This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json) Hash identifier: JJpCOOSJXRbC4fdJWj17hlo3TRKkWs/SGQOOXkuBD00= Subject key identifier: 44:BD:D1:9B:78:7D:9B:27:3A:7A:4A:11:3B:67:F0:AD:22:D7:64:6B Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019BF42B7DA046C1282B193758D77ACAF7C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft Manifest number: 029D Signing time: Sun 25 Jan 2026 08:00:49 +0000 Manifest this update: Sun 25 Jan 2026 08:00:49 +0000 Manifest next update: Mon 26 Jan 2026 08:00:49 +0000 Files and hashes: 1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: JOCg6SwPsUFk28jyyfpQ6CqKvn8AkEIoawepWy3KZBo=) 2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=) 3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=) 4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:7d:a0:46:c1:28:2b:19:37:58:d7:7a:ca:f7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Jan 25 08:00:49 2026 GMT Not After : Jan 26 08:00:49 2026 GMT Subject: CN=44bdd19b787d9b273a7a4a113b67f0ad22d7646b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:a9:d2:93:69:ec:d7:74:d5:ee:7d:00:00: f5:c3:1c:78:ce:fd:1c:2d:07:b7:5e:a6:2b:cc:69: f6:0a:27:07:3b:35:12:2f:b2:fa:ae:e8:6a:96:f1: a2:f3:58:42:66:39:61:96:07:92:83:a2:6f:09:1a: 9b:86:d0:8f:d1:40:6c:93:ef:a9:31:ee:b5:b3:07: 74:33:a0:67:cd:f4:d8:af:94:69:ff:de:8b:b9:41: 4c:69:69:0b:62:61:21:7f:1f:92:11:8e:46:40:e7: b4:33:74:65:a9:34:14:46:9c:7b:1b:08:5f:ab:79: fa:00:82:03:7b:e4:63:11:82:19:81:fc:0c:65:7f: 9f:7f:46:40:ab:53:7f:5d:c2:4b:aa:2e:6d:8d:df: 8b:5a:ee:6c:62:8a:b1:d5:fc:a2:e9:8e:54:0c:ca: 15:c2:65:16:7e:a3:b3:6c:60:9b:2c:5e:75:43:1c: 88:ea:76:e0:d9:93:c0:e9:ce:2c:8e:72:29:bf:a1: 72:73:5c:50:c0:62:90:a0:d3:1a:cc:a4:17:99:b3: 28:9c:66:65:84:a4:0d:f0:8b:95:9c:c4:99:38:3b: 03:02:34:d0:c9:bd:c7:4c:12:b1:f3:93:df:ba:e1: 00:28:20:6b:9f:aa:fe:35:8e:dd:dc:e6:00:78:73: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BD:D1:9B:78:7D:9B:27:3A:7A:4A:11:3B:67:F0:AD:22:D7:64:6B X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:91:cc:99:47:f6:02:65:26:3d:a9:ba:26:b2:fa:f1:82:f4: 2b:92:cf:a5:fd:15:2f:ba:da:c2:1d:e5:de:8d:a9:c0:d8:e7: ad:f9:2b:5f:35:db:a8:75:70:16:af:9b:21:cc:c2:99:1e:22: c0:c3:21:07:bc:7b:15:e0:3c:2e:7f:98:8c:b6:e7:46:82:f8: f9:ab:ac:db:2c:44:22:4b:4b:e9:93:f4:1b:ce:bb:85:20:98: 31:17:b6:a2:ef:90:55:8f:21:26:31:77:e6:90:99:2e:82:cf: dc:0a:ce:b9:52:17:7e:05:cf:66:7c:6d:94:0f:9a:c9:b6:08: 6b:6a:35:43:31:42:13:48:e3:a7:a8:01:b6:a3:db:92:43:2b: dc:f5:47:ef:bc:87:4d:eb:8a:d6:0b:ae:a8:26:6d:57:c5:72: d8:31:78:26:b1:16:a8:a3:2c:20:77:7b:2c:66:b2:cd:8a:ad: 9d:53:20:0d:da:93:db:70:a9:da:c9:25:1a:64:c3:7b:24:21: 65:26:17:e7:6e:d6:f2:19:a9:c3:7b:94:a3:31:70:7b:da:76: 92:e7:d1:07:e6:df:83:b3:33:71:0f:90:15:f2:26:17:8b:fa: 2c:c7:57:a1:3c:5c:a9:e7:56:95:00:ae:5c:67:1e:85:84:c8: 89:3e:25:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K32gRsEoKxk3WNd6yvfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjYwMTI1MDgwMDQ5WhcNMjYwMTI2MDgwMDQ5WjAzMTEwLwYDVQQD Eyg0NGJkZDE5Yjc4N2Q5YjI3M2E3YTRhMTEzYjY3ZjBhZDIyZDc2NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDqp0pNp7Nd01e59AAD1wxx4zv0c LQe3XqYrzGn2CicHOzUSL7L6ruhqlvGi81hCZjlhlgeSg6JvCRqbhtCP0UBsk++p Me61swd0M6BnzfTYr5Rp/96LuUFMaWkLYmEhfx+SEY5GQOe0M3RlqTQURpx7Gwhf q3n6AIIDe+RjEYIZgfwMZX+ff0ZAq1N/XcJLqi5tjd+LWu5sYoqx1fyi6Y5UDMoV wmUWfqOzbGCbLF51QxyI6nbg2ZPA6c4sjnIpv6Fyc1xQwGKQoNMazKQXmbMonGZl hKQN8IuVnMSZODsDAjTQyb3HTBKx85PfuuEAKCBrn6r+NY7d3OYAeHMzWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES90Zt4fZsnOnpKETtn8K0i12RrMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJHMmUf2 AmUmPam6JrL68YL0K5LPpf0VL7rawh3l3o2pwNjnrfkrXzXbqHVwFq+bIczCmR4i wMMhB7x7FeA8Ln+YjLbnRoL4+aus2yxEIktL6ZP0G867hSCYMRe2ou+QVY8hJjF3 5pCZLoLP3ArOuVIXfgXPZnxtlA+aybYIa2o1QzFCE0jjp6gBtqPbkkMr3PVH77yH TeuK1guuqCZtV8Vy2DF4JrEWqKMsIHd7LGayzYqtnVMgDdqT23Cp2sklGmTDeyQh ZSYX527W8hmpw3uUozFwe9p2kufRB+bfg7MzcQ+QFfImF4v6LMdXoTxcqedWlQCu XGcehYTIiT4l6w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:29:41 2026 by rpki-client