This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json) Hash identifier: hEQQ7V2IpbujTtLNXtfSR30vAlQDy+/3RzBxi4jxmyg= Subject key identifier: 97:38:0B:DA:DF:4B:11:B5:C3:FC:3B:CE:F0:BD:A5:A3:7B:00:C5:3D Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Certificate serial: 019BF9C0E99CBF83AC5EDDE59F39DAE43645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft Manifest number: 1436 Signing time: Mon 26 Jan 2026 10:02:08 +0000 Manifest this update: Mon 26 Jan 2026 10:02:08 +0000 Manifest next update: Tue 27 Jan 2026 10:02:08 +0000 Files and hashes: 1: 5m2yB9NEeUbzh_RrMBbFTl87vZI.roa (hash: +gJzTRd7yfkb9lyTBCKq01A8haFjWWwRmaKWjp0RAm0=) 2: Opf2QA1qNa28jjAr8yKuXu_bAbY.roa (hash: ovjEoKocSUBnOUVIGPdI/qSQMjayKXITtpelF2L20jw=) 3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: vVUFGy3v9x5dZyPqZCAODYOp0gcm8DW+S3Jx0CYZZvM=) 4: yvE1riQnzN8M1_ohncQ6e5yrX4w.roa (hash: Bi2CKtLlem3xa/y5EAdM8w4Q0JN6Uyw6zRxbHmseyms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:e9:9c:bf:83:ac:5e:dd:e5:9f:39:da:e4:36:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Validity Not Before: Jan 26 10:02:08 2026 GMT Not After : Jan 27 10:02:08 2026 GMT Subject: CN=97380bdadf4b11b5c3fc3bcef0bda5a37b00c53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:ec:48:83:66:31:72:ac:6f:c4:7f:6c:2e: 87:81:2c:7f:87:25:7e:64:dd:bf:9a:72:bf:ab:aa: bb:e8:70:90:9e:55:7a:dc:b8:71:52:e0:c4:5a:13: 50:d8:80:62:5d:1d:91:d7:c4:cf:46:6e:de:53:72: dd:d2:35:84:2b:c4:a4:01:c5:bf:18:21:05:4e:38: 15:97:e3:15:3f:5f:60:a3:ea:64:97:35:1a:1d:85: 7a:b9:30:6e:84:23:ba:65:b3:48:d5:97:a1:36:d7: a5:73:cd:04:a8:86:0b:db:94:1b:76:28:15:89:49: 70:be:ee:7b:77:89:a6:63:50:18:34:93:c6:16:c6: 55:21:06:ec:c2:01:95:7d:81:38:a3:00:82:e4:f3: 87:83:17:11:7f:c9:8e:44:09:29:8e:1d:38:4c:e5: b2:06:82:e8:a1:64:7c:0a:e1:0e:6f:67:c0:bb:0a: ee:d6:f3:24:35:f1:b8:43:2b:0a:d2:40:a6:34:9a: 00:3f:5a:0f:fd:88:87:3d:35:f3:32:3d:ae:90:8f: 9b:7a:5c:7a:c3:0e:92:30:52:c2:b8:6c:83:62:a5: a1:fe:3e:dc:ca:1c:17:30:f0:b2:52:b2:24:da:52: 21:ff:9a:cf:44:00:6d:3e:fa:1e:32:6e:91:d1:a2: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:38:0B:DA:DF:4B:11:B5:C3:FC:3B:CE:F0:BD:A5:A3:7B:00:C5:3D X509v3 Authority Key Identifier: keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1f:a9:56:83:43:f4:6d:06:07:6c:8a:a3:a5:56:86:a2:48: 92:8c:0f:9e:6a:e9:10:aa:41:c1:23:e8:e7:50:38:4b:68:0d: 13:35:94:23:98:76:f6:af:22:44:2b:e2:8a:f4:81:2f:24:e0: e8:99:94:21:19:d4:28:79:40:05:bb:0b:36:45:eb:a4:26:18: 1c:fc:ff:c6:0e:b0:58:5f:45:e8:51:15:b5:67:b4:35:5a:6b: 3a:e0:ea:85:68:d1:5d:96:13:76:4b:1e:f0:e3:9d:27:fa:75: f5:e5:4a:06:22:01:74:ee:09:fb:4a:4f:70:f6:2d:17:f1:14: e1:c1:80:5b:c9:a8:55:20:64:6a:79:a6:93:8a:32:5a:21:cd: 0d:3d:76:50:49:13:29:fc:f4:62:df:3a:5f:61:26:c2:dc:84: a9:36:c7:5a:1e:d5:c7:ba:ff:46:92:98:fa:75:c9:08:0f:c4: d2:72:2d:0c:73:14:14:a8:e6:97:a6:76:6b:11:7f:57:51:b9: 34:49:10:7c:1b:c7:f5:79:d3:9d:2b:cd:a7:f5:74:2a:34:cf: af:41:69:a5:03:f4:ea:e6:0d:04:00:cc:ed:08:2c:01:c9:8e: c1:9d:e6:e0:a3:4b:51:29:dd:eb:78:0a:53:84:28:fb:3d:09: 05:37:3c:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wOmcv4OsXt3lnzna5DZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy ZGNhNjUwHhcNMjYwMTI2MTAwMjA4WhcNMjYwMTI3MTAwMjA4WjAzMTEwLwYDVQQD Eyg5NzM4MGJkYWRmNGIxMWI1YzNmYzNiY2VmMGJkYTVhMzdiMDBjNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTsSINmMXKsb8R/bC6HgSx/hyV+ ZN2/mnK/q6q76HCQnlV63LhxUuDEWhNQ2IBiXR2R18TPRm7eU3Ld0jWEK8SkAcW/ GCEFTjgVl+MVP19go+pklzUaHYV6uTBuhCO6ZbNI1ZehNtelc80EqIYL25QbdigV iUlwvu57d4mmY1AYNJPGFsZVIQbswgGVfYE4owCC5POHgxcRf8mORAkpjh04TOWy BoLooWR8CuEOb2fAuwru1vMkNfG4QysK0kCmNJoAP1oP/YiHPTXzMj2ukI+belx6 ww6SMFLCuGyDYqWh/j7cyhwXMPCyUrIk2lIh/5rPRABtPvoeMm6R0aLf+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc4C9rfSxG1w/w7zvC9paN7AMU9MB8GA1UdIwQY MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt MDE4NGU4MWFlYWQ5LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5 LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkh+pVoND 9G0GB2yKo6VWhqJIkowPnmrpEKpBwSPo51A4S2gNEzWUI5h29q8iRCviivSBLyTg 6JmUIRnUKHlABbsLNkXrpCYYHPz/xg6wWF9F6FEVtWe0NVprOuDqhWjRXZYTdkse 8OOdJ/p19eVKBiIBdO4J+0pPcPYtF/EU4cGAW8moVSBkanmmk4oyWiHNDT12UEkT Kfz0Yt86X2EmwtyEqTbHWh7Vx7r/RpKY+nXJCA/E0nItDHMUFKjml6Z2axF/V1G5 NEkQfBvH9XnTnSvNp/V0KjTPr0FppQP06uYNBADM7QgsAcmOwZ3m4KNLUSnd63gK U4Qo+z0JBTc89A== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:44 2026 by rpki-client