This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json) Hash identifier: GlQpFSFRXfLS0/9i0dhO5Qjap0fM5gDZuoEg6n2Cbrw= Subject key identifier: 29:97:C0:A2:88:9B:7F:BB:D5:04:4A:49:68:3E:8E:53:D3:AC:BD:D0 Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63 Certificate serial: 019BF687B147EF2D416419E7E65DEB751A84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft Manifest number: 0A73 Signing time: Sun 25 Jan 2026 19:00:46 +0000 Manifest this update: Sun 25 Jan 2026 19:00:46 +0000 Manifest next update: Mon 26 Jan 2026 19:00:46 +0000 Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: oku2489Nm7ipYXkx10mXqckAwG3o9BPQIMMa8ybfP8k=) 2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b1:47:ef:2d:41:64:19:e7:e6:5d:eb:75:1a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63 Validity Not Before: Jan 25 19:00:46 2026 GMT Not After : Jan 26 19:00:46 2026 GMT Subject: CN=2997c0a2889b7fbbd5044a49683e8e53d3acbdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:27:bd:d6:33:ac:df:d0:3b:6e:a6:e7:3b: 5d:69:6b:16:59:38:2e:ae:aa:aa:37:0b:c0:e5:a8: 01:1a:fe:1c:14:9a:ce:07:0a:ca:97:eb:07:00:92: c0:30:7a:08:46:ce:24:b0:5d:4a:95:c9:90:00:14: 37:a8:04:fd:1b:0c:bd:85:21:62:0e:c5:ca:e5:3b: 46:d3:68:e5:70:65:a0:be:1c:14:76:1e:26:cb:41: bf:b1:18:4a:2a:df:9c:5a:61:e1:c0:a7:d1:ab:20: 30:45:4a:b2:24:19:83:7a:56:9c:b0:00:09:d8:32: 6a:0a:0a:d1:68:4c:0f:05:98:dd:68:da:8b:62:6e: a4:90:03:40:31:75:0c:fd:93:46:9a:2d:d4:c5:cd: 22:18:2c:23:a3:2f:98:c5:e8:ee:7f:e9:e7:1f:51: 41:7c:d2:0d:fa:e3:f1:d6:3b:01:e5:50:c0:a4:39: ed:e4:88:c7:81:e4:9a:f4:f0:f5:e0:7e:1c:3f:bf: 3f:e4:96:0a:27:0e:2a:95:bd:8f:79:9d:84:1d:73: 7b:75:eb:df:d4:55:78:94:af:1b:a0:94:28:c6:6e: d3:dc:ff:55:5a:11:10:00:28:5e:08:9f:3f:40:09: df:4f:19:cb:b6:7e:51:f8:e9:3c:b7:3d:af:45:f7: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:97:C0:A2:88:9B:7F:BB:D5:04:4A:49:68:3E:8E:53:D3:AC:BD:D0 X509v3 Authority Key Identifier: keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:47:b4:ec:b3:17:bd:9c:d6:ec:7a:1a:ab:f9:58:9b:be:30: a1:27:8c:23:c8:38:e3:e5:12:31:e7:5a:48:e7:67:05:a2:70: b4:e7:58:cb:e3:6a:1c:bd:12:2a:29:0b:d3:9b:98:df:e6:21: d9:7c:82:8b:c2:e2:76:4b:f0:a2:bd:c0:0f:dd:2f:41:46:07: 07:a2:69:0a:cc:c8:46:a7:ca:29:80:28:8c:e1:3e:11:b1:fa: 1a:58:16:cb:ad:40:d6:4c:c5:85:3b:50:9d:bf:7d:65:7a:c4: 49:f3:df:17:7f:80:07:db:c8:77:72:c9:7b:6c:c4:59:24:ce: a4:1f:41:ae:05:d6:33:07:b8:b2:7c:7f:6e:10:44:6b:4d:3d: f5:a9:0f:f9:52:43:18:08:5f:45:be:6b:72:13:e2:e2:43:33: 00:b3:f5:39:b6:9a:43:38:a9:5b:8f:b0:fb:8c:ce:03:64:a8: 82:12:c1:e9:6a:7d:14:c7:db:47:f0:1e:af:56:52:c6:e5:eb: e8:34:21:03:d7:e1:d3:17:1b:d7:ad:c9:fb:cc:ae:17:0d:3c: 21:79:bc:09:af:2e:cd:0a:12:08:06:b2:65:6f:8f:16:76:ba: f8:b5:53:7f:ba:0d:b4:e4:3f:38:23:23:22:5f:e4:6a:26:0e: 82:3a:8e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7FH7y1BZBnn5l3rdRqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh MTliNjMwHhcNMjYwMTI1MTkwMDQ2WhcNMjYwMTI2MTkwMDQ2WjAzMTEwLwYDVQQD EygyOTk3YzBhMjg4OWI3ZmJiZDUwNDRhNDk2ODNlOGU1M2QzYWNiZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXMnvdYzrN/QO26m5ztdaWsWWTgu rqqqNwvA5agBGv4cFJrOBwrKl+sHAJLAMHoIRs4ksF1KlcmQABQ3qAT9Gwy9hSFi DsXK5TtG02jlcGWgvhwUdh4my0G/sRhKKt+cWmHhwKfRqyAwRUqyJBmDelacsAAJ 2DJqCgrRaEwPBZjdaNqLYm6kkANAMXUM/ZNGmi3Uxc0iGCwjoy+Yxejuf+nnH1FB fNIN+uPx1jsB5VDApDnt5IjHgeSa9PD14H4cP78/5JYKJw4qlb2PeZ2EHXN7devf 1FV4lK8boJQoxm7T3P9VWhEQACheCJ8/QAnfTxnLtn5R+Ok8tz2vRfc2MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmXwKKIm3+71QRKSWg+jlPTrL3QMB8GA1UdIwQY MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEe07LMX vZzW7Hoaq/lYm74woSeMI8g44+USMedaSOdnBaJwtOdYy+NqHL0SKikL05uY3+Yh 2XyCi8Lidkvwor3AD90vQUYHB6JpCszIRqfKKYAojOE+EbH6GlgWy61A1kzFhTtQ nb99ZXrESfPfF3+AB9vId3LJe2zEWSTOpB9BrgXWMwe4snx/bhBEa0099akP+VJD GAhfRb5rchPi4kMzALP1ObaaQzipW4+w+4zOA2SoghLB6Wp9FMfbR/Aer1ZSxuXr 6DQhA9fh0xcb163J+8yuFw08IXm8Ca8uzQoSCAayZW+PFna6+LVTf7oNtOQ/OCMj Il/kaiYOgjqOIg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:45 2026 by rpki-client