This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json) Hash identifier: kY8NIDrQSuk8pa6qtjxZWIo1r7lQwdZgC5fzbHrdVxY= Subject key identifier: 72:6C:FF:97:E3:A9:03:A3:58:3B:4E:9C:C1:69:52:4A:C6:3E:12:A8 Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Certificate serial: 019BF6BF884F493A65F279045ECC8DB37802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft Manifest number: 0AFC Signing time: Sun 25 Jan 2026 20:01:45 +0000 Manifest this update: Sun 25 Jan 2026 20:01:45 +0000 Manifest next update: Mon 26 Jan 2026 20:01:45 +0000 Files and hashes: 1: 4siB5e1GQm-axBvoOugw52N_IkE.roa (hash: /3IxrvNXYC3JPq03y8Dq56bw9cEQPSNh5PVk8H407no=) 2: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: +mHgBybfvPU2utUVQDpeQ64K6pjZY7oe+rcDMoTQXzk=) 3: OoPG2MT4AbshroGKma-go4-mAqg.roa (hash: MmH8u7qEGNsEDukTF/vmrjDahE/w+pZkLOqm+xYo1ZE=) 4: ughKvz4zorztqh7yWUjfuuHBP5E.roa (hash: XOZZpijgX85rlrIVt7kzdBz4Rca7aZetcDWsBATSYMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:88:4f:49:3a:65:f2:79:04:5e:cc:8d:b3:78:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Validity Not Before: Jan 25 20:01:45 2026 GMT Not After : Jan 26 20:01:45 2026 GMT Subject: CN=726cff97e3a903a3583b4e9cc169524ac63e12a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:f2:ad:1c:30:78:1f:f8:a7:b4:4a:2f:7f: b2:9b:f2:d3:98:c9:4e:28:48:66:21:b0:5a:a0:8e: 4a:86:c8:7d:cb:f7:97:00:d1:2c:07:c5:eb:13:53: 36:08:b1:55:d5:65:f5:f7:15:37:8a:07:55:ee:2b: 0b:16:46:45:76:ce:7a:be:f5:a5:c6:fd:30:b2:01: 03:b2:99:70:06:b0:f6:26:cb:06:e6:09:f6:85:87: 72:7b:48:39:c9:df:d2:bb:60:e1:70:8e:ef:d7:3f: 7b:07:65:01:c9:b2:06:90:23:19:69:bb:1f:93:12: 3a:22:6d:b3:c9:9e:a0:4b:ae:ee:36:b9:73:02:ac: c0:c3:f6:4f:75:5d:6f:3e:bb:69:ab:e5:b3:2c:46: d7:c7:25:24:18:bd:7f:64:96:53:bc:d7:a3:2a:e0: ff:b9:05:45:4a:28:8a:e3:6d:74:5c:0c:c0:5f:51: 3a:6d:0e:1e:47:26:90:38:9d:89:b6:eb:cd:24:e6: e3:86:38:b7:54:b4:b0:3c:15:d7:00:7f:85:f3:96: 34:58:1a:b5:9f:8a:e8:05:db:e7:4f:e7:9e:35:ab: dc:b0:c8:7d:8e:f6:38:23:85:05:f4:dd:bd:d5:aa: 93:b2:d8:48:1d:66:8b:b2:35:c5:af:e9:86:56:43: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6C:FF:97:E3:A9:03:A3:58:3B:4E:9C:C1:69:52:4A:C6:3E:12:A8 X509v3 Authority Key Identifier: keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:de:db:fe:dc:9d:89:db:83:f7:57:d3:10:a2:33:6b:0a:ef: 50:8f:3f:3e:4c:a6:a8:82:b7:50:2c:b3:b4:08:e2:3a:a0:2d: 6c:a7:25:5a:7f:a2:10:c2:b1:34:94:f2:30:f8:22:77:95:72: 52:4d:9d:a7:db:ea:a8:66:37:cc:b1:2e:65:18:7b:9a:03:9f: 55:da:5d:58:00:c3:23:f1:20:70:a0:ec:45:cb:16:7d:d6:d1: 3f:27:28:aa:c1:3a:90:fc:48:ba:a9:db:9f:3f:ab:a0:b0:bb: 6c:65:1b:78:33:bb:1c:33:d6:b3:e3:4c:1c:a8:e6:d1:65:19: 97:b3:e7:20:77:57:b1:cd:f6:06:5f:93:78:98:f6:2a:95:af: aa:e8:65:4b:ff:f1:07:55:16:33:75:a0:e3:bf:80:51:b9:89: d3:5c:1e:0f:1a:56:c3:dd:b6:f2:7a:22:50:f6:fc:e2:45:11: 04:09:7e:73:eb:10:6b:7b:3b:ab:74:0d:f7:ab:1e:2a:ab:bd: 83:6d:24:88:2f:d9:91:c6:b7:f5:9b:40:6b:c9:fc:ac:c0:05: 98:fd:e2:e7:db:7c:91:5d:c1:0a:fa:ca:36:b5:5c:63:3e:7f: 13:4f:20:fa:a7:c7:56:54:7a:34:0e:d0:87:f5:d2:ab:95:dc: d9:11:66:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v4hPSTpl8nkEXsyNs3gCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2 ZDRjMGIwHhcNMjYwMTI1MjAwMTQ1WhcNMjYwMTI2MjAwMTQ1WjAzMTEwLwYDVQQD Eyg3MjZjZmY5N2UzYTkwM2EzNTgzYjRlOWNjMTY5NTI0YWM2M2UxMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjfyrRwweB/4p7RKL3+ym/LTmMlO KEhmIbBaoI5Khsh9y/eXANEsB8XrE1M2CLFV1WX19xU3igdV7isLFkZFds56vvWl xv0wsgEDsplwBrD2JssG5gn2hYdye0g5yd/Su2DhcI7v1z97B2UBybIGkCMZabsf kxI6Im2zyZ6gS67uNrlzAqzAw/ZPdV1vPrtpq+WzLEbXxyUkGL1/ZJZTvNejKuD/ uQVFSiiK4210XAzAX1E6bQ4eRyaQOJ2JtuvNJObjhji3VLSwPBXXAH+F85Y0WBq1 n4roBdvnT+eeNavcsMh9jvY4I4UF9N291aqTsthIHWaLsjXFr+mGVkPtwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJs/5fjqQOjWDtOnMFpUkrGPhKoMB8GA1UdIwQY MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt Y2RhMzYyNTYyOTZjLzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN7b/tyd iduD91fTEKIzawrvUI8/PkymqIK3UCyztAjiOqAtbKclWn+iEMKxNJTyMPgid5Vy Uk2dp9vqqGY3zLEuZRh7mgOfVdpdWADDI/EgcKDsRcsWfdbRPycoqsE6kPxIuqnb nz+roLC7bGUbeDO7HDPWs+NMHKjm0WUZl7PnIHdXsc32Bl+TeJj2KpWvquhlS//x B1UWM3Wg47+AUbmJ01weDxpWw9228noiUPb84kURBAl+c+sQa3s7q3QN96seKqu9 g20kiC/Zkca39ZtAa8n8rMAFmP3i59t8kV3BCvrKNrVcYz5/E08g+qfHVlR6NA7Q h/XSq5Xc2RFmEw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:14:47 2026 by rpki-client