This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json) Hash identifier: dPUAvpJ222A2ok0zqk7Mb9N9+sUWq0TztATndJJIx+E= Subject key identifier: 71:32:7F:DA:2F:37:9B:12:88:CD:23:72:74:DD:6B:ED:7B:2B:8F:31 Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220 Certificate serial: 019BF4D0A7F0207A4DE2E3A6CF1E4E1BE8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft Manifest number: 0D7F Signing time: Sun 25 Jan 2026 11:01:13 +0000 Manifest this update: Sun 25 Jan 2026 11:01:13 +0000 Manifest next update: Mon 26 Jan 2026 11:01:13 +0000 Files and hashes: 1: QeR12R9Z_jTNrUpQr1ODF5IR7mc.roa (hash: 8rRLxS0jjdwQyV6rT5Us1y0eR8TYGMlqxEVb79Eceds=) 2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: VPq3XipZr8L+1A19oEqwz93LjyPj6y1u2KPWmHCT9iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a7:f0:20:7a:4d:e2:e3:a6:cf:1e:4e:1b:e8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220 Validity Not Before: Jan 25 11:01:13 2026 GMT Not After : Jan 26 11:01:13 2026 GMT Subject: CN=71327fda2f379b1288cd237274dd6bed7b2b8f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:5f:8c:83:10:36:eb:fa:cf:2d:99:39:d3: 5f:b8:f9:ca:6b:e4:c0:47:de:2a:8f:60:c0:c8:73: d2:ce:a3:31:07:d3:7d:07:e6:5d:81:2b:53:df:3e: ae:7e:35:2e:53:8f:cb:a9:ee:d6:9d:71:7f:99:88: 7b:d5:ae:27:15:b4:21:0f:48:e7:f3:f8:9e:42:9d: c5:40:45:22:38:f5:fe:18:eb:37:48:5d:c2:80:1c: ec:ce:30:9e:fe:9f:2d:33:31:48:0a:0e:76:75:89: 16:9f:c4:69:9f:73:f6:a5:30:3a:4f:c5:17:fd:b7: e8:02:9e:55:bb:38:a2:77:95:6c:d3:25:58:66:dc: 27:06:59:eb:a6:ee:76:8d:8b:63:f3:a4:3b:03:54: ae:16:cc:18:25:cf:41:cf:f1:b8:90:2e:e5:85:a0: a0:2f:e6:0d:47:40:7b:fe:a8:39:44:13:86:58:fc: 85:03:eb:0e:82:fb:65:0d:59:5e:b5:6c:9a:8d:23: b7:5d:c2:38:47:49:35:0e:96:26:d0:b7:2d:e6:7b: b3:5e:99:84:25:ba:fa:3f:96:ee:1b:2b:bc:13:83: 3a:07:ee:d3:9c:41:2c:31:b4:49:62:62:69:b4:27: e6:c9:5b:de:f7:c6:1a:a5:6a:73:7e:52:4a:ff:9d: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:32:7F:DA:2F:37:9B:12:88:CD:23:72:74:DD:6B:ED:7B:2B:8F:31 X509v3 Authority Key Identifier: keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:c7:de:3b:95:60:bf:f0:78:1e:c0:6d:d0:33:7e:06:12: e5:03:d9:db:31:fe:ce:01:21:bd:d4:de:d1:25:dd:4d:6a:fe: ce:e1:94:5f:8a:59:fb:52:f7:68:64:53:cf:74:64:ef:64:c4: 29:02:d3:0e:5c:e0:5e:0e:27:e1:7f:39:02:98:6b:40:1e:c6: 15:e1:93:ed:f0:b1:bb:80:aa:d2:c2:e8:43:8e:fa:4b:00:3b: bf:5b:30:7f:56:5e:b5:d9:4b:4f:fc:c4:0a:7c:18:5e:76:3e: ca:3c:ab:74:9f:8b:8b:97:0d:1a:2d:88:d3:e4:6e:a1:57:50: 79:1e:ea:45:d5:3e:fc:40:f1:4b:02:57:69:39:93:e8:fe:94: f6:dd:fd:36:17:e1:f5:3e:e9:a0:7d:99:90:ab:f9:89:04:a4: 35:43:85:20:1d:ce:21:0f:05:1b:a4:c6:c6:85:f3:5f:04:2c: 21:b9:53:f4:d9:46:01:22:91:6c:f5:8d:9a:6d:e3:bd:cf:15: 8f:f4:d7:e5:8c:9b:6f:18:23:2c:f5:72:11:b0:12:c2:53:f1: ea:f8:bf:d1:0d:94:f9:b9:e3:97:06:21:48:6e:50:38:fa:0a: 65:cc:ff:ca:57:f1:10:41:cf:ec:49:48:bd:ce:63:3e:10:db: ee:61:d5:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00KfwIHpN4uOmzx5OG+ipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3 MzEyMjAwHhcNMjYwMTI1MTEwMTEzWhcNMjYwMTI2MTEwMTEzWjAzMTEwLwYDVQQD Eyg3MTMyN2ZkYTJmMzc5YjEyODhjZDIzNzI3NGRkNmJlZDdiMmI4ZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l9fjIMQNuv6zy2ZOdNfuPnKa+TA R94qj2DAyHPSzqMxB9N9B+ZdgStT3z6ufjUuU4/Lqe7WnXF/mYh71a4nFbQhD0jn 8/ieQp3FQEUiOPX+GOs3SF3CgBzszjCe/p8tMzFICg52dYkWn8Rpn3P2pTA6T8UX /bfoAp5Vuziid5Vs0yVYZtwnBlnrpu52jYtj86Q7A1SuFswYJc9Bz/G4kC7lhaCg L+YNR0B7/qg5RBOGWPyFA+sOgvtlDVletWyajSO3XcI4R0k1DpYm0Lct5nuzXpmE Jbr6P5buGyu8E4M6B+7TnEEsMbRJYmJptCfmyVve98YapWpzflJK/512KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEyf9ovN5sSiM0jcnTda+17K48xMB8GA1UdIwQY MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5 LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz7H3juV YL/weB7AbdAzfgYS5QPZ2zH+zgEhvdTe0SXdTWr+zuGUX4pZ+1L3aGRTz3Rk72TE KQLTDlzgXg4n4X85AphrQB7GFeGT7fCxu4Cq0sLoQ476SwA7v1swf1ZetdlLT/zE CnwYXnY+yjyrdJ+Li5cNGi2I0+RuoVdQeR7qRdU+/EDxSwJXaTmT6P6U9t39Nhfh 9T7poH2ZkKv5iQSkNUOFIB3OIQ8FG6TGxoXzXwQsIblT9NlGASKRbPWNmm3jvc8V j/TX5YybbxgjLPVyEbASwlPx6vi/0Q2U+bnjlwYhSG5QOPoKZcz/ylfxEEHP7ElI vc5jPhDb7mHVwA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:31 2026 by rpki-client