This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: mwq4l+CnoZko+TaOy2dq3TsdX6p0tN8NlKxjaNFo4Ck=
Subject key identifier: A1:6B:E2:74:3F:1C:85:10:9E:ED:BD:82:1E:E9:D8:19:D5:25:86:B1
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 019BF83FEE7385F7CD0CA3849DAD2316B0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 03E3
Signing time: Mon 26 Jan 2026 03:01:37 +0000
Manifest this update: Mon 26 Jan 2026 03:01:37 +0000
Manifest next update: Tue 27 Jan 2026 03:01:37 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: oqj5P2f0kF4y7oNyoggoDw2v+gNw+k35eoIjZcoPnn0=)
2: xzZmjyBgUA5PVhf5CC_hJNwcVzY.roa (hash: NZxy7sLP8vd+st6fA6TY6gFnYnOKj2RudHOzgNs7jsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:ee:73:85:f7:cd:0c:a3:84:9d:ad:23:16:b0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Jan 26 03:01:37 2026 GMT
Not After : Jan 27 03:01:37 2026 GMT
Subject: CN=a16be2743f1c85109eedbd821ee9d819d52586b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:c7:f5:60:fe:88:0a:dc:ed:e2:f2:54:a2:
79:f7:0a:d7:10:22:c1:8e:69:6c:c2:c1:9b:51:a3:
68:35:40:49:f2:35:11:38:64:ac:cd:89:bc:ec:24:
f8:7c:78:f4:1e:1a:13:0c:2b:a8:64:ff:93:d3:3b:
f6:51:d3:62:4d:fa:98:2c:f3:89:fd:0b:f4:3f:04:
3a:03:fc:ff:5f:fa:4d:fb:3f:1d:fe:1b:6f:34:ed:
d4:78:cb:35:6e:e4:b9:f5:71:f5:b8:3f:a6:06:72:
f5:03:fd:65:73:f0:31:bd:49:be:e4:7f:f5:8d:cb:
eb:80:37:e9:6c:c7:61:11:6c:96:71:73:01:97:1b:
49:b7:01:83:5d:d1:c7:fc:6e:fa:1a:46:ee:41:72:
6f:56:17:da:56:f8:fe:47:d4:d2:d8:dc:43:9a:22:
13:f2:be:b0:32:c5:62:f0:c7:48:3c:07:78:c8:bd:
39:c1:48:ab:be:58:9f:1b:81:f5:61:01:8e:e6:c1:
c6:90:17:0d:57:29:43:7a:72:90:7b:22:07:73:95:
68:e7:3c:9b:d9:ca:78:94:ba:ad:36:1f:fb:51:c2:
3f:28:e7:19:dc:72:7a:4f:0a:3d:ea:eb:2a:ef:4b:
2c:c2:95:28:f4:c2:00:62:f6:15:04:b7:86:fa:89:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:E2:74:3F:1C:85:10:9E:ED:BD:82:1E:E9:D8:19:D5:25:86:B1
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:66:44:e0:26:92:0a:a6:a8:8f:94:cd:e6:e6:34:12:d0:0b:
7d:9d:bc:34:56:04:f1:ee:a1:2e:4d:4f:32:0e:3d:3e:dd:ab:
c7:00:64:82:56:bd:b9:13:ef:18:b6:55:f6:3a:cf:03:df:85:
aa:5e:83:21:ea:b5:f6:15:f5:23:f5:2f:03:24:39:d7:6e:ab:
22:87:d9:5d:d3:5b:50:0a:97:4b:67:95:2e:eb:d6:5c:9b:5e:
6c:fa:fa:3a:46:ca:93:28:61:aa:5e:66:6d:46:7e:2e:52:9d:
d1:f9:38:9f:48:34:71:c6:18:e6:0f:de:0d:e1:11:5c:6c:87:
9d:7f:cb:09:b3:af:ce:aa:cc:8f:02:79:52:cf:3b:14:5c:ee:
c3:cf:7f:a2:0f:7d:0c:fc:c3:92:2e:02:74:be:e5:0f:33:f9:
8d:c9:fd:e4:ef:ef:b8:8f:91:ee:b1:6e:ab:2f:f0:4f:5a:1b:
a3:2c:38:c4:ae:63:b5:b2:2b:a5:60:9b:18:b5:71:55:32:69:
e2:4c:88:b6:a2:80:ac:dd:2a:eb:10:d0:86:23:08:be:21:72:
b9:1a:06:be:b4:1f:f0:82:f2:ac:33:fc:93:82:20:61:c2:c5:
ae:01:b1:68:3a:65:96:d9:dd:40:dd:87:b5:ff:c8:44:98:af:
ab:94:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:21 2026 by rpki-client