This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json) Hash identifier: MwFLztLr8QR2q6Osoqm0ONisD3uKIoXn+ZQ/vWv6BB0= Subject key identifier: 54:F4:27:6F:58:42:26:6D:AE:D4:D2:BD:E5:A0:F9:90:1F:FA:EA:F2 Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e Certificate serial: 019BF5AC839689559178786B3D599FF1D334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft Manifest number: 0311 Signing time: Sun 25 Jan 2026 15:01:22 +0000 Manifest this update: Sun 25 Jan 2026 15:01:22 +0000 Manifest next update: Mon 26 Jan 2026 15:01:22 +0000 Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: Fh1NsUxV/pWF8WylK2wQPk8jGxqQhjuCPpn27mKhkfw=) 2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:83:96:89:55:91:78:78:6b:3d:59:9f:f1:d3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e Validity Not Before: Jan 25 15:01:22 2026 GMT Not After : Jan 26 15:01:22 2026 GMT Subject: CN=54f4276f5842266daed4d2bde5a0f9901ffaeaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:6c:60:7d:00:60:c6:9f:66:cf:76:ec:46: 6e:e8:00:5f:1c:f2:7e:02:bd:a3:74:5b:16:fe:1d: 6e:ad:6f:0b:ee:0a:16:90:71:55:b6:ec:2a:2d:e2: 8f:99:29:f4:5a:1f:c9:9e:7f:df:30:2f:87:ce:1b: 15:4a:49:24:51:00:88:bf:55:6a:04:57:93:d7:ec: c4:16:85:33:70:65:0a:29:46:01:8e:1d:52:e0:24: 9b:81:92:7b:0e:36:99:8a:e1:2a:17:11:3b:61:a7: 31:43:6b:ef:54:62:c1:51:14:27:2a:8d:45:25:5c: 19:c6:3e:df:67:1e:61:fa:e3:9e:da:d6:ea:c9:5b: 6d:9e:e1:ef:fc:82:86:be:50:26:89:09:3b:ab:3f: ed:61:95:7b:a2:7f:e5:63:a0:6d:e6:24:cd:3f:11: cd:9b:71:21:b4:7b:31:6b:12:cb:82:68:82:22:4f: 91:9d:4e:3b:e6:7e:7b:f6:b0:7f:8d:49:0a:e2:2a: dc:d5:12:c5:1d:66:02:60:57:01:ff:fd:31:24:e3: 82:09:ff:c2:4d:e1:7e:84:51:a0:56:17:e5:f1:02: b5:8e:cf:45:e7:38:86:90:5c:c5:c1:93:e3:6c:ab: 6a:04:0a:ad:cb:b0:2c:3a:34:a0:0b:95:6b:31:9a: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:27:6F:58:42:26:6D:AE:D4:D2:BD:E5:A0:F9:90:1F:FA:EA:F2 X509v3 Authority Key Identifier: keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cd:46:fd:8e:cf:1e:70:81:09:19:2c:5b:1f:56:e7:7c:59: ef:fc:b1:ee:9e:fa:84:ab:eb:1b:87:06:c0:7c:6a:0d:c0:7e: e7:da:01:f2:e5:a5:0d:60:c2:21:0c:1e:7b:17:c0:10:32:74: 8d:17:2d:4b:b3:f6:56:f4:f7:86:e0:69:69:77:a1:8a:98:a7: 50:1a:94:2b:4a:1c:02:fd:d8:23:13:cc:3f:74:de:80:9e:8a: 94:c4:76:01:fb:b0:35:7f:88:93:34:b6:87:d6:4c:d0:ea:4a: 0a:3c:8d:24:8a:e1:7a:ba:6a:64:e2:03:99:6d:5a:50:40:8b: ae:1f:1d:9c:e5:33:57:98:25:0c:5b:12:41:42:22:58:89:34: 57:4e:ca:22:47:6a:6e:be:a4:10:5a:85:4c:22:72:ef:df:b5: 3a:53:32:63:d0:2c:02:a3:bf:6a:83:89:b0:c2:98:5b:9b:85: 52:fb:31:e5:c6:c6:67:dd:9f:c8:21:ad:0a:8c:2e:0c:1d:ae: e5:3d:f4:a3:c0:9e:43:c8:3b:f6:56:50:b8:4e:72:91:d6:23: b1:77:d3:38:7e:23:60:32:14:6f:01:fd:c4:a6:9f:b6:ce:a3: 36:1c:cc:98:14:b5:99:35:66:00:a5:d2:b4:48:cb:a9:12:9b: a7:39:15:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIOWiVWReHhrPVmf8dM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy YzdiMmUwHhcNMjYwMTI1MTUwMTIyWhcNMjYwMTI2MTUwMTIyWjAzMTEwLwYDVQQD Eyg1NGY0Mjc2ZjU4NDIyNjZkYWVkNGQyYmRlNWEwZjk5MDFmZmFlYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTpsYH0AYMafZs927EZu6ABfHPJ+ Ar2jdFsW/h1urW8L7goWkHFVtuwqLeKPmSn0Wh/Jnn/fMC+HzhsVSkkkUQCIv1Vq BFeT1+zEFoUzcGUKKUYBjh1S4CSbgZJ7DjaZiuEqFxE7YacxQ2vvVGLBURQnKo1F JVwZxj7fZx5h+uOe2tbqyVttnuHv/IKGvlAmiQk7qz/tYZV7on/lY6Bt5iTNPxHN m3EhtHsxaxLLgmiCIk+RnU475n579rB/jUkK4irc1RLFHWYCYFcB//0xJOOCCf/C TeF+hFGgVhfl8QK1js9F5ziGkFzFwZPjbKtqBAqty7AsOjSgC5VrMZqoGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT0J29YQiZtrtTSveWg+ZAf+uryMB8GA1UdIwQY MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt NGNmOGNmNGZmNmNkLzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs1G/Y7P HnCBCRksWx9W53xZ7/yx7p76hKvrG4cGwHxqDcB+59oB8uWlDWDCIQweexfAEDJ0 jRctS7P2VvT3huBpaXehipinUBqUK0ocAv3YIxPMP3TegJ6KlMR2AfuwNX+IkzS2 h9ZM0OpKCjyNJIrherpqZOIDmW1aUECLrh8dnOUzV5glDFsSQUIiWIk0V07KIkdq br6kEFqFTCJy79+1OlMyY9AsAqO/aoOJsMKYW5uFUvsx5cbGZ92fyCGtCowuDB2u 5T30o8CeQ8g79lZQuE5ykdYjsXfTOH4jYDIUbwH9xKafts6jNhzMmBS1mTVmAKXS tEjLqRKbpzkVrw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:30 2026 by rpki-client