This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json) Hash identifier: Ms26+lFsE6GDIYPKK2UdXH4TCH0+f2b9annJOYKZBtY= Subject key identifier: E7:F8:6B:15:CB:49:A0:0E:EA:30:94:4D:B8:B7:81:6E:84:62:09:30 Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67 Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467 Certificate serial: 019BF38678B4DFEEA0E4080A0543AA14787F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft Manifest number: 1121 Signing time: Sun 25 Jan 2026 05:00:34 +0000 Manifest this update: Sun 25 Jan 2026 05:00:34 +0000 Manifest next update: Mon 26 Jan 2026 05:00:34 +0000 Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: DfaEm83soehfFrEg6AVLlIBbC0afqWN9ByZJW6LowqE=) 2: _H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa (hash: xsJ3awajiTbn083/zKjj3KHpA/9WdA0RqzmcuoYihQA=) 3: kz2Yp1K6YIxekPASAxXKtmwq5Nc.roa (hash: wGYvhz3IuQwWNkOw50DFvXGGrTTnqTHVgvd/Ec1JbTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:78:b4:df:ee:a0:e4:08:0a:05:43:aa:14:78:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467 Validity Not Before: Jan 25 05:00:34 2026 GMT Not After : Jan 26 05:00:34 2026 GMT Subject: CN=e7f86b15cb49a00eea30944db8b7816e84620930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:4c:5d:52:8c:53:2e:07:c5:9c:f0:f0:43: a2:4e:32:88:5e:d9:ed:48:19:ab:de:03:5a:ee:9b: 89:0e:e4:98:61:93:14:f9:ab:17:e5:f7:fd:79:b2: ee:27:c8:31:43:b3:e7:f3:66:48:e5:db:2d:61:73: 8f:57:63:bb:6c:ee:95:45:0f:e0:3b:69:12:5e:e0: 8e:ae:4d:63:73:2e:a7:2d:bd:c9:03:4f:01:ac:3f: 64:98:6f:2f:8e:68:f7:67:f2:37:f3:f8:5d:4f:ee: 2f:08:45:55:c4:35:97:ec:11:7a:45:ed:a5:79:55: 53:59:d8:09:67:fd:4c:c7:7d:45:98:34:fc:cb:f2: 80:d9:6e:55:26:90:e4:69:2a:6a:9a:ab:49:37:16: e9:d7:98:97:c4:43:e8:c9:a6:b5:30:bc:9e:69:a3: ec:38:b8:ce:1d:cc:14:e6:50:38:84:b7:4c:51:18: fe:08:61:4b:0a:b1:e9:ff:1a:84:cf:f0:99:c1:87: c9:fc:97:40:02:30:08:b6:2a:3f:6e:28:ec:d8:54: 20:7c:f3:c8:b1:4f:c2:a7:d4:4c:eb:21:39:20:f6: fe:da:6f:b6:2d:82:41:f8:be:f4:2a:5c:7d:19:96: f3:1f:e1:61:42:29:24:b5:13:c0:47:0a:0a:4c:11: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F8:6B:15:CB:49:A0:0E:EA:30:94:4D:B8:B7:81:6E:84:62:09:30 X509v3 Authority Key Identifier: keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:11:98:37:c6:72:46:81:43:d0:8c:46:12:18:76:65:be:37: 22:26:25:a9:a3:5a:93:82:46:2d:5a:d3:57:eb:ba:ba:d4:57: e7:3a:a6:8c:c5:84:c1:ff:49:d8:78:e4:29:20:88:8c:0b:d5: ae:e8:fd:e2:18:4b:f1:b8:8b:c3:8e:9f:88:0c:49:00:39:83: 24:1d:39:a2:6d:cb:31:16:e0:41:c5:05:41:3d:7e:9c:3e:e2: 5e:66:65:2b:1a:7b:41:4a:d9:88:5e:cb:a5:78:98:19:b1:19: 5e:9a:0e:9a:b8:f0:b3:c9:e6:44:71:b8:81:51:15:c7:33:55: b9:95:8a:5f:d7:0d:f4:f7:4d:03:91:02:8a:e0:dd:d5:a3:a6: 7d:ed:3e:5e:9b:fb:6e:31:fa:82:ef:f4:3c:74:b9:12:a4:2d: 74:d1:69:4d:29:77:f1:1c:7b:b5:28:f8:52:d5:90:19:43:90: e8:5d:55:bd:69:ce:1d:46:64:80:12:ef:9a:32:5e:ec:e7:3b: d4:a9:e7:48:2c:08:af:e8:bb:28:22:a7:98:80:71:54:9b:40: f0:6c:2e:86:ae:15:d9:64:f2:b8:3b:e2:55:9f:9a:ce:5e:ee: 25:fb:0e:fd:04:80:56:cf:2b:44:61:99:8a:af:35:96:ee:6f: 35:ad:72:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhni03+6g5AgKBUOqFHh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWFlNWU0OWE0NGFiZGRjMjJiMGFkYmRhZWI2NDEzNmYy NWQ0NjcwHhcNMjYwMTI1MDUwMDM0WhcNMjYwMTI2MDUwMDM0WjAzMTEwLwYDVQQD EyhlN2Y4NmIxNWNiNDlhMDBlZWEzMDk0NGRiOGI3ODE2ZTg0NjIwOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxBMXVKMUy4HxZzw8EOiTjKIXtnt SBmr3gNa7puJDuSYYZMU+asX5ff9ebLuJ8gxQ7Pn82ZI5dstYXOPV2O7bO6VRQ/g O2kSXuCOrk1jcy6nLb3JA08BrD9kmG8vjmj3Z/I38/hdT+4vCEVVxDWX7BF6Re2l eVVTWdgJZ/1Mx31FmDT8y/KA2W5VJpDkaSpqmqtJNxbp15iXxEPoyaa1MLyeaaPs OLjOHcwU5lA4hLdMURj+CGFLCrHp/xqEz/CZwYfJ/JdAAjAItio/bijs2FQgfPPI sU/Cp9RM6yE5IPb+2m+2LYJB+L70Klx9GZbzH+FhQikktRPARwoKTBGW6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf4axXLSaAO6jCUTbi3gW6EYgkwMB8GA1UdIwQY MBaAFBoa5eSaRKvdwisK29rrZBNvJdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt YTExNjlhMjg5YzU0LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0 LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhGYN8Zy RoFD0IxGEhh2Zb43IiYlqaNak4JGLVrTV+u6utRX5zqmjMWEwf9J2HjkKSCIjAvV ruj94hhL8biLw46fiAxJADmDJB05om3LMRbgQcUFQT1+nD7iXmZlKxp7QUrZiF7L pXiYGbEZXpoOmrjws8nmRHG4gVEVxzNVuZWKX9cN9PdNA5ECiuDd1aOmfe0+Xpv7 bjH6gu/0PHS5EqQtdNFpTSl38Rx7tSj4UtWQGUOQ6F1VvWnOHUZkgBLvmjJe7Oc7 1KnnSCwIr+i7KCKnmIBxVJtA8Gwuhq4V2WTyuDviVZ+azl7uJfsO/QSAVs8rRGGZ iq81lu5vNa1yrg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:58:06 2026 by rpki-client