This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json) Hash identifier: C5hV875YkZSN1vpfkFJtHhtQrMSepa+2BDb5/DuBHvg= Subject key identifier: 40:FF:20:FE:34:A4:7B:76:16:15:17:9D:ED:AE:A2:1C:0B:2F:AE:A8 Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Certificate serial: 019BF499D981FD0977E53B9902ACA8F59E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 10:01:21 +0000 Manifest this update: Sun 25 Jan 2026 10:01:21 +0000 Manifest next update: Mon 26 Jan 2026 10:01:21 +0000 Files and hashes: 1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=) 2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=) 3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: Y8F+rxYBF+vKNsfp0ZlH9Oypvn3fGdNsZ1pWLpU0f78=) 4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:d9:81:fd:09:77:e5:3b:99:02:ac:a8:f5:9e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Validity Not Before: Jan 25 10:01:21 2026 GMT Not After : Jan 26 10:01:21 2026 GMT Subject: CN=40ff20fe34a47b761615179dedaea21c0b2faea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:ce:11:1f:c3:de:da:bd:98:41:73:46:4b: 46:80:7e:d4:4f:9d:16:ba:79:e9:1a:df:2b:b0:9f: c1:22:52:96:2f:25:51:b2:fc:17:cf:fb:05:c3:77: c1:c0:dd:ec:40:a4:b9:92:70:17:24:31:c1:a3:91: e7:ca:35:95:0a:d8:eb:15:18:11:6a:8f:06:33:e3: 90:30:39:46:2a:a0:86:44:26:4c:73:6a:c3:30:ef: cb:d6:a0:ff:8b:5b:f5:44:d1:fa:e7:4a:c2:91:86: 3d:85:7f:cc:00:47:f6:98:62:9b:59:fa:71:63:47: 8b:41:c1:46:e8:56:8c:8b:b8:d6:6b:23:40:73:e2: 4d:7a:1a:9e:14:18:a9:36:36:ec:ec:f1:9d:05:34: bc:6c:40:38:a5:7d:64:b8:97:ba:5b:26:5e:34:6d: dc:c5:e7:39:28:67:ad:54:fd:dd:07:3b:c5:6f:2e: 7c:82:e3:29:5c:55:d8:ee:bb:9a:62:a5:e2:9f:8d: c4:f4:9e:c6:dc:f2:77:2f:f5:13:de:0e:8f:a3:5c: ec:32:09:9a:5d:d8:37:88:d9:47:b9:ff:4e:8f:b8: 4b:fd:fd:a5:ea:e2:82:da:02:78:b6:8c:af:4f:8b: b8:a0:f7:94:b5:dc:24:ce:81:5c:80:3f:cb:de:03: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:20:FE:34:A4:7B:76:16:15:17:9D:ED:AE:A2:1C:0B:2F:AE:A8 X509v3 Authority Key Identifier: keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:11:33:28:03:df:05:5f:66:c5:d2:8b:c7:24:f7:ba:86:88: 6f:ef:d6:de:8f:97:3d:3f:6a:b9:67:69:a1:8c:b8:2d:1e:f3: d4:44:31:02:a6:f8:e3:cf:3a:2e:d7:11:74:7a:11:51:09:9a: ac:2c:f3:a3:7f:2a:04:a6:80:8c:f4:13:2f:11:f7:ad:5b:d4: 8d:82:4a:c9:54:18:30:e4:9d:60:24:3f:d6:82:e6:1d:29:54: b9:ba:d5:09:95:54:86:d7:8f:b0:e7:cf:99:83:54:a5:5e:ff: a7:54:2c:dd:58:ed:97:1e:04:96:c4:5e:8e:ec:7c:21:f9:ef: eb:09:21:c1:10:09:4a:e8:7c:d0:dc:16:fa:6f:69:32:e9:ef: 9d:6d:65:cc:e0:95:d4:23:45:8f:0d:f5:59:60:8e:97:3f:6b: 39:e4:7e:ab:c6:3c:c9:b1:b2:8a:33:27:9d:97:07:c3:e4:17: 4c:43:4a:64:28:35:d3:fd:18:d5:18:28:2a:09:de:19:22:41: 2b:66:03:6f:88:92:94:d8:0e:22:24:34:10:d3:fa:12:66:f7: c0:44:eb:82:e9:85:30:da:09:d5:fe:b0:7a:60:38:37:99:bc: 77:4e:fb:32:c4:fb:4c:a9:8d:08:26:c4:5a:a8:9a:49:a0:06: 09:cd:6d:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mdmB/Ql35TuZAqyo9Z5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx NGM1NzEwHhcNMjYwMTI1MTAwMTIxWhcNMjYwMTI2MTAwMTIxWjAzMTEwLwYDVQQD Eyg0MGZmMjBmZTM0YTQ3Yjc2MTYxNTE3OWRlZGFlYTIxYzBiMmZhZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpTOER/D3tq9mEFzRktGgH7UT50W unnpGt8rsJ/BIlKWLyVRsvwXz/sFw3fBwN3sQKS5knAXJDHBo5HnyjWVCtjrFRgR ao8GM+OQMDlGKqCGRCZMc2rDMO/L1qD/i1v1RNH650rCkYY9hX/MAEf2mGKbWfpx Y0eLQcFG6FaMi7jWayNAc+JNehqeFBipNjbs7PGdBTS8bEA4pX1kuJe6WyZeNG3c xec5KGetVP3dBzvFby58guMpXFXY7ruaYqXin43E9J7G3PJ3L/UT3g6Po1zsMgma Xdg3iNlHuf9Oj7hL/f2l6uKC2gJ4toyvT4u4oPeUtdwkzoFcgD/L3gPB/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED/IP40pHt2FhUXne2uohwLL66oMB8GA1UdIwQY MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2 LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKREzKAPf BV9mxdKLxyT3uoaIb+/W3o+XPT9quWdpoYy4LR7z1EQxAqb44886LtcRdHoRUQma rCzzo38qBKaAjPQTLxH3rVvUjYJKyVQYMOSdYCQ/1oLmHSlUubrVCZVUhtePsOfP mYNUpV7/p1Qs3Vjtlx4ElsRejux8Ifnv6wkhwRAJSuh80NwW+m9pMunvnW1lzOCV 1CNFjw31WWCOlz9rOeR+q8Y8ybGyijMnnZcHw+QXTENKZCg10/0Y1RgoKgneGSJB K2YDb4iSlNgOIiQ0ENP6Emb3wETrgumFMNoJ1f6wemA4N5m8d077MsT7TKmNCCbE WqiaSaAGCc1tNA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:30:49 2026 by rpki-client