This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft File: gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json) Hash identifier: VbeE1fwKUxpbRdJ5jWRh2oz8ucBg95LQSqzOgVoHpcM= Subject key identifier: 38:1C:06:98:B6:A2:CF:0F:6E:CD:FE:99:3B:6F:1A:6D:E3:E8:4E:76 Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Certificate serial: 019BF34FFF313AA3928FC9DEBF849E225610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft Manifest number: 0AA4 Signing time: Sun 25 Jan 2026 04:01:04 +0000 Manifest this update: Sun 25 Jan 2026 04:01:04 +0000 Manifest next update: Mon 26 Jan 2026 04:01:04 +0000 Files and hashes: 1: 167q1DVVPrTdRYPkfcZCi239sJI.roa (hash: iphiS6YGG+NOQC8zeFXWVmhAQBLx2sZq4Y6HLVXVZOE=) 2: S9G5psiJeIcbArfBTp1QLAQdHYg.roa (hash: Zc2Nnr9uGhkOJwiMMBzf+F7Jqn4jLoEjO1hmaVvwrus=) 3: UrAwf58fhahFUOSzWtBJdSxqbEY.roa (hash: i0STbq1FvyERG4BX0Y5U86QJxom1+453IaNfNJ6A64s=) 4: d9jQ0MXnPvYgpDXafRNOfTdiez0.roa (hash: NVVF5QPKokAaAxOOfP2zdbiF9jm9CYGboJv9rbq85QI=) 5: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: noOQdHjGrN5TPBcIXOuCT0srux1wVYFSCYxhgEjTnAA=) 6: hnX3GEWSMirkXg0F3Fz0pWka2cc.roa (hash: WY0W829d26Ieh54IESsnjlETa41xER8gZPgemFOcDZk=) 7: mHsA_rVsySauclXQKxspDTECljE.roa (hash: flPV0bAd69ESTw3Hk72QzoQVnq7R0pY25e/DdE1uZIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:ff:31:3a:a3:92:8f:c9:de:bf:84:9e:22:56:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Validity Not Before: Jan 25 04:01:04 2026 GMT Not After : Jan 26 04:01:04 2026 GMT Subject: CN=381c0698b6a2cf0f6ecdfe993b6f1a6de3e84e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b2:d6:f4:72:dc:cd:b7:b4:85:cf:58:fe:b8: 54:3b:b2:31:d7:a9:b1:34:4f:89:ca:5e:06:8d:53: 4f:c3:eb:21:2b:bf:ac:c1:b0:29:8c:88:f9:dc:6c: 75:19:85:72:5d:65:6f:2a:b7:2b:2e:25:fc:0d:bc: 50:98:88:bf:9d:48:b1:89:49:75:72:36:54:5b:4b: ae:f5:30:8a:00:64:f1:7f:52:89:07:15:ff:7e:46: 93:a9:4c:09:64:a3:8d:7b:5f:e0:dc:db:e0:e5:a4: 6a:54:34:e5:93:82:e3:2f:59:b3:ca:b3:22:c4:dc: 38:95:2f:65:5f:24:ab:b3:d6:76:22:31:c5:53:10: 7d:85:ce:7a:9a:f5:31:3b:67:59:ce:e4:25:2d:9e: a1:05:76:c4:e9:20:dc:a8:d4:c3:63:20:cc:98:6f: cf:90:ee:6a:a0:40:c2:3b:95:44:f9:b2:c1:92:c2: 7c:c6:f3:d4:54:2a:15:ab:0e:e1:cb:03:2e:9f:1d: 30:f1:03:10:76:8c:51:8b:ec:82:3e:85:c6:88:bc: ba:e5:72:1a:c6:d7:e0:cc:0d:cc:97:df:d7:4d:ba: 49:fd:b8:ef:cd:8b:2a:06:a1:f6:97:0a:de:41:a2: