This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json) Hash identifier: q1flseUUDOHZkv0M+91Pxx9PWo0SqzqhJs0kGS5ukuI= Subject key identifier: 79:2E:F1:F1:17:79:2A:2C:82:9C:C1:9E:90:EA:4A:73:7A:71:DD:48 Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Certificate serial: 019BF8ADC9B15BCEB575AB8499641FBD7A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 05:01:37 +0000 Manifest this update: Mon 26 Jan 2026 05:01:37 +0000 Manifest next update: Tue 27 Jan 2026 05:01:37 +0000 Files and hashes: 1: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: D839tRy+HyXzgev/1q2kqAZE3ORloJvkE0vP1N0rPC4=) 2: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (hash: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:c9:b1:5b:ce:b5:75:ab:84:99:64:1f:bd:7a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Validity Not Before: Jan 26 05:01:37 2026 GMT Not After : Jan 27 05:01:37 2026 GMT Subject: CN=792ef1f117792a2c829cc19e90ea4a737a71dd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:0f:37:9a:8c:80:16:4d:77:37:ba:7d:90: ee:c2:68:b2:60:19:e7:e7:39:ae:d3:20:6a:36:5f: ea:34:88:ad:fd:67:4b:d7:81:0b:5f:fb:9a:ce:60: 1b:e0:57:f1:4b:cc:14:29:55:ac:b6:08:0c:36:54: e9:2b:ca:a0:01:95:57:6f:92:0d:e3:e7:bb:74:5c: ed:ec:cf:26:7d:1f:e7:9e:ec:6a:9a:3b:99:cd:f7: 4a:9e:16:19:b3:bd:99:c7:34:bc:80:16:c1:2f:01: a2:6b:33:6c:b5:2d:b2:ea:43:97:fb:32:09:b1:1d: bc:d1:27:67:d8:ee:99:0b:d9:00:a1:75:f6:bc:a5: f8:6c:f8:18:57:fb:fd:b1:8b:ff:4e:d6:77:7f:5e: 85:f3:1c:71:2a:00:0f:87:da:5b:b3:38:52:4d:62: 8a:b0:10:94:4d:27:7c:81:84:31:1f:05:c6:f5:01: 0f:91:f6:96:fb:a6:96:d4:0e:ed:09:99:4a:15:23: 54:24:0b:dc:52:8a:41:71:d3:d6:79:c7:00:89:a4: f0:54:24:3f:07:46:aa:e9:62:69:d8:25:ce:b0:4f: f9:35:70:d6:b3:f3:ef:c5:53:41:d6:70:ae:41:9f: 37:12:d7:1d:ea:35:eb:e3:4c:b2:9d:51:fc:19:53: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2E:F1:F1:17:79:2A:2C:82:9C:C1:9E:90:EA:4A:73:7A:71:DD:48 X509v3 Authority Key Identifier: keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:cf:70:a5:11:e4:c3:82:fd:24:4f:a9:cb:f4:77:e9:23:57: 3d:c4:5d:ae:fd:0b:88:f9:65:0c:7d:e2:d5:59:a7:7f:9f:21: 2c:59:39:2e:8f:b7:b0:65:76:c9:d9:9c:02:1a:5d:f0:28:f7: 41:42:b1:4e:21:25:d5:8e:5a:75:61:d1:98:70:e7:25:93:5c: ee:6c:fb:5c:db:73:9a:ec:b4:5f:65:19:12:83:85:27:19:32: b0:90:35:90:a8:f6:7e:55:a4:7b:ff:03:d3:97:1a:a6:ba:20: f1:75:54:f2:ab:5e:60:9c:22:9a:83:4d:38:3d:9f:73:41:35: 23:44:05:88:ee:cb:8b:b2:73:01:4e:03:a2:29:34:b2:1e:bb: 9e:bc:05:57:49:da:88:72:ba:0b:44:2e:f6:6a:ac:fe:c8:86: e3:dd:c0:85:10:48:b3:f0:35:a6:a5:19:5d:08:ad:ac:d1:2f: cb:9b:e8:17:1a:22:cf:e8:98:57:6d:f5:f7:c3:65:52:5e:7f: 98:5d:0b:b1:ee:ad:2b:5f:94:49:7d:0c:19:99:68:b1:1f:49: df:0f:47:6c:4c:5b:e0:8b:5f:86:55:1a:3f:44:23:7b:13:c5: 2f:90:1a:47:8f:38:e6:7e:d7:0c:be:4d:f0:56:9a:a4:eb:f1: cf:a1:f8:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rcmxW861dauEmWQfvXpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOWVkNzA5ODExMWM2Nzg4OThhYzBmMGFlYzk3ZmRkM2Iz YjZkMDIwHhcNMjYwMTI2MDUwMTM3WhcNMjYwMTI3MDUwMTM3WjAzMTEwLwYDVQQD Eyg3OTJlZjFmMTE3NzkyYTJjODI5Y2MxOWU5MGVhNGE3MzdhNzFkZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7wPN5qMgBZNdze6fZDuwmiyYBnn 5zmu0yBqNl/qNIit/WdL14ELX/uazmAb4FfxS8wUKVWstggMNlTpK8qgAZVXb5IN 4+e7dFzt7M8mfR/nnuxqmjuZzfdKnhYZs72ZxzS8gBbBLwGiazNstS2y6kOX+zIJ sR280Sdn2O6ZC9kAoXX2vKX4bPgYV/v9sYv/TtZ3f16F8xxxKgAPh9pbszhSTWKK sBCUTSd8gYQxHwXG9QEPkfaW+6aW1A7tCZlKFSNUJAvcUopBcdPWeccAiaTwVCQ/ B0aq6WJp2CXOsE/5NXDWs/PvxVNB1nCuQZ83Etcd6jXr40yynVH8GVN9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHku8fEXeSosgpzBnpDqSnN6cd1IMB8GA1UdIwQY MBaAFICe1wmBEcZ4iYrA8K7Jf907O20CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQt MDEwY2Q5MDc5YWJmLzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQtMDEwY2Q5MDc5YWJm LzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVc9wpRHk w4L9JE+py/R36SNXPcRdrv0LiPllDH3i1Vmnf58hLFk5Lo+3sGV2ydmcAhpd8Cj3 QUKxTiEl1Y5adWHRmHDnJZNc7mz7XNtzmuy0X2UZEoOFJxkysJA1kKj2flWke/8D 05caprog8XVU8qteYJwimoNNOD2fc0E1I0QFiO7Li7JzAU4Doik0sh67nrwFV0na iHK6C0Qu9mqs/siG493AhRBIs/A1pqUZXQitrNEvy5voFxoiz+iYV23198NlUl5/ mF0Lse6tK1+USX0MGZlosR9J3w9HbExb4ItfhlUaP0QjexPFL5AaR4845n7XDL5N 8FaapOvxz6H4+A== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:07 2026 by rpki-client