This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json) Hash identifier: 4L/fbawsxsr4QyeJ1wVZuk1Y2rryk0j9fnl20Fb9rBw= Subject key identifier: 53:C6:EB:69:8C:10:51:F2:F2:C2:28:3C:02:19:D4:7A:71:85:83:31 Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30 Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630 Certificate serial: 019BF619E6B7E895F06D9B0B1B244F21DC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 17:00:51 +0000 Manifest this update: Sun 25 Jan 2026 17:00:51 +0000 Manifest next update: Mon 26 Jan 2026 17:00:51 +0000 Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: +01l0/nMy+/OYAteXvfLIhT0nC0ILJZTgisDn8wSId8=) 2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:e6:b7:e8:95:f0:6d:9b:0b:1b:24:4f:21:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630 Validity Not Before: Jan 25 17:00:51 2026 GMT Not After : Jan 26 17:00:51 2026 GMT Subject: CN=53c6eb698c1051f2f2c2283c0219d47a71858331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:a1:82:38:e4:fc:99:38:f8:b7:0d:ba:63: 2a:98:c0:6c:9c:75:2f:3b:4d:a9:cc:09:69:b0:1d: 00:ba:a0:b7:5b:c6:50:ba:6c:fd:b9:83:38:02:a7: f2:ac:62:07:aa:e6:b4:4d:0e:8f:17:bf:a5:8e:a2: 84:13:e1:b0:24:9b:04:83:0e:17:fe:ac:5f:67:4a: ae:af:d4:cd:dd:9a:74:c7:af:05:57:2c:ec:46:87: 0c:a6:d5:97:d6:c5:bc:23:52:5c:7a:f6:db:cd:0d: e3:3e:b9:17:24:28:5e:44:a3:cc:7c:28:00:f2:09: ef:d1:81:42:60:51:36:14:05:96:3f:76:32:8e:05: c9:05:1b:c2:1e:13:9d:13:84:26:b3:c9:42:5a:60: f7:63:b9:77:33:cd:53:64:a4:36:83:80:33:f8:c9: c8:da:e4:65:4e:ab:d0:2a:df:bc:84:2e:e1:a7:71: 2b:a0:ef:b7:ab:2d:d8:3d:9f:d4:ae:09:ed:10:57: 57:c9:5d:d6:65:c9:71:46:77:f4:be:b9:4c:89:5c: c7:d8:11:63:95:4b:f2:d8:4b:90:83:da:8d:7b:9b: 7f:4f:af:9b:d3:88:8a:1b:a5:80:02:e1:0b:64:5a: 70:97:6b:56:1f:79:32:15:bc:14:f9:6b:54:6c:44: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C6:EB:69:8C:10:51:F2:F2:C2:28:3C:02:19:D4:7A:71:85:83:31 X509v3 Authority Key Identifier: keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:90:1b:10:ab:7e:cb:89:46:db:2c:ef:15:52:e4:bf:ad:ae: 6d:c0:ff:95:31:f6:99:ca:f0:ad:1c:bc:3c:50:05:0d:c2:0a: a3:0a:1b:f1:f8:40:9f:ba:c5:e3:92:a9:3a:9f:c2:36:a1:0c: b5:5e:cb:97:d8:72:fa:68:d6:9e:d7:b6:86:c6:c4:93:a5:14: 86:cc:d2:47:3f:77:94:03:05:df:09:58:e6:ae:b2:bf:b3:ab: 46:b5:7d:b1:39:19:e9:b6:99:2a:88:da:1b:ea:be:0a:0e:b1: eb:7a:53:5f:0d:6b:4a:30:13:c7:43:60:56:57:3a:aa:92:70: 5b:81:6d:73:50:de:16:8e:12:cb:ee:ef:a0:90:ab:58:bd:15: 12:12:d0:05:d0:2a:bb:08:ff:ce:e1:28:db:21:e4:3b:07:4a: 97:cf:0b:56:c3:f1:db:71:e0:b6:6e:61:9f:1c:49:e7:c2:ce: a1:d3:bf:83:ec:97:7b:e0:23:f0:51:a9:f3:3c:75:a5:df:72: e6:0d:2b:52:09:49:78:1c:e3:5e:99:45:19:b2:a8:d5:3b:04: 23:f3:7a:90:6d:4c:6a:56:ad:c0:59:f5:b2:e0:1b:76:f4:58: 12:ad:13:2e:3b:98:93:d1:75:5d:57:69:de:0c:97:7a:56:50: 6d:4b:8a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gea36JXwbZsLGyRPIdxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWI0YzA5NDViNzM4ZWRkYTA1ODNhMjc0YjYzYzFiODY3 M2E2MzAwHhcNMjYwMTI1MTcwMDUxWhcNMjYwMTI2MTcwMDUxWjAzMTEwLwYDVQQD Eyg1M2M2ZWI2OThjMTA1MWYyZjJjMjI4M2MwMjE5ZDQ3YTcxODU4MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/qhgjjk/Jk4+LcNumMqmMBsnHUv O02pzAlpsB0AuqC3W8ZQumz9uYM4AqfyrGIHqua0TQ6PF7+ljqKEE+GwJJsEgw4X /qxfZ0qur9TN3Zp0x68FVyzsRocMptWX1sW8I1JcevbbzQ3jPrkXJCheRKPMfCgA 8gnv0YFCYFE2FAWWP3YyjgXJBRvCHhOdE4Qms8lCWmD3Y7l3M81TZKQ2g4Az+MnI 2uRlTqvQKt+8hC7hp3EroO+3qy3YPZ/UrgntEFdXyV3WZclxRnf0vrlMiVzH2BFj lUvy2EuQg9qNe5t/T6+b04iKG6WAAuELZFpwl2tWH3kyFbwU+WtUbETkOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPG62mMEFHy8sIoPAIZ1HpxhYMxMB8GA1UdIwQY MBaAFICrTAlFtzjt2gWDonS2PBuGc6YwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEt ZjVmZGEwZWEzMDBkLzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEtZjVmZGEwZWEzMDBk LzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopAbEKt+ y4lG2yzvFVLkv62ubcD/lTH2mcrwrRy8PFAFDcIKowob8fhAn7rF45KpOp/CNqEM tV7Ll9hy+mjWnte2hsbEk6UUhszSRz93lAMF3wlY5q6yv7OrRrV9sTkZ6baZKoja G+q+Cg6x63pTXw1rSjATx0NgVlc6qpJwW4Ftc1DeFo4Sy+7voJCrWL0VEhLQBdAq uwj/zuEo2yHkOwdKl88LVsPx23Hgtm5hnxxJ58LOodO/g+yXe+Aj8FGp8zx1pd9y 5g0rUglJeBzjXplFGbKo1TsEI/N6kG1MalatwFn1suAbdvRYEq0TLjuYk9F1XVdp 3gyXelZQbUuKRw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:35 2026 by rpki-client