This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft File: G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json) Hash identifier: sWSPPtBvoat663BbLVN0ax0rC0CoC6N2vM2IvZILNgA= Subject key identifier: B8:EB:62:29:25:DF:69:1A:11:CE:92:B5:A5:CE:BA:92:5D:D9:F3:60 Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d Certificate serial: 019BF72D213DAF402D441C6CDC80CE0EB828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft Manifest number: 12C8 Signing time: Sun 25 Jan 2026 22:01:28 +0000 Manifest this update: Sun 25 Jan 2026 22:01:28 +0000 Manifest next update: Mon 26 Jan 2026 22:01:28 +0000 Files and hashes: 1: Aa3-IX9Q5L903l6hxbaGkutiUDc.roa (hash: 86HjD4s9N7nHz6qRPx1oJDAQW0wNKeBRj+6qzWFQ0Mo=) 2: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: bM4Qf/ByW/0lt3WDytpnl9b/jABNQVRFChRaSz43j5M=) 3: aFNhBsBj-ZBfP8L0NrUC_nO9pPg.roa (hash: HGwMoHWdFAfz3fMiL4Fa4RdLW7mO6LIOX2HFGuPp8Ys=) 4: edEUrHXeyIs0S-HknWeoeIPSRms.roa (hash: hIGtl5bcP13DHPOHJVKYk8Pv0tnGSP+tn+p7AAFcEDc=) 5: iTldB4zEBvTcpwV7r2_yT9tL9f0.roa (hash: OFds1nswtHe57QbWsYL+F1pMF391WdX7IZtfFU0BiUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:21:3d:af:40:2d:44:1c:6c:dc:80:ce:0e:b8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d Validity Not Before: Jan 25 22:01:28 2026 GMT Not After : Jan 26 22:01:28 2026 GMT Subject: CN=b8eb622925df691a11ce92b5a5ceba925dd9f360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:2f:be:7f:9e:90:ce:7d:cc:15:5e:29:3a: ea:4f:de:50:a5:4f:b1:fe:79:a8:9b:ef:dd:1b:3d: db:7a:14:2c:03:a7:5b:85:c8:56:97:f9:3e:8e:b0: 9e:a5:97:a1:af:5c:d7:f2:06:e8:d6:e4:0c:cf:17: 21:e2:df:28:ac:fb:14:47:29:96:6b:7c:27:0f:69: bb:1f:a0:a3:37:5c:d1:fd:08:31:87:e7:d1:4b:65: f0:f2:4d:5d:13:1e:03:13:6e:d8:b5:1e:2a:54:43: 23:a3:bb:d6:52:0e:8f:98:99:d8:ab:d9:5b:c8:a8: e5:e5:78:81:3f:a3:be:f1:00:da:25:79:ff:4f:4f: 17:bf:ad:b7:01:80:e3:a7:38:29:7e:7a:b4:2c:f9: 3c:f2:7c:2b:0c:e5:e7:42:da:22:6c:98:9c:ef:c9: 05:e5:b4:92:ed:a9:5e:ed:ae:9a:73:e7:49:6c:92: 31:65:ca:5a:1b:0c:e8:72:47:29:7d:c7:0b:7e:9e: 42:de:e7:26:15:a8:63:bd:ee:ad:49:e4:dd:f3:1b: d5:96:37:18:eb:9d:8d:63:aa:ee:61:db:7b:75:0b: e6:23:6e:61:81:87:32:9a:80:6f:91:da:d6:5b:3d: 2f:17:bc:c1:a4:29:53:3e:a5:a1:9e:05:55:b0:5e: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:62:29:25:DF:69:1A:11:CE:92:B5:A5:CE:BA:92:5D:D9:F3:60 X509v3 Authority Key Identifier: keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c4:a9:d9:21:b0:2a:e7:7f:8b:47:bf:ff:4d:96:d3:ef:9a: 4b:d9:c1:c1:31:09:49:72:17:de:19:2e:3e:cf:8d:32:25:ac: b7:62:1e:4e:f7:5e:70:7a:fd:82:54:8f:d3:38:01:0a:67:13: 17:95:f6:56:e0:53:34:d8:56:2f:53:77:a8:89:eb:7b:cb:60: c8:44:70:53:67:16:d9:58:81:bb:a2:65:6b:87:02:f7:0e:80: 62:e8:4b:60:59:62:41:cc:e4:c4:a6:ce:c5:8c:5f:4a:84:02: b1:de:3d:b2:c2:98:f4:01:64:36:b8:e5:e5:f5:9c:57:c9:61: 74:8c:dd:4e:64:ce:a3:ab:29:35:0d:28:3f:ee:6b:83:fb:80: a2:32:e1:c1:a9:05:bc:8d:18:54:dc:a5:ee:5e:85:ec:be:74: 23:8f:5b:2f:8d:bc:58:26:cb:a8:3b:a3:38:55:04:b8:92:8e: c5:6d:d2:1e:55:10:12:c3:15:79:8c:f3:e9:ea:cd:c1:06:12: d8:ab:b9:c5:dc:13:ad:ca:d6:ab:a4:b6:0f:8d:d1:f5:db:de: 75:a8:2c:f8:bc:f4:a4:db:e4:e5:b0:85:90:b6:ba:cf:9e:8d: 97:eb:f8:3f:ad:66:5d:4b:7d:78:71:cc:d6:0f:70:0e:6f:15: 8b:34:8b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSE9r0AtRBxs3IDODrgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZDJkNDYzYWUxNTM0NmQ1ZWRkNzkzN2I4YmZhOGUwOWIx NDM3NmQwHhcNMjYwMTI1MjIwMTI4WhcNMjYwMTI2MjIwMTI4WjAzMTEwLwYDVQQD EyhiOGViNjIyOTI1ZGY2OTFhMTFjZTkyYjVhNWNlYmE5MjVkZDlmMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXMvvn+ekM59zBVeKTrqT95QpU+x /nmom+/dGz3behQsA6dbhchWl/k+jrCepZehr1zX8gbo1uQMzxch4t8orPsURymW a3wnD2m7H6CjN1zR/Qgxh+fRS2Xw8k1dEx4DE27YtR4qVEMjo7vWUg6PmJnYq9lb yKjl5XiBP6O+8QDaJXn/T08Xv623AYDjpzgpfnq0LPk88nwrDOXnQtoibJic78kF 5bSS7ale7a6ac+dJbJIxZcpaGwzockcpfccLfp5C3ucmFahjve6tSeTd8xvVljcY 652NY6ruYdt7dQvmI25hgYcymoBvkdrWWz0vF7zBpClTPqWhngVVsF5wCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjrYikl32kaEc6StaXOupJd2fNgMB8GA1UdIwQY MBaAFBvS1GOuFTRtXt15N7i/qOCbFDdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MGM0NzctYThjZC00YTcyLWI2Njkt MWY5M2MyMzlhMDEyLzEvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC83MGM0NzctYThjZC00YTcyLWI2NjktMWY5M2MyMzlhMDEy LzEvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsSp2SGw Kud/i0e//02W0++aS9nBwTEJSXIX3hkuPs+NMiWst2IeTvdecHr9glSP0zgBCmcT F5X2VuBTNNhWL1N3qInre8tgyERwU2cW2ViBu6Jla4cC9w6AYuhLYFliQczkxKbO xYxfSoQCsd49ssKY9AFkNrjl5fWcV8lhdIzdTmTOo6spNQ0oP+5rg/uAojLhwakF vI0YVNyl7l6F7L50I49bL428WCbLqDujOFUEuJKOxW3SHlUQEsMVeYzz6erNwQYS 2Ku5xdwTrcrWq6S2D43R9dvedags+Lz0pNvk5bCFkLa6z56Nl+v4P61mXUt9eHHM 1g9wDm8VizSLqw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:14 2026 by rpki-client