This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json) Hash identifier: SkMwoGa0rVH0WLrHTZptQxlUHPULLvr2ipsPuKhhuhg= Subject key identifier: CB:EE:46:2D:2D:45:CA:9E:F2:5A:4E:F7:3D:98:EE:67:07:1F:5F:E0 Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Certificate serial: 019BF5AC46A2E4C8DE293E89BFCE62F7FB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft Manifest number: 1607 Signing time: Sun 25 Jan 2026 15:01:06 +0000 Manifest this update: Sun 25 Jan 2026 15:01:06 +0000 Manifest next update: Mon 26 Jan 2026 15:01:06 +0000 Files and hashes: 1: C_loy0B7_p9VbknMqKT5_-soGMw.roa (hash: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM=) 2: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: QIOg1P+t17mZxEX9UhK+B+7iAUuSeZxGJ9m3m3xsDRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:46:a2:e4:c8:de:29:3e:89:bf:ce:62:f7:fb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Validity Not Before: Jan 25 15:01:06 2026 GMT Not After : Jan 26 15:01:06 2026 GMT Subject: CN=cbee462d2d45ca9ef25a4ef73d98ee67071f5fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:95:72:da:0a:a6:6b:ff:eb:1e:31:48:76: b0:ce:12:87:30:c0:6d:e0:78:81:7e:0f:11:0e:fe: 8a:32:7c:e3:27:6e:cc:ed:d9:04:1e:27:6f:da:44: b6:67:14:6d:b6:12:5d:66:12:fc:af:72:41:d9:b3: 5a:8a:b5:a5:9a:ff:17:75:6b:e3:ac:88:c0:e0:92: 55:5e:56:ec:1f:a0:6a:38:d1:40:5d:1b:6b:00:bc: 98:31:77:21:c6:bd:93:ca:50:96:14:25:32:e2:81: fb:49:8f:d1:54:73:7d:b6:58:30:c0:1b:06:41:27: d9:b6:ce:20:b5:ff:d3:75:9f:80:58:51:ad:7c:43: cd:03:be:0c:01:2f:19:1c:e5:6f:3c:08:0c:09:84: ae:4f:5a:7a:da:f8:8c:ea:14:5e:b8:96:80:80:fe: e9:ab:0e:a5:b0:fb:cf:8c:d7:29:c0:94:75:0a:25: 0f:7c:20:e6:01:17:63:89:bc:a6:43:57:89:a4:d3: 92:52:ed:98:08:c7:d7:b5:7d:35:d6:a7:8f:8b:c9: 1d:1c:b4:9a:e5:20:e3:84:89:1b:b7:e9:73:66:8c: 6d:51:ff:17:42:f1:63:51:67:4d:ec:cb:05:85:8a: 5b:7b:b1:2c:fa:35:79:9f:d4:81:29:a7:9f:df:7d: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:46:2D:2D:45:CA:9E:F2:5A:4E:F7:3D:98:EE:67:07:1F:5F:E0 X509v3 Authority Key Identifier: keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:48:6a:3c:e2:1f:36:6a:24:d2:15:cc:54:b9:ce:68:f7:eb: 12:cf:81:80:aa:58:8a:c7:5f:a9:77:53:53:db:8c:55:97:97: 10:7e:6f:e6:21:6c:cf:06:88:d0:72:88:d5:0b:cb:4d:3b:ea: a3:76:be:df:67:18:23:ac:ab:e4:45:e8:bb:25:e6:aa:84:03: 50:81:dd:26:aa:66:ee:de:34:cf:7a:07:c3:51:0c:7b:64:a9: b7:9c:4a:d3:f9:60:0d:14:41:cd:87:6e:38:96:0e:1f:27:de: c7:0a:06:33:8f:98:41:0d:62:f9:81:44:ec:50:1e:89:6e:e7: 95:b5:cd:d2:9f:f9:fb:09:62:e4:df:b4:c1:76:fb:1d:d5:a5: 3e:f8:85:d1:b8:76:57:f0:8a:3d:34:b1:b3:86:77:1b:d4:52: 2c:f5:e2:1a:c9:18:77:a2:68:26:ec:c6:92:f8:8a:5d:27:10: 5d:8f:7a:fc:fc:da:1a:67:fb:59:f6:f3:2d:dd:89:e0:fe:5d: f9:d4:c0:98:ea:c3:96:31:7f:35:95:40:46:4c:db:44:11:ee: 75:0b:2e:8f:d8:2c:6e:dc:14:9b:fd:df:0e:a9:96:c6:a3:dd: e2:8d:d2:48:17:c8:dd:4c:30:68:91:32:28:3c:b1:38:99:2f: a9:97:f8:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rEai5MjeKT6Jv85i9/uNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx YTc3OTQwHhcNMjYwMTI1MTUwMTA2WhcNMjYwMTI2MTUwMTA2WjAzMTEwLwYDVQQD EyhjYmVlNDYyZDJkNDVjYTllZjI1YTRlZjczZDk4ZWU2NzA3MWY1ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI+VctoKpmv/6x4xSHawzhKHMMBt 4HiBfg8RDv6KMnzjJ27M7dkEHidv2kS2ZxRtthJdZhL8r3JB2bNairWlmv8XdWvj rIjA4JJVXlbsH6BqONFAXRtrALyYMXchxr2TylCWFCUy4oH7SY/RVHN9tlgwwBsG QSfZts4gtf/TdZ+AWFGtfEPNA74MAS8ZHOVvPAgMCYSuT1p62viM6hReuJaAgP7p qw6lsPvPjNcpwJR1CiUPfCDmARdjibymQ1eJpNOSUu2YCMfXtX011qePi8kdHLSa 5SDjhIkbt+lzZoxtUf8XQvFjUWdN7MsFhYpbe7Es+jV5n9SBKaef332K0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvuRi0tRcqe8lpO9z2Y7mcHH1/gMB8GA1UdIwQY MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEhqPOIf Nmok0hXMVLnOaPfrEs+BgKpYisdfqXdTU9uMVZeXEH5v5iFszwaI0HKI1QvLTTvq o3a+32cYI6yr5EXouyXmqoQDUIHdJqpm7t40z3oHw1EMe2Spt5xK0/lgDRRBzYdu OJYOHyfexwoGM4+YQQ1i+YFE7FAeiW7nlbXN0p/5+wli5N+0wXb7HdWlPviF0bh2 V/CKPTSxs4Z3G9RSLPXiGskYd6JoJuzGkviKXScQXY96/PzaGmf7WfbzLd2J4P5d +dTAmOrDljF/NZVARkzbRBHudQsuj9gsbtwUm/3fDqmWxqPd4o3SSBfI3UwwaJEy KDyxOJkvqZf4BA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:33 2026 by rpki-client