This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json) Hash identifier: nH/a13dqqP9NihvkrGnodD1Qj6yhjYBmqp84bg4nkoI= Subject key identifier: 4D:14:7F:BE:23:ED:41:AC:A0:C2:59:A5:2C:0D:BC:B0:A6:0B:57:B2 Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c Certificate serial: 019BF6BF43F6D5984F412593504458427123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft Manifest number: 0F19 Signing time: Sun 25 Jan 2026 20:01:28 +0000 Manifest this update: Sun 25 Jan 2026 20:01:28 +0000 Manifest next update: Mon 26 Jan 2026 20:01:28 +0000 Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=) 2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: noWuCjXqt+nwCMvv0gzDJwHsJcODXaBwOc1PrhxwHgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:43:f6:d5:98:4f:41:25:93:50:44:58:42:71:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Validity Not Before: Jan 25 20:01:28 2026 GMT Not After : Jan 26 20:01:28 2026 GMT Subject: CN=4d147fbe23ed41aca0c259a52c0dbcb0a60b57b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:a7:2a:06:22:d6:b8:03:d3:2b:b6:d4:58: 3a:29:4b:49:27:5f:da:38:d6:22:7d:db:ab:81:af: 64:f3:cc:b4:39:06:95:a7:42:2e:88:d2:2e:f5:e3: 0e:6d:03:de:48:e4:14:27:96:39:25:d6:ca:23:99: bc:f3:de:5d:5a:b1:b3:fb:b6:91:88:23:bf:6d:9b: 76:31:0e:f6:52:ee:6a:15:e2:37:b2:1e:cd:96:82: 4a:27:4e:33:26:03:57:73:6a:52:d8:eb:5e:9a:97: 9c:84:ec:2c:e2:12:4e:19:32:f2:a9:13:f5:e7:c9: 91:e9:07:80:ca:96:c2:92:72:c8:df:f7:f8:bd:dd: f7:b1:79:9b:14:f0:d4:2a:6d:f9:79:0e:cd:30:a5: 0c:e8:86:f0:73:00:92:6d:25:f7:25:c7:94:9f:0f: 89:5e:95:ae:49:93:a2:75:d9:c8:e0:d1:0b:21:a5: 30:c4:bf:07:8e:d2:01:84:0b:5e:bc:e0:3e:f7:05: d0:c9:29:8d:6f:a6:ab:7a:b7:aa:d0:c0:f7:e7:f6: 6a:9b:75:99:de:8d:65:2d:f0:24:5f:8d:45:a7:f5: 69:a9:a2:18:93:b3:39:8d:50:66:3e:9a:a6:ba:75: 9f:5f:bc:bd:17:22:7b:47:57:f8:d8:15:bd:cc:73: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:14:7F:BE:23:ED:41:AC:A0:C2:59:A5:2C:0D:BC:B0:A6:0B:57:B2 X509v3 Authority Key Identifier: keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e5:27:0b:97:1e:f6:8c:26:75:82:6d:93:92:c7:c6:09:5b: 53:29:f5:3c:f5:de:fd:bd:35:0a:f0:33:51:14:b8:d0:86:98: 34:12:48:ff:0b:e2:48:17:be:9d:67:77:e9:67:4b:4c:84:d7: 56:ba:f2:65:a0:1a:2f:ea:58:e0:23:79:10:2b:cc:ce:45:77: 93:ad:9a:56:50:d3:31:da:27:33:2d:31:9a:40:cb:e9:d5:e7: 23:25:b6:40:b6:67:8c:e3:62:7c:82:a7:19:ed:e7:c7:61:18: 76:48:7d:7e:ff:07:ba:79:1a:64:81:a0:e3:df:64:e0:ce:6b: 76:8a:de:bb:cd:e4:52:05:10:37:53:82:b5:7f:ea:60:ee:c5: 1f:d9:32:c7:9b:14:94:07:5d:7a:d8:0d:e2:3e:2f:90:9f:2d: 58:b7:e7:73:49:b0:7c:f2:7a:76:fc:c8:3d:97:8d:db:80:d9: 0a:bc:a6:84:ab:4d:7c:ba:df:bc:71:a5:b7:3a:8c:54:ff:d9: ed:4c:bf:2c:04:c9:b3:b4:da:b4:4c:3f:5c:ca:6b:44:b4:7d: 27:43:a6:db:a5:97:30:2e:af:d4:82:26:c9:a8:21:af:0b:e4: bd:f1:b7:6b:87:83:a6:be:0d:7a:67:7f:11:c7:55:56:25:30: 11:a1:9c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0P21ZhPQSWTUERYQnEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2 YmFlNGMwHhcNMjYwMTI1MjAwMTI4WhcNMjYwMTI2MjAwMTI4WjAzMTEwLwYDVQQD Eyg0ZDE0N2ZiZTIzZWQ0MWFjYTBjMjU5YTUyYzBkYmNiMGE2MGI1N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu6nKgYi1rgD0yu21Fg6KUtJJ1/a ONYifdurga9k88y0OQaVp0IuiNIu9eMObQPeSOQUJ5Y5JdbKI5m8895dWrGz+7aR iCO/bZt2MQ72Uu5qFeI3sh7NloJKJ04zJgNXc2pS2OtempechOws4hJOGTLyqRP1 58mR6QeAypbCknLI3/f4vd33sXmbFPDUKm35eQ7NMKUM6IbwcwCSbSX3JceUnw+J XpWuSZOiddnI4NELIaUwxL8HjtIBhAtevOA+9wXQySmNb6arereq0MD35/Zqm3WZ 3o1lLfAkX41Fp/VpqaIYk7M5jVBmPpqmunWfX7y9FyJ7R1f42BW9zHOQMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0Uf74j7UGsoMJZpSwNvLCmC1eyMB8GA1UdIwQY MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeUnC5ce 9owmdYJtk5LHxglbUyn1PPXe/b01CvAzURS40IaYNBJI/wviSBe+nWd36WdLTITX VrryZaAaL+pY4CN5ECvMzkV3k62aVlDTMdonMy0xmkDL6dXnIyW2QLZnjONifIKn Ge3nx2EYdkh9fv8HunkaZIGg499k4M5rdoreu83kUgUQN1OCtX/qYO7FH9kyx5sU lAddetgN4j4vkJ8tWLfnc0mwfPJ6dvzIPZeN24DZCrymhKtNfLrfvHGltzqMVP/Z 7Uy/LATJs7TatEw/XMprRLR9J0Om26WXMC6v1IImyaghrwvkvfG3a4eDpr4Nemd/ EcdVViUwEaGckg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:00 2026 by rpki-client