This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json) Hash identifier: AFURl4wey7pgyZ43WncEEdJI2NjSsonvKoIMs9pF+ps= Subject key identifier: 4F:12:B4:35:29:72:79:4D:88:56:4C:9F:08:27:2F:A0:16:C4:D0:C9 Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019BF6F5BB5E520EA1F7DB425F0C8CE70613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft Manifest number: 0408 Signing time: Sun 25 Jan 2026 21:00:57 +0000 Manifest this update: Sun 25 Jan 2026 21:00:57 +0000 Manifest next update: Mon 26 Jan 2026 21:00:57 +0000 Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: h+Eave2g5LahomUj2/8jzv6CjgqDkC772s87TmIGSfU=) 2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=) 3: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:bb:5e:52:0e:a1:f7:db:42:5f:0c:8c:e7:06:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Jan 25 21:00:57 2026 GMT Not After : Jan 26 21:00:57 2026 GMT Subject: CN=4f12b4352972794d88564c9f08272fa016c4d0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:2f:e9:6d:53:c5:33:04:53:5a:17:b1:37: 77:32:27:e5:06:dd:7c:fc:d4:62:2f:93:00:01:13: f8:4f:d9:75:14:65:d7:6f:99:6c:53:11:36:46:c3: 7c:dd:3e:fd:cf:9b:4a:c5:69:52:ab:d5:13:87:c5: c6:73:2a:d1:c5:aa:33:6d:5f:0d:aa:f9:02:c5:a1: f7:b5:fc:ea:79:92:54:7e:02:ec:43:a5:65:7a:63: 55:bb:49:65:ea:7a:64:54:c7:0a:98:f9:f9:70:6e: 2b:ef:12:a8:9d:05:6f:89:3f:5d:e7:2d:64:18:11: b3:9c:4a:91:73:c2:ee:80:5f:69:49:bd:50:71:0e: 9c:43:56:c3:ee:3a:81:7d:10:ff:29:49:11:e5:2f: 69:bf:41:d7:0a:d7:52:d2:76:c3:7a:e7:1c:8f:52: 35:39:7e:f0:5e:37:73:12:de:1d:b2:7b:e0:6a:80: e8:96:f9:e2:27:5e:f4:72:24:7b:b2:fb:5e:d5:18: 24:55:e2:82:39:8b:e0:c0:89:dd:bf:03:a1:7d:eb: 5e:78:9a:4e:b9:85:46:1b:1d:0b:32:87:2e:b2:75: 59:c6:12:59:2f:89:41:f4:0b:6e:c9:51:b3:f3:88: 6d:b6:d0:1f:eb:b8:78:3f:46:02:1d:4b:53:6f:14: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:12:B4:35:29:72:79:4D:88:56:4C:9F:08:27:2F:A0:16:C4:D0:C9 X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:45:dd:37:5c:18:db:df:43:32:f3:be:e8:89:3c:87:b3:f8: 58:5f:d7:55:18:28:59:01:8b:cc:dd:88:2d:57:70:94:06:33: 5f:3a:76:3b:a7:7d:cb:8a:f8:88:14:33:50:ce:43:42:8e:22: fc:02:b1:ff:46:51:1b:55:d9:74:49:fa:94:c5:56:44:bf:ec: 55:60:a2:55:7d:d6:cc:82:25:0d:ff:dc:ef:8b:ad:c1:f4:b7: 6b:16:32:21:f3:3f:cd:2c:b2:2c:96:67:bc:56:4f:a0:2b:72: a5:68:7b:87:33:90:e8:24:e6:64:29:df:89:21:07:51:89:7e: 4a:26:64:d9:94:37:72:ba:00:20:7d:56:f2:c2:2b:61:b9:8d: b2:e3:11:1a:ae:08:af:e5:61:50:20:1f:9a:be:45:b6:6f:5d: 85:73:38:88:13:4f:b4:c8:da:19:5a:86:f5:25:97:89:91:44: 7a:c4:c3:74:c5:d4:11:a6:1f:49:00:fe:f5:bd:97:cb:c7:6f: 4e:20:e4:fa:30:bd:4e:d7:91:bf:53:bc:ad:5c:cb:8e:ac:15: fc:b7:4c:09:86:da:89:98:e3:55:48:14:12:62:35:73:f7:e6: bd:df:6e:e9:2d:08:80:50:66:f1:f4:c0:f8:18:bb:a0:cc:c8: 8f:08:21:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29bteUg6h99tCXwyM5wYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjYwMTI1MjEwMDU3WhcNMjYwMTI2MjEwMDU3WjAzMTEwLwYDVQQD Eyg0ZjEyYjQzNTI5NzI3OTRkODg1NjRjOWYwODI3MmZhMDE2YzRkMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBMv6W1TxTMEU1oXsTd3MiflBt18 /NRiL5MAARP4T9l1FGXXb5lsUxE2RsN83T79z5tKxWlSq9UTh8XGcyrRxaozbV8N qvkCxaH3tfzqeZJUfgLsQ6VlemNVu0ll6npkVMcKmPn5cG4r7xKonQVviT9d5y1k GBGznEqRc8LugF9pSb1QcQ6cQ1bD7jqBfRD/KUkR5S9pv0HXCtdS0nbDeuccj1I1 OX7wXjdzEt4dsnvgaoDolvniJ170ciR7svte1RgkVeKCOYvgwIndvwOhfeteeJpO uYVGGx0LMocusnVZxhJZL4lB9AtuyVGz84htttAf67h4P0YCHUtTbxTgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8StDUpcnlNiFZMnwgnL6AWxNDJMB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEXdN1wY 299DMvO+6Ik8h7P4WF/XVRgoWQGLzN2ILVdwlAYzXzp2O6d9y4r4iBQzUM5DQo4i /AKx/0ZRG1XZdEn6lMVWRL/sVWCiVX3WzIIlDf/c74utwfS3axYyIfM/zSyyLJZn vFZPoCtypWh7hzOQ6CTmZCnfiSEHUYl+SiZk2ZQ3croAIH1W8sIrYbmNsuMRGq4I r+VhUCAfmr5Ftm9dhXM4iBNPtMjaGVqG9SWXiZFEesTDdMXUEaYfSQD+9b2Xy8dv TiDk+jC9TteRv1O8rVzLjqwV/LdMCYbaiZjjVUgUEmI1c/fmvd9u6S0IgFBm8fTA +Bi7oMzIjwgh8g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:45 2026 by rpki-client