This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json) Hash identifier: teGycTemhVh9/hjGeqGgd1Gq/Q1cIHzb2fJz8n27ahY= Subject key identifier: E7:EA:97:0A:0B:9E:B4:38:01:9E:5C:A0:8D:FD:63:C5:7A:10:BD:79 Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Certificate serial: 019BF72D8054EB024DA78AB3984EF7A9675C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft Manifest number: 073A Signing time: Sun 25 Jan 2026 22:01:52 +0000 Manifest this update: Sun 25 Jan 2026 22:01:52 +0000 Manifest next update: Mon 26 Jan 2026 22:01:52 +0000 Files and hashes: 1: P8LunT7NWyGTGPbLtH4shJpoGP0.roa (hash: TbFuXtQTiW0SZnaPUm+pr7Lb/RImoBN9F9vrbRZOLrA=) 2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: a0qktZwY23bdkjv3Gcfwn/l6CyLS9MiXjba7P9Rus0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:80:54:eb:02:4d:a7:8a:b3:98:4e:f7:a9:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Validity Not Before: Jan 25 22:01:52 2026 GMT Not After : Jan 26 22:01:52 2026 GMT Subject: CN=e7ea970a0b9eb438019e5ca08dfd63c57a10bd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:0c:cd:d0:d5:3c:9d:82:48:1f:b6:83:26: 9b:d9:23:2a:8b:0e:14:57:18:e8:5a:55:d2:c2:98: b0:6f:69:6e:3f:f9:db:51:40:2b:94:e8:21:a6:3d: 85:00:c7:ff:c2:fb:9c:46:50:d4:cc:5f:1a:26:00: ab:f8:8a:fc:d7:b9:3b:0d:30:bf:13:4e:2f:84:0a: d2:f2:26:74:64:ee:28:5e:b1:ad:e8:6c:e3:f7:cf: 24:c3:b7:ba:21:0d:8c:a3:73:8c:1d:42:a8:d2:84: b8:89:77:c6:b0:46:16:e2:97:36:3d:fa:37:f9:f0: 72:14:39:1f:33:1f:4e:d0:72:a4:73:2f:21:cd:c4: 0c:f2:fd:d0:45:78:bc:a8:58:8e:e0:03:67:ad:59: ca:2f:2a:68:21:17:5d:94:7c:32:1e:f1:b3:24:24: 8e:9b:f5:97:1b:3e:cc:0e:18:25:bb:cc:61:15:b6: a4:d5:ca:8e:57:7f:1c:5e:29:6d:1d:28:d9:40:33: bc:24:10:f6:79:67:bf:6d:0d:04:4a:a6:08:71:d8: 91:88:f3:5a:64:6d:33:c4:ea:15:2e:1c:0f:f7:9d: 44:8d:dd:3f:2f:fa:d1:8d:49:6e:d5:cf:b3:8a:65: eb:9c:ca:f5:45:d5:4e:96:2b:49:7f:ab:c4:ec:71: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:97:0A:0B:9E:B4:38:01:9E:5C:A0:8D:FD:63:C5:7A:10:BD:79 X509v3 Authority Key Identifier: keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c2:34:46:df:2b:bf:40:bd:92:7b:ed:21:83:90:ec:76:af: 9a:2e:f2:20:26:68:fd:4b:df:af:62:67:07:0f:e0:58:20:7b: f4:f3:57:0c:19:19:a2:d0:80:39:32:40:5f:cc:ba:ff:05:33: 5c:6e:54:50:3d:d4:ef:9f:48:7e:90:cb:96:c4:c4:2b:72:74: 43:52:ae:51:da:45:1f:54:f1:97:17:0f:bb:cd:18:98:2b:d5: 92:e9:e6:a1:76:73:8d:42:93:1d:9b:84:1e:99:2c:45:98:2a: 26:ec:d8:8b:c3:81:ae:ff:50:1e:26:68:63:34:bb:f0:73:26: 51:d2:b8:a1:85:15:2c:be:29:c3:78:cd:3a:c1:48:f5:ed:56: 1c:05:fb:44:29:e5:be:2e:1a:fc:80:24:52:40:c4:c8:ff:76: ed:85:86:3b:c9:f2:cc:91:8b:77:70:59:d4:7c:10:b6:68:5d: 12:71:96:7f:2e:62:cc:48:8f:d2:68:51:2c:d6:ab:39:ae:dd: aa:58:b1:e7:00:58:2a:66:d6:e0:8b:d6:0b:9e:57:07:5e:39: 9d:ae:17:23:b6:2f:82:ee:bc:b0:50:69:88:ce:20:e1:ca:1c: 49:0d:ff:af:d7:0a:a4:25:7b:03:47:5d:b5:48:91:e2:82:bf: ba:16:67:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYBU6wJNp4qzmE73qWdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDcyNTM3Y2M1NGFjMTBiNGFiZmFjYzcyYzFiNzU0YzE3 MWFmOGYwHhcNMjYwMTI1MjIwMTUyWhcNMjYwMTI2MjIwMTUyWjAzMTEwLwYDVQQD EyhlN2VhOTcwYTBiOWViNDM4MDE5ZTVjYTA4ZGZkNjNjNTdhMTBiZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqecMzdDVPJ2CSB+2gyab2SMqiw4U VxjoWlXSwpiwb2luP/nbUUArlOghpj2FAMf/wvucRlDUzF8aJgCr+Ir817k7DTC/ E04vhArS8iZ0ZO4oXrGt6Gzj988kw7e6IQ2Mo3OMHUKo0oS4iXfGsEYW4pc2Pfo3 +fByFDkfMx9O0HKkcy8hzcQM8v3QRXi8qFiO4ANnrVnKLypoIRddlHwyHvGzJCSO m/WXGz7MDhglu8xhFbak1cqOV38cXiltHSjZQDO8JBD2eWe/bQ0ESqYIcdiRiPNa ZG0zxOoVLhwP951Ejd0/L/rRjUlu1c+zimXrnMr1RdVOlitJf6vE7HHTgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfqlwoLnrQ4AZ5coI39Y8V6EL15MB8GA1UdIwQY MBaAFIDXJTfMVKwQtKv6zHLBt1TBca+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmIt MmVkMjY5Mzg0YTc0LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmItMmVkMjY5Mzg0YTc0 LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcI0Rt8r v0C9knvtIYOQ7Havmi7yICZo/Uvfr2JnBw/gWCB79PNXDBkZotCAOTJAX8y6/wUz XG5UUD3U759IfpDLlsTEK3J0Q1KuUdpFH1TxlxcPu80YmCvVkunmoXZzjUKTHZuE HpksRZgqJuzYi8OBrv9QHiZoYzS78HMmUdK4oYUVLL4pw3jNOsFI9e1WHAX7RCnl vi4a/IAkUkDEyP927YWGO8nyzJGLd3BZ1HwQtmhdEnGWfy5izEiP0mhRLNarOa7d qlix5wBYKmbW4IvWC55XB145na4XI7Yvgu68sFBpiM4g4cocSQ3/r9cKpCV7A0dd tUiR4oK/uhZnuA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:28 2026 by rpki-client