This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft File: GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json) Hash identifier: 5nmK6UIt9YMesltEZOkWH1VFa/z1cUE5D3kV+O/RhHY= Subject key identifier: D1:8F:7D:11:9D:23:59:9A:F0:91:0E:21:B0:73:E4:C9:1C:3A:3F:E7 Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399 Certificate serial: 019BF763E56D090501DA2CCD93D7CF603C27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft Manifest number: 146B Signing time: Sun 25 Jan 2026 23:01:17 +0000 Manifest this update: Sun 25 Jan 2026 23:01:17 +0000 Manifest next update: Mon 26 Jan 2026 23:01:17 +0000 Files and hashes: 1: ESOn4YVwMvjEwp43_BIg6dF4bME.roa (hash: R9TTpag0gjQGiKGRJHhKu7HUgpmc2rwTNbk37Twi9mw=) 2: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: JzoZ2GXFH4jzQn0eaqh+NgxXP165YU6KsE5VNiWxpPA=) 3: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=) 4: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=) 5: iwH4jBGE2r4FPhWJLTbjjI0f7js.roa (hash: p3xuYKI74MTFoejHqzogibcQQ/wIKgo2kr2v6fu/s2U=) 6: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:e5:6d:09:05:01:da:2c:cd:93:d7:cf:60:3c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193743467b4da41c6295e9351153309586ba2399 Validity Not Before: Jan 25 23:01:17 2026 GMT Not After : Jan 26 23:01:17 2026 GMT Subject: CN=d18f7d119d23599af0910e21b073e4c91c3a3fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:5b:50:85:85:23:5b:50:93:0d:0b:a6:89: 7c:35:4a:33:0c:24:5f:bb:24:3c:7d:03:17:30:1d: fc:b0:2c:16:41:f7:bc:66:ad:5e:48:ec:93:3a:16: 46:99:43:d3:7c:96:b8:fd:5b:ab:45:bd:1d:05:3a: 13:32:f9:c0:4e:7e:0f:0b:15:00:69:05:2a:a6:4e: 5d:9f:1c:cd:26:ee:1f:74:68:9d:e8:1e:08:9b:d8: 3a:a6:5c:64:54:ea:87:5d:19:21:90:e9:2f:82:2b: ed:f9:10:3c:1d:d7:e8:2b:cf:2e:47:5c:f2:63:ef: 3c:1a:9b:e4:b5:96:16:60:cd:1b:d6:eb:e9:a1:76: 3a:31:d5:6d:bf:f2:dd:25:d3:88:21:ed:fa:2d:31: 4f:ed:74:45:b1:69:12:ed:79:9a:f5:b6:03:7b:9e: fc:eb:fe:bc:0b:bc:35:51:cd:04:bf:fc:6e:b2:4d: 93:4b:2c:d1:cd:2b:c4:04:12:9b:e1:a7:82:28:b9: c6:c1:18:08:3e:fc:83:95:7f:ee:fb:60:21:ba:f0: cf:6d:14:96:5c:d8:73:b8:b2:ff:52:c3:b3:e5:0a: 62:bf:f9:dc:fd:3d:26:d5:95:52:ad:d6:b3:e3:fa: 82:c7:06:be:30:f5:98:83:03:b1:2d:6e:9d:8b:9a: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8F:7D:11:9D:23:59:9A:F0:91:0E:21:B0:73:E4:C9:1C:3A:3F:E7 X509v3 Authority Key Identifier: keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4b:7b:20:cb:54:64:b5:c8:90:5e:b7:c7:4b:ef:cf:38:56: 47:4f:dc:56:78:73:9f:74:a8:ed:10:14:b8:4d:7c:b9:3f:81: 0b:d3:46:fe:9f:a6:2b:26:30:3f:82:16:93:91:7c:c2:01:e4: 0c:ea:76:64:5e:19:7a:ef:96:52:52:94:d7:da:66:be:28:52: 17:0d:db:a8:ea:cf:26:7d:eb:15:b5:d7:ef:a4:37:1e:a2:ec: c1:0b:74:c4:58:1c:a1:84:7b:f8:eb:1f:e9:da:db:9e:2d:80: 67:bb:8b:f5:ff:4f:0c:d0:f2:45:d4:0a:f8:36:10:99:bd:0f: 12:21:67:4d:22:bb:c3:0f:a7:7e:b0:3c:6e:0b:1d:4d:be:1c: 24:2f:0b:ef:a5:99:43:23:e8:37:fd:d1:49:25:8e:45:6f:27: b0:01:19:31:92:0c:65:c3:0c:4b:7f:a1:c8:b8:26:3d:79:5a: e9:1d:33:ae:fe:49:5d:ea:67:9d:0b:03:1a:4d:33:b9:ab:02: 98:7f:c7:46:d8:0b:d4:3a:a1:0d:72:f5:23:76:d6:cd:d0:71: b9:97:22:09:17:bd:65:40:9c:01:85:a2:5a:00:50:4f:2c:4a: 61:6f:79:6f:62:d6:53:94:b4:a8:24:ef:ca:77:b1:52:85:6a: a3:3b:3c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+VtCQUB2izNk9fPYDwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi YTIzOTkwHhcNMjYwMTI1MjMwMTE3WhcNMjYwMTI2MjMwMTE3WjAzMTEwLwYDVQQD EyhkMThmN2QxMTlkMjM1OTlhZjA5MTBlMjFiMDczZTRjOTFjM2EzZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSVbUIWFI1tQkw0Lpol8NUozDCRf uyQ8fQMXMB38sCwWQfe8Zq1eSOyTOhZGmUPTfJa4/VurRb0dBToTMvnATn4PCxUA aQUqpk5dnxzNJu4fdGid6B4Im9g6plxkVOqHXRkhkOkvgivt+RA8HdfoK88uR1zy Y+88GpvktZYWYM0b1uvpoXY6MdVtv/LdJdOIIe36LTFP7XRFsWkS7Xma9bYDe578 6/68C7w1Uc0Ev/xusk2TSyzRzSvEBBKb4aeCKLnGwRgIPvyDlX/u+2AhuvDPbRSW XNhzuLL/UsOz5Qpiv/nc/T0m1ZVSrdaz4/qCxwa+MPWYgwOxLW6di5rT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGPfRGdI1ma8JEOIbBz5MkcOj/nMB8GA1UdIwQY MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct Y2E1ZmNjYmY3YThjLzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUt7IMtU ZLXIkF63x0vvzzhWR0/cVnhzn3So7RAUuE18uT+BC9NG/p+mKyYwP4IWk5F8wgHk DOp2ZF4Zeu+WUlKU19pmvihSFw3bqOrPJn3rFbXX76Q3HqLswQt0xFgcoYR7+Osf 6drbni2AZ7uL9f9PDNDyRdQK+DYQmb0PEiFnTSK7ww+nfrA8bgsdTb4cJC8L76WZ QyPoN/3RSSWORW8nsAEZMZIMZcMMS3+hyLgmPXla6R0zrv5JXepnnQsDGk0zuasC mH/HRtgL1DqhDXL1I3bWzdBxuZciCRe9ZUCcAYWiWgBQTyxKYW95b2LWU5S0qCTv ynexUoVqozs8Kw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:06 2026 by rpki-client