This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json) Hash identifier: jkQPDrM4x/dNCzsH5/K2FYU1HiRcSZmkWFwjmGuNPE8= Subject key identifier: AE:2D:53:44:B6:2F:78:EC:89:F3:98:0D:C4:94:49:D9:7A:12:8E:80 Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b Certificate serial: 019BF8E41588C92D5FA6C2315C4BB526E4F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 06:00:55 +0000 Manifest this update: Mon 26 Jan 2026 06:00:55 +0000 Manifest next update: Tue 27 Jan 2026 06:00:55 +0000 Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: nerlqqc63LT5Ox1ohXEfj1dlpZ9KrjmaI/m1B9zcfy0=) 2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:15:88:c9:2d:5f:a6:c2:31:5c:4b:b5:26:e4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b Validity Not Before: Jan 26 06:00:55 2026 GMT Not After : Jan 27 06:00:55 2026 GMT Subject: CN=ae2d5344b62f78ec89f3980dc49449d97a128e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f2:b0:bb:ca:74:fa:c7:b9:f2:dd:59:96:60: 6f:fe:65:2c:8e:78:c1:dc:bd:f8:a1:b4:5e:c3:4b: a6:90:09:d0:f9:d4:b1:48:04:73:15:f2:75:a4:a7: d3:2f:ef:93:69:f7:29:e8:bd:19:95:bf:55:c9:0f: bd:64:28:46:78:91:ef:3b:e8:cf:73:79:34:7a:ef: db:1d:0b:51:4a:5c:34:37:85:dc:81:92:1a:f1:9e: d7:e2:7f:7c:f1:13:a2:eb:c1:16:ff:ff:37:84:c5: 67:84:6d:47:80:55:fe:33:f3:36:33:19:a5:87:1e: 3f:20:31:73:fc:1a:90:f2:8e:cc:20:d8:22:b1:16: a9:94:13:5d:0f:25:35:99:73:1b:fb:a9:e2:05:90: f0:d6:5f:86:3e:69:8f:2f:6c:2c:2c:21:e5:fd:08: 57:93:33:ed:a1:87:22:10:93:1b:f9:ed:16:e5:34: 79:cf:c7:f9:ef:b8:cc:47:62:b8:6c:9a:d3:80:db: 00:b7:62:cd:f8:92:f5:b1:d2:f8:5b:cf:48:ab:c6: 8e:78:3a:33:15:8d:b3:d8:b2:14:f0:68:04:f4:5c: d4:48:d1:09:dd:cc:93:1c:37:81:50:f9:ce:c2:01: 18:2d:4f:bf:7b:6c:9a:fc:d5:90:76:78:2f:24:f2: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2D:53:44:B6:2F:78:EC:89:F3:98:0D:C4:94:49:D9:7A:12:8E:80 X509v3 Authority Key Identifier: keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:02:5c:3d:8e:f0:fb:14:ee:61:ba:d5:48:6f:67:57:65:1d: dc:8c:bf:d7:61:cf:a4:0e:68:13:f2:51:57:c0:2b:4e:78:e8: d5:22:07:4f:69:e6:b0:a2:62:a1:6f:32:d0:fc:e8:f7:60:9f: 89:0f:e2:e0:c4:46:b5:33:3c:7e:c6:96:73:2f:ec:01:ae:a0: 0a:3c:db:9d:89:06:dd:f9:04:69:ec:95:33:31:a5:0d:fd:c5: df:37:b7:63:98:5e:76:2a:ca:bd:75:31:34:23:82:85:b7:8b: b4:42:ff:a8:52:c6:22:7b:23:df:19:02:f4:6d:73:98:db:df: bc:49:15:3c:35:b2:04:0c:fa:1f:b8:cf:02:41:6e:3e:0f:48: ea:24:0a:d8:3d:1b:fa:61:6b:22:79:ae:66:b4:d6:b1:46:f6: 9d:ff:f0:39:01:51:fe:5b:27:67:51:7c:d9:41:3b:9a:02:e0: c4:0e:a4:b6:db:c2:5e:73:f3:70:15:53:a6:6c:2a:7c:aa:a1: 2b:ae:9b:be:1e:70:f1:83:e1:31:6e:53:e8:4a:30:44:3d:86: 1c:e7:2e:d7:8f:e4:15:41:98:6c:8b:c4:66:99:24:e2:27:a2: 9e:2f:29:8f:70:77:9a:04:62:16:bb:69:38:d3:21:b6:e2:fb: 01:5d:f3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45BWIyS1fpsIxXEu1JuTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4 NjYxOWIwHhcNMjYwMTI2MDYwMDU1WhcNMjYwMTI3MDYwMDU1WjAzMTEwLwYDVQQD EyhhZTJkNTM0NGI2MmY3OGVjODlmMzk4MGRjNDk0NDlkOTdhMTI4ZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfKwu8p0+se58t1ZlmBv/mUsjnjB 3L34obRew0umkAnQ+dSxSARzFfJ1pKfTL++Tafcp6L0Zlb9VyQ+9ZChGeJHvO+jP c3k0eu/bHQtRSlw0N4XcgZIa8Z7X4n988ROi68EW//83hMVnhG1HgFX+M/M2Mxml hx4/IDFz/BqQ8o7MINgisRaplBNdDyU1mXMb+6niBZDw1l+GPmmPL2wsLCHl/QhX kzPtoYciEJMb+e0W5TR5z8f577jMR2K4bJrTgNsAt2LN+JL1sdL4W89Iq8aOeDoz FY2z2LIU8GgE9FzUSNEJ3cyTHDeBUPnOwgEYLU+/e2ya/NWQdngvJPIHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4tU0S2L3jsifOYDcSUSdl6Eo6AMB8GA1UdIwQY MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgJcPY7w +xTuYbrVSG9nV2Ud3Iy/12HPpA5oE/JRV8ArTnjo1SIHT2nmsKJioW8y0Pzo92Cf iQ/i4MRGtTM8fsaWcy/sAa6gCjzbnYkG3fkEaeyVMzGlDf3F3ze3Y5hedirKvXUx NCOChbeLtEL/qFLGInsj3xkC9G1zmNvfvEkVPDWyBAz6H7jPAkFuPg9I6iQK2D0b +mFrInmuZrTWsUb2nf/wOQFR/lsnZ1F82UE7mgLgxA6kttvCXnPzcBVTpmwqfKqh K66bvh5w8YPhMW5T6EowRD2GHOcu14/kFUGYbIvEZpkk4ieini8pj3B3mgRiFrtp ONMhtuL7AV3z5Q== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:23 2026 by rpki-client