This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft File: GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json) Hash identifier: qMOAM8vEajHWhhrZSLGJg3+dE6Y4DldjmuX4xH7VZzE= Subject key identifier: FC:DC:19:3C:3B:28:55:7A:AD:42:2A:C2:73:8F:6F:DF:63:7B:55:0C Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84 Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84 Certificate serial: 019BF687DB4353CB8568045147DBAC833A12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft Manifest number: 0509 Signing time: Sun 25 Jan 2026 19:00:57 +0000 Manifest this update: Sun 25 Jan 2026 19:00:57 +0000 Manifest next update: Mon 26 Jan 2026 19:00:57 +0000 Files and hashes: 1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: QuULo7DSng65zuhzBykbCbqOwAhkWi6BXbeq1a5+6J4=) 2: Ip5f-rtoZ2VJ7SiwM6fpe8-kxhs.roa (hash: VpZtyINbjieT/4qcJpty0j6h8djbUlkDrnIQP/pseyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:db:43:53:cb:85:68:04:51:47:db:ac:83:3a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84 Validity Not Before: Jan 25 19:00:57 2026 GMT Not After : Jan 26 19:00:57 2026 GMT Subject: CN=fcdc193c3b28557aad422ac2738f6fdf637b550c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:2d:09:4f:6f:7f:78:67:90:51:2d:08:ee: c5:9a:96:4a:72:44:cd:28:8f:2c:97:1c:62:24:7b: 2e:31:97:aa:12:1f:ee:5c:86:28:a3:36:ac:b0:fb: ba:5a:74:b2:7c:eb:8a:05:80:f9:37:b1:ff:71:3e: 36:e7:bb:1d:c4:76:1c:02:c5:b1:4a:1b:80:e7:86: 5c:39:f1:32:0e:dc:af:dc:d6:92:d4:9b:0f:d5:bd: 8c:39:fe:f1:a6:bc:be:47:89:3d:a9:aa:00:0d:ad: 24:69:66:ca:a9:d8:a5:be:46:5c:e9:bc:06:67:b8: c4:52:47:f3:73:d4:57:84:f6:db:27:63:a3:14:e3: 0e:8d:87:ad:9c:7f:c5:3a:48:9e:97:5d:5c:c5:5b: 16:e4:cf:1d:eb:66:14:ed:4d:58:c6:10:cb:fc:45: 7f:88:7e:2c:84:00:c4:0a:bc:71:7f:53:2b:d5:11: a7:fd:d7:c0:94:3b:1c:ae:2d:3b:a8:a4:76:fb:8b: f7:fb:13:27:cf:2b:98:fb:ef:cc:e9:74:c4:25:5e: 0e:5a:5b:93:46:aa:96:d2:74:87:0c:a6:43:cb:aa: 49:f9:05:27:79:9b:81:54:90:d7:96:69:ea:30:21: 88:8e:2c:2e:cb:c4:a4:25:bb:a5:50:e6:b1:60:bd: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:19:3C:3B:28:55:7A:AD:42:2A:C2:73:8F:6F:DF:63:7B:55:0C X509v3 Authority Key Identifier: keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:07:cf:c9:80:f2:48:22:c3:20:d8:21:98:e1:92:18:e7:4d: 88:d3:92:8b:6f:c1:3a:5f:79:ec:58:e9:9d:fa:32:88:80:52: 71:ff:ab:ac:b7:7a:03:25:98:3f:f5:d6:2c:4a:64:9d:c4:ff: a8:95:f7:0e:bf:36:f9:b5:6e:66:28:c4:e3:d4:0d:3d:88:ad: 85:e0:a3:8c:e6:a2:04:37:da:ec:b1:cb:22:e0:04:18:48:eb: bf:42:76:8d:ff:be:70:76:2a:eb:a8:91:b7:2a:62:88:04:6d: 27:a9:02:2e:70:e4:97:c8:b4:02:8b:a8:87:f3:14:1e:c9:0c: e1:d3:ae:35:99:1e:10:49:8d:74:42:ff:e2:63:11:98:09:ea: 6d:ef:a4:27:61:2c:57:b4:69:10:9c:5b:5a:ac:1f:00:15:5a: fb:49:6f:b1:1c:51:ec:c5:38:fe:d5:29:e9:d9:8c:6d:06:2a: e0:ff:f2:38:0a:a2:1e:48:35:35:a4:cf:e7:39:2f:08:7e:9d: 6d:da:22:06:b6:08:6e:99:9a:e5:46:f4:6c:1c:62:60:ba:63: 8d:3a:c4:9b:92:6d:18:9b:c2:88:f5:52:ed:63:f9:f1:e7:d9: b2:4b:c2:1a:fe:49:02:bb:20:4c:19:bd:a7:35:16:5e:6b:f7: 0f:36:23:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h9tDU8uFaARRR9usgzoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmIzMmEyNjYyZjkwNWMwZDhiZjI0N2VjZTBkYmM2Nzlh MTZiODQwHhcNMjYwMTI1MTkwMDU3WhcNMjYwMTI2MTkwMDU3WjAzMTEwLwYDVQQD EyhmY2RjMTkzYzNiMjg1NTdhYWQ0MjJhYzI3MzhmNmZkZjYzN2I1NTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqMtCU9vf3hnkFEtCO7FmpZKckTN KI8slxxiJHsuMZeqEh/uXIYoozassPu6WnSyfOuKBYD5N7H/cT4257sdxHYcAsWx ShuA54ZcOfEyDtyv3NaS1JsP1b2MOf7xpry+R4k9qaoADa0kaWbKqdilvkZc6bwG Z7jEUkfzc9RXhPbbJ2OjFOMOjYetnH/FOkiel11cxVsW5M8d62YU7U1YxhDL/EV/ iH4shADECrxxf1Mr1RGn/dfAlDscri07qKR2+4v3+xMnzyuY++/M6XTEJV4OWluT RqqW0nSHDKZDy6pJ+QUneZuBVJDXlmnqMCGIjiwuy8SkJbulUOaxYL2OowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzcGTw7KFV6rUIqwnOPb99je1UMMB8GA1UdIwQY MBaAFBm7MqJmL5BcDYvyR+zg28Z5oWuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWIt YzQyMTRjNzljOGI4LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWItYzQyMTRjNzljOGI4 LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigfPyYDy SCLDINghmOGSGOdNiNOSi2/BOl957FjpnfoyiIBScf+rrLd6AyWYP/XWLEpkncT/ qJX3Dr82+bVuZijE49QNPYitheCjjOaiBDfa7LHLIuAEGEjrv0J2jf++cHYq66iR typiiARtJ6kCLnDkl8i0Aouoh/MUHskM4dOuNZkeEEmNdEL/4mMRmAnqbe+kJ2Es V7RpEJxbWqwfABVa+0lvsRxR7MU4/tUp6dmMbQYq4P/yOAqiHkg1NaTP5zkvCH6d bdoiBrYIbpma5Ub0bBxiYLpjjTrEm5JtGJvCiPVS7WP58efZskvCGv5JArsgTBm9 pzUWXmv3DzYjxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:46:47 2026 by rpki-client