This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json) Hash identifier: D/XDzlLu8FzzlyrGT7oBIKSBE1UIc1tq7Qogzd7ryAk= Subject key identifier: D6:8B:5C:59:43:8F:2A:AF:48:8B:E2:F0:9B:E9:F3:0A:86:01:E2:14 Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Certificate serial: 019BFCC1111233117E1EFEAF18996596752C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 00:01:09 +0000 Manifest this update: Tue 27 Jan 2026 00:01:09 +0000 Manifest next update: Wed 28 Jan 2026 00:01:09 +0000 Files and hashes: 1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=) 2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=) 3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=) 4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: 0kSFbLu42BjrXl5vjq2VwZ0JDQLyWsEGaXc6JIlbsZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:11:12:33:11:7e:1e:fe:af:18:99:65:96:75:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Validity Not Before: Jan 27 00:01:09 2026 GMT Not After : Jan 28 00:01:09 2026 GMT Subject: CN=d68b5c59438f2aaf488be2f09be9f30a8601e214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:41:9b:a8:d1:01:1d:ba:5a:73:9e:87:bd:43: f4:cb:f3:29:5a:7d:0d:de:51:eb:a7:27:f5:59:b4: 74:84:3f:94:64:4e:63:75:85:73:22:44:02:75:08: 65:04:4e:a4:bb:76:f0:fc:84:a0:e6:b3:f6:bd:4d: 0f:4a:ac:9b:c4:9b:33:57:a3:7e:29:a8:70:31:12: 1c:00:56:f2:3f:c2:80:0a:07:28:18:56:8d:61:45: 63:65:53:16:ea:9d:85:0d:90:55:d8:98:2b:8c:34: 12:7f:27:7a:bf:37:7e:31:10:df:1a:fe:fb:4f:31: 7b:27:b4:dd:b0:65:c6:6f:24:88:42:c4:05:1e:1c: 98:0e:0e:bd:c5:83:95:df:a2:29:46:4b:5c:a2:c1: 6f:ee:48:7d:83:75:e2:2e:b1:e3:45:26:ca:1c:75: 03:75:03:30:65:ca:f4:62:7a:f5:9b:9e:b3:c5:5c: 14:03:b6:5c:e8:15:79:35:c2:91:f5:45:e2:ca:d5: e2:60:3b:cd:8d:80:fa:6b:8f:ea:4f:5a:d7:23:4e: 75:99:ed:55:fa:65:22:63:a7:6d:2a:2e:7c:65:6e: 0a:3e:91:e2:0e:99:61:ac:b6:a6:1b:93:e3:c4:ce: 95:c0:61:ca:c3:35:ee:70:a2:4f:f1:c3:b8:fe:38: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8B:5C:59:43:8F:2A:AF:48:8B:E2:F0:9B:E9:F3:0A:86:01:E2:14 X509v3 Authority Key Identifier: keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0f:5c:27:5e:79:ca:bf:82:62:06:73:84:c5:e1:22:ec:57: 7b:ae:42:36:8b:ae:22:db:dd:c3:98:8f:35:6f:79:62:f1:45: d2:83:1e:bb:c4:78:97:50:c8:72:74:3e:2f:52:3f:da:b5:15: 6c:0c:c7:cb:ae:6b:bb:31:5c:8e:51:d6:67:bb:e7:02:b0:48: 2d:ac:d4:c2:67:57:e9:21:30:64:62:a1:d8:e6:b9:a5:9c:0f: d4:00:69:c6:95:55:0d:a7:94:e1:c7:fe:40:1f:b7:22:ae:a2: a1:14:b3:54:b4:1a:e9:e0:38:45:e9:d6:c7:c2:bb:bb:6b:16: 89:af:02:47:e4:a7:6d:65:cd:11:f8:fe:ce:fb:69:ac:b0:60: 64:0c:f9:2d:59:e6:b2:2c:2a:81:0e:1d:68:96:a3:56:4a:42: 58:eb:84:24:8c:13:d2:82:f4:f3:6c:93:76:79:8a:2b:8a:38: 0f:e8:18:8c:db:45:95:41:25:73:ba:8c:39:77:19:c4:15:08: 6d:93:a2:bd:69:dc:b0:5a:ef:2e:10:37:45:71:9d:bf:10:90: 7d:c0:b8:df:a3:0c:39:48:83:c7:00:dc:9d:2a:fe:06:74:d5: ba:02:80:ec:39:ef:ad:56:a2:ad:17:b6:df:03:c3:7c:42:d6: 4e:8c:3e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wRESMxF+Hv6vGJlllnUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz YjAyNWEwHhcNMjYwMTI3MDAwMTA5WhcNMjYwMTI4MDAwMTA5WjAzMTEwLwYDVQQD EyhkNjhiNWM1OTQzOGYyYWFmNDg4YmUyZjA5YmU5ZjMwYTg2MDFlMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EGbqNEBHbpac56HvUP0y/MpWn0N 3lHrpyf1WbR0hD+UZE5jdYVzIkQCdQhlBE6ku3bw/ISg5rP2vU0PSqybxJszV6N+ KahwMRIcAFbyP8KACgcoGFaNYUVjZVMW6p2FDZBV2JgrjDQSfyd6vzd+MRDfGv77 TzF7J7TdsGXGbySIQsQFHhyYDg69xYOV36IpRktcosFv7kh9g3XiLrHjRSbKHHUD dQMwZcr0Ynr1m56zxVwUA7Zc6BV5NcKR9UXiytXiYDvNjYD6a4/qT1rXI051me1V +mUiY6dtKi58ZW4KPpHiDplhrLamG5PjxM6VwGHKwzXucKJP8cO4/jgqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaLXFlDjyqvSIvi8Jvp8wqGAeIUMB8GA1UdIwQY MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2 LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw9cJ155 yr+CYgZzhMXhIuxXe65CNouuItvdw5iPNW95YvFF0oMeu8R4l1DIcnQ+L1I/2rUV bAzHy65ruzFcjlHWZ7vnArBILazUwmdX6SEwZGKh2Oa5pZwP1ABpxpVVDaeU4cf+ QB+3Iq6ioRSzVLQa6eA4RenWx8K7u2sWia8CR+SnbWXNEfj+zvtprLBgZAz5LVnm siwqgQ4daJajVkpCWOuEJIwT0oL082yTdnmKK4o4D+gYjNtFlUElc7qMOXcZxBUI bZOivWncsFrvLhA3RXGdvxCQfcC436MMOUiDxwDcnSr+BnTVugKA7DnvrVairRe2 3wPDfELWTow+Tw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:33 2026 by rpki-client