This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: 5VYoEw75tWxZrEReHOM5ncPLyVyRk/4EaDA1jMuLxTM= Subject key identifier: 7F:75:43:98:0D:6A:71:C4:F1:CA:08:50:F6:77:44:CB:7E:77:E7:F5 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019BF53E08FBB177C3BCF9C0B44EBFC652DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0375 Signing time: Sun 25 Jan 2026 13:00:42 +0000 Manifest this update: Sun 25 Jan 2026 13:00:42 +0000 Manifest next update: Mon 26 Jan 2026 13:00:42 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: mxU2qjxUHGYIY+MrceK62eBQFpS4004jwtpE4p6nUv4=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:08:fb:b1:77:c3:bc:f9:c0:b4:4e:bf:c6:52:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jan 25 13:00:42 2026 GMT Not After : Jan 26 13:00:42 2026 GMT Subject: CN=7f7543980d6a71c4f1ca0850f67744cb7e77e7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:ac:e6:34:5e:c0:e2:f4:62:90:f3:1f:08: b5:dd:b0:f5:06:89:a7:94:1d:61:ae:b1:f7:74:5f: a3:be:67:9e:79:0e:98:b3:e9:20:ce:69:d2:3b:58: 80:ba:01:4e:7c:93:ba:7f:fe:b8:3a:13:f7:7b:60: 1a:a6:ed:12:8c:ab:34:17:b4:4a:7a:7c:25:0d:de: aa:70:9d:6c:81:fc:b1:7f:37:ed:4f:be:ef:c4:4c: 45:6a:6c:03:8d:75:ac:68:60:8a:10:b1:8a:bd:77: 87:2a:a8:85:e0:1e:b9:5e:08:c1:10:1e:2f:4e:b6: 91:dc:39:0e:f8:18:a3:23:1b:7d:e1:8c:72:da:d3: b7:70:fb:91:29:8f:f9:72:6f:b6:50:19:60:b8:71: 66:7c:87:74:55:46:4a:0a:cd:7f:f4:08:52:38:f1: 91:9f:fc:10:95:ec:d8:25:62:2a:35:dc:19:45:b6: 33:31:c5:00:ad:10:91:df:67:c1:ac:e1:3b:91:25: c3:7b:65:21:7e:12:af:24:b6:2b:11:bf:da:32:3f: 98:ac:ff:f2:2e:a3:16:ef:22:47:19:f3:c5:db:20: 70:ad:5c:2d:c7:6a:d3:3f:6d:93:ff:a5:34:bf:4c: 9a:ee:de:24:8e:0f:7d:06:1b:a6:5e:5f:67:0e:24: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:43:98:0D:6A:71:C4:F1:CA:08:50:F6:77:44:CB:7E:77:E7:F5 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:84:54:b6:f5:49:bc:9c:73:27:03:dd:be:3f:3e:b2:b6:dc: 4d:ef:7d:14:e8:36:21:ee:3f:d4:e0:39:86:14:54:bf:9a:34: d2:91:b3:85:b8:3f:e0:d9:69:6d:0d:53:a8:d1:51:2a:ae:57: 4d:57:c5:15:ad:1d:66:1a:b0:50:61:da:83:72:6d:09:c8:42: 7f:8f:9d:a9:67:1e:fa:5f:15:97:0f:b2:a9:c6:b2:7b:41:19: 93:65:84:72:b9:ec:97:85:d4:f7:37:9f:e2:94:8f:3d:11:81: 01:d3:ce:47:8c:63:bb:c3:c3:78:6e:42:bf:9d:60:42:91:70: f7:2a:e9:95:4e:6b:58:25:85:b3:5d:83:74:c1:8a:85:70:ea: 0a:f6:8a:bd:de:45:6b:f7:22:ba:a2:88:5c:f0:72:62:ba:be: 71:86:fc:1e:1d:88:1e:73:71:7e:f8:d0:61:87:b5:81:23:68: 99:c9:90:6e:52:44:56:07:61:3b:1b:e7:2a:5e:7b:e1:db:67: 17:1e:f2:a9:e7:07:7a:a4:ee:a8:86:c1:e4:07:95:2b:d6:78: d9:bc:ee:02:32:53:c5:1d:c4:6e:16:91:55:51:39:8d:82:c5: 62:30:3f:2e:64:d9:af:a5:74:95:17:3a:c0:c2:79:df:f1:ba: a1:2a:1c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pgj7sXfDvPnAtE6/xlLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMTI1MTMwMDQyWhcNMjYwMTI2MTMwMDQyWjAzMTEwLwYDVQQD Eyg3Zjc1NDM5ODBkNmE3MWM0ZjFjYTA4NTBmNjc3NDRjYjdlNzdlN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLCs5jRewOL0YpDzHwi13bD1Bomn lB1hrrH3dF+jvmeeeQ6Ys+kgzmnSO1iAugFOfJO6f/64OhP3e2Aapu0SjKs0F7RK enwlDd6qcJ1sgfyxfzftT77vxExFamwDjXWsaGCKELGKvXeHKqiF4B65XgjBEB4v TraR3DkO+BijIxt94Yxy2tO3cPuRKY/5cm+2UBlguHFmfId0VUZKCs1/9AhSOPGR n/wQlezYJWIqNdwZRbYzMcUArRCR32fBrOE7kSXDe2UhfhKvJLYrEb/aMj+YrP/y LqMW7yJHGfPF2yBwrVwtx2rTP22T/6U0v0ya7t4kjg99BhumXl9nDiT6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH91Q5gNanHE8coIUPZ3RMt+d+f1MB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoRUtvVJ vJxzJwPdvj8+srbcTe99FOg2Ie4/1OA5hhRUv5o00pGzhbg/4NlpbQ1TqNFRKq5X TVfFFa0dZhqwUGHag3JtCchCf4+dqWce+l8Vlw+yqcaye0EZk2WEcrnsl4XU9zef 4pSPPRGBAdPOR4xju8PDeG5Cv51gQpFw9yrplU5rWCWFs12DdMGKhXDqCvaKvd5F a/ciuqKIXPByYrq+cYb8Hh2IHnNxfvjQYYe1gSNomcmQblJEVgdhOxvnKl574dtn Fx7yqecHeqTuqIbB5AeVK9Z42bzuAjJTxR3EbhaRVVE5jYLFYjA/LmTZr6V0lRc6 wMJ53/G6oSoc5w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:57 2026 by rpki-client