This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier: z8iAGpRmrtk+OXnV12fzPksKc01+DQSWQR9Os6l8WoA=
Subject key identifier: F4:88:83:84:D8:5F:67:E2:83:3D:E3:ED:D5:60:96:F4:03:DE:A0:28
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019BF87618A52498AD8E31F33048B7C68EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number: 130D
Signing time: Mon 26 Jan 2026 04:00:47 +0000
Manifest this update: Mon 26 Jan 2026 04:00:47 +0000
Manifest next update: Tue 27 Jan 2026 04:00:47 +0000
Files and hashes: 1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=)
2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=)
3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=)
4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: hysV/s08tSwfobNTmWtSt1BUGQBz06+pA4CoN6ieByM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:18:a5:24:98:ad:8e:31:f3:30:48:b7:c6:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Jan 26 04:00:47 2026 GMT
Not After : Jan 27 04:00:47 2026 GMT
Subject: CN=f4888384d85f67e2833de3edd56096f403dea028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:40:1a:0b:36:8f:d7:4a:65:68:a0:40:ab:
f4:5d:3f:14:7f:df:d2:81:1d:c2:31:7b:c7:a3:e4:
3c:ba:99:e1:e8:da:cf:bc:25:e1:6d:85:b4:c4:66:
4f:f2:83:1d:b3:7a:a2:fe:95:7c:f9:64:a8:b6:2d:
c5:56:1a:20:f9:35:3f:97:2a:32:a9:7f:df:5e:ce:
81:b6:de:f2:e2:42:2a:73:5a:71:b8:25:6e:4f:79:
7d:68:63:d3:42:42:80:5a:6c:79:e1:55:52:ea:db:
9b:d5:51:d6:0b:d3:13:75:a1:3c:4e:aa:6c:2b:76:
46:09:58:21:88:5d:1d:7a:f6:f9:06:1c:74:df:50:
7a:81:f7:68:84:44:a0:64:a2:94:e8:a1:3e:0c:60:
3e:8c:93:c4:be:8b:00:a6:e7:e4:11:ae:a6:38:cf:
7c:0e:c0:ba:f4:9d:e3:e8:12:a9:77:43:5e:b3:57:
04:81:e1:01:73:e3:b2:42:63:12:c3:0d:cf:ee:bf:
bd:de:18:e2:d0:6f:a2:40:56:c3:3e:19:57:d4:e2:
f7:a8:c4:22:a4:80:ce:dc:37:92:2a:0b:f9:38:b6:
62:ca:fa:12:d3:a0:df:56:69:a1:28:26:79:6d:b0:
80:26:a8:2d:f2:07:93:44:e5:3f:ab:11:90:92:82:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:88:83:84:D8:5F:67:E2:83:3D:E3:ED:D5:60:96:F4:03:DE:A0:28
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:15:c7:1c:6a:7a:f0:12:e4:34:30:3b:1f:b6:1d:c0:ca:0c:
3f:e9:b2:ee:4b:5c:ed:8e:ba:5f:65:85:20:de:fd:7a:ce:5d:
e6:ee:a0:ff:9b:44:bd:37:02:a9:a2:c3:a9:0e:10:f2:c4:2f:
f6:e1:1b:3f:8b:82:af:0b:a9:15:98:39:f0:71:3f:01:54:99:
a6:2e:51:3f:f8:ab:d1:b7:a4:e9:14:61:59:4a:7b:c4:d4:34:
4d:a4:bd:ee:4f:36:87:17:a1:60:2d:d6:50:e3:57:f7:0c:4a:
8d:43:5f:62:50:f9:0c:79:36:dc:dc:11:cb:0a:6a:de:69:e0:
b7:88:b5:eb:49:9e:16:49:e9:2b:c7:dd:22:1d:70:cb:3f:04:
67:53:77:2d:85:a1:8a:b7:31:31:27:d2:da:57:4e:7d:1f:d2:
55:cf:f4:a3:97:b9:ed:10:95:89:1a:ef:af:7b:e7:b9:10:5a:
59:8b:c6:42:76:99:28:43:a4:ce:01:cc:ad:68:f0:9a:ae:bf:
30:98:07:76:e6:b1:7b:7f:f7:1a:9a:50:54:ae:63:38:0f:1e:
0c:db:a5:26:51:ca:a9:20:e8:4b:75:51:83:1c:fc:5e:1c:c6:
fd:7d:85:49:ba:0f:65:80:aa:e0:fd:26:cb:62:71:4a:ad:da:
8c:59:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:23:03 2026 by rpki-client