f3:6f:b3:28:bc:db:07:0b:4d:b4:68:83:46:fb:ad: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1C:06:98:B6:A2:CF:0F:6E:CD:FE:99:3B:6F:1A:6D:E3:E8:4E:76 X509v3 Authority Key Identifier: keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:97:1f:00:ed:40:e6:d3:d5:c8:33:5a:ae:36:f8:da:c3: 94:39:d4:2a:7a:d5:db:85:61:5b:ce:bd:1f:35:54:2c:95:1f: be:eb:0b:43:09:dd:9d:43:ec:ed:5b:9f:ba:c0:71:0b:57:94: 31:0e:85:3e:f7:52:d4:d4:d3:26:79:cb:6e:37:39:0f:79:f6: 61:65:50:37:c3:94:e3:45:fd:a7:c0:ce:38:0e:2d:c8:f4:86: f5:fc:f8:27:0e:c0:d2:a9:77:a9:ba:7c:40:16:78:d5:71:94: ef:56:98:20:9f:28:f5:12:1b:e2:81:73:3d:8d:0d:78:57:f2: 69:1a:8a:ca:b5:2e:48:67:eb:56:33:41:fa:a9:99:61:d6:dd: 6b:f2:e5:8a:15:22:00:87:5f:ed:13:41:88:f0:ee:75:3f:f9: 30:03:94:10:51:29:10:2a:ec:98:6a:01:d3:4b:84:89:cb:fa: fc:e7:1a:b9:8f:cc:1f:98:7f:82:e8:2a:f3:6b:29:00:95:22: 64:21:76:8b:68:58:6c:88:f6:4c:3c:5d:ee:45:a2:07:3a:aa: c2:98:db:b0:bb:9f:ab:29:7a:5c:da:b2:63:d7:5d:85:fa:79: bf:1d:1a:57:27:68:28:b0:49:2c:4f:50:e0:b9:b3:b9:7f:22: 09:5d:ee:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT/8xOqOSj8nev4SeIlYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll Yzk3YzkwHhcNMjYwMTI1MDQwMTA0WhcNMjYwMTI2MDQwMTA0WjAzMTEwLwYDVQQD EygzODFjMDY5OGI2YTJjZjBmNmVjZGZlOTkzYjZmMWE2ZGUzZTg0ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LLW9HLczbe0hc9Y/rhUO7Ix16mx NE+Jyl4GjVNPw+shK7+swbApjIj53Gx1GYVyXWVvKrcrLiX8DbxQmIi/nUixiUl1 cjZUW0uu9TCKAGTxf1KJBxX/fkaTqUwJZKONe1/g3Nvg5aRqVDTlk4LjL1mzyrMi xNw4lS9lXySrs9Z2IjHFUxB9hc56mvUxO2dZzuQlLZ6hBXbE6SDcqNTDYyDMmG/P kO5qoEDCO5VE+bLBksJ8xvPUVCoVqw7hywMunx0w8QMQdoxRi+yCPoXGiLy65XIa xtfgzA3Ml9/XTbpJ/bjvzYsqBqH2lwreQaLzb7MovNsHC020aING+61C4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgcBpi2os8Pbs3+mTtvGm3j6E52MB8GA1UdIwQY MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt ZjYxNTU0YzZjMTQ1LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1 LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrCXHwDt QObT1cgzWq42+NrDlDnUKnrV24VhW869HzVULJUfvusLQwndnUPs7VufusBxC1eU MQ6FPvdS1NTTJnnLbjc5D3n2YWVQN8OU40X9p8DOOA4tyPSG9fz4Jw7A0ql3qbp8 QBZ41XGU71aYIJ8o9RIb4oFzPY0NeFfyaRqKyrUuSGfrVjNB+qmZYdbda/LlihUi AIdf7RNBiPDudT/5MAOUEFEpECrsmGoB00uEicv6/OcauY/MH5h/gugq82spAJUi ZCF2i2hYbIj2TDxd7kWiBzqqwpjbsLufqyl6XNqyY9ddhfp5vx0aVydoKLBJLE9Q 4LmzuX8iCV3uXg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:42:04 2026 by rpki-client