This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json) Hash identifier: OKciGlB/a/o5XHZgXo6rb0u3om/YRR/Rr+2q93y+6DE= Subject key identifier: 8D:A7:A9:5F:C5:37:FA:AA:87:88:D3:05:1C:02:BF:1D:90:3D:E8:46 Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e Certificate serial: 019BF8765031D948A7D66057D1F5F0BADDEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft Manifest number: 17B7 Signing time: Mon 26 Jan 2026 04:01:01 +0000 Manifest this update: Mon 26 Jan 2026 04:01:01 +0000 Manifest next update: Tue 27 Jan 2026 04:01:01 +0000 Files and hashes: 1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=) 2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: GaBBsFyHU7XtL/ZF8OWhm6VGOKJaozysvrTZcv9n30c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:50:31:d9:48:a7:d6:60:57:d1:f5:f0:ba:dd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e Validity Not Before: Jan 26 04:01:01 2026 GMT Not After : Jan 27 04:01:01 2026 GMT Subject: CN=8da7a95fc537faaa8788d3051c02bf1d903de846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:07:3f:9f:17:70:b4:ff:06:05:dc:d2:a2: 37:5f:53:40:2c:82:46:9f:8c:48:11:29:16:1c:f8: a7:1c:cc:29:82:ca:dd:a4:72:a3:8d:bb:9f:1c:94: 4f:76:e4:41:8e:f2:d7:3e:38:02:af:67:93:f4:72: 62:f1:21:e5:b2:69:03:ec:c3:1b:32:c9:7e:40:e6: 23:30:f5:87:14:c1:c6:33:f6:87:e2:29:7e:26:e7: ad:a7:96:a0:a8:07:16:b4:02:e7:ea:e5:87:7a:ad: c7:9e:49:0d:5c:56:e1:b9:a5:d7:28:64:4f:15:66: 0b:90:59:f4:0b:80:d3:de:7c:3f:73:80:1b:88:50: 58:27:b1:b6:ce:ca:9f:c1:a5:ea:a4:f3:d0:b4:e4: f1:4c:fc:07:b5:2b:6b:94:bb:f8:b4:61:e0:31:a3: f2:08:df:f9:1f:6c:d6:01:43:59:f5:8c:d5:15:85: ce:0f:79:c1:ea:88:70:d8:68:1c:bb:75:b8:1c:84: 12:0a:94:17:34:d1:48:a1:85:a7:a7:b0:1f:d8:d8: a8:f9:4e:6f:75:5a:68:55:76:d3:ce:77:4c:f0:ea: b6:d8:87:64:5b:02:ae:b8:16:c4:ec:b8:09:d6:b7: aa:03:d3:dc:ca:57:8d:19:7a:45:ed:d7:61:a8:65: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:A9:5F:C5:37:FA:AA:87:88:D3:05:1C:02:BF:1D:90:3D:E8:46 X509v3 Authority Key Identifier: keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:94:f3:17:c0:15:56:bc:12:65:29:c7:bd:08:8f:1e:bb:33: 52:1e:b9:7e:aa:f7:99:ad:88:ed:28:97:71:72:f3:a2:18:9f: 2e:6b:43:bf:4c:e6:03:bc:49:9c:be:f0:53:e7:fe:9e:bc:f3: a8:2e:91:ea:93:d4:af:c7:d4:b9:2e:24:de:7b:3c:35:b1:95: 92:a2:05:0b:41:64:6f:1c:a3:34:6f:ad:17:79:47:d5:13:96: 87:b6:2b:dd:02:a6:35:5f:cb:d5:05:7e:6e:a0:cd:87:7e:65: 4a:90:93:c9:8f:74:98:af:54:40:51:d3:e3:0f:53:45:ab:c1: cb:ab:f2:80:2c:84:32:3f:56:88:a6:72:cf:c3:7e:2f:08:8c: 17:d8:df:3b:6f:a4:be:94:ae:cb:b2:b0:26:dc:d0:e8:f2:30: 57:aa:6d:67:3e:06:26:0e:ef:ed:51:f2:30:f4:56:1f:85:55: 01:31:22:11:d7:4e:13:53:58:dc:95:82:7e:3f:20:92:8b:53: 79:e3:fa:30:92:a1:64:03:4c:b1:ce:5c:a2:3d:d9:0f:ae:98: 56:fc:61:e7:e9:3c:03:2d:33:db:cf:88:36:5b:e7:0a:56:a2: fc:9a:b1:47:a2:d4:79:6b:13:83:9a:8c:24:93:fc:2f:15:dc: ec:a9:c2:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dlAx2Uin1mBX0fXwut3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY1ZDZjZjI2ZDkzNzQ4NGRiYjQ2MzM3NDNlMDY1N2Vj Y2RjNWUwHhcNMjYwMTI2MDQwMTAxWhcNMjYwMTI3MDQwMTAxWjAzMTEwLwYDVQQD Eyg4ZGE3YTk1ZmM1MzdmYWFhODc4OGQzMDUxYzAyYmYxZDkwM2RlODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZkHP58XcLT/BgXc0qI3X1NALIJG n4xIESkWHPinHMwpgsrdpHKjjbufHJRPduRBjvLXPjgCr2eT9HJi8SHlsmkD7MMb Msl+QOYjMPWHFMHGM/aH4il+Juetp5agqAcWtALn6uWHeq3HnkkNXFbhuaXXKGRP FWYLkFn0C4DT3nw/c4AbiFBYJ7G2zsqfwaXqpPPQtOTxTPwHtStrlLv4tGHgMaPy CN/5H2zWAUNZ9YzVFYXOD3nB6ohw2Ggcu3W4HIQSCpQXNNFIoYWnp7Af2Nio+U5v dVpoVXbTzndM8Oq22IdkWwKuuBbE7LgJ1reqA9PcyleNGXpF7ddhqGUucQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2nqV/FN/qqh4jTBRwCvx2QPehGMB8GA1UdIwQY MBaAFIFmXWzybZN0hNu0YzdD4GV+zNxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUt YzU2ZjA1ZGEzZDI1LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUtYzU2ZjA1ZGEzZDI1 LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZTzF8AV VrwSZSnHvQiPHrszUh65fqr3ma2I7SiXcXLzohifLmtDv0zmA7xJnL7wU+f+nrzz qC6R6pPUr8fUuS4k3ns8NbGVkqIFC0FkbxyjNG+tF3lH1ROWh7Yr3QKmNV/L1QV+ bqDNh35lSpCTyY90mK9UQFHT4w9TRavBy6vygCyEMj9WiKZyz8N+LwiMF9jfO2+k vpSuy7KwJtzQ6PIwV6ptZz4GJg7v7VHyMPRWH4VVATEiEddOE1NY3JWCfj8gkotT eeP6MJKhZANMsc5coj3ZD66YVvxh5+k8Ay0z28+INlvnClai/JqxR6LUeWsTg5qM JJP8LxXc7KnC2A== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:45 2026 by rpki-client