This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json) Hash identifier: JePjR/AfF2deo13ipW3hoqlglN5IIC9lVUuoIeYVkFs= Subject key identifier: C5:E7:CA:C1:48:31:1F:68:E6:A3:BD:0C:D2:2F:81:6F:96:BC:9B:97 Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Certificate serial: 019BF5AC661425DC22F9BF29EF98B11DE5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:01:14 +0000 Manifest this update: Sun 25 Jan 2026 15:01:14 +0000 Manifest next update: Mon 26 Jan 2026 15:01:14 +0000 Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: YEy5UfSsrLp7Veep/QVESbDCXNY6q/NW8Y/Pty9JrVs=) 2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:66:14:25:dc:22:f9:bf:29:ef:98:b1:1d:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Validity Not Before: Jan 25 15:01:14 2026 GMT Not After : Jan 26 15:01:14 2026 GMT Subject: CN=c5e7cac148311f68e6a3bd0cd22f816f96bc9b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:de:72:98:22:99:26:37:cf:5f:b1:c8:5a: d0:e4:da:73:62:07:cc:06:d6:9e:3f:0a:75:26:29: c4:7d:0e:5a:c1:3f:8a:77:2a:53:97:29:0d:4d:ad: ad:8f:02:94:5b:29:09:5b:4c:dc:a1:3d:4f:80:6a: 4e:c6:e8:1c:e3:49:0d:30:67:d8:ef:df:47:41:3f: 5b:2f:43:99:0b:84:a0:86:69:0e:da:64:75:56:60: 8e:08:6c:fc:83:1b:1c:80:b3:e1:c0:54:68:f4:4b: a9:3a:14:6c:e7:1f:6f:21:ba:df:a4:e3:94:f7:57: 9f:16:df:b9:ce:3e:02:0c:7e:cf:1a:73:0a:26:37: d5:48:64:d7:f9:31:ad:f1:bd:0a:2c:d4:77:26:fb: 52:f7:da:51:0e:37:fa:2d:4d:5c:79:64:19:fc:c9: 8b:fd:e2:63:dd:9e:7f:df:6e:73:bf:c3:29:8d:da: ca:02:2c:75:c7:82:89:ce:b2:cb:6f:58:45:bd:d4: 19:b9:04:8a:f7:18:90:77:65:59:ef:60:cd:d4:9d: ac:5e:fc:1e:6d:7d:bf:15:92:9d:52:a9:1a:5b:cc: 27:ee:4d:69:69:51:43:b5:84:cf:88:3e:72:8a:88: 6c:2c:7e:12:cf:57:dc:01:80:81:9d:d7:3a:23:b9: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E7:CA:C1:48:31:1F:68:E6:A3:BD:0C:D2:2F:81:6F:96:BC:9B:97 X509v3 Authority Key Identifier: keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8e:28:0c:41:23:cd:db:e6:2d:52:cd:57:d7:1f:4f:f0:f7: 50:76:05:b1:b6:81:89:d0:2d:88:40:c9:f0:7e:0b:c1:c9:9f: ac:12:63:bc:1f:c6:f7:25:d5:15:88:3d:95:98:17:93:6d:8c: 78:19:2a:96:2e:3a:8b:c9:3f:32:de:57:a6:fe:03:09:8e:d1: 22:a1:24:b2:f6:44:bc:ed:41:0a:61:86:ac:a1:8e:a0:8d:68: 28:92:ff:8e:97:41:83:0d:d0:57:bd:44:98:21:de:43:c0:25: 45:52:b0:b3:0b:89:87:c7:32:37:75:67:69:8b:0e:f1:28:3c: ae:8a:80:ce:6b:65:c1:12:ea:92:cf:c5:1e:aa:95:a1:ee:b7: e1:63:a7:31:6d:82:3e:5f:1e:c0:74:90:ca:48:f7:0f:63:99: 43:84:b1:5e:39:43:7f:e1:18:11:ae:7c:6a:5f:d3:e1:a3:e6: 4d:68:0a:c9:32:69:ea:7a:53:b5:0b:d0:80:7b:20:40:53:54: ac:c5:09:27:80:5a:3f:dd:9c:5f:2a:bb:57:e3:9b:a1:75:0c: d7:7e:16:2d:d6:29:7f:c5:2a:14:36:66:7e:99:41:de:af:bf: 43:49:7e:6f:b5:12:64:3b:bc:a3:c7:9c:b6:83:a1:2c:47:bb: f3:6f:10:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rGYUJdwi+b8p75ixHeXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzFlNzNlNmQzZmM3NDVmMTI3YTdlZDk5MGFhNDEyMTQ5 MDVlNjEwHhcNMjYwMTI1MTUwMTE0WhcNMjYwMTI2MTUwMTE0WjAzMTEwLwYDVQQD EyhjNWU3Y2FjMTQ4MzExZjY4ZTZhM2JkMGNkMjJmODE2Zjk2YmM5Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTDecpgimSY3z1+xyFrQ5NpzYgfM BtaePwp1JinEfQ5awT+KdypTlykNTa2tjwKUWykJW0zcoT1PgGpOxugc40kNMGfY 799HQT9bL0OZC4SghmkO2mR1VmCOCGz8gxscgLPhwFRo9EupOhRs5x9vIbrfpOOU 91efFt+5zj4CDH7PGnMKJjfVSGTX+TGt8b0KLNR3JvtS99pRDjf6LU1ceWQZ/MmL /eJj3Z5/325zv8MpjdrKAix1x4KJzrLLb1hFvdQZuQSK9xiQd2VZ72DN1J2sXvwe bX2/FZKdUqkaW8wn7k1paVFDtYTPiD5yiohsLH4Sz1fcAYCBndc6I7m7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXnysFIMR9o5qO9DNIvgW+WvJuXMB8GA1UdIwQY MBaAFBsx5z5tP8dF8Sen7ZkKpBIUkF5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYt NDYwMjczZjE2ZGRkLzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYtNDYwMjczZjE2ZGRk LzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH44oDEEj zdvmLVLNV9cfT/D3UHYFsbaBidAtiEDJ8H4LwcmfrBJjvB/G9yXVFYg9lZgXk22M eBkqli46i8k/Mt5Xpv4DCY7RIqEksvZEvO1BCmGGrKGOoI1oKJL/jpdBgw3QV71E mCHeQ8AlRVKwswuJh8cyN3VnaYsO8Sg8roqAzmtlwRLqks/FHqqVoe634WOnMW2C Pl8ewHSQykj3D2OZQ4SxXjlDf+EYEa58al/T4aPmTWgKyTJp6npTtQvQgHsgQFNU rMUJJ4BaP92cXyq7V+OboXUM134WLdYpf8UqFDZmfplB3q+/Q0l+b7USZDu8o8ec toOhLEe7828Qrw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:30 2026 by rpki-client