This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: rdKSidUc3p9pBRnGpwBA+mPMZJZXRcpPxMaAPEefJcE=
Subject key identifier: 60:50:35:2F:63:4E:88:B4:14:FF:AE:98:C8:FA:78:FA:91:6D:25:BF
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 019BF50733846FFD1AA63CB46A45CEBC3AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 08A7
Signing time: Sun 25 Jan 2026 12:00:48 +0000
Manifest this update: Sun 25 Jan 2026 12:00:48 +0000
Manifest next update: Mon 26 Jan 2026 12:00:48 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: 0S8k4QCBEFUNTBWFNlvwG2+QaAGmuOMigyT1GI+bUNw=)
2: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (hash: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ=)
3: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (hash: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:33:84:6f:fd:1a:a6:3c:b4:6a:45:ce:bc:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jan 25 12:00:48 2026 GMT
Not After : Jan 26 12:00:48 2026 GMT
Subject: CN=6050352f634e88b414ffae98c8fa78fa916d25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:0d:4d:25:fa:eb:ed:12:c7:3c:c4:59:24:
13:f6:5d:c9:91:33:12:eb:51:e0:fa:ca:57:6a:e7:
7f:52:6a:44:d1:54:f2:96:ee:18:72:20:a6:5d:60:
c3:c3:fd:1f:6f:43:36:c3:cd:42:45:d7:8c:75:43:
98:b8:b6:14:2a:e3:37:6e:3d:da:f2:bd:3d:af:e9:
eb:b7:97:09:49:38:c3:86:09:13:06:41:31:8e:db:
e6:32:d0:eb:1c:b6:0f:61:7a:99:20:99:00:ee:13:
61:d1:01:a8:3b:71:c3:b7:2a:62:6d:c0:87:8d:09:
87:5c:21:3d:b2:78:17:a6:61:18:ad:b4:db:c0:de:
a1:59:bc:7a:51:38:e9:8c:9d:b5:7a:06:86:f2:e0:
9f:ac:17:4e:ba:ce:a8:7d:a7:44:34:62:24:3b:3f:
9b:47:c5:76:0b:87:70:9b:7d:ee:fe:24:22:61:1e:
d3:6b:10:48:ca:81:79:58:d6:e6:a4:4f:ec:13:42:
da:86:1c:f8:c6:09:ea:8a:50:03:3c:3c:62:86:18:
e2:d2:0c:e0:79:da:ea:f8:bf:2c:ab:28:f4:be:22:
c2:f0:5f:8c:72:81:a2:af:14:1d:56:05:ff:b7:a7:
81:02:f1:19:d9:91:ad:3d:d9:a6:5a:fd:ea:07:83:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:35:2F:63:4E:88:B4:14:FF:AE:98:C8:FA:78:FA:91:6D:25:BF
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:29:23:62:57:59:1c:e4:01:00:25:fd:30:94:3d:fa:d2:20:
d6:cd:28:dd:e9:64:99:51:92:4f:f5:43:bb:4f:f1:e9:5f:5e:
97:9a:6a:25:38:88:60:18:0b:9e:ff:75:b2:b6:12:77:89:d9:
05:55:2c:ba:82:2b:35:97:1c:ff:25:04:3a:5e:34:6a:bb:52:
dc:56:1e:4e:7b:aa:fd:84:5a:c9:b5:f4:6d:a4:dd:f7:83:8d:
46:af:a9:fb:08:1c:13:1e:f1:d9:21:b6:f3:1e:eb:f7:8b:ec:
8c:60:d4:ec:62:96:bd:f6:d8:b6:3c:e8:40:81:b2:8f:93:a5:
bc:00:4d:c2:50:18:9d:60:cc:07:af:46:03:ba:9b:ba:b3:50:
25:f0:b1:75:01:ea:36:50:5c:f7:d2:b6:53:82:67:12:e0:aa:
07:99:b0:4e:2e:ec:a6:14:8d:41:da:51:f3:95:94:eb:71:b3:
7d:a6:27:bb:77:bb:34:08:bf:d0:4f:9c:df:70:a2:c4:88:42:
a7:f9:63:26:0b:d7:97:b1:bb:99:6a:51:00:dc:43:d4:64:a1:
ed:29:7e:75:f7:bd:6c:05:70:36:d4:5f:c3:92:dc:97:76:6e:
b7:1f:1d:46:a6:b7:96:27:f2:05:90:87:2a:39:37:4a:0c:af:
e1:65:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:17 2026 by rpki-client