This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json)
Hash identifier: ShtVB/CeukUQex4Ch2YZ2vB+QeeHrcTpAZWONWkGsTk=
Subject key identifier: E9:D4:ED:92:92:01:44:44:C5:DB:DD:74:70:7D:65:C0:0D:D3:49:7B
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019BF507494608240EF93261AE7B93E95709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
Manifest number: 174B
Signing time: Sun 25 Jan 2026 12:00:53 +0000
Manifest this update: Sun 25 Jan 2026 12:00:53 +0000
Manifest next update: Mon 26 Jan 2026 12:00:53 +0000
Files and hashes: 1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=)
2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=)
3: GiuMv5nemcx-ByyPnBErTP1hwJk.roa (hash: 9Q38r6gXw/wEjKR2jbS1j1CDpeXCBsrsB04HQvgKsPI=)
4: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (hash: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o=)
5: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=)
6: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=)
7: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=)
8: agNWFJ6lYT9cYM9QENETvOLZPI0.roa (hash: F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=)
9: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=)
10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: P5QZv+H02gyLAOIHjjvkiaOgyc1HqD+PNKTX5/K5mEY=)
11: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=)
12: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:49:46:08:24:0e:f9:32:61:ae:7b:93:e9:57:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 25 12:00:53 2026 GMT
Not After : Jan 26 12:00:53 2026 GMT
Subject: CN=e9d4ed9292014444c5dbdd74707d65c00dd3497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:5b:4b:03:26:a0:b1:0d:6e:65:ca:ba:43:
0b:ec:32:a3:38:eb:89:24:29:d2:3d:9e:f2:9f:91:
ea:56:19:e1:41:6e:ba:9a:14:05:5f:f6:96:b7:b6:
ba:35:29:f8:b0:45:22:2e:f5:12:01:a2:3a:54:6c:
af:d5:07:ea:27:5d:e1:36:a4:9c:22:4e:f8:7f:ef:
65:a8:d2:6c:c2:4a:b4:a2:f3:6e:11:85:31:8f:5e:
9c:2b:e6:89:0d:fa:bf:be:86:4b:62:33:9e:e0:42:
23:d4:a0:fa:31:4d:fa:52:cc:65:65:77:01:7a:52:
95:09:38:72:f4:65:69:6e:aa:ed:9d:48:b4:be:f8:
82:96:c2:9d:f2:62:97:3a:ba:10:e7:2c:ca:69:43:
f9:9b:71:89:33:78:f4:d6:db:e4:39:db:b6:76:f7:
4a:d9:61:53:28:6d:a8:91:b1:20:72:a9:a8:67:13:
f3:d8:76:21:a7:8b:76:35:98:5a:69:d9:4b:04:33:
94:b7:32:e1:3b:32:17:de:ca:1d:81:73:91:a7:62:
58:0d:8b:5d:36:b8:bf:c2:1f:78:d9:74:54:77:a9:
15:1d:cd:f9:6b:20:1f:c8:7e:99:47:b9:9a:0d:cd:
31:6d:65:e3:9f:79:e2:32:5d:d6:a2:32:f1:31:59:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D4:ED:92:92:01:44:44:C5:DB:DD:74:70:7D:65:C0:0D:D3:49:7B
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:91:9f:b0:9b:48:31:d4:4f:d8:17:61:5d:2a:5f:1f:7e:f4:
de:48:28:76:de:46:a7:3b:b7:71:b1:37:b2:d5:15:1a:a3:a3:
25:46:e3:db:3a:a8:2e:6d:f5:ff:7f:95:9a:e6:4d:8c:1f:09:
cd:bf:b7:8c:41:6f:59:66:19:52:2f:3b:e3:63:c5:95:50:2e:
8e:c3:72:c9:37:19:c3:8b:a8:21:b7:7a:b7:88:cb:e3:97:00:
73:4d:67:a0:9b:58:42:1d:e1:0a:8d:a1:11:0e:05:68:15:b0:
b0:0b:5c:cc:cb:f9:3a:a2:da:d9:c3:76:c1:ff:98:22:75:81:
b6:e1:02:ff:d6:52:bb:08:f3:a1:9b:71:28:32:70:fa:d6:d3:
95:10:4e:a5:5f:d8:89:af:da:bd:63:3b:e6:14:15:2c:d6:c0:
08:0f:6b:2f:c2:86:7f:45:72:d0:08:80:b7:c3:93:51:7f:b2:
e9:94:d4:85:72:2b:e4:cc:40:6e:c6:22:95:b9:78:e7:64:74:
8d:72:7e:df:28:de:9e:8c:95:1c:b0:30:53:04:a9:c4:b0:30:
01:aa:c9:04:80:41:14:be:c3:52:3e:88:9c:c4:ad:21:90:db:
df:22:b2:db:1b:e8:b4:91:80:5d:86:35:d1:d3:9c:54:02:54:
49:e9:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:24:00 2026 by rpki-client