This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json) Hash identifier: YxSXAIW0B/f62aoDeNZ1j8E3vM/hrScz6SO1uQYqgas= Subject key identifier: 25:A2:A8:93:F5:2C:34:65:AC:B0:AC:45:41:7C:2C:D1:3C:A8:7E:F0 Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Certificate serial: 019BF7D2317ECDE8C5CD474FEE302AD24C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft Manifest number: 1601 Signing time: Mon 26 Jan 2026 01:01:46 +0000 Manifest this update: Mon 26 Jan 2026 01:01:46 +0000 Manifest next update: Tue 27 Jan 2026 01:01:46 +0000 Files and hashes: 1: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (hash: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI=) 2: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (hash: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE=) 3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: hf7T1IW9s2vS4iSJNCyQajm/15SLY+a8JtUH5mqQ+xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:31:7e:cd:e8:c5:cd:47:4f:ee:30:2a:d2:4c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Validity Not Before: Jan 26 01:01:46 2026 GMT Not After : Jan 27 01:01:46 2026 GMT Subject: CN=25a2a893f52c3465acb0ac45417c2cd13ca87ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:d5:a0:65:4b:09:42:e0:c7:91:c2:dc:32: d8:1e:4e:09:f1:1d:95:38:61:92:7c:1e:17:91:d5: 3f:47:96:62:97:80:80:bd:8a:f4:e5:3e:20:e2:af: 4a:fe:f0:91:9d:f5:12:b2:0d:fe:a8:f5:23:34:68: 81:f3:aa:d4:f9:84:8d:31:b3:55:20:4b:c4:b9:64: ec:bb:b6:e2:3e:d5:ed:d4:1c:0d:14:7a:85:d3:fa: 0e:3d:62:47:43:04:c1:5c:42:3e:f3:3d:e0:cb:35: 7c:e8:d1:d1:0c:29:07:42:a4:5b:82:82:11:cc:68: 3e:1d:3d:89:00:cf:43:03:b0:db:41:94:c6:0b:73: c7:20:99:6a:1e:7a:ae:76:a6:e8:1c:9d:35:de:0a: aa:e5:80:39:7a:97:7b:97:38:05:45:dc:35:c8:43: 21:cb:e1:5c:76:48:50:e7:86:65:c0:0e:06:83:c1: aa:97:a9:f3:9d:62:f9:3f:4c:cf:32:ca:72:d8:8d: 0e:8f:50:34:b7:11:e4:11:f0:72:b8:bb:c4:c2:e6: a5:29:a1:47:1b:7b:eb:d0:e3:1d:e0:df:a9:33:53: 70:76:6c:09:11:3a:87:05:92:55:6f:e7:52:9c:12: a7:48:92:3c:b5:b2:63:2c:2d:34:7c:0d:26:8c:ee: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A2:A8:93:F5:2C:34:65:AC:B0:AC:45:41:7C:2C:D1:3C:A8:7E:F0 X509v3 Authority Key Identifier: keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bf:07:e2:92:e6:72:c0:7f:61:ac:63:ee:15:a0:cb:66:90: e4:89:9e:88:47:17:bc:b7:a0:90:97:4f:b0:40:87:ec:cc:50: 55:42:12:59:17:f0:a4:b2:b2:c0:7a:cd:8c:78:dc:ad:f1:42: 14:5e:ef:7f:68:12:5c:eb:b8:af:dd:3d:bb:6e:93:c7:3a:66: 0a:a7:49:b5:c9:fb:e8:6a:37:ff:c5:98:33:7c:51:f1:79:50: 14:e6:4b:d1:41:58:af:1d:cf:5f:9d:38:19:60:13:f2:ef:55: 04:21:b4:ad:30:78:d6:72:cd:a9:11:39:a6:76:16:5c:74:da: 63:9c:dd:c1:af:d4:c9:bd:50:92:e1:e2:b8:fd:65:4a:02:b0: 99:bf:6a:1f:11:08:cf:95:a8:a3:14:ce:f5:3d:38:63:ab:9b: fa:1f:84:19:6f:e6:51:89:f1:c3:f0:b9:62:9b:cb:94:9e:6f: be:81:dd:99:94:a2:1b:fb:6a:69:5d:61:4d:ae:93:a6:95:ee: 0a:99:a2:4d:a5:a6:08:6a:05:8f:df:46:e3:a4:83:c9:c9:0f: f1:12:52:2a:c1:bc:c1:01:da:48:5a:9a:99:a2:9a:cc:3d:e9: d7:f6:db:10:85:3e:18:c0:52:fb:7f:8c:a4:9e:c7:5e:e1:20: dd:a8:43:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30jF+zejFzUdP7jAq0kwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk M2UzZDQwHhcNMjYwMTI2MDEwMTQ2WhcNMjYwMTI3MDEwMTQ2WjAzMTEwLwYDVQQD EygyNWEyYTg5M2Y1MmMzNDY1YWNiMGFjNDU0MTdjMmNkMTNjYTg3ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbXVoGVLCULgx5HC3DLYHk4J8R2V OGGSfB4XkdU/R5Zil4CAvYr05T4g4q9K/vCRnfUSsg3+qPUjNGiB86rU+YSNMbNV IEvEuWTsu7biPtXt1BwNFHqF0/oOPWJHQwTBXEI+8z3gyzV86NHRDCkHQqRbgoIR zGg+HT2JAM9DA7DbQZTGC3PHIJlqHnqudqboHJ013gqq5YA5epd7lzgFRdw1yEMh y+FcdkhQ54ZlwA4Gg8Gql6nznWL5P0zPMspy2I0Oj1A0txHkEfByuLvEwualKaFH G3vr0OMd4N+pM1NwdmwJETqHBZJVb+dSnBKnSJI8tbJjLC00fA0mjO7RCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWiqJP1LDRlrLCsRUF8LNE8qH7wMB8GA1UdIwQY MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB78H4pLm csB/Yaxj7hWgy2aQ5ImeiEcXvLegkJdPsECH7MxQVUISWRfwpLKywHrNjHjcrfFC FF7vf2gSXOu4r909u26TxzpmCqdJtcn76Go3/8WYM3xR8XlQFOZL0UFYrx3PX504 GWAT8u9VBCG0rTB41nLNqRE5pnYWXHTaY5zdwa/Uyb1QkuHiuP1lSgKwmb9qHxEI z5WooxTO9T04Y6ub+h+EGW/mUYnxw/C5YpvLlJ5vvoHdmZSiG/tqaV1hTa6TppXu CpmiTaWmCGoFj99G46SDyckP8RJSKsG8wQHaSFqamaKazD3p1/bbEIU+GMBS+3+M pJ7HXuEg3ahD/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:25 2026 by rpki-client