This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: DtqsS3oSKSHd3H/thPANaea2bPQ3usfmlh2j7iC6uIg= Subject key identifier: 74:60:05:0A:12:34:DF:E5:CD:DF:AF:3C:FF:6A:21:3C:38:A0:AF:85 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019BF4D0BB893A972B79A94FAC95ED69052D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 01E4 Signing time: Sun 25 Jan 2026 11:01:18 +0000 Manifest this update: Sun 25 Jan 2026 11:01:18 +0000 Manifest next update: Mon 26 Jan 2026 11:01:18 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: 3t2i7D6LwCBXg2WC7kaLwhv6d6M.roa (hash: ERi3gnqWc7RLQoXaiIVWxm7fYsPyBOG1wAk9wSa8tYY=) 3: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: EYuGrhOkR5X0qgPBxW0Uc3F0dAWPjU8rjwZo5lOLHv0=) 4: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 5: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 6: PoOb7W4NWRN_AS-pm6tqUBAqQq8.roa (hash: tHkHlWPC24fo6Qw1AGu+2Iu8cbzz/uwKoHqifwDnzt0=) 7: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 8: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 9: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 10: dFj5GUqDYd98kL6xaY89BZmV-eM.roa (hash: EnCrHK5NIqJpxBDpMWNrNTC6CqIC7188rVdf1D5/tYM=) 11: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 12: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 13: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:bb:89:3a:97:2b:79:a9:4f:ac:95:ed:69:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 25 11:01:18 2026 GMT Not After : Jan 26 11:01:18 2026 GMT Subject: CN=7460050a1234dfe5cddfaf3cff6a213c38a0af85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:9e:53:ce:19:02:95:b7:44:e4:d2:71:d0: 93:d6:bc:0d:80:3e:78:15:06:99:c0:28:ba:48:8d: 8e:e3:d0:b1:3e:1a:07:ca:43:08:95:49:77:9e:e8: 24:2b:61:4f:7d:0a:e3:fb:c3:94:4e:46:f7:4e:0c: 8a:09:02:09:3a:30:ca:f0:60:a2:75:68:60:04:ae: 76:7b:33:c9:de:ff:02:3b:fe:6f:f2:af:a9:35:09: 09:2e:79:6a:44:7a:2d:dd:f3:91:2d:de:65:ae:ed: c0:c9:12:dd:74:cf:b4:b4:53:7f:de:7d:de:dc:4d: a4:2b:1b:54:58:f9:62:30:fc:5b:78:48:87:50:46: c6:9b:80:41:f5:d5:15:ca:08:80:b1:e0:55:95:2a: f9:c7:9e:ef:0a:39:9c:8e:24:5f:db:df:46:26:f4: 00:04:3a:3b:93:c7:e8:4d:2a:49:53:d2:71:af:20: e3:ff:3f:85:b4:55:6c:43:18:b6:b7:da:0e:fb:03: cc:83:31:e6:c5:2a:cd:7c:c9:aa:85:fc:41:dd:83: df:e4:60:6b:36:be:f1:5a:b3:91:8d:ff:1e:24:f8: 8f:1b:e0:df:bc:38:a3:e4:6c:87:a0:3c:2b:9b:52: 94:5d:d1:c7:c9:9d:e6:c0:a6:cc:44:69:a6:4e:72: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:60:05:0A:12:34:DF:E5:CD:DF:AF:3C:FF:6A:21:3C:38:A0:AF:85 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:54:25:db:fa:84:78:6c:4d:81:21:83:ca:df:a4:87:8a:3c: c3:6f:da:e0:1e:68:e5:39:b7:b7:a8:37:9d:ab:5c:50:62:ef: eb:6a:29:34:ef:7b:ef:be:08:bb:5a:8a:f6:fe:57:a9:d5:83: 4b:d1:bc:34:ba:b4:69:e6:bd:ca:7d:c5:4c:65:11:b6:d2:9f: f2:c7:50:86:4b:7b:df:e7:37:dc:d8:0e:8e:87:52:b7:c0:ab: ea:33:44:b9:e5:a1:0c:e6:6f:79:4f:63:82:b0:6d:c0:61:d7: b1:c8:c6:e0:38:70:08:98:ba:df:53:8c:f7:ea:24:d5:ae:62: 24:a9:bd:47:5f:bb:34:97:b9:4d:4f:ef:41:7f:69:78:d8:20: 8c:fc:e1:d4:d3:dc:14:de:15:a3:f6:82:58:47:06:83:d8:3f: 27:3d:1b:22:7e:5d:5b:b0:b2:47:cc:52:7f:1d:46:30:2a:9e: 21:41:69:c2:1c:c8:a7:e0:33:ea:13:60:46:f2:5c:b1:cf:df: 74:38:6b:ee:20:2b:eb:ef:ca:52:8c:3e:6d:da:d2:a2:54:4b: f3:1b:82:45:67:3b:45:1a:b2:75:52:d3:cd:f7:f4:cf:ab:9c: b8:c9:cf:c5:cb:5f:b7:f3:67:d8:f7:ac:bf:e3:76:52:06:16: e5:84:a8:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00LuJOpcrealPrJXtaQUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTI1MTEwMTE4WhcNMjYwMTI2MTEwMTE4WjAzMTEwLwYDVQQD Eyg3NDYwMDUwYTEyMzRkZmU1Y2RkZmFmM2NmZjZhMjEzYzM4YTBhZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ieU84ZApW3ROTScdCT1rwNgD54 FQaZwCi6SI2O49CxPhoHykMIlUl3nugkK2FPfQrj+8OUTkb3TgyKCQIJOjDK8GCi dWhgBK52ezPJ3v8CO/5v8q+pNQkJLnlqRHot3fORLd5lru3AyRLddM+0tFN/3n3e 3E2kKxtUWPliMPxbeEiHUEbGm4BB9dUVygiAseBVlSr5x57vCjmcjiRf299GJvQA BDo7k8foTSpJU9JxryDj/z+FtFVsQxi2t9oO+wPMgzHmxSrNfMmqhfxB3YPf5GBr Nr7xWrORjf8eJPiPG+DfvDij5GyHoDwrm1KUXdHHyZ3mwKbMRGmmTnL9RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRgBQoSNN/lzd+vPP9qITw4oK+FMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVQl2/qE eGxNgSGDyt+kh4o8w2/a4B5o5Tm3t6g3natcUGLv62opNO97774Iu1qK9v5XqdWD S9G8NLq0aea9yn3FTGURttKf8sdQhkt73+c33NgOjodSt8Cr6jNEueWhDOZveU9j grBtwGHXscjG4DhwCJi631OM9+ok1a5iJKm9R1+7NJe5TU/vQX9peNggjPzh1NPc FN4Vo/aCWEcGg9g/Jz0bIn5dW7CyR8xSfx1GMCqeIUFpwhzIp+Az6hNgRvJcsc/f dDhr7iAr6+/KUow+bdrSolRL8xuCRWc7RRqydVLTzff0z6ucuMnPxctft/Nn2Pes v+N2UgYW5YSosg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:09 2026 by rpki-client