This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json) Hash identifier: 3KA0tI7YmyYb7Yqh7WiSBJgyuDr03ERqoISk3rhhhHg= Subject key identifier: 65:E9:B1:DF:68:68:EC:69:94:7F:B6:8A:D3:26:E6:AE:99:AD:C5:73 Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1 Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1 Certificate serial: 019BF4623033D9B0FDB0B09819563A0EF500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft Manifest number: 0EB8 Signing time: Sun 25 Jan 2026 09:00:34 +0000 Manifest this update: Sun 25 Jan 2026 09:00:34 +0000 Manifest next update: Mon 26 Jan 2026 09:00:34 +0000 Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: PVqc/EycGgY5CBVv0Zdluak3zlO2GR3VdP/ei0e3ODE=) 2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:30:33:d9:b0:fd:b0:b0:98:19:56:3a:0e:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1 Validity Not Before: Jan 25 09:00:34 2026 GMT Not After : Jan 26 09:00:34 2026 GMT Subject: CN=65e9b1df6868ec69947fb68ad326e6ae99adc573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:66:22:fd:57:5f:35:05:69:48:fd:f4:33: b7:54:a9:43:40:99:3b:12:f5:6c:41:13:14:17:92: e2:2a:2b:49:f4:c0:ef:fe:cf:36:0b:6d:cf:cb:12: 82:54:d7:2f:78:98:82:0c:b1:c6:1c:bf:6f:3c:f0: ae:92:6b:3d:25:26:f7:23:ce:68:c7:fe:c8:6a:97: 98:77:64:f3:bd:f9:d8:c8:e8:f1:c0:c5:93:da:b7: 78:b0:4c:57:48:a7:bf:b2:87:a6:52:62:2f:a5:e0: 03:a5:32:08:bd:fa:f8:1d:5d:db:62:e1:e7:79:ef: 90:02:ff:73:df:04:ff:e7:9d:7c:4e:04:f8:00:4f: b4:f2:c9:4c:5e:f5:b2:b7:a0:77:1d:a4:b7:4b:02: 93:9e:70:45:bf:32:b8:86:c8:54:48:33:67:06:79: b9:99:76:12:10:80:07:0d:90:63:61:1f:25:22:4f: e1:04:f2:68:ad:cf:ec:37:9c:e3:96:f3:a3:0c:50: 07:67:89:bb:21:58:da:1b:42:34:4d:25:47:8c:4b: f7:d7:10:93:f5:5f:12:20:66:98:df:46:58:4e:5e: 89:7c:a0:28:ed:bb:6d:99:94:60:c1:b4:2a:f6:79: e4:e7:a8:cb:8d:79:31:14:08:ee:92:18:b5:d2:7a: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E9:B1:DF:68:68:EC:69:94:7F:B6:8A:D3:26:E6:AE:99:AD:C5:73 X509v3 Authority Key Identifier: keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:12:4c:3b:0f:4f:01:f2:a8:43:1e:8d:f6:74:f9:73:da: 32:4b:40:9f:f5:e9:5b:d4:4f:4e:a8:b1:b5:78:5b:b0:c9:eb: b2:eb:42:bc:56:04:97:5c:42:8e:8e:45:55:4c:6d:bb:16:cd: fd:3a:2f:df:34:7d:2c:91:7c:1e:36:94:54:a4:a8:4b:ed:d3: cc:5d:3e:33:d1:0a:0c:7a:ab:46:0a:34:5b:67:6a:68:d1:b6: 09:31:2f:49:52:cb:8a:e0:ec:c0:90:d3:62:5b:49:2d:aa:3c: 4d:c7:a1:78:21:2c:33:15:d2:5f:83:7d:44:07:3f:58:3f:e2: f0:ee:e3:25:88:04:8d:59:db:91:6a:35:b8:bf:1f:82:9e:53: 3d:82:78:6b:5b:49:80:f1:04:8d:0c:78:b6:d2:ea:7b:be:d7: 70:d7:13:e0:6c:70:86:ab:67:b0:89:52:27:1d:b9:22:8f:76: 10:6a:7c:99:b3:61:c8:2a:47:c9:61:72:53:20:2d:09:78:18: 24:54:f8:a4:85:49:a8:98:8d:ce:32:18:ca:8c:c2:bb:17:e0: 49:31:01:25:76:2f:2d:ea:f1:ad:b4:86:af:99:c1:56:de:84: d4:f2:db:8c:9d:13:db:bf:8f:01:f9:68:1b:7f:25:01:f8:ab: d5:4d:f4:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YjAz2bD9sLCYGVY6DvUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDk2MDA1OGE1NTNiM2Y1ZGY5ZmU3MjcyMTkwMzdjNDhh YjUwZTEwHhcNMjYwMTI1MDkwMDM0WhcNMjYwMTI2MDkwMDM0WjAzMTEwLwYDVQQD Eyg2NWU5YjFkZjY4NjhlYzY5OTQ3ZmI2OGFkMzI2ZTZhZTk5YWRjNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAordmIv1XXzUFaUj99DO3VKlDQJk7 EvVsQRMUF5LiKitJ9MDv/s82C23PyxKCVNcveJiCDLHGHL9vPPCukms9JSb3I85o x/7IapeYd2TzvfnYyOjxwMWT2rd4sExXSKe/soemUmIvpeADpTIIvfr4HV3bYuHn ee+QAv9z3wT/5518TgT4AE+08slMXvWyt6B3HaS3SwKTnnBFvzK4hshUSDNnBnm5 mXYSEIAHDZBjYR8lIk/hBPJorc/sN5zjlvOjDFAHZ4m7IVjaG0I0TSVHjEv31xCT 9V8SIGaY30ZYTl6JfKAo7bttmZRgwbQq9nnk56jLjXkxFAjukhi10nr/HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXpsd9oaOxplH+2itMm5q6ZrcVzMB8GA1UdIwQY MBaAFBnZYAWKVTs/Xfn+cnIZA3xIq1DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAt NTdiOTFlODE1MzMwLzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAtNTdiOTFlODE1MzMw LzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAESTDsP TwHyqEMejfZ0+XPaMktAn/XpW9RPTqixtXhbsMnrsutCvFYEl1xCjo5FVUxtuxbN /Tov3zR9LJF8HjaUVKSoS+3TzF0+M9EKDHqrRgo0W2dqaNG2CTEvSVLLiuDswJDT YltJLao8TceheCEsMxXSX4N9RAc/WD/i8O7jJYgEjVnbkWo1uL8fgp5TPYJ4a1tJ gPEEjQx4ttLqe77XcNcT4GxwhqtnsIlSJx25Io92EGp8mbNhyCpHyWFyUyAtCXgY JFT4pIVJqJiNzjIYyozCuxfgSTEBJXYvLerxrbSGr5nBVt6E1PLbjJ0T27+PAflo G38lAfir1U308Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:10 2026 by rpki-client