This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json) Hash identifier: Gfe9us9UUsvcutaYR6RqzIVjStIZBiU7ZxTQ1TGonTc= Subject key identifier: E4:13:33:25:50:BC:D1:DE:CF:B6:84:04:36:30:4F:B3:8F:BF:15:05 Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff Certificate serial: 019BF65149710368573F116E693B74481986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft Manifest number: 0A0C Signing time: Sun 25 Jan 2026 18:01:20 +0000 Manifest this update: Sun 25 Jan 2026 18:01:20 +0000 Manifest next update: Mon 26 Jan 2026 18:01:20 +0000 Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=) 2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: +AkkIaL4g12H3/zNJngPf19FM6r4BOMi5WyQNZ1FS0A=) 3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:49:71:03:68:57:3f:11:6e:69:3b:74:48:19:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff Validity Not Before: Jan 25 18:01:20 2026 GMT Not After : Jan 26 18:01:20 2026 GMT Subject: CN=e413332550bcd1decfb6840436304fb38fbf1505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:9e:32:c2:39:3c:7b:ef:b9:10:c5:a4:aa: ce:a0:85:e1:c7:3d:52:b1:df:1e:73:c3:a1:cf:84: f5:95:41:94:2c:9e:a5:32:f2:87:df:38:99:68:a8: d8:a9:a4:2a:48:51:b9:55:e0:81:05:2f:8c:16:5c: 23:ce:e7:71:d2:90:4e:4a:98:26:e8:d1:06:c2:f0: 8b:e5:e0:98:d7:f8:e4:d6:3e:c9:50:25:66:3d:36: 6e:fe:4c:10:55:d5:79:07:71:a4:d5:46:79:fd:06: 00:85:0d:91:44:6a:a6:83:bc:74:dc:02:39:0e:c0: c1:fd:64:0c:70:78:67:28:aa:6b:34:fb:9a:6f:ae: 9d:00:a3:37:e7:67:b3:cc:6d:5f:93:a1:af:c9:1f: 02:0e:d5:93:b8:39:8e:51:47:01:21:b3:a4:4e:03: 65:43:e4:82:20:b8:b1:59:b2:0e:2f:ba:af:d0:9f: 70:a3:ec:f8:08:0f:75:44:9f:e3:8a:42:5a:f5:b6: 44:13:d5:8d:67:22:ec:9a:28:3e:95:50:6f:43:54: b5:cd:14:55:b5:b5:85:eb:dc:3d:8d:d3:88:3a:a6: 4c:0e:91:79:97:89:27:7b:83:df:c7:25:c2:53:96: 64:d3:f7:29:d8:6d:4f:e0:0b:23:51:ff:39:aa:8c: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:13:33:25:50:BC:D1:DE:CF:B6:84:04:36:30:4F:B3:8F:BF:15:05 X509v3 Authority Key Identifier: keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:79:c4:ec:81:da:36:6f:f2:38:8f:b2:97:23:b6:40:56:b5: d5:c3:b7:7e:1e:b3:4a:d5:61:21:f3:da:50:72:39:be:f5:29: 15:54:f9:6e:35:7a:01:a1:58:b7:40:aa:f1:5d:39:76:bf:81: 05:94:85:99:69:df:44:fc:d7:34:dd:56:46:06:5f:44:cb:ce: 68:5e:7f:f3:7a:22:7d:bd:50:28:c4:79:2b:5d:47:31:bc:0f: d1:97:2f:43:50:98:ec:8b:d5:ef:87:e1:63:4d:4d:3f:dc:d9: 1c:7d:97:61:68:d6:bc:06:e9:c8:ad:76:85:09:cc:09:1d:e4: af:62:15:8a:d1:17:d3:f2:4e:20:db:cd:44:e0:f2:93:42:8e: c0:1c:6a:36:16:82:1e:68:c6:13:28:8b:ed:49:10:e5:e8:83: 61:01:b4:16:d3:a2:d3:aa:72:e2:d4:23:95:a8:50:c2:70:94: 55:31:3c:75:73:57:4d:1c:5e:31:b9:ec:df:f2:04:3b:b4:a0: e6:fb:b4:50:1b:54:88:1b:37:85:aa:b8:8d:9b:8f:92:9b:b0: b5:af:a2:c5:e9:86:05:12:0f:c7:61:54:c6:4e:9c:5d:1d:03: f4:80:35:4a:3c:e4:1c:c0:f6:d0:95:7d:0e:25:f7:73:9a:45: e8:a9:be:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUlxA2hXPxFuaTt0SBmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3 OWU3ZmYwHhcNMjYwMTI1MTgwMTIwWhcNMjYwMTI2MTgwMTIwWjAzMTEwLwYDVQQD EyhlNDEzMzMyNTUwYmNkMWRlY2ZiNjg0MDQzNjMwNGZiMzhmYmYxNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpGeMsI5PHvvuRDFpKrOoIXhxz1S sd8ec8Ohz4T1lUGULJ6lMvKH3ziZaKjYqaQqSFG5VeCBBS+MFlwjzudx0pBOSpgm 6NEGwvCL5eCY1/jk1j7JUCVmPTZu/kwQVdV5B3Gk1UZ5/QYAhQ2RRGqmg7x03AI5 DsDB/WQMcHhnKKprNPuab66dAKM352ezzG1fk6GvyR8CDtWTuDmOUUcBIbOkTgNl Q+SCILixWbIOL7qv0J9wo+z4CA91RJ/jikJa9bZEE9WNZyLsmig+lVBvQ1S1zRRV tbWF69w9jdOIOqZMDpF5l4kne4PfxyXCU5Zk0/cp2G1P4AsjUf85qowKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQTMyVQvNHez7aEBDYwT7OPvxUFMB8GA1UdIwQY MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAennE7IHa Nm/yOI+ylyO2QFa11cO3fh6zStVhIfPaUHI5vvUpFVT5bjV6AaFYt0Cq8V05dr+B BZSFmWnfRPzXNN1WRgZfRMvOaF5/83oifb1QKMR5K11HMbwP0ZcvQ1CY7IvV74fh Y01NP9zZHH2XYWjWvAbpyK12hQnMCR3kr2IVitEX0/JOINvNRODyk0KOwBxqNhaC HmjGEyiL7UkQ5eiDYQG0FtOi06py4tQjlahQwnCUVTE8dXNXTRxeMbns3/IEO7Sg 5vu0UBtUiBs3haq4jZuPkpuwta+ixemGBRIPx2FUxk6cXR0D9IA1SjzkHMD20JV9 DiX3c5pF6Km+aA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:43 2026 by rpki-client