This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: r5xG8zxdEJe47GCBBm9hYjobZs4KzRgY0C5KNOE8F2k=
Subject key identifier: 64:8C:79:2E:EC:73:95:2D:29:49:5B:1D:0A:6D:B6:B2:AD:18:BA:6F
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019BF5AC483E8B30B2DA0A91FB11D2D27D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 1803
Signing time: Sun 25 Jan 2026 15:01:06 +0000
Manifest this update: Sun 25 Jan 2026 15:01:06 +0000
Manifest next update: Mon 26 Jan 2026 15:01:06 +0000
Files and hashes: 1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
2: 8Z2E2Cqzk4y0-GvrjpUMoQrCJZQ.roa (hash: 3IGS/Th+5XuXfhPqqj6fRqktsHtiN3hRa/vgu2EjrnY=)
3: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
4: Q8YjH-KEhi0YFPFlzjh9_cDbreg.roa (hash: ix52vy5xhi9iMoksxTf+YBtBRpAwBJgV0/wqlHCo1Yk=)
5: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
6: XLK6rvPCrTiHJxhhke2BXfXKHZ4.roa (hash: wVBhMIUqJK/ATDLTX876CNHfRKj1peU1SKo+/YZpCjE=)
7: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
8: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
9: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: dihlyHsm0YT196t+ryJvfrX3YJan00bpkzry9ieT5x0=)
10: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:48:3e:8b:30:b2:da:0a:91:fb:11:d2:d2:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 25 15:01:06 2026 GMT
Not After : Jan 26 15:01:06 2026 GMT
Subject: CN=648c792eec73952d29495b1d0a6db6b2ad18ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:13:dd:ae:b0:3f:1f:02:59:ce:18:1c:05:
05:b4:72:d8:1a:a2:25:57:cc:4a:ee:f6:06:ad:b7:
65:a1:f4:7d:3b:e0:69:3b:4f:9c:7c:f0:65:f3:fc:
79:26:27:6a:4b:81:96:bd:4c:ea:e5:09:89:59:c9:
4e:1d:ae:a6:5e:b3:54:4d:3f:a5:65:34:af:32:91:
e4:f0:1e:a7:9c:a2:34:14:6b:fd:2c:38:93:6b:d2:
c9:de:81:46:70:e3:c6:1a:2a:61:a9:9c:7a:c8:e4:
ee:99:90:70:7c:c5:41:4b:cf:af:73:54:6e:67:fe:
26:82:96:14:1c:98:80:df:25:b9:5c:8b:5d:4e:28:
7f:77:98:87:28:c5:76:bf:93:42:27:90:cd:c3:99:
a6:e2:96:8e:26:a0:20:49:6d:59:8a:63:c3:b2:bd:
4e:3e:d3:b1:1d:56:7b:b8:00:d9:49:60:69:20:97:
69:c8:0b:08:55:32:62:4c:ab:2b:29:10:31:1a:20:
cd:ea:13:9a:6b:c0:6e:30:d1:7d:f0:b2:aa:0f:eb:
b2:a1:d1:b4:80:d5:d2:75:0e:ae:9c:c5:3c:40:b8:
7c:a0:d4:92:31:3d:69:0d:d4:3c:bf:e5:bf:02:0e:
73:88:f3:c6:23:bc:ec:17:b4:dc:25:f3:4d:cb:7e:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8C:79:2E:EC:73:95:2D:29:49:5B:1D:0A:6D:B6:B2:AD:18:BA:6F
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:17:70:f8:95:08:27:1f:38:5e:d9:3e:00:a3:92:91:b6:6a:
f6:f6:86:9a:71:f7:e1:22:00:31:97:32:40:3a:64:b2:10:b1:
f1:dc:67:a7:4b:99:43:ae:fb:4f:4a:a6:9f:86:47:88:2d:e6:
76:19:ba:50:35:05:1c:a3:2f:e2:f5:3a:ea:de:68:ca:0f:76:
2f:7e:b7:be:9c:77:f4:03:c6:ec:19:b1:f6:1e:84:e8:5d:99:
61:64:b1:ba:6a:f4:36:bc:59:59:d0:92:cf:6c:24:c0:62:c1:
e2:c8:d6:29:32:b6:24:60:34:31:0f:b1:91:b8:54:b7:9d:14:
df:c9:37:dc:4b:ba:68:fb:6b:6e:b4:28:59:cd:52:36:05:3f:
d6:65:8d:84:51:08:e6:f6:b4:29:31:b1:7c:87:88:88:88:bf:
9b:d2:46:88:44:1d:bd:90:f2:e3:91:ba:69:93:3d:b3:12:da:
ac:37:33:48:c0:f7:39:a6:a2:87:a6:4d:a3:46:2b:54:4a:09:
77:26:53:91:c6:8b:2c:ae:ef:fc:5b:94:08:e3:e1:26:02:c6:
09:05:77:dc:1a:e3:40:f7:3e:bd:19:9d:91:79:fa:58:dc:dc:
90:10:c0:b7:6c:c1:bf:0a:da:2a:cb:1a:a4:3d:c7:0f:7a:f1:
24:f6:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:51 2026 by rpki-client