA76pO46puBWQGKMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFqUJOfG
/Z7pDgbP0mnWQSilMrL3z+fz4cght4TsHwYN76v6I8u5NZ00RQM9BSTMtCYXe7ia
ryXhFlSL1WhiEMlXh4Btzze5+mRKgzjYFufezOO6dy2t9ulfK6ekYyuAUExhRfCv
/TLIm0T7XQD+AfLtCsIHwPENqTHHaW5P9o7Y9Gz3ZyzMGMuhBEzJ04qYqh4TbPxg
Y5r9bHvgctxDlej8K4B5oT6lAr8bH+Fb74DCIkG0tG4wqC8hLApImb1CIxo0vhN9
jezBynmUQ3ZqS+t4j2pRNhmJwNnaFVhSh4Gwl8O9DykoWfw56qrdwAyKAWXxrnSE
UQRmAD6W40ZiRQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:58:11 2026 by rpki-client