This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json) Hash identifier: oXOq0fls851KfdACcELwK351POyOf+yofXMdgDF2mIE= Subject key identifier: 84:AD:A7:B9:ED:CC:DA:00:97:9D:F2:70:98:AA:5E:CF:4D:11:EC:E2 Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9 Certificate serial: 019BF72D99496E7A5CADF341623B70F161F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft Manifest number: 020A Signing time: Sun 25 Jan 2026 22:01:59 +0000 Manifest this update: Sun 25 Jan 2026 22:01:59 +0000 Manifest next update: Mon 26 Jan 2026 22:01:59 +0000 Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=) 2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: iPNxq6Kr429oEN1AXvD6qSopBVboQVqLVt6dmUyZtUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:99:49:6e:7a:5c:ad:f3:41:62:3b:70:f1:61:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9 Validity Not Before: Jan 25 22:01:59 2026 GMT Not After : Jan 26 22:01:59 2026 GMT Subject: CN=84ada7b9edccda00979df27098aa5ecf4d11ece2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:72:af:d4:5f:80:68:90:a5:b6:59:ec:0b: da:7f:a8:89:84:d2:dc:d9:e1:5e:91:2d:c4:5c:c5: 5b:a8:de:4e:41:33:ed:d9:f4:25:6a:a1:46:cb:97: 94:4d:1c:3c:f3:1c:97:9f:12:a2:91:8e:50:03:a8: db:cd:03:f0:5c:23:9b:65:88:18:fb:ac:9d:f8:3e: 71:8c:8b:34:17:8b:22:fb:75:b9:9b:07:a9:38:bd: 31:1c:d2:bd:03:f6:1c:a1:d0:fd:d0:25:c0:45:8e: 1b:89:3d:da:f5:38:09:4c:33:46:e5:f2:5c:68:49: 7c:81:a5:c8:74:2b:20:2b:d9:ee:96:98:63:9e:65: 95:19:42:58:3f:f5:0e:e9:b2:a5:f0:3c:5e:ea:32: 2b:d6:ce:0c:3f:b1:93:17:84:9f:2e:52:55:3b:56: d0:2b:62:ae:8a:ea:a9:24:1d:26:6c:20:4f:35:5f: b8:0c:d0:8a:9a:05:c1:97:36:1b:7d:04:a7:97:64: 12:0e:0a:cd:61:38:4c:85:4e:55:75:f0:19:a6:eb: f7:68:ff:a4:83:3c:ab:82:08:68:c7:00:38:8b:5b: 18:b8:53:aa:e4:35:e3:17:8c:68:7f:28:66:e0:ea: 54:ac:f9:15:9d:ba:b5:10:06:e0:08:5a:98:55:fd: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:A7:B9:ED:CC:DA:00:97:9D:F2:70:98:AA:5E:CF:4D:11:EC:E2 X509v3 Authority Key Identifier: keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:fc:92:fa:49:19:99:45:06:a1:64:6f:a8:cb:29:13:12: 34:f9:11:3f:cd:d6:ec:00:bf:c3:bd:1b:1d:78:30:f3:0e:dd: f6:55:f8:8d:89:a4:f9:b5:cc:5c:18:83:a5:d2:7f:5d:9b:b8: f8:63:54:5e:0c:c8:75:d9:63:b3:ae:57:b7:5b:63:25:5d:ae: ba:2e:43:6b:02:02:93:1d:9a:cb:cc:51:62:ac:1d:48:d0:b3: 8d:72:27:fd:6e:7c:42:8c:5c:b5:e6:34:fe:18:c8:82:86:ee: f5:2c:7d:76:d4:68:83:76:8a:32:6a:64:1d:e7:09:5b:4f:9d: 5c:15:63:03:07:4e:ae:26:a9:00:e8:2c:e1:7a:2a:f5:a8:75: 89:89:5b:e7:cb:3a:ee:80:d2:fd:a8:91:f4:be:8f:a4:55:ca: e9:79:ab:af:28:23:d5:a5:21:83:b7:a2:04:4e:85:9d:41:2a: 7c:11:4d:c6:6d:a1:3f:7e:84:39:8c:96:68:da:13:e3:1f:f3: c4:a5:8e:94:cc:47:24:4d:d1:94:26:e4:e1:97:08:c9:98:cc: 72:5f:57:05:75:73:3b:6d:3a:1d:ef:aa:1b:5b:4f:94:0c:eb: d0:8c:af:b6:8c:0f:d5:d3:13:d8:dd:78:4b:3d:ee:00:40:06: 09:29:63:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZlJbnpcrfNBYjtw8WHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWZhNzA4ZTA5OGU1Njk0MmIxNjJmMzRlNDYzMzQ5N2Yz YWUyZDkwHhcNMjYwMTI1MjIwMTU5WhcNMjYwMTI2MjIwMTU5WjAzMTEwLwYDVQQD Eyg4NGFkYTdiOWVkY2NkYTAwOTc5ZGYyNzA5OGFhNWVjZjRkMTFlY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXFyr9RfgGiQpbZZ7Avaf6iJhNLc 2eFekS3EXMVbqN5OQTPt2fQlaqFGy5eUTRw88xyXnxKikY5QA6jbzQPwXCObZYgY +6yd+D5xjIs0F4si+3W5mwepOL0xHNK9A/YcodD90CXARY4biT3a9TgJTDNG5fJc aEl8gaXIdCsgK9nulphjnmWVGUJYP/UO6bKl8Dxe6jIr1s4MP7GTF4SfLlJVO1bQ K2KuiuqpJB0mbCBPNV+4DNCKmgXBlzYbfQSnl2QSDgrNYThMhU5VdfAZpuv3aP+k gzyrgghoxwA4i1sYuFOq5DXjF4xofyhm4OpUrPkVnbq1EAbgCFqYVf1eaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIStp7ntzNoAl53ycJiqXs9NEeziMB8GA1UdIwQY MBaAFICvpwjgmOVpQrFi805GM0l/OuLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUt MmE4YTIyNTNmZTBhLzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUtMmE4YTIyNTNmZTBh LzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxj8kvpJ GZlFBqFkb6jLKRMSNPkRP83W7AC/w70bHXgw8w7d9lX4jYmk+bXMXBiDpdJ/XZu4 +GNUXgzIddljs65Xt1tjJV2uui5DawICkx2ay8xRYqwdSNCzjXIn/W58QoxcteY0 /hjIgobu9Sx9dtRog3aKMmpkHecJW0+dXBVjAwdOriapAOgs4Xoq9ah1iYlb58s6 7oDS/aiR9L6PpFXK6Xmrrygj1aUhg7eiBE6FnUEqfBFNxm2hP36EOYyWaNoT4x/z xKWOlMxHJE3RlCbk4ZcIyZjMcl9XBXVzO206He+qG1tPlAzr0IyvtowP1dMT2N14 Sz3uAEAGCSljJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:56 2026 by rpki-client