This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json) Hash identifier: CMLFA915Uvuo3HYza5ZwJGEoV+sAXU85yAUqx8m7BTs= Subject key identifier: 22:17:DF:4C:D5:FF:75:09:B2:79:60:50:85:F6:AE:69:73:35:A7:A0 Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Certificate serial: 019BF83F6C590688AD54421BF52E0E2649F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft Manifest number: 0F6E Signing time: Mon 26 Jan 2026 03:01:04 +0000 Manifest this update: Mon 26 Jan 2026 03:01:04 +0000 Manifest next update: Tue 27 Jan 2026 03:01:04 +0000 Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: 6MQ02qpH6ffkHe9Axm6rtSHY4Z+l2APe/FVHIzn8I1s=) 2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:6c:59:06:88:ad:54:42:1b:f5:2e:0e:26:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6 Validity Not Before: Jan 26 03:01:04 2026 GMT Not After : Jan 27 03:01:04 2026 GMT Subject: CN=2217df4cd5ff7509b279605085f6ae697335a7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ae:b9:92:86:40:1f:8a:45:d2:53:5c:3e:56: a2:a0:92:98:0d:23:84:eb:b8:2b:c3:e0:ba:ad:ce: 3f:83:65:04:33:36:54:8e:be:df:6d:bf:2f:81:9e: f7:fe:e8:ad:d6:fa:52:5e:68:7a:ba:cd:d1:e8:75: 5c:30:d1:e4:ed:fb:5b:c5:df:10:37:21:c5:5f:2d: d3:0c:1e:bd:6c:b1:09:66:aa:1d:08:b1:7f:46:5e: ed:55:02:17:c6:f7:32:c8:53:54:92:55:87:e2:ff: 41:d3:72:b3:f2:6d:ff:2a:cc:06:b2:3b:a4:eb:70: 25:10:64:c0:26:81:aa:db:9b:a4:7e:c2:f9:03:7c: ab:ae:11:57:92:46:7e:ae:b8:e4:13:15:8c:69:ec: f1:14:63:9f:57:2e:6d:5a:d7:1a:06:2b:d7:ce:aa: f5:f9:ad:be:98:8a:3c:4d:d3:fa:90:c4:a0:66:fb: 74:c7:0f:8b:d1:b7:d5:20:30:f7:aa:8d:1b:cb:e6: b7:ce:9e:96:df:19:9c:4e:c4:66:e5:8a:87:b6:45: ea:5d:64:86:37:69:57:63:5b:55:50:95:74:93:10: 12:68:7c:bf:eb:46:43:cb:fd:59:42:f8:27:dc:f9: d1:e1:e8:35:1a:5f:02:c9:f1:b2:b1:4b:69:fa:97: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:DF:4C:D5:FF:75:09:B2:79:60:50:85:F6:AE:69:73:35:A7:A0 X509v3 Authority Key Identifier: keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c4:d8:a7:23:ae:0a:0b:65:80:d3:0d:2d:d4:ff:b0:90:21: d2:78:c1:ac:74:30:a8:b6:f3:50:2a:f9:68:c2:d1:69:21:90: 9d:e7:06:98:96:05:04:21:71:5a:41:6f:11:93:39:fe:91:67: 0c:3f:f6:d0:c4:4e:46:cc:ab:ea:09:20:ce:a0:93:10:37:85: 45:f9:83:77:03:32:40:7b:b8:a0:b7:6d:10:27:8a:21:01:e0: 56:32:60:5d:e0:91:8c:83:9a:74:58:af:a6:0a:44:4a:3e:d3: 6f:4c:0e:7b:88:39:cd:74:a9:57:5f:03:a0:59:92:2b:95:57: 8e:11:f5:c9:0a:9b:4e:52:0c:fb:41:15:d2:86:dc:3a:04:4e: 5f:16:cc:5a:e5:92:b5:6f:59:a0:83:a6:35:f2:96:01:ba:80: e5:48:2c:4b:6e:dd:c0:17:9b:f9:8e:32:21:c6:5b:b5:21:68: 23:89:25:d0:7d:6c:aa:b0:06:cb:62:04:76:80:15:91:84:db: 50:64:62:17:0e:9b:ad:9e:c0:c8:74:a0:fa:ac:f6:b0:75:0b: 85:f2:3e:aa:fb:a6:2a:61:5e:1d:31:07:f3:c8:da:8c:fd:8a: 5e:8a:e1:07:42:18:de:79:9e:80:45:e6:24:61:28:ce:80:63: 3a:30:69:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2xZBoitVEIb9S4OJknwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0 ZTdkYjYwHhcNMjYwMTI2MDMwMTA0WhcNMjYwMTI3MDMwMTA0WjAzMTEwLwYDVQQD EygyMjE3ZGY0Y2Q1ZmY3NTA5YjI3OTYwNTA4NWY2YWU2OTczMzVhN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq65koZAH4pF0lNcPlaioJKYDSOE 67grw+C6rc4/g2UEMzZUjr7fbb8vgZ73/uit1vpSXmh6us3R6HVcMNHk7ftbxd8Q NyHFXy3TDB69bLEJZqodCLF/Rl7tVQIXxvcyyFNUklWH4v9B03Kz8m3/KswGsjuk 63AlEGTAJoGq25ukfsL5A3yrrhFXkkZ+rrjkExWMaezxFGOfVy5tWtcaBivXzqr1 +a2+mIo8TdP6kMSgZvt0xw+L0bfVIDD3qo0by+a3zp6W3xmcTsRm5YqHtkXqXWSG N2lXY1tVUJV0kxASaHy/60ZDy/1ZQvgn3PnR4eg1Gl8CyfGysUtp+pekoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIX30zV/3UJsnlgUIX2rmlzNaegMB8GA1UdIwQY MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcTYpyOu CgtlgNMNLdT/sJAh0njBrHQwqLbzUCr5aMLRaSGQnecGmJYFBCFxWkFvEZM5/pFn DD/20MRORsyr6gkgzqCTEDeFRfmDdwMyQHu4oLdtECeKIQHgVjJgXeCRjIOadFiv pgpESj7Tb0wOe4g5zXSpV18DoFmSK5VXjhH1yQqbTlIM+0EV0obcOgROXxbMWuWS tW9ZoIOmNfKWAbqA5UgsS27dwBeb+Y4yIcZbtSFoI4kl0H1sqrAGy2IEdoAVkYTb UGRiFw6brZ7AyHSg+qz2sHULhfI+qvumKmFeHTEH88jajP2KXorhB0IY3nmegEXm JGEozoBjOjBpsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:59 2026 by rpki-client