This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json) Hash identifier: BAA7XlbedObrt94lSDrE8x/9+GhChhYw3szeK+FB6XE= Subject key identifier: C1:7B:35:02:76:B0:0F:F1:A9:74:4E:D1:75:F3:A7:1B:23:21:A3:EB Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8 Certificate serial: 019BF8E44767282F063CE1511751BEAF972A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft Manifest number: 0FAF Signing time: Mon 26 Jan 2026 06:01:08 +0000 Manifest this update: Mon 26 Jan 2026 06:01:08 +0000 Manifest next update: Tue 27 Jan 2026 06:01:08 +0000 Files and hashes: 1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=) 2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: wJpiekbb6/noDOAYGu99hlZWXxumFx85IxkaO3Zbu4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:47:67:28:2f:06:3c:e1:51:17:51:be:af:97:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8 Validity Not Before: Jan 26 06:01:08 2026 GMT Not After : Jan 27 06:01:08 2026 GMT Subject: CN=c17b350276b00ff1a9744ed175f3a71b2321a3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:a9:71:1e:de:3d:a7:6b:c7:ff:d8:36:00: ad:17:40:3f:62:34:72:be:cb:ef:9a:c9:5d:46:ee: f6:7d:13:e0:e6:9a:cc:60:85:1f:60:9a:63:3e:3d: 7e:e7:01:ea:e8:de:73:45:0e:74:a7:74:98:56:7f: cf:e3:a1:38:9a:10:d8:81:b3:a9:96:cd:ff:51:bc: 14:17:9e:f8:ba:b2:3e:fb:99:36:5e:e4:80:94:3a: 8e:cb:fb:e7:2e:81:69:98:96:db:3c:0d:9c:cf:fe: 16:75:6d:38:a7:83:60:20:35:fa:5c:40:a0:7e:c4: d8:1d:79:d4:c1:a8:52:30:15:2b:51:d2:82:84:5a: 0e:eb:84:e6:53:24:c4:b7:0b:30:c2:63:3f:65:b1: 29:be:db:2e:1d:c3:0a:34:4e:03:10:df:c6:19:18: 5c:8c:82:1a:4c:03:88:c0:f4:4b:8d:41:ca:7d:b3: f6:2b:8f:3a:35:59:eb:a1:48:8c:18:11:a0:df:0f: b8:59:84:1d:cb:8b:05:b5:5a:87:ad:18:51:0d:21: de:2c:03:45:ea:31:e1:2e:15:fc:8f:80:84:5a:65: 12:55:57:2f:9c:f6:48:0f:ea:5b:68:17:4e:21:7f: a1:97:9c:99:de:1b:61:0f:d5:b7:a6:7b:9b:47:a1: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7B:35:02:76:B0:0F:F1:A9:74:4E:D1:75:F3:A7:1B:23:21:A3:EB X509v3 Authority Key Identifier: keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cd:4c:5a:db:d3:f9:28:8e:d8:98:bd:1f:1e:eb:d8:8a:56: 69:a5:cf:14:68:12:35:63:bc:83:8e:cd:0d:dc:30:91:b0:6d: c2:ca:24:f1:38:a2:30:b5:bb:e3:59:a5:18:5d:38:db:d0:b4: 25:a1:dc:e1:87:ba:3c:1b:06:ff:a8:a3:75:95:be:4b:41:ca: 21:f3:c4:10:a2:b0:7d:8d:81:fb:02:70:bb:c6:5d:9a:67:40: 96:c6:be:97:92:5c:ae:9d:26:4f:28:7c:b0:c8:f7:9c:3f:f0: 9c:bc:69:24:63:3a:4f:da:f7:22:73:ea:e2:29:54:ae:b8:11: df:87:cd:5a:03:61:33:75:bc:61:a3:b2:50:a9:b7:79:ec:91: ae:ea:6d:2e:15:b1:c7:d8:6e:8e:ed:3c:b6:6e:ad:2f:67:4f: 87:ad:1b:c5:b3:be:ea:bc:64:27:05:cf:e6:a6:d5:6f:f4:86: c8:f5:90:fb:26:f9:75:29:38:69:3d:35:8e:33:16:a1:ed:d9: 61:6e:85:b6:c6:d4:28:f5:f5:00:3e:83:00:a3:9a:9e:c1:a2: db:8a:10:97:d8:b5:92:bd:ac:76:f8:35:f9:4d:0f:a8:33:b8: c4:47:72:dd:7c:52:15:85:3b:33:39:d7:a9:4a:69:24:3f:98: f5:43:5b:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45EdnKC8GPOFRF1G+r5cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkw ZGU5ZjgwHhcNMjYwMTI2MDYwMTA4WhcNMjYwMTI3MDYwMTA4WjAzMTEwLwYDVQQD EyhjMTdiMzUwMjc2YjAwZmYxYTk3NDRlZDE3NWYzYTcxYjIzMjFhM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif2pcR7ePadrx//YNgCtF0A/YjRy vsvvmsldRu72fRPg5prMYIUfYJpjPj1+5wHq6N5zRQ50p3SYVn/P46E4mhDYgbOp ls3/UbwUF574urI++5k2XuSAlDqOy/vnLoFpmJbbPA2cz/4WdW04p4NgIDX6XECg fsTYHXnUwahSMBUrUdKChFoO64TmUyTEtwswwmM/ZbEpvtsuHcMKNE4DEN/GGRhc jIIaTAOIwPRLjUHKfbP2K486NVnroUiMGBGg3w+4WYQdy4sFtVqHrRhRDSHeLANF 6jHhLhX8j4CEWmUSVVcvnPZID+pbaBdOIX+hl5yZ3hthD9W3pnubR6EXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF7NQJ2sA/xqXRO0XXzpxsjIaPrMB8GA1UdIwQY MBaAFBrcAJPFr4lM9SC1k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUt ZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2 LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC81MWtvT +SiO2Ji9Hx7r2IpWaaXPFGgSNWO8g47NDdwwkbBtwsok8TiiMLW741mlGF0429C0 JaHc4Ye6PBsG/6ijdZW+S0HKIfPEEKKwfY2B+wJwu8ZdmmdAlsa+l5Jcrp0mTyh8 sMj3nD/wnLxpJGM6T9r3InPq4ilUrrgR34fNWgNhM3W8YaOyUKm3eeyRruptLhWx x9huju08tm6tL2dPh60bxbO+6rxkJwXP5qbVb/SGyPWQ+yb5dSk4aT01jjMWoe3Z YW6FtsbUKPX1AD6DAKOansGi24oQl9i1kr2sdvg1+U0PqDO4xEdy3XxSFYU7MznX qUppJD+Y9UNbOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:24 2026 by rpki-client