This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json) Hash identifier: /LdmBmA2Ml74EGq0hbWyVh6wx6lcs3v2AaeAGgCaIU4= Subject key identifier: 97:C6:B8:22:9D:CA:3C:F6:B8:2A:9A:4F:CB:50:67:B6:3C:7A:AA:A3 Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492 Certificate serial: 019BFB09C078803B04447782449283DCC64A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft Manifest number: 051A Signing time: Mon 26 Jan 2026 16:01:18 +0000 Manifest this update: Mon 26 Jan 2026 16:01:18 +0000 Manifest next update: Tue 27 Jan 2026 16:01:18 +0000 Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: TvLu4hLvsF/IRK/62JTBI5ppTO+0D8AY+dhW1HFpDNg=) 2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=) 3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:c0:78:80:3b:04:44:77:82:44:92:83:dc:c6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492 Validity Not Before: Jan 26 16:01:18 2026 GMT Not After : Jan 27 16:01:18 2026 GMT Subject: CN=97c6b8229dca3cf6b82a9a4fcb5067b63c7aaaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:0d:e5:76:2e:43:e9:ed:c8:9b:5e:06:98: 54:cd:47:6a:68:03:73:38:2e:11:ee:78:38:da:e8: 0a:c4:ad:9a:19:92:3b:a3:ed:f2:45:3d:b3:73:9e: f5:60:fe:aa:9f:43:85:25:09:12:f9:aa:3b:29:ae: f0:1e:12:aa:03:8d:6d:82:66:b5:51:f3:32:59:4b: a1:a5:36:9c:16:a9:a8:b1:2d:05:61:71:e2:42:05: f9:cd:85:07:ab:0a:47:4e:c4:f4:f5:d3:82:e0:cc: 0d:d2:e7:61:a0:d5:35:35:dd:f9:cc:02:34:cd:4c: af:1f:cd:e8:df:e1:7f:94:78:ba:94:97:56:7a:c6: 75:1b:f2:f3:c5:11:f7:01:3b:f3:4c:d6:24:50:c0: 9b:21:dc:4f:cb:c5:dd:66:96:65:f5:71:ca:63:fd: 14:51:36:05:3c:6a:2d:ff:80:43:db:6f:be:5f:0f: 0d:d2:f5:75:d8:7f:6e:f0:7f:88:92:69:b4:2e:b6: 01:7b:bb:63:c9:4f:bb:ed:5d:06:ff:0f:75:f5:e8: ae:8b:23:38:80:38:18:64:99:c0:de:98:aa:47:50: b8:a6:1b:da:ef:76:ec:74:f8:10:1e:1e:49:75:8e: d0:48:a8:93:66:04:79:4b:a6:77:85:58:41:03:53: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:B8:22:9D:CA:3C:F6:B8:2A:9A:4F:CB:50:67:B6:3C:7A:AA:A3 X509v3 Authority Key Identifier: keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2f:ee:a5:34:a4:89:5a:72:b3:1b:2f:7d:be:5e:54:a8:94: 7e:c2:90:0c:f0:30:77:8e:04:9e:c8:83:6e:d7:5f:3f:88:b3: 99:73:3c:ca:c6:fa:a5:1c:90:68:89:c7:28:13:e2:66:75:da: 5a:c3:be:3a:20:6c:b0:92:2c:91:23:85:b6:4e:d6:69:3d:b6: 04:49:60:22:97:18:fb:40:27:84:50:9d:60:be:4c:b3:7a:92: 11:2d:e4:04:bc:58:06:a4:b1:3f:98:94:72:7d:c6:3d:1c:e4: 06:fd:35:b9:33:c6:6b:46:f5:95:96:00:72:9c:04:37:5b:7d: 26:32:ec:ff:49:c2:c7:a5:b8:ea:59:89:ab:35:33:1d:3d:ea: e8:ca:9d:74:a5:ed:3d:15:7a:55:ac:35:0f:7e:53:01:79:93: 8e:5a:4f:4b:57:17:5f:9f:ae:2b:b8:d4:9c:10:5c:da:95:b6: ce:fe:2b:7b:b4:11:36:7a:9c:6b:f8:f5:02:bb:16:74:a1:0e: 57:0d:09:7b:08:ba:ad:60:b4:bb:71:8f:9f:22:4a:cd:4c:69: a6:bd:0e:f5:b2:1e:e2:00:7a:af:fb:3d:f0:bf:60:a5:d5:34: 8a:73:83:6b:2a:dd:7c:43:f6:c2:13:57:bc:7f:77:30:6a:8e: 12:78:4e:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CcB4gDsERHeCRJKD3MZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw MzU0OTIwHhcNMjYwMTI2MTYwMTE4WhcNMjYwMTI3MTYwMTE4WjAzMTEwLwYDVQQD Eyg5N2M2YjgyMjlkY2EzY2Y2YjgyYTlhNGZjYjUwNjdiNjNjN2FhYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi4N5XYuQ+ntyJteBphUzUdqaANz OC4R7ng42ugKxK2aGZI7o+3yRT2zc571YP6qn0OFJQkS+ao7Ka7wHhKqA41tgma1 UfMyWUuhpTacFqmosS0FYXHiQgX5zYUHqwpHTsT09dOC4MwN0udhoNU1Nd35zAI0 zUyvH83o3+F/lHi6lJdWesZ1G/LzxRH3ATvzTNYkUMCbIdxPy8XdZpZl9XHKY/0U UTYFPGot/4BD22++Xw8N0vV12H9u8H+Ikmm0LrYBe7tjyU+77V0G/w919eiuiyM4 gDgYZJnA3piqR1C4phva73bsdPgQHh5JdY7QSKiTZgR5S6Z3hVhBA1OcDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfGuCKdyjz2uCqaT8tQZ7Y8eqqjMB8GA1UdIwQY MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC/upTSk iVpysxsvfb5eVKiUfsKQDPAwd44EnsiDbtdfP4izmXM8ysb6pRyQaInHKBPiZnXa WsO+OiBssJIskSOFtk7WaT22BElgIpcY+0AnhFCdYL5Ms3qSES3kBLxYBqSxP5iU cn3GPRzkBv01uTPGa0b1lZYAcpwEN1t9JjLs/0nCx6W46lmJqzUzHT3q6MqddKXt PRV6Vaw1D35TAXmTjlpPS1cXX5+uK7jUnBBc2pW2zv4re7QRNnqca/j1ArsWdKEO Vw0Jewi6rWC0u3GPnyJKzUxppr0O9bIe4gB6r/s98L9gpdU0inODayrdfEP2whNX vH93MGqOEnhOiw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:06 2026 by rpki-client