This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json) Hash identifier: NHczSdtE2LQ9/bHkB4OlPMKqkilumnNaKkPGzVeH/n0= Subject key identifier: BA:19:CE:01:18:54:F0:06:B9:7D:E1:9C:0F:C5:EB:3F:5A:4F:F7:88 Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Certificate serial: 019BF6F5BC9D855CE84CD034E7A789C3D76C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:00:58 +0000 Manifest this update: Sun 25 Jan 2026 21:00:58 +0000 Manifest next update: Mon 26 Jan 2026 21:00:58 +0000 Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=) 2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: G5PQyL/3O/oV6OYqK1wQMtEHBzPeh8Vj1a769H747w0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:bc:9d:85:5c:e8:4c:d0:34:e7:a7:89:c3:d7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Validity Not Before: Jan 25 21:00:58 2026 GMT Not After : Jan 26 21:00:58 2026 GMT Subject: CN=ba19ce011854f006b97de19c0fc5eb3f5a4ff788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:64:20:bf:6e:15:88:5a:17:90:82:83:39: 5c:b3:c2:d6:14:3c:af:b3:63:62:d5:ec:f5:e1:fc: 3e:9d:89:4a:f9:5d:15:88:0a:d5:36:e8:d9:81:83: 87:3e:b0:51:a3:fb:af:0f:87:41:83:1d:73:b2:c0: cf:bd:f2:d9:9d:cf:81:3d:ae:74:19:f7:18:f8:4c: 79:9c:18:83:5d:98:e6:03:74:a9:2b:20:bd:9e:09: 44:45:05:91:66:9f:9d:11:b8:d0:d6:e1:da:bb:5a: 98:a5:e7:d8:4a:5d:6d:e0:d4:f3:af:22:b9:35:e8: 9c:ad:10:b5:de:7e:91:4b:99:20:02:61:05:4b:46: 0d:9f:e4:9b:83:69:32:c2:16:9c:90:16:7b:bf:af: 7e:3c:ff:2c:35:0a:6d:8f:02:de:78:57:b3:9c:38: e7:1d:9a:1c:0a:51:74:af:5f:0c:fe:4a:a5:74:f8: 53:60:15:ed:d2:f9:05:bc:2e:f3:2c:94:58:67:72: ec:de:25:c9:d2:50:c4:99:04:5e:f2:9e:c3:45:29: 0c:cb:d1:1f:52:00:13:3b:86:b1:cd:e8:7e:a6:1e: 14:f8:5d:44:7a:30:6b:29:97:0f:16:30:fb:46:10: da:aa:e5:92:94:19:11:fd:ff:8e:c7:c2:f7:cb:c0: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:19:CE:01:18:54:F0:06:B9:7D:E1:9C:0F:C5:EB:3F:5A:4F:F7:88 X509v3 Authority Key Identifier: keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:b0:4a:6e:38:d8:60:7d:76:b5:26:8f:b4:f5:9f:91:0a: a4:f9:6a:e3:6a:f3:73:41:32:a4:9e:ec:a5:56:e6:3d:f5:13: 8e:c8:70:75:77:ad:3d:76:05:58:42:5a:ac:67:88:f6:4d:18: fb:43:ca:b2:27:bd:a7:10:c5:25:a4:98:67:e3:70:72:78:cc: ad:d1:19:55:8d:a8:94:13:28:c8:ca:76:44:3c:a9:03:95:87: 68:e6:8f:92:5f:2b:fd:9d:4c:db:a4:f4:52:42:07:33:14:c5: 58:07:3e:c7:bf:0e:af:11:53:4a:49:bf:35:a9:3a:02:d2:9d: 73:37:83:89:9a:56:78:97:52:a1:11:6d:9b:3c:44:ec:8e:3a: 30:08:75:a3:af:46:70:c0:c5:29:ef:77:a0:fd:ed:4f:87:04: 61:21:7e:29:5f:b1:c0:a3:38:1f:cb:c2:c6:0b:3f:8a:68:45: 1b:ca:02:76:20:fc:b8:ec:ae:2b:88:a1:d7:b4:7d:cf:32:57: b6:44:a6:d2:5f:88:51:69:f5:16:75:96:82:33:48:e3:94:a4: ae:8c:05:a6:19:c1:c5:6f:2e:d4:24:87:77:17:1c:92:e6:04: 60:c4:d4:4a:ae:28:50:cd:f1:5d:de:56:c6:ce:e2:fc:d2:63: 81:e7:f5:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29bydhVzoTNA056eJw9dsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0 ODk2YWIwHhcNMjYwMTI1MjEwMDU4WhcNMjYwMTI2MjEwMDU4WjAzMTEwLwYDVQQD EyhiYTE5Y2UwMTE4NTRmMDA2Yjk3ZGUxOWMwZmM1ZWIzZjVhNGZmNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgdkIL9uFYhaF5CCgzlcs8LWFDyv s2Ni1ez14fw+nYlK+V0ViArVNujZgYOHPrBRo/uvD4dBgx1zssDPvfLZnc+BPa50 GfcY+Ex5nBiDXZjmA3SpKyC9nglERQWRZp+dEbjQ1uHau1qYpefYSl1t4NTzryK5 NeicrRC13n6RS5kgAmEFS0YNn+Sbg2kywhackBZ7v69+PP8sNQptjwLeeFeznDjn HZocClF0r18M/kqldPhTYBXt0vkFvC7zLJRYZ3Ls3iXJ0lDEmQRe8p7DRSkMy9Ef UgATO4axzeh+ph4U+F1EejBrKZcPFjD7RhDaquWSlBkR/f+Ox8L3y8BYFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoZzgEYVPAGuX3hnA/F6z9aT/eIMB8GA1UdIwQY MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt NWU3MDBkZDZiOWVlLzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdmwSm44 2GB9drUmj7T1n5EKpPlq42rzc0EypJ7spVbmPfUTjshwdXetPXYFWEJarGeI9k0Y +0PKsie9pxDFJaSYZ+NwcnjMrdEZVY2olBMoyMp2RDypA5WHaOaPkl8r/Z1M26T0 UkIHMxTFWAc+x78OrxFTSkm/Nak6AtKdczeDiZpWeJdSoRFtmzxE7I46MAh1o69G cMDFKe93oP3tT4cEYSF+KV+xwKM4H8vCxgs/imhFG8oCdiD8uOyuK4ih17R9zzJX tkSm0l+IUWn1FnWWgjNI45SkrowFphnBxW8u1CSHdxcckuYEYMTUSq4oUM3xXd5W xs7i/NJjgef1mQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:38 2026 by rpki-client