This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json) Hash identifier: e0A0hT25foEu7/bnWupe5c7/1zNAjknHqHQatMWcxNY= Subject key identifier: 53:6B:F2:BB:87:24:44:2E:83:B9:73:F5:F7:28:D7:B6:BE:0A:EE:D0 Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2 Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2 Certificate serial: 019BF499284D6990C75C23311CDDA7188CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft Manifest number: 1517 Signing time: Sun 25 Jan 2026 10:00:36 +0000 Manifest this update: Sun 25 Jan 2026 10:00:36 +0000 Manifest next update: Mon 26 Jan 2026 10:00:36 +0000 Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: uq7M3tWnJ2L1cj++EGKNpy+5aUZbYrQPdG6i1WUFtKU=) 2: HdVf15BxvaUoRmDkU2WAnUzqeEI.roa (hash: E8gc8EoEirC9y0HgRWdI29lZIe/DH5y9+MNG4gOoc34=) 3: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (hash: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:28:4d:69:90:c7:5c:23:31:1c:dd:a7:18:8c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2 Validity Not Before: Jan 25 10:00:36 2026 GMT Not After : Jan 26 10:00:36 2026 GMT Subject: CN=536bf2bb8724442e83b973f5f728d7b6be0aeed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:2a:0f:36:d2:b7:d6:ef:89:33:8d:95:8f: ae:b9:26:c6:ef:5c:77:c4:6c:ac:bc:96:e9:0e:ab: 59:62:2c:34:7a:59:d3:9c:3a:a7:ac:77:01:7c:9b: 0e:5a:a9:ba:35:65:1c:b2:a1:39:34:6c:a7:18:84: 6a:7b:32:3c:34:64:4b:e4:8b:77:8b:cc:70:5b:c8: b5:5a:b0:69:6a:39:55:38:a9:bf:d8:e0:bc:0d:ac: cb:8e:4b:3e:40:19:08:a8:ed:8d:79:c7:c8:33:82: f7:12:55:1b:cf:38:06:be:8e:40:fa:5e:0c:1a:bb: 9f:91:56:fa:87:09:a4:ef:ca:e7:49:2e:48:29:e7: a4:73:09:56:9f:b9:24:ea:3e:9c:42:85:aa:88:ef: e3:ec:33:92:9a:03:49:db:15:f6:1b:3d:d4:58:17: 5f:9c:a6:9c:c2:ab:ca:d4:ec:b6:b0:ad:04:83:c5: ad:64:fe:8f:35:7c:21:35:77:a0:d9:db:75:44:42: 92:99:b3:4b:24:5f:91:48:01:42:0e:de:ad:fb:c0: a5:59:7c:86:30:90:b7:11:3d:f9:f9:f8:f4:f6:d0: dd:2e:ea:95:ad:7f:2f:03:f9:c9:8d:72:ba:cf:17: 3d:57:60:ce:a4:1d:f1:57:e1:ea:26:4c:6f:08:af: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6B:F2:BB:87:24:44:2E:83:B9:73:F5:F7:28:D7:B6:BE:0A:EE:D0 X509v3 Authority Key Identifier: keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:81:a9:d8:c2:13:2d:e7:5a:82:51:6a:e2:0d:45:3a:5b:a2: cd:04:9c:21:e6:59:bd:df:d0:d3:38:8e:d8:57:1e:81:ed:5e: 11:3e:0c:69:42:cc:c6:55:e8:62:08:df:bf:6e:ac:da:57:19: 9b:bd:30:e0:17:3b:17:8b:e1:66:78:85:33:fe:8c:09:37:e6: 88:dd:6a:8b:6c:57:e8:dd:87:4a:eb:04:19:f5:a8:60:16:85: 1e:ae:52:08:ee:d0:f0:64:5e:10:87:07:e5:b2:51:ff:b9:26: 1d:61:ab:f4:6e:ea:b0:5f:3e:2b:4d:c5:e3:49:8a:c2:34:44: b5:4a:1e:1b:6c:5e:56:3b:e9:48:ac:72:46:1f:bd:89:47:6f: ee:e6:3d:54:ff:e3:40:b8:3b:97:7e:a6:f2:7c:de:41:ec:a4: e7:f6:32:2e:8f:8a:3f:48:95:eb:40:ca:04:2a:a1:d8:ca:45: 42:9a:22:ac:ab:54:87:9d:d6:d9:7d:fb:81:52:f9:6d:5f:e9: 06:e3:c4:46:95:a4:ef:44:22:df:8a:73:24:5c:76:75:ce:5c: a4:20:5d:73:15:78:f8:8c:e2:3a:86:8c:ae:b4:e5:91:03:e3: f8:0a:d7:33:54:52:58:a9:c7:32:bd:81:94:fa:de:a7:1f:c0: 8f:15:25:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mShNaZDHXCMxHN2nGIyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz MzdiYTIwHhcNMjYwMTI1MTAwMDM2WhcNMjYwMTI2MTAwMDM2WjAzMTEwLwYDVQQD Eyg1MzZiZjJiYjg3MjQ0NDJlODNiOTczZjVmNzI4ZDdiNmJlMGFlZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/cqDzbSt9bviTONlY+uuSbG71x3 xGysvJbpDqtZYiw0elnTnDqnrHcBfJsOWqm6NWUcsqE5NGynGIRqezI8NGRL5It3 i8xwW8i1WrBpajlVOKm/2OC8DazLjks+QBkIqO2NecfIM4L3ElUbzzgGvo5A+l4M GrufkVb6hwmk78rnSS5IKeekcwlWn7kk6j6cQoWqiO/j7DOSmgNJ2xX2Gz3UWBdf nKacwqvK1Oy2sK0Eg8WtZP6PNXwhNXeg2dt1REKSmbNLJF+RSAFCDt6t+8ClWXyG MJC3ET35+fj09tDdLuqVrX8vA/nJjXK6zxc9V2DOpB3xV+HqJkxvCK+jIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNr8ruHJEQug7lz9fco17a+Cu7QMB8GA1UdIwQY MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4Gp2MIT LedaglFq4g1FOluizQScIeZZvd/Q0ziO2Fcege1eET4MaULMxlXoYgjfv26s2lcZ m70w4Bc7F4vhZniFM/6MCTfmiN1qi2xX6N2HSusEGfWoYBaFHq5SCO7Q8GReEIcH 5bJR/7kmHWGr9G7qsF8+K03F40mKwjREtUoeG2xeVjvpSKxyRh+9iUdv7uY9VP/j QLg7l36m8nzeQeyk5/YyLo+KP0iV60DKBCqh2MpFQpoirKtUh53W2X37gVL5bV/p BuPERpWk70Qi34pzJFx2dc5cpCBdcxV4+IziOoaMrrTlkQPj+ArXM1RSWKnHMr2B lPrepx/AjxUl6g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:47:16 2026 by rpki-client