This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: pgpjVjgJ5DoqiYRWTzS3F27oiGWD2ZTmxXJLEztzLcU= Subject key identifier: 8B:56:44:F1:0E:B6:F2:23:22:02:4F:32:4A:C7:C4:EE:91:61:38:8D Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019BF72D9B5AB5D7C65BD6C031816978CEFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0376 Signing time: Sun 25 Jan 2026 22:01:59 +0000 Manifest this update: Sun 25 Jan 2026 22:01:59 +0000 Manifest next update: Mon 26 Jan 2026 22:01:59 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: KrIvlC/glKyGmnKZF72WvvZXLnTiKjCoBCux/Nb5R5Q=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:9b:5a:b5:d7:c6:5b:d6:c0:31:81:69:78:ce:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jan 25 22:01:59 2026 GMT Not After : Jan 26 22:01:59 2026 GMT Subject: CN=8b5644f10eb6f22322024f324ac7c4ee9161388d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:75:2c:0d:10:f0:ae:82:57:03:16:b9:3a: 36:f9:5b:6a:84:e9:fd:40:12:c0:b9:9f:32:be:66: 16:b5:f5:59:a6:1b:08:d3:45:65:18:c4:1a:66:82: af:01:e2:34:19:b4:c6:da:99:fb:84:c0:ad:ad:3a: 00:b0:fd:26:77:9c:99:c0:96:a7:31:4e:2b:b5:80: 0f:f0:c3:c7:17:08:76:2b:fe:a5:e3:26:15:c5:1d: 29:7a:de:1f:e5:21:31:96:49:0a:bd:79:94:03:eb: c8:b3:2b:71:30:e0:54:8f:b4:19:53:41:5f:03:89: a8:cd:c7:ff:ad:e1:df:d1:6e:b9:cb:fe:0d:55:9c: 7e:89:35:a7:c9:79:0a:09:be:e9:38:ec:f5:f6:62: af:25:6f:c6:86:45:66:89:d5:a3:88:8d:b5:32:d6: 25:9a:51:24:7c:b4:36:1a:1d:d1:79:b8:3f:3e:cd: a6:ef:40:88:10:cd:77:0b:d5:aa:dd:ce:7a:ff:7a: de:04:38:11:f7:44:a2:15:fc:78:7c:81:ab:5a:6b: 4c:a0:4f:79:35:c6:88:3c:66:87:c9:2d:65:bb:96: b7:4e:6a:09:1c:0a:e0:e1:1f:3f:aa:1d:3f:a8:a4: 24:9c:52:a9:30:39:06:cd:01:ab:54:14:9b:db:34: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:44:F1:0E:B6:F2:23:22:02:4F:32:4A:C7:C4:EE:91:61:38:8D X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:11:03:63:bc:6f:ea:89:10:9e:f1:ac:05:e6:e9:8e:37:a7: 46:7c:d6:27:f9:01:17:d1:4b:33:5f:6d:1c:ae:09:d8:79:c1: ab:36:ad:a1:3b:9a:e6:0f:04:5c:3e:db:e5:cf:03:15:9f:13: 74:eb:c2:1f:b3:58:d7:79:e1:7c:ee:72:07:4e:f6:a1:00:a8: 39:26:42:7f:92:51:8d:72:db:47:9d:da:c4:a5:ec:2f:3b:42: 1f:e2:59:16:72:19:9e:69:70:f9:f8:6b:d1:83:ad:7e:ef:c3: 0f:bd:90:3f:b1:28:89:cd:a5:2d:59:d7:32:fe:f0:c6:6e:72: 5d:35:10:be:92:81:88:05:fb:8c:11:ec:59:8c:2c:bd:dc:30: e5:67:ae:32:15:73:fd:b4:ce:9a:47:be:17:ae:48:8b:ac:bf: a0:a2:08:8d:ac:45:a3:fb:98:d1:82:e1:f0:4b:bf:59:25:9b: 8b:2a:63:f9:92:9c:65:09:0a:85:1b:22:52:84:40:80:46:93: e0:a3:e3:cc:19:fd:04:06:fe:ef:b2:2c:c6:d6:ad:c7:b8:6f: 31:6a:dc:a4:ff:93:24:6c:3a:0b:e9:d8:b0:06:93:09:fd:04: d4:65:d6:44:17:e7:8c:c3:2e:52:83:06:87:aa:f3:0a:61:76: 50:1d:50:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZtatdfGW9bAMYFpeM76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMTI1MjIwMTU5WhcNMjYwMTI2MjIwMTU5WjAzMTEwLwYDVQQD Eyg4YjU2NDRmMTBlYjZmMjIzMjIwMjRmMzI0YWM3YzRlZTkxNjEzODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE91LA0Q8K6CVwMWuTo2+VtqhOn9 QBLAuZ8yvmYWtfVZphsI00VlGMQaZoKvAeI0GbTG2pn7hMCtrToAsP0md5yZwJan MU4rtYAP8MPHFwh2K/6l4yYVxR0pet4f5SExlkkKvXmUA+vIsytxMOBUj7QZU0Ff A4mozcf/reHf0W65y/4NVZx+iTWnyXkKCb7pOOz19mKvJW/GhkVmidWjiI21MtYl mlEkfLQ2Gh3Rebg/Ps2m70CIEM13C9Wq3c56/3reBDgR90SiFfx4fIGrWmtMoE95 NcaIPGaHyS1lu5a3TmoJHArg4R8/qh0/qKQknFKpMDkGzQGrVBSb2zQb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItWRPEOtvIjIgJPMkrHxO6RYTiNMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBEDY7xv 6okQnvGsBebpjjenRnzWJ/kBF9FLM19tHK4J2HnBqzatoTua5g8EXD7b5c8DFZ8T dOvCH7NY13nhfO5yB072oQCoOSZCf5JRjXLbR53axKXsLztCH+JZFnIZnmlw+fhr 0YOtfu/DD72QP7Eoic2lLVnXMv7wxm5yXTUQvpKBiAX7jBHsWYwsvdww5WeuMhVz /bTOmke+F65Ii6y/oKIIjaxFo/uY0YLh8Eu/WSWbiypj+ZKcZQkKhRsiUoRAgEaT 4KPjzBn9BAb+77Isxtatx7hvMWrcpP+TJGw6C+nYsAaTCf0E1GXWRBfnjMMuUoMG h6rzCmF2UB1QTA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:44 2026 by rpki-client