This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json) Hash identifier: 3fbxcGZHeQwJBV6vCSumkUFEbdqjAqJA6GZz+mJQYTw= Subject key identifier: 46:77:AE:0B:98:4D:E8:FE:C4:3D:32:3C:9D:52:35:8C:D8:8B:4D:F4 Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33 Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933 Certificate serial: 019BF72CC99675E9903C42A1DAD5951A8599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:01:06 +0000 Manifest this update: Sun 25 Jan 2026 22:01:06 +0000 Manifest next update: Mon 26 Jan 2026 22:01:06 +0000 Files and hashes: 1: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: qlOpziZkJdgiqWF96A+z+c591/LzQHrkKHjdAtUw96w=) 2: IE5A6p3ihCrcbMxKq92_b0wXLO4.roa (hash: V9HxeCXOTsCIR19CGoeLkRMuI9i6B2h8bj5VYOFXyYk=) 3: ZBthpRszRnWPefnQslvGVVRB_Ss.roa (hash: /MipCJsyzaVKfbqwd9l/2ank8ZfA/0lQtm26p9j7ZRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c9:96:75:e9:90:3c:42:a1:da:d5:95:1a:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933 Validity Not Before: Jan 25 22:01:06 2026 GMT Not After : Jan 26 22:01:06 2026 GMT Subject: CN=4677ae0b984de8fec43d323c9d52358cd88b4df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:8b:13:90:48:fc:fe:b5:e4:06:4c:54:04: d3:e4:8a:9c:b6:ae:4d:f7:e3:c7:47:c5:75:6d:5a: 25:e6:0a:4d:49:ce:40:3e:5a:e8:32:64:d1:c3:7d: 66:b5:31:c4:b0:d3:83:f7:05:11:11:c6:d4:d7:1d: 06:ec:d8:8d:05:ed:b4:f7:fa:c1:27:81:2b:15:dd: 02:b7:56:52:7f:4c:ad:fc:c0:54:94:a6:31:6c:05: cf:ed:20:50:5a:e3:9b:1c:a4:83:49:52:88:44:af: fc:d7:8a:62:39:01:00:49:a7:a7:0a:89:27:1e:e2: e4:66:2a:f8:77:96:1c:da:05:8f:f0:cb:b0:21:3c: dc:2e:a0:46:32:90:8f:98:78:c6:c9:5d:aa:60:ec: 43:8f:76:aa:57:c5:46:8e:f4:6f:5a:40:5f:e1:7f: e1:7c:d0:d2:b2:c0:78:0f:12:61:58:65:d8:35:f6: b5:10:c7:e1:05:95:a5:3c:e8:e7:a3:60:a6:3d:9d: a5:20:be:f9:c3:d0:6f:e9:46:65:36:3a:41:8b:51: 00:01:ca:9d:5b:83:dc:68:fd:cf:c0:be:7d:75:5e: c7:dc:d9:61:81:c1:cf:a7:58:1b:c6:52:29:f0:32: 8b:80:5f:f4:6e:cb:b3:1f:3e:81:8f:4e:5e:c3:74: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:77:AE:0B:98:4D:E8:FE:C4:3D:32:3C:9D:52:35:8C:D8:8B:4D:F4 X509v3 Authority Key Identifier: keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:ef:bc:63:b5:08:37:9f:a7:c1:83:ac:90:76:b5:d6:a2: b1:14:21:0f:69:31:28:90:1b:6d:b5:c7:9b:57:49:42:b3:29: 1a:28:45:65:ad:08:25:09:b1:df:c3:06:09:2f:7d:5a:82:da: 28:6e:4c:0c:dd:2a:d8:29:ea:35:2b:d3:78:f6:74:a9:09:1c: a3:74:ca:dc:d8:c4:75:cd:76:e3:44:2a:19:7d:a7:76:0f:20: f4:86:5f:a9:d3:33:4d:4b:a7:39:49:23:ad:12:a8:18:dc:ff: 6c:3b:c3:cb:64:5f:2a:d3:09:13:84:9e:bd:82:32:a4:b8:bb: ab:63:1b:37:c9:17:5f:32:87:54:a7:60:58:8f:77:bb:d7:56: 8c:50:37:00:de:94:f4:e2:6e:8c:be:92:bd:42:5b:de:ab:da: 74:0a:3e:30:d8:14:7a:3a:31:95:05:fe:d9:06:29:ec:3a:ba: 49:6a:57:3c:d4:dc:7f:b4:a3:69:07:35:f0:ff:49:24:60:1f: d1:03:a3:e0:bb:1d:a3:38:3f:2c:0d:c6:8d:e3:47:8d:71:22: 26:da:22:d3:16:c5:79:fa:7d:2b:e1:85:37:cb:07:68:ca:18: 50:96:59:cf:cb:e0:22:01:9a:11:4e:12:53:5c:e6:5a:7f:a9: 19:dc:b8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMmWdemQPEKh2tWVGoWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTBlOWEzZDIwY2ZhYzZjYmUzY2NmNzRhYjU3ODRhNzc2 ODI5MzMwHhcNMjYwMTI1MjIwMTA2WhcNMjYwMTI2MjIwMTA2WjAzMTEwLwYDVQQD Eyg0Njc3YWUwYjk4NGRlOGZlYzQzZDMyM2M5ZDUyMzU4Y2Q4OGI0ZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6mLE5BI/P615AZMVATT5Iqctq5N 9+PHR8V1bVol5gpNSc5APlroMmTRw31mtTHEsNOD9wUREcbU1x0G7NiNBe209/rB J4ErFd0Ct1ZSf0yt/MBUlKYxbAXP7SBQWuObHKSDSVKIRK/814piOQEASaenCokn HuLkZir4d5Yc2gWP8MuwITzcLqBGMpCPmHjGyV2qYOxDj3aqV8VGjvRvWkBf4X/h fNDSssB4DxJhWGXYNfa1EMfhBZWlPOjno2CmPZ2lIL75w9Bv6UZlNjpBi1EAAcqd W4PcaP3PwL59dV7H3NlhgcHPp1gbxlIp8DKLgF/0bsuzHz6Bj05ew3S9PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ3rguYTej+xD0yPJ1SNYzYi030MB8GA1UdIwQY MBaAFBjg6aPSDPrGy+PM90q1eEp3aCkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMt OTVhYjgxYjc3NjkxLzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMtOTVhYjgxYjc3Njkx LzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH/vvGO1 CDefp8GDrJB2tdaisRQhD2kxKJAbbbXHm1dJQrMpGihFZa0IJQmx38MGCS99WoLa KG5MDN0q2CnqNSvTePZ0qQkco3TK3NjEdc1240QqGX2ndg8g9IZfqdMzTUunOUkj rRKoGNz/bDvDy2RfKtMJE4SevYIypLi7q2MbN8kXXzKHVKdgWI93u9dWjFA3AN6U 9OJujL6SvUJb3qvadAo+MNgUejoxlQX+2QYp7Dq6SWpXPNTcf7SjaQc18P9JJGAf 0QOj4Lsdozg/LA3GjeNHjXEiJtoi0xbFefp9K+GFN8sHaMoYUJZZz8vgIgGaEU4S U1zmWn+pGdy4mw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:58 2026 by rpki-client