This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json) Hash identifier: HwQ1nGim/EHWO0HJTRP/5YwdrD8Us7+RFr9aVRHic0s= Subject key identifier: E0:F8:EF:A7:95:5A:38:E6:BF:6B:E1:E0:3B:95:00:2C:32:E1:C8:E4 Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6 Certificate serial: 019BF763CCCA0DCF11D1A98FD37DC436FCDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft Manifest number: 164D Signing time: Sun 25 Jan 2026 23:01:11 +0000 Manifest this update: Sun 25 Jan 2026 23:01:11 +0000 Manifest next update: Mon 26 Jan 2026 23:01:11 +0000 Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: KkiGfBvryyi57vibJKAg3tUie8GI79MaVRuiBt6FFVI=) 2: PY5sdU0kADgfJHW2XFZw0dgHeu0.roa (hash: WIfT5DY5Ccg3dpUdIFTpUWfqc0ig1ZlT0tU43GrW37g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:cc:ca:0d:cf:11:d1:a9:8f:d3:7d:c4:36:fc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8672105752b982174d1040c103817570b8d34d6 Validity Not Before: Jan 25 23:01:11 2026 GMT Not After : Jan 26 23:01:11 2026 GMT Subject: CN=e0f8efa7955a38e6bf6be1e03b95002c32e1c8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:73:19:2d:07:88:c4:ce:1d:c9:6f:49:e5: e3:64:9b:66:90:c5:88:3d:ad:70:54:c2:15:cc:57: 1f:74:20:3e:d7:69:8c:9a:7e:81:02:56:3f:37:98: ec:7b:9f:3b:89:79:75:db:c5:5a:60:9b:03:e9:06: 97:a3:c0:78:9b:5d:98:f5:37:bf:7d:11:ef:ee:16: 8f:d7:fc:f8:49:f4:b2:4e:86:82:3a:4f:72:60:01: 67:ae:6d:60:c4:21:22:f6:8e:22:94:cf:35:3e:24: 3b:5f:45:87:33:f5:d9:6d:13:9a:3b:e3:ac:1c:61: fc:07:09:52:85:89:58:b2:24:19:d5:cb:1b:30:77: f2:3a:2c:ed:25:1a:c4:ca:ba:b0:de:9a:81:55:0e: 3c:e7:f1:48:c6:af:64:60:3e:aa:c5:4d:33:1c:01: a4:f0:a4:a7:87:31:5f:8a:0c:03:ec:37:eb:c2:6a: a2:d4:03:9d:9d:92:69:15:fd:60:ec:42:06:c2:2f: 99:3c:fb:15:62:f8:e7:65:e9:3b:d7:bd:db:9c:48: 06:1e:ba:d2:99:1b:13:a2:e1:4c:ba:50:6a:b2:5f: 42:7f:41:bb:4c:a3:41:10:58:93:a6:35:f8:bc:a5: 8d:49:28:e7:f3:ea:08:c5:02:1b:fe:4c:9a:c1:db: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F8:EF:A7:95:5A:38:E6:BF:6B:E1:E0:3B:95:00:2C:32:E1:C8:E4 X509v3 Authority Key Identifier: keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:86:de:ae:23:e8:ce:27:7c:09:2d:e2:a9:63:5e:b1:ad:1b: f7:fd:bf:0c:93:82:7c:ac:28:85:f6:0b:52:bd:15:03:c5:25: 3b:7a:01:64:dd:33:fb:25:fe:18:c0:69:fa:fc:50:64:9d:c4: 2f:65:99:45:37:de:ba:12:94:41:70:d2:16:fc:6b:5e:ae:0d: db:17:e4:bf:92:57:ce:4f:8f:49:d0:c6:31:f8:d4:40:dc:a9: 53:5b:aa:86:b0:e4:3f:8f:7e:9d:b5:c8:1d:10:9e:9d:6a:16: 53:0c:d4:7b:77:32:ca:33:a3:98:2b:d7:f0:e9:81:fe:8b:df: b2:b2:e6:26:86:1e:81:f8:a1:0d:96:ce:4b:2e:cf:50:50:f1: 9a:79:9a:7e:b1:f2:a0:5b:b9:d8:61:12:b8:39:4b:e9:26:62: f7:cd:43:2a:b8:a5:b8:36:86:c8:7a:2a:47:8a:8b:87:ac:09: 0b:5d:82:5d:b1:7d:18:17:98:e2:c2:8a:a7:f9:59:90:59:56: f5:87:c9:a1:2f:92:54:f0:83:9e:88:27:d8:64:57:3e:0f:fc: 6b:e2:b3:b5:3b:01:ab:d3:d6:51:ee:92:3e:d3:9a:3b:fa:65: 4c:d2:e6:91:0e:76:1b:fd:7f:21:fd:a7:9d:a6:d0:f6:c3:5d: 60:a4:4a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y8zKDc8R0amP033ENvzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4 ZDM0ZDYwHhcNMjYwMTI1MjMwMTExWhcNMjYwMTI2MjMwMTExWjAzMTEwLwYDVQQD EyhlMGY4ZWZhNzk1NWEzOGU2YmY2YmUxZTAzYjk1MDAyYzMyZTFjOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbxzGS0HiMTOHclvSeXjZJtmkMWI Pa1wVMIVzFcfdCA+12mMmn6BAlY/N5jse587iXl128VaYJsD6QaXo8B4m12Y9Te/ fRHv7haP1/z4SfSyToaCOk9yYAFnrm1gxCEi9o4ilM81PiQ7X0WHM/XZbROaO+Os HGH8BwlShYlYsiQZ1csbMHfyOiztJRrEyrqw3pqBVQ485/FIxq9kYD6qxU0zHAGk 8KSnhzFfigwD7Dfrwmqi1AOdnZJpFf1g7EIGwi+ZPPsVYvjnZek7173bnEgGHrrS mRsTouFMulBqsl9Cf0G7TKNBEFiTpjX4vKWNSSjn8+oIxQIb/kyawdsPrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD476eVWjjmv2vh4DuVACwy4cjkMB8GA1UdIwQY MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4beriPo zid8CS3iqWNesa0b9/2/DJOCfKwohfYLUr0VA8UlO3oBZN0z+yX+GMBp+vxQZJ3E L2WZRTfeuhKUQXDSFvxrXq4N2xfkv5JXzk+PSdDGMfjUQNypU1uqhrDkP49+nbXI HRCenWoWUwzUe3cyyjOjmCvX8OmB/ovfsrLmJoYegfihDZbOSy7PUFDxmnmafrHy oFu52GESuDlL6SZi981DKriluDaGyHoqR4qLh6wJC12CXbF9GBeY4sKKp/lZkFlW 9YfJoS+SVPCDnogn2GRXPg/8a+KztTsBq9PWUe6SPtOaO/plTNLmkQ52G/1/If2n nabQ9sNdYKRKmA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:42 2026 by rpki-client