This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json) Hash identifier: K7T9WgdCT91UGSCUI9+xXm5vWFhwGk9VvhNY/sudRgE= Subject key identifier: 42:12:C0:D6:40:C2:65:13:32:BE:EC:31:A4:74:AD:74:41:F9:48:60 Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220 Certificate serial: 019BF6BE853E5874C9A06E7089E9C8D8B43E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft Manifest number: 0D80 Signing time: Sun 25 Jan 2026 20:00:39 +0000 Manifest this update: Sun 25 Jan 2026 20:00:39 +0000 Manifest next update: Mon 26 Jan 2026 20:00:39 +0000 Files and hashes: 1: QeR12R9Z_jTNrUpQr1ODF5IR7mc.roa (hash: 8rRLxS0jjdwQyV6rT5Us1y0eR8TYGMlqxEVb79Eceds=) 2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: QzOZCdgSbg9AI5Vhv3KpcCDApXyOkAsowJZba+7SHHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:85:3e:58:74:c9:a0:6e:70:89:e9:c8:d8:b4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220 Validity Not Before: Jan 25 20:00:39 2026 GMT Not After : Jan 26 20:00:39 2026 GMT Subject: CN=4212c0d640c2651332beec31a474ad7441f94860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:0e:68:9b:4b:06:21:50:b8:e8:5f:7d:1d: 90:0a:08:51:90:41:5a:ed:9c:cc:0d:9f:fd:9d:83: 29:61:18:bf:e8:c0:d9:13:55:a1:f3:fc:a3:6a:50: 3f:1a:2e:1f:75:da:35:c8:a0:e0:75:90:02:b4:3a: 69:65:75:05:5d:f0:f8:2e:62:a0:7c:94:36:73:7f: b3:55:90:73:b8:52:7e:34:59:a7:ca:8e:76:89:42: cb:38:e5:c1:39:b3:5f:7d:10:53:8e:09:f5:94:2d: b5:ba:ab:97:14:8a:ab:37:dc:05:da:20:98:8c:f9: 25:d7:04:c1:a0:6d:58:45:bb:67:21:22:c2:c7:a5: cb:a7:64:46:f1:75:68:4d:e1:0b:3e:d8:19:44:92: d0:a6:5d:c7:eb:48:23:89:21:f4:9d:d4:1c:91:1a: 33:1d:0f:02:fc:06:e5:fb:b1:63:a4:cb:4f:bc:0c: 6b:96:a0:3c:00:98:9b:ed:e9:50:dd:ec:f3:e0:cf: 47:9c:fe:3a:79:70:52:d0:8c:03:3d:db:59:6c:52: ca:85:42:be:25:f2:4d:4c:bd:24:c4:d0:9c:32:20: ae:b4:ca:7b:2a:ae:a4:1a:94:bb:06:60:3d:4f:40: 58:62:26:0d:f2:93:e9:e0:5f:5a:bc:9c:81:b6:81: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:C0:D6:40:C2:65:13:32:BE:EC:31:A4:74:AD:74:41:F9:48:60 X509v3 Authority Key Identifier: keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:49:98:53:d7:47:c4:c2:b2:6e:c8:ec:e3:52:bb:d9:97:8d: 7f:29:70:06:ec:43:ad:63:4e:68:6e:17:96:2f:b2:d6:f0:e0: 31:08:d2:ee:bb:58:1f:e7:fd:02:69:38:b5:5b:2e:ea:ee:c2: 17:c0:51:5b:f0:bb:ad:05:ad:c7:bd:cf:3f:a3:53:d1:6b:66: f8:35:ca:b0:65:19:bf:6d:59:90:ed:e3:3a:f1:6b:b7:8e:39: e7:90:92:0d:79:c0:2b:eb:01:97:58:7b:51:1f:db:12:c9:42: 63:24:cb:d9:72:cd:e9:18:c7:0e:53:04:5c:a8:c7:79:1c:61: 38:e4:26:af:af:4d:df:e4:4e:57:1e:22:10:51:7d:74:46:bd: de:af:33:70:32:00:8a:7a:80:02:d5:62:57:e4:e8:67:ca:d3: 11:d3:62:ea:10:7b:bf:93:a4:6c:ba:62:e3:34:a9:71:fc:13: a1:a9:83:2f:6b:77:56:18:6f:98:2d:a5:85:65:24:d0:3b:95: ae:31:37:7a:ec:ce:ec:b0:cc:8c:0d:16:bb:db:22:31:b1:c9: 0a:b1:e3:fb:de:ed:f0:1d:25:fd:68:31:12:0e:f0:66:2c:96: 73:b9:52:89:66:45:27:30:79:e1:ff:fa:a6:4d:2d:e8:e3:13: b7:7b:1d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2voU+WHTJoG5wienI2LQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3 MzEyMjAwHhcNMjYwMTI1MjAwMDM5WhcNMjYwMTI2MjAwMDM5WjAzMTEwLwYDVQQD Eyg0MjEyYzBkNjQwYzI2NTEzMzJiZWVjMzFhNDc0YWQ3NDQxZjk0ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn0OaJtLBiFQuOhffR2QCghRkEFa 7ZzMDZ/9nYMpYRi/6MDZE1Wh8/yjalA/Gi4fddo1yKDgdZACtDppZXUFXfD4LmKg fJQ2c3+zVZBzuFJ+NFmnyo52iULLOOXBObNffRBTjgn1lC21uquXFIqrN9wF2iCY jPkl1wTBoG1YRbtnISLCx6XLp2RG8XVoTeELPtgZRJLQpl3H60gjiSH0ndQckRoz HQ8C/Abl+7FjpMtPvAxrlqA8AJib7elQ3ezz4M9HnP46eXBS0IwDPdtZbFLKhUK+ JfJNTL0kxNCcMiCutMp7Kq6kGpS7BmA9T0BYYiYN8pPp4F9avJyBtoFogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEISwNZAwmUTMr7sMaR0rXRB+UhgMB8GA1UdIwQY MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5 LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkmYU9dH xMKybsjs41K72ZeNfylwBuxDrWNOaG4Xli+y1vDgMQjS7rtYH+f9Amk4tVsu6u7C F8BRW/C7rQWtx73PP6NT0Wtm+DXKsGUZv21ZkO3jOvFrt44555CSDXnAK+sBl1h7 UR/bEslCYyTL2XLN6RjHDlMEXKjHeRxhOOQmr69N3+ROVx4iEFF9dEa93q8zcDIA inqAAtViV+ToZ8rTEdNi6hB7v5OkbLpi4zSpcfwToamDL2t3VhhvmC2lhWUk0DuV rjE3euzO7LDMjA0Wu9siMbHJCrHj+97t8B0l/WgxEg7wZiyWc7lSiWZFJzB54f/6 pk0t6OMTt3sdew== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:09 2026 by rpki-client