This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json) Hash identifier: IZaSYA2UA1UIuQFpnbuOEiMENnhUohzG+bqeRO3Zv6k= Subject key identifier: CD:B6:72:A5:93:E9:0B:70:CD:98:60:DE:7D:18:E3:B0:04:9C:48:49 Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc Certificate serial: 019BF7635CFB4419CCD3CC312F12E2970AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft Manifest number: DC Signing time: Sun 25 Jan 2026 23:00:42 +0000 Manifest this update: Sun 25 Jan 2026 23:00:42 +0000 Manifest next update: Mon 26 Jan 2026 23:00:42 +0000 Files and hashes: 1: 156cev6jxdaS9CKH_J7urLFNox0.roa (hash: IR52/Lw7/la2ANoAjFKa1rlTWLrtGkhOKVZLP6cf7EI=) 2: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: 0DOPt4WEEtb8n9aiy9G4wDN8+q8XYH4YLv4j6B8DeOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5c:fb:44:19:cc:d3:cc:31:2f:12:e2:97:0a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc Validity Not Before: Jan 25 23:00:42 2026 GMT Not After : Jan 26 23:00:42 2026 GMT Subject: CN=cdb672a593e90b70cd9860de7d18e3b0049c4849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:df:83:84:8d:4f:41:bd:b6:7a:10:4f:3f: 1c:68:0a:9a:d8:a2:98:99:2a:f0:1b:99:e7:5c:07: 20:d3:e0:8c:f1:53:18:45:99:c6:bf:93:4e:f2:dd: 3f:03:16:55:6c:bf:c4:7d:f6:bc:80:95:ef:d4:29: 9b:1f:77:c3:0a:ce:42:a2:2e:b3:3e:89:7e:63:8f: 51:a5:2a:5a:dc:7a:95:51:75:92:74:1b:4a:84:2b: e7:b6:af:5f:07:8f:d8:d1:f1:56:d8:dd:67:d2:88: 49:70:94:72:f1:80:19:3e:29:fe:ae:f9:0d:7d:40: 49:61:97:ad:44:c3:ec:f3:bb:dc:ac:a2:24:67:df: ba:77:a6:d6:43:a2:9e:86:09:30:db:a2:ed:a0:f8: 14:7e:82:0c:a6:0e:3e:67:4a:68:83:d0:9d:38:dd: 40:60:c1:21:b0:cf:c3:1f:35:da:f2:73:ea:56:d2: b7:b7:5a:3c:be:32:34:db:f5:29:4a:0a:6a:58:a6: af:6d:eb:6f:72:c3:5f:ca:64:d3:06:35:66:fe:5c: 43:00:d2:24:86:be:f8:6d:ec:41:07:8b:c2:6f:c5: 56:23:42:79:dd:68:6b:6b:20:4f:a6:93:ca:68:29: e3:6e:d4:b9:8f:7d:7b:ba:8d:4b:11:ad:4b:ea:74: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B6:72:A5:93:E9:0B:70:CD:98:60:DE:7D:18:E3:B0:04:9C:48:49 X509v3 Authority Key Identifier: keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e3:be:fd:e4:c5:b2:0b:15:e0:4d:6d:f1:6b:36:42:7c:93: 82:5e:ba:6d:6e:67:7a:f0:47:ec:0a:b2:53:ec:51:c2:be:75: 31:c2:e7:a9:12:17:1a:58:de:da:48:03:b4:af:b7:29:fd:26: fe:c1:12:8d:09:3d:af:80:b5:80:af:88:e3:d8:c9:b7:a1:62: e8:6c:3a:3b:50:7c:ba:df:8f:a1:01:33:9b:e3:21:b5:62:de: e7:65:27:5f:81:24:9a:b0:0f:a3:f1:09:00:d6:2a:c5:48:f8: e9:db:0f:50:b5:8d:53:e9:29:c7:f1:95:13:31:94:32:f4:39: 7e:06:ed:34:af:21:b2:25:dd:c0:3a:9a:2c:ad:f7:6e:78:22: ca:d7:2b:d6:db:7e:22:2b:ea:c5:53:d3:53:f9:72:6c:60:14: 14:24:45:56:36:3c:92:0a:5d:31:18:14:2a:2e:12:8c:21:f9: a3:fa:3b:70:2d:8e:1b:88:18:4d:30:5d:42:42:3c:6e:96:dc: 64:82:47:e2:c4:2c:ed:12:0e:47:15:58:00:c7:ff:18:76:68: d2:f8:68:f2:3f:e0:54:7a:fa:5a:11:b2:27:1b:6e:48:f1:0a: 31:c0:91:55:e6:c0:ba:9b:14:c7:c6:d4:3e:0c:2a:10:e4:51: 07:e1:7b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1z7RBnM08wxLxLilwrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjM1OGIyY2UwMmJhOGZmMGJhMTRlZWM1ZjMzN2E4ZGEx MWMwZGMwHhcNMjYwMTI1MjMwMDQyWhcNMjYwMTI2MjMwMDQyWjAzMTEwLwYDVQQD EyhjZGI2NzJhNTkzZTkwYjcwY2Q5ODYwZGU3ZDE4ZTNiMDA0OWM0ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr03fg4SNT0G9tnoQTz8caAqa2KKY mSrwG5nnXAcg0+CM8VMYRZnGv5NO8t0/AxZVbL/Effa8gJXv1CmbH3fDCs5Coi6z Pol+Y49RpSpa3HqVUXWSdBtKhCvntq9fB4/Y0fFW2N1n0ohJcJRy8YAZPin+rvkN fUBJYZetRMPs87vcrKIkZ9+6d6bWQ6Kehgkw26LtoPgUfoIMpg4+Z0pog9CdON1A YMEhsM/DHzXa8nPqVtK3t1o8vjI02/UpSgpqWKavbetvcsNfymTTBjVm/lxDANIk hr74bexBB4vCb8VWI0J53WhrayBPppPKaCnjbtS5j317uo1LEa1L6nRDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM22cqWT6QtwzZhg3n0Y47AEnEhJMB8GA1UdIwQY MBaAFIDzWLLOArqP8LoU7sXzN6jaEcDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUt MzUxYmZkODNmY2MxLzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUtMzUxYmZkODNmY2Mx LzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReO+/eTF sgsV4E1t8Ws2QnyTgl66bW5nevBH7AqyU+xRwr51McLnqRIXGlje2kgDtK+3Kf0m /sESjQk9r4C1gK+I49jJt6Fi6Gw6O1B8ut+PoQEzm+MhtWLe52UnX4EkmrAPo/EJ ANYqxUj46dsPULWNU+kpx/GVEzGUMvQ5fgbtNK8hsiXdwDqaLK33bngiytcr1tt+ IivqxVPTU/lybGAUFCRFVjY8kgpdMRgUKi4SjCH5o/o7cC2OG4gYTTBdQkI8bpbc ZIJH4sQs7RIORxVYAMf/GHZo0vho8j/gVHr6WhGyJxtuSPEKMcCRVebAupsUx8bU PgwqEORRB+F76Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:55:09 2026 by rpki-client