This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json) Hash identifier: YyCqfcvEVIjfvV3j9NfyC4YX2zquHEmu9q+69BHYeko= Subject key identifier: B8:F2:1C:B4:57:7F:57:00:AC:4B:DE:52:DF:BD:01:A1:BC:87:A7:59 Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Certificate serial: 019BF4622ECC0267D2D92B253DF30EF3F6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft Manifest number: 1757 Signing time: Sun 25 Jan 2026 09:00:33 +0000 Manifest this update: Sun 25 Jan 2026 09:00:33 +0000 Manifest next update: Mon 26 Jan 2026 09:00:33 +0000 Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: edH5SkLMTXIJ8v0JNSazpHvQFOGzIF9VdwuEqptba7k=) 2: ti3ObmEy21V2j-0W73NVwUe3ck8.roa (hash: schWmTw6g7AB2bDtVv9F+0FZ5DtNcX/Fqd7C3rT46tM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:2e:cc:02:67:d2:d9:2b:25:3d:f3:0e:f3:f6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Validity Not Before: Jan 25 09:00:33 2026 GMT Not After : Jan 26 09:00:33 2026 GMT Subject: CN=b8f21cb4577f5700ac4bde52dfbd01a1bc87a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a7:ab:89:32:13:b4:93:1f:d5:00:84:b9:da: df:0b:7a:0c:46:d0:42:65:92:80:4f:f6:9d:8c:4c: 7f:a6:48:99:91:e8:79:e6:4c:f5:e7:90:0c:25:f2: d1:95:b5:cf:be:4d:f7:2f:b5:41:7e:a0:e7:c0:9a: 23:c2:c8:96:92:40:7c:ed:03:56:b8:9e:06:79:20: 81:86:a4:4a:4d:9c:52:c1:33:cf:20:bf:18:85:ff: 89:a9:72:00:39:99:56:cf:04:b0:cd:b1:5f:be:ea: fa:11:e0:84:13:c4:7c:4e:d9:15:3b:3d:b1:65:3c: 63:5c:29:fb:a3:45:a5:56:bc:50:32:84:5b:1a:26: ad:3e:4e:98:ff:b0:53:91:d0:09:f8:0b:ae:e2:3c: 00:35:17:d1:4b:da:89:17:80:c7:28:e7:c4:f3:b2: 36:8b:31:4f:a2:71:59:e9:06:43:f9:89:15:e4:ef: 5e:0e:66:bd:27:e7:c2:f2:fe:f5:e9:c9:4d:57:39: 65:ff:5f:84:8c:09:f9:62:7a:05:0b:2b:dd:3a:89: 49:07:44:be:da:77:95:a9:7e:1d:58:5d:23:b6:30: e6:7e:06:14:d6:b6:b9:8f:16:33:fd:41:de:c0:c8: ce:41:8a:af:a6:11:19:80:aa:4e:5a:ad:ab:07:20: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F2:1C:B4:57:7F:57:00:AC:4B:DE:52:DF:BD:01:A1:BC:87:A7:59 X509v3 Authority Key Identifier: keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:51:55:b8:67:7a:a3:70:66:21:8b:67:0c:2a:d9:4e:1d:7c: f7:72:2e:35:3a:53:9c:06:24:6d:ae:44:ef:f2:49:39:f6:69: 48:6c:da:28:c5:93:63:e0:34:ca:21:77:e1:11:c1:bd:df:92: 5f:a3:1f:dd:0b:3d:49:18:ee:f5:58:3c:63:68:91:18:41:ee: a7:a4:d4:7f:df:3f:52:5c:31:6e:42:7e:20:e8:b1:d9:6d:3e: 9a:b8:c4:c4:07:45:29:44:8f:ca:5d:2b:3b:a8:6a:43:97:9c: b4:ba:82:93:da:a5:fc:6c:16:6c:cc:fc:cc:57:ba:98:dd:4c: c7:2f:d0:4a:b4:e8:98:af:65:57:da:22:cf:8e:4a:58:a6:50: 1e:5a:b0:a4:27:64:3c:96:ca:c9:28:87:63:bc:70:79:4b:5e: 63:ae:ce:5d:48:54:b4:33:85:0f:97:32:72:3b:dc:53:db:fe: 67:ec:ca:8a:10:a6:d9:a1:dd:65:69:fe:3c:58:f3:73:ba:ef: af:29:f2:12:67:21:df:80:16:08:b1:3d:92:81:b3:29:45:2c: 2e:ba:48:00:56:db:36:24:87:03:1c:8d:66:85:ef:45:ae:93: 4d:5b:5d:2b:ec:c5:83:ce:5d:53:4c:b0:95:15:35:f7:da:4e: b9:1b:97:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yi7MAmfS2SslPfMO8/a0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy NDZiNGIwHhcNMjYwMTI1MDkwMDMzWhcNMjYwMTI2MDkwMDMzWjAzMTEwLwYDVQQD EyhiOGYyMWNiNDU3N2Y1NzAwYWM0YmRlNTJkZmJkMDFhMWJjODdhNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KeriTITtJMf1QCEudrfC3oMRtBC ZZKAT/adjEx/pkiZkeh55kz155AMJfLRlbXPvk33L7VBfqDnwJojwsiWkkB87QNW uJ4GeSCBhqRKTZxSwTPPIL8Yhf+JqXIAOZlWzwSwzbFfvur6EeCEE8R8TtkVOz2x ZTxjXCn7o0WlVrxQMoRbGiatPk6Y/7BTkdAJ+Auu4jwANRfRS9qJF4DHKOfE87I2 izFPonFZ6QZD+YkV5O9eDma9J+fC8v716clNVzll/1+EjAn5YnoFCyvdOolJB0S+ 2neVqX4dWF0jtjDmfgYU1ra5jxYz/UHewMjOQYqvphEZgKpOWq2rByAvawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjyHLRXf1cArEveUt+9AaG8h6dZMB8GA1UdIwQY MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5 LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1FVuGd6 o3BmIYtnDCrZTh1893IuNTpTnAYkba5E7/JJOfZpSGzaKMWTY+A0yiF34RHBvd+S X6Mf3Qs9SRju9Vg8Y2iRGEHup6TUf98/UlwxbkJ+IOix2W0+mrjExAdFKUSPyl0r O6hqQ5ectLqCk9ql/GwWbMz8zFe6mN1Mxy/QSrTomK9lV9oiz45KWKZQHlqwpCdk PJbKySiHY7xweUteY67OXUhUtDOFD5cycjvcU9v+Z+zKihCm2aHdZWn+PFjzc7rv rynyEmch34AWCLE9koGzKUUsLrpIAFbbNiSHAxyNZoXvRa6TTVtdK+zFg85dU0yw lRU199pOuRuX9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:35 2026 by rpki-client