This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json) Hash identifier: R1sBLlcvZkD4h5/+3p486kZVkfJsFHejjan8hcty0nk= Subject key identifier: B3:C8:16:EC:B6:89:58:4A:54:A7:5A:DB:38:D8:5D:12:2E:66:1B:5D Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee Certificate serial: 019BF763BFAFCD7C5984137492ECDEB322AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 23:01:07 +0000 Manifest this update: Sun 25 Jan 2026 23:01:07 +0000 Manifest next update: Mon 26 Jan 2026 23:01:07 +0000 Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: OAcbHlAjKJNk1uUx0w6srt+kcgJR9/V++MvelnvN6T8=) 2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:bf:af:cd:7c:59:84:13:74:92:ec:de:b3:22:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee Validity Not Before: Jan 25 23:01:07 2026 GMT Not After : Jan 26 23:01:07 2026 GMT Subject: CN=b3c816ecb689584a54a75adb38d85d122e661b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:e1:f2:ae:e6:f8:1b:99:06:63:5d:28:83: 50:d8:0c:35:f5:08:c3:e5:58:7f:73:d9:99:a1:7b: c1:36:34:4b:b8:c4:cb:22:40:f9:30:18:e1:4c:18: 48:48:b1:14:21:b7:52:7c:7f:6e:4f:7e:88:db:95: c9:c7:f9:f9:1c:fe:12:67:24:f9:22:b1:26:c3:a4: 89:53:fe:a9:7a:d8:4d:03:d0:0f:07:30:19:a4:a6: 6f:48:b3:55:86:da:45:3c:1f:95:f6:b6:e2:f9:3b: 4e:6b:58:b2:2f:c7:72:3f:e5:a7:0f:52:6a:5b:14: 47:87:c0:c6:a4:9e:f5:88:59:3b:2d:63:85:2f:9e: 11:0f:9a:f0:dd:2c:1a:6c:28:49:38:cd:74:af:76: 3b:27:8c:ca:30:31:e8:41:7a:51:a7:22:07:f7:05: 88:1b:52:88:97:44:a1:70:c1:31:3b:4e:f7:6b:14: 46:b4:c6:73:5b:73:9c:08:3e:38:4d:ce:c3:20:a3: 24:6d:c2:a2:75:57:51:b9:a3:e5:dc:3e:c5:34:4a: 3f:7e:86:6b:dd:aa:01:f2:7d:bf:ba:9b:cd:12:e9: c5:dd:61:16:9f:47:4d:f3:d4:77:71:57:55:e5:06: 30:7a:b4:c5:08:1c:5d:78:ac:84:f6:d9:5b:49:54: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:16:EC:B6:89:58:4A:54:A7:5A:DB:38:D8:5D:12:2E:66:1B:5D X509v3 Authority Key Identifier: keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e0:76:c2:fe:2e:e4:53:16:0c:34:f6:ae:c5:9a:9c:6b:19: f4:4f:97:ce:a5:a6:19:12:6b:a6:28:a2:e5:5d:24:c9:73:b1: 0b:42:07:84:15:e5:6e:10:76:49:40:cb:7d:43:c7:9d:eb:f0: 8a:9d:10:8a:4e:75:1d:77:ea:71:c8:0f:cc:25:9f:e9:68:c0: 2f:c8:7b:f6:b8:ec:1d:89:1a:fe:42:e8:c5:d1:86:38:1b:cf: da:44:0b:6d:53:76:8e:53:22:26:9d:5e:5b:fd:a0:99:91:60: dd:a1:e1:8c:cd:b3:2f:22:e4:e9:07:f7:da:f6:61:4c:aa:52: 28:cd:3f:3a:50:2b:7f:f4:0e:44:d7:9e:42:5b:1c:54:0d:5b: f3:12:5c:b3:af:a8:2a:6d:08:74:85:e1:f6:06:cf:1d:67:35: 2d:4c:43:3e:6e:55:cf:e8:80:85:bc:80:93:70:6c:74:8d:89: 91:a2:fa:30:8c:47:22:0a:c0:35:54:d0:5f:20:83:63:6d:d7: 0f:88:2f:84:45:00:65:9d:67:cf:be:07:c7:68:c7:78:c8:41: 80:c9:5b:eb:9c:b4:42:a1:73:51:2a:a7:61:f3:fa:d6:4f:91: 04:6a:e4:47:ae:97:96:87:56:e0:4e:27:6e:ea:8c:5f:bf:36: 85:fc:a3:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7+vzXxZhBN0kuzesyKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm ZDllZWUwHhcNMjYwMTI1MjMwMTA3WhcNMjYwMTI2MjMwMTA3WjAzMTEwLwYDVQQD EyhiM2M4MTZlY2I2ODk1ODRhNTRhNzVhZGIzOGQ4NWQxMjJlNjYxYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkADh8q7m+BuZBmNdKINQ2Aw19QjD 5Vh/c9mZoXvBNjRLuMTLIkD5MBjhTBhISLEUIbdSfH9uT36I25XJx/n5HP4SZyT5 IrEmw6SJU/6pethNA9APBzAZpKZvSLNVhtpFPB+V9rbi+TtOa1iyL8dyP+WnD1Jq WxRHh8DGpJ71iFk7LWOFL54RD5rw3SwabChJOM10r3Y7J4zKMDHoQXpRpyIH9wWI G1KIl0ShcMExO073axRGtMZzW3OcCD44Tc7DIKMkbcKidVdRuaPl3D7FNEo/foZr 3aoB8n2/upvNEunF3WEWn0dN89R3cVdV5QYwerTFCBxdeKyE9tlbSVQ8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPIFuy2iVhKVKda2zjYXRIuZhtdMB8GA1UdIwQY MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt ZTI5ZWUzZDkxMzk1LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1 LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuB2wv4u 5FMWDDT2rsWanGsZ9E+XzqWmGRJrpiii5V0kyXOxC0IHhBXlbhB2SUDLfUPHnevw ip0Qik51HXfqccgPzCWf6WjAL8h79rjsHYka/kLoxdGGOBvP2kQLbVN2jlMiJp1e W/2gmZFg3aHhjM2zLyLk6Qf32vZhTKpSKM0/OlArf/QORNeeQlscVA1b8xJcs6+o Km0IdIXh9gbPHWc1LUxDPm5Vz+iAhbyAk3BsdI2JkaL6MIxHIgrANVTQXyCDY23X D4gvhEUAZZ1nz74Hx2jHeMhBgMlb65y0QqFzUSqnYfP61k+RBGrkR66XlodW4E4n buqMX782hfyj5g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:00 2026 by rpki-client