This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json) Hash identifier: AG5NmXMXVD3k/10107afuRH8LZOiCgk/u39VsxL6pqo= Subject key identifier: 6D:6F:75:56:03:DA:66:19:64:F0:D4:27:BE:6A:71:5A:BF:D4:48:7C Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8 Certificate serial: 019BF350637AE17697590D72A51E0E8D1566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 04:01:30 +0000 Manifest this update: Sun 25 Jan 2026 04:01:30 +0000 Manifest next update: Mon 26 Jan 2026 04:01:30 +0000 Files and hashes: 1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=) 2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=) 3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: Glv9PZlHsx1ErwErtrN95h/4NAbIDG6ybATeMZXmrTg=) 4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=) 5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:63:7a:e1:76:97:59:0d:72:a5:1e:0e:8d:15:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8 Validity Not Before: Jan 25 04:01:30 2026 GMT Not After : Jan 26 04:01:30 2026 GMT Subject: CN=6d6f755603da661964f0d427be6a715abfd4487c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:da:67:05:46:f9:42:b6:f6:e4:66:66:a8: 9c:c6:d5:be:49:8b:85:12:f5:90:5e:0f:a8:2d:20: 37:12:58:10:9b:58:b5:c2:72:5a:09:cf:f8:b7:d0: 12:61:a4:55:f0:07:35:d6:fa:d3:59:de:2f:1d:2b: ad:3b:4f:37:4e:12:bd:d4:e9:11:0c:25:f1:58:79: db:db:55:e4:02:cb:15:dc:e3:6e:fc:bd:35:6c:63: 3b:a9:ee:5a:f7:9f:b3:a1:32:9c:83:7b:48:cf:be: 78:09:bd:a6:6a:b9:a5:55:76:f9:78:08:d9:4c:88: 3d:07:b9:29:e2:0f:53:f5:f4:4c:9d:f3:10:7e:a7: 01:66:6d:ba:29:2b:d6:00:34:49:b7:bf:fd:10:5f: 5a:26:7f:68:e9:ad:c4:7c:4f:c1:78:0b:02:b7:9d: e1:a6:31:e9:77:e0:67:7b:13:49:ac:eb:a7:a7:23: 91:5c:91:af:aa:2a:46:6c:c3:4b:59:17:26:ae:97: 43:35:7f:da:26:11:87:f6:05:f6:6d:36:bf:b6:f0: d3:31:ab:eb:79:5e:f9:2c:80:ca:5f:22:14:85:16: 06:d6:a3:ba:99:34:d0:5f:6c:92:c1:99:84:b9:95: a2:90:76:8d:58:9d:4e:66:fb:62:6b:04:7b:ff:81: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:75:56:03:DA:66:19:64:F0:D4:27:BE:6A:71:5A:BF:D4:48:7C X509v3 Authority Key Identifier: keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:39:4d:52:4d:bf:0f:f9:19:ac:90:c9:19:57:69:35:a3: 57:3b:6c:ca:43:00:00:63:5f:61:8a:35:c2:78:31:21:36:25: 2a:c7:c0:c5:20:97:3b:84:32:97:8a:99:16:fb:66:e4:ed:72: 9e:1b:27:ed:0c:7c:fb:4c:1f:a9:9f:67:2e:3a:b4:f7:b7:29: da:8b:06:e5:29:3f:1c:2a:53:06:fc:10:07:3a:a6:44:a3:be: a4:76:41:16:8e:18:22:01:dd:f8:b2:8b:57:c5:90:eb:8b:d0: 09:75:93:3e:30:94:fb:91:82:9e:cf:0f:a4:3c:53:16:16:75: 81:b3:f5:29:69:91:5c:bb:db:2a:42:30:e4:1c:dc:e2:da:17: 8d:d9:3f:35:85:51:a5:c9:32:5f:ce:15:d3:d0:11:78:f4:a7: bc:81:ff:6d:ed:5c:5b:72:58:e4:26:1a:bb:d3:81:42:ce:99: 7a:bf:29:6a:00:cd:90:d3:d4:3e:d4:56:be:bd:17:9e:09:7f: 2c:30:ed:e0:3c:6c:81:6b:45:5d:7c:8b:7e:12:ec:ca:09:cb: c6:b5:f2:2a:85:8f:ac:5f:73:7b:d0:c9:92:7b:2a:28:24:61: 30:0d:e0:43:c2:01:6b:62:58:b8:1b:ba:66:64:5e:59:e3:ac: d0:df:e7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUGN64XaXWQ1ypR4OjRVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj ZWU0ZDgwHhcNMjYwMTI1MDQwMTMwWhcNMjYwMTI2MDQwMTMwWjAzMTEwLwYDVQQD Eyg2ZDZmNzU1NjAzZGE2NjE5NjRmMGQ0MjdiZTZhNzE1YWJmZDQ0ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HaZwVG+UK29uRmZqicxtW+SYuF EvWQXg+oLSA3ElgQm1i1wnJaCc/4t9ASYaRV8Ac11vrTWd4vHSutO083ThK91OkR DCXxWHnb21XkAssV3ONu/L01bGM7qe5a95+zoTKcg3tIz754Cb2marmlVXb5eAjZ TIg9B7kp4g9T9fRMnfMQfqcBZm26KSvWADRJt7/9EF9aJn9o6a3EfE/BeAsCt53h pjHpd+BnexNJrOunpyORXJGvqipGbMNLWRcmrpdDNX/aJhGH9gX2bTa/tvDTMavr eV75LIDKXyIUhRYG1qO6mTTQX2ySwZmEuZWikHaNWJ1OZvtiawR7/4F3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1vdVYD2mYZZPDUJ75qcVq/1Eh8MB8GA1UdIwQY MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5 LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf85TVJN vw/5GayQyRlXaTWjVztsykMAAGNfYYo1wngxITYlKsfAxSCXO4Qyl4qZFvtm5O1y nhsn7Qx8+0wfqZ9nLjq097cp2osG5Sk/HCpTBvwQBzqmRKO+pHZBFo4YIgHd+LKL V8WQ64vQCXWTPjCU+5GCns8PpDxTFhZ1gbP1KWmRXLvbKkIw5Bzc4toXjdk/NYVR pckyX84V09ARePSnvIH/be1cW3JY5CYau9OBQs6Zer8pagDNkNPUPtRWvr0Xngl/ LDDt4DxsgWtFXXyLfhLsygnLxrXyKoWPrF9ze9DJknsqKCRhMA3gQ8IBa2JYuBu6 ZmReWeOs0N/nog== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:53 2026 by rpki-client