This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json) Hash identifier: K3B8176N9Z6NprB3GCjmjZlMkUyMAHQHOLhSrbdRzhg= Subject key identifier: 23:A9:44:EA:C0:FF:52:C3:C5:78:A1:53:58:23:24:64:98:B2:C0:C0 Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019BF23D174271843EAF9C9E3FCC92433682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft Manifest number: 029C Signing time: Sat 24 Jan 2026 23:00:48 +0000 Manifest this update: Sat 24 Jan 2026 23:00:48 +0000 Manifest next update: Sun 25 Jan 2026 23:00:48 +0000 Files and hashes: 1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: j9Q3gHug+5Fp3SWH9EW/5yeZwe1yHiBRM30GGGFaX6U=) 2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=) 3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=) 4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:17:42:71:84:3e:af:9c:9e:3f:cc:92:43:36:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Jan 24 23:00:48 2026 GMT Not After : Jan 25 23:00:48 2026 GMT Subject: CN=23a944eac0ff52c3c578a1535823246498b2c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:34:b1:0a:6b:ce:bb:a6:df:f6:dc:a7:bc: 0e:26:c6:06:ac:c9:3f:ea:d9:0e:e7:84:8b:4b:10: fe:e3:9b:7f:fe:79:6e:97:6b:e9:bd:ce:0c:30:97: bc:e9:b7:0a:0b:37:bd:1e:a4:bf:5b:a0:78:df:2c: 16:3a:d0:43:29:82:95:de:54:29:25:87:45:27:03: d8:ba:5b:a2:41:a1:c4:d3:5f:7a:78:55:1a:bd:79: 1c:9d:3d:f9:a4:c0:97:21:b8:31:4b:27:56:4f:64: 34:0e:58:a9:1e:ad:21:cc:01:0a:e2:8b:44:9c:90: 9c:14:62:e7:08:79:88:f8:79:e7:22:20:f0:d1:72: 6a:2e:f1:b3:67:2b:15:dc:e3:9c:ee:98:be:f5:d3: 09:49:65:ea:7c:a6:5b:6b:9b:99:b2:bf:d0:e4:1d: 45:73:7f:72:80:3b:d8:de:57:35:40:8f:55:76:d4: 6a:70:8f:c1:16:cf:ef:5c:88:63:9b:ab:7d:57:d6: 99:28:ab:20:e5:ea:46:05:9f:36:19:77:18:f1:03: 07:a2:9d:26:8a:1c:34:50:5d:82:bc:10:8c:6e:35: d8:31:56:45:cd:a2:ed:61:11:48:f9:00:bf:28:38: df:34:4a:56:a7:99:5e:69:71:97:21:f7:76:55:67: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A9:44:EA:C0:FF:52:C3:C5:78:A1:53:58:23:24:64:98:B2:C0:C0 X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:1a:ff:2f:bb:ce:7a:a5:6b:12:e5:5a:36:40:7b:ac:56:ca: 50:84:5c:33:25:fb:a6:ee:5b:c9:b3:02:c6:08:36:32:89:9c: 79:97:88:10:63:78:e1:18:1c:7c:ad:27:52:89:09:72:62:9e: 1d:bd:1f:0a:6b:20:1f:77:bb:e5:b8:04:de:da:95:81:0d:72: 3a:da:f2:fa:66:37:7d:ed:eb:db:69:dc:dc:69:ca:b1:c9:81: 68:a9:42:63:08:7a:e3:f7:59:8e:d3:f2:02:10:93:1e:02:a6: 46:2e:96:82:81:db:dd:c7:ae:c5:34:26:3e:b8:74:ff:eb:31: 64:79:9e:23:5e:c0:ab:86:80:b5:f5:79:7f:b9:46:6a:53:4f: 36:d9:75:f9:8b:be:c5:dc:e8:01:d3:92:55:4f:05:44:84:f4: 98:70:48:04:bb:dd:61:6e:45:0c:12:69:5b:2c:9c:a7:8f:1c: ea:57:73:14:a9:ab:43:f2:20:30:f8:d0:d4:af:2b:92:57:e6: e2:7d:cf:e0:ca:e7:ee:c5:35:63:6c:61:e2:11:cf:e6:b2:77: 18:7f:05:33:1a:50:77:c0:b1:0a:f9:79:c3:1b:ff:57:fb:87: a9:b9:7c:7a:4e:c4:c1:0d:12:39:49:0b:f9:3d:e4:9e:14:2e: ba:e0:bc:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPRdCcYQ+r5yeP8ySQzaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjYwMTI0MjMwMDQ4WhcNMjYwMTI1MjMwMDQ4WjAzMTEwLwYDVQQD EygyM2E5NDRlYWMwZmY1MmMzYzU3OGExNTM1ODIzMjQ2NDk4YjJjMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEc0sQprzrum3/bcp7wOJsYGrMk/ 6tkO54SLSxD+45t//nlul2vpvc4MMJe86bcKCze9HqS/W6B43ywWOtBDKYKV3lQp JYdFJwPYuluiQaHE0196eFUavXkcnT35pMCXIbgxSydWT2Q0DlipHq0hzAEK4otE nJCcFGLnCHmI+HnnIiDw0XJqLvGzZysV3OOc7pi+9dMJSWXqfKZba5uZsr/Q5B1F c39ygDvY3lc1QI9VdtRqcI/BFs/vXIhjm6t9V9aZKKsg5epGBZ82GXcY8QMHop0m ihw0UF2CvBCMbjXYMVZFzaLtYRFI+QC/KDjfNEpWp5leaXGXIfd2VWexrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOpROrA/1LDxXihU1gjJGSYssDAMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Rr/L7vO eqVrEuVaNkB7rFbKUIRcMyX7pu5bybMCxgg2MomceZeIEGN44RgcfK0nUokJcmKe Hb0fCmsgH3e75bgE3tqVgQ1yOtry+mY3fe3r22nc3GnKscmBaKlCYwh64/dZjtPy AhCTHgKmRi6WgoHb3ceuxTQmPrh0/+sxZHmeI17Aq4aAtfV5f7lGalNPNtl1+Yu+ xdzoAdOSVU8FRIT0mHBIBLvdYW5FDBJpWyycp48c6ldzFKmrQ/IgMPjQ1K8rklfm 4n3P4Mrn7sU1Y2xh4hHP5rJ3GH8FMxpQd8CxCvl5wxv/V/uHqbl8ek7EwQ0SOUkL +T3knhQuuuC8fg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:02 2026 by rpki-client