This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json) Hash identifier: upJBh3MivW3ZBKgsVCkaAHYoG1LlqNgdIAnCyR5hmXo= Subject key identifier: 69:F0:99:91:7E:1A:4C:7C:C4:45:C8:5D:27:0C:EB:10:88:EF:C1:2D Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019BF6878F9D12321C26E781EF23F47F054F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft Manifest number: 1803 Signing time: Sun 25 Jan 2026 19:00:37 +0000 Manifest this update: Sun 25 Jan 2026 19:00:37 +0000 Manifest next update: Mon 26 Jan 2026 19:00:37 +0000 Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=) 2: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=) 3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: rfTiExFdIILUyIYkTsetdnm6tQMWIhZuYRl+jRW/a9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:8f:9d:12:32:1c:26:e7:81:ef:23:f4:7f:05:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Jan 25 19:00:37 2026 GMT Not After : Jan 26 19:00:37 2026 GMT Subject: CN=69f099917e1a4c7cc445c85d270ceb1088efc12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:eb:4d:51:6a:b2:bd:e7:e2:50:b5:52:9d: 34:26:73:b2:a0:0d:47:54:4c:39:98:2d:35:ee:da: ce:a7:75:62:0e:2c:85:c8:c0:0b:d7:f1:d1:e7:cc: ca:f1:95:44:9c:14:39:e2:19:19:f6:a2:ac:db:f3: 41:bf:2c:7e:3c:c7:1c:d7:73:19:4d:f4:df:3a:44: 10:a4:4a:56:27:67:8b:7d:e2:a7:60:cc:02:30:eb: 3b:c5:bc:b1:1c:ef:84:00:45:f7:19:fe:b1:0c:d4: 47:b7:cd:b3:3b:1a:a6:b6:0d:eb:00:30:24:c9:42: c3:6a:4c:9b:5c:4d:a4:71:3d:20:41:aa:47:e7:bb: 6a:0b:30:1b:a7:d4:39:e5:0c:bf:28:cc:3f:c7:d0: 43:c7:a0:1c:1f:68:2c:a4:9a:02:5f:20:2c:0b:ed: dd:32:0e:d3:05:48:cf:2c:72:9c:2b:ed:67:ca:45: 4c:ad:38:ff:67:7a:c7:81:de:c1:25:d6:f8:b5:a8: f2:07:73:82:40:7a:f7:d3:53:fd:66:01:7b:96:26: 60:a8:9d:e6:f6:15:67:0e:e7:12:a4:dd:ab:b3:59: b9:99:4c:4c:3a:17:b6:40:a8:61:68:ba:58:cd:91: 23:c0:0d:9e:f3:83:bd:60:9f:fe:ca:d4:1c:8b:57: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:99:91:7E:1A:4C:7C:C4:45:C8:5D:27:0C:EB:10:88:EF:C1:2D X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f4:ed:6c:70:e6:df:a5:d9:35:aa:2f:67:39:ed:1c:ce:8d: c0:04:e9:1f:b4:92:d3:5b:4a:17:87:5b:ba:13:dd:35:73:0b: ba:0d:c5:ec:5f:49:3e:78:fd:f6:42:13:c4:58:f6:6e:0b:f0: 2e:6a:ae:c3:be:fc:e7:50:ba:1c:01:5e:6f:5c:2a:c7:58:af: 7f:90:dc:a1:c0:df:84:dd:54:79:ed:68:f3:5f:54:72:6e:1f: ed:fe:71:a7:fd:35:38:48:8a:cd:cd:8f:a7:5b:19:ca:79:63: ec:1b:94:8a:8f:e7:56:f8:c3:94:ff:6c:08:5c:e5:ba:9f:83: 77:61:a6:f2:df:a2:a9:c0:81:9f:05:bc:7c:4e:98:0a:24:0a: 9b:ac:8d:41:2e:e5:93:23:c6:64:a0:a5:63:03:85:d8:01:11: d1:d8:8d:e7:c2:d6:30:34:78:04:b4:84:27:5a:a4:c4:ae:10: f9:2a:15:9e:0d:40:e3:67:94:04:8c:58:1a:11:d5:41:bd:59: 97:14:61:93:fc:f6:f0:d1:d9:0d:51:0e:dc:44:44:18:70:b2: 4d:47:b6:6a:05:aa:60:ae:f1:6c:e8:df:d4:f7:24:97:2b:89: 4b:83:c2:b6:0c:9f:99:96:63:81:87:58:28:c8:9f:e5:3c:93: e6:57:61:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4+dEjIcJueB7yP0fwVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjYwMTI1MTkwMDM3WhcNMjYwMTI2MTkwMDM3WjAzMTEwLwYDVQQD Eyg2OWYwOTk5MTdlMWE0YzdjYzQ0NWM4NWQyNzBjZWIxMDg4ZWZjMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gfrTVFqsr3n4lC1Up00JnOyoA1H VEw5mC017trOp3ViDiyFyMAL1/HR58zK8ZVEnBQ54hkZ9qKs2/NBvyx+PMcc13MZ TfTfOkQQpEpWJ2eLfeKnYMwCMOs7xbyxHO+EAEX3Gf6xDNRHt82zOxqmtg3rADAk yULDakybXE2kcT0gQapH57tqCzAbp9Q55Qy/KMw/x9BDx6AcH2gspJoCXyAsC+3d Mg7TBUjPLHKcK+1nykVMrTj/Z3rHgd7BJdb4tajyB3OCQHr301P9ZgF7liZgqJ3m 9hVnDucSpN2rs1m5mUxMOhe2QKhhaLpYzZEjwA2e84O9YJ/+ytQci1dH9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnwmZF+Gkx8xEXIXScM6xCI78EtMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/TtbHDm 36XZNaovZzntHM6NwATpH7SS01tKF4dbuhPdNXMLug3F7F9JPnj99kITxFj2bgvw Lmquw77851C6HAFeb1wqx1ivf5DcocDfhN1Uee1o819Ucm4f7f5xp/01OEiKzc2P p1sZynlj7BuUio/nVvjDlP9sCFzlup+Dd2Gm8t+iqcCBnwW8fE6YCiQKm6yNQS7l kyPGZKClYwOF2AER0diN58LWMDR4BLSEJ1qkxK4Q+SoVng1A42eUBIxYGhHVQb1Z lxRhk/z28NHZDVEO3EREGHCyTUe2agWqYK7xbOjf1PcklyuJS4PCtgyfmZZjgYdY KMif5TyT5ldhvw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:02 2026 by rpki-client