This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File: Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier: 5+oX/nkGZXSkPiEVVajZgMU8//53qayi77KDetVfUB4=
Subject key identifier: 8C:BA:2E:22:BE:AD:27:83:9E:7E:E2:31:67:CA:D9:F7:DD:C7:01:26
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 019BF651B2CA21AAA0B2BF4974A9E3873F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 18:01:47 +0000
Manifest this update: Sun 25 Jan 2026 18:01:47 +0000
Manifest next update: Mon 26 Jan 2026 18:01:47 +0000
Files and hashes: 1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: m1nh0WTHYIwjfmPvCg/nek0MUUrk1aedl2ldT5dRVNA=)
2: ISm6RQxOZnxLUyH-R-CphPRNqZo.roa (hash: T+YGLuiGKtWgSDHKqlkXSycewSm5xaVhDYtV47JELiM=)
3: OYrxag2gdKVWmcS_MSjERgU_Ji0.roa (hash: Up6LnAiF7e1D845y6IhDGcXjWiOaIs0vsPTFZeoDQ24=)
4: p5utnLd33eKKva_RAEO_Xi-exGo.roa (hash: o9yl5ENus82WxKAzd4PkSoVYVHhX9LlBVWPF96ouh8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:b2:ca:21:aa:a0:b2:bf:49:74:a9:e3:87:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 25 18:01:47 2026 GMT
Not After : Jan 26 18:01:47 2026 GMT
Subject: CN=8cba2e22bead27839e7ee23167cad9f7ddc70126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:3b:f8:e4:fe:99:69:e3:f6:09:1c:7e:b3:
7b:98:c8:03:61:47:7e:be:10:7b:84:fe:9d:0d:62:
57:e6:cc:9c:cc:ed:52:2a:14:9f:d1:d6:a2:e5:fd:
fb:bb:5f:40:b9:b7:79:49:09:32:78:4c:08:ac:f5:
c6:79:bb:9d:07:33:1a:0d:ee:ea:d7:b0:d4:4c:bb:
c7:fc:35:51:ec:be:2d:0d:5d:81:c0:be:dc:75:b8:
89:58:c7:34:c5:e2:f0:ff:bd:11:ec:2e:41:6b:b4:
81:6c:5b:fa:22:c9:d0:60:78:67:62:85:1c:47:9d:
72:5a:73:5d:d0:be:41:1c:5e:d4:c1:70:0f:ef:44:
42:c7:1d:62:b1:b1:85:86:a7:b8:59:9c:81:1a:de:
2c:d2:23:9b:42:06:31:9b:93:45:cd:f1:af:84:87:
9a:58:c3:c8:ba:0f:30:09:b0:e3:d1:a7:88:2e:a1:
57:1b:3b:b5:3b:97:f1:c6:f8:d8:61:e6:c9:a7:5f:
db:a2:05:dc:90:96:1c:85:eb:5f:c2:6e:28:a5:95:
f8:98:93:0c:e8:dc:42:94:c0:25:bb:4c:ef:88:85:
ed:92:c2:8e:16:b3:74:f0:a3:9f:cc:96:b8:16:9c:
19:08:a5:32:fd:ca:35:f3:84:04:01:ae:87:db:fb:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BA:2E:22:BE:AD:27:83:9E:7E:E2:31:67:CA:D9:F7:DD:C7:01:26
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fb:70:86:e6:be:2a:3a:25:bb:a4:12:00:d1:ef:3b:f2:f8:
78:a0:81:f6:d5:e7:5e:35:43:da:0a:20:05:79:0d:ab:4b:20:
74:38:63:76:ad:15:5b:50:53:76:45:52:e3:06:81:8e:f1:ce:
67:2e:bc:b7:1c:e1:c9:0f:3c:c1:7e:3d:30:41:45:26:97:fc:
0e:96:d3:05:df:69:d4:ae:64:34:3f:3c:1b:70:2e:71:06:a7:
35:8f:08:fd:96:9e:01:f4:e6:9e:96:f5:af:6b:ea:11:8e:a1:
42:f1:6f:5e:1c:f3:5b:7f:9d:7d:08:f6:6f:b4:82:72:b3:1f:
e7:7a:00:50:13:57:c5:62:ba:08:ba:d3:e1:b7:5b:9c:6d:2a:
e9:3e:7e:ad:7e:c8:03:80:e4:42:76:ba:64:7a:50:ae:a7:f5:
0d:cd:7a:3e:30:27:75:3f:bd:e8:80:74:02:69:d6:39:5a:94:
07:91:a4:3b:e3:97:d3:b5:7d:41:cf:fe:bd:37:dc:31:4a:da:
2a:10:55:40:45:b9:e1:05:0e:22:cd:fa:27:be:76:13:56:76:
d7:9f:ed:84:56:49:3f:89:f8:60:6e:00:56:3d:fe:88:fe:f0:
d4:19:33:7c:45:a1:11:67:d5:2c:52:24:fd:64:ac:72:6e:a0:
5e:62:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:31 2026 by rpki-client