This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json) Hash identifier: AVxdo5GC+QRl98T9pbLi/Y7pvWrYNshFm4ucMghxxeo= Subject key identifier: D0:82:3C:29:C4:0E:FE:77:07:67:BD:50:8E:C5:1B:5F:78:E7:85:56 Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Certificate serial: 019BF6F5A7ECCDD2FFE0A0F2E4A50DA80287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 21:00:52 +0000 Manifest this update: Sun 25 Jan 2026 21:00:52 +0000 Manifest next update: Mon 26 Jan 2026 21:00:52 +0000 Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: vQUHfHHRF8vqRA1BYhAZa8yqNMyapDZtZe0X9s54Q8Y=) 2: dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa (hash: FiQzj2IJBDAdsIUNZqGewdZB+7P9vXYxqwfhvf0ZCJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a7:ec:cd:d2:ff:e0:a0:f2:e4:a5:0d:a8:02:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454 Validity Not Before: Jan 25 21:00:52 2026 GMT Not After : Jan 26 21:00:52 2026 GMT Subject: CN=d0823c29c40efe770767bd508ec51b5f78e78556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:4d:5f:1a:3e:09:78:32:da:df:a8:6a:af: ba:b6:83:1e:f2:c2:da:b1:fb:69:cf:6d:a3:2f:76: 6f:cb:c9:89:81:74:69:33:a6:37:ba:75:eb:ec:b9: fd:4b:1f:6e:cc:e6:e0:28:36:a4:69:13:97:0f:24: b9:5e:12:eb:db:fd:35:86:12:40:e5:bd:88:de:76: 26:b4:63:43:7c:53:d9:f7:bf:52:57:25:4a:d5:e4: 58:07:1d:4a:77:90:ca:73:a3:84:2a:1e:f8:d9:88: 72:e2:41:a5:9e:21:3b:9c:cb:75:b8:44:a6:5e:91: e7:12:1b:03:c9:8f:a9:0f:3a:85:79:ac:e0:e0:32: fb:a7:22:fb:fc:d4:00:df:7e:33:cc:8d:d9:f7:c0: 06:4a:26:b8:9b:69:5d:b7:3b:2d:74:d7:6d:ad:15: cf:5a:c5:25:3e:03:1f:7f:fc:e6:d8:93:48:05:eb: 90:e6:df:66:e8:fe:b4:90:8f:5a:1c:55:ee:3f:25: 0e:b9:5a:43:c8:a0:51:99:82:41:58:3a:bb:c1:5c: 2e:a7:53:c2:50:ef:6a:b6:a9:2e:d1:0d:d7:77:c7: 5f:8c:53:69:8c:57:c1:7d:79:27:1e:58:54:91:cb: 9e:33:bf:27:29:b1:50:7f:f1:51:c9:9d:80:cd:3f: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:82:3C:29:C4:0E:FE:77:07:67:BD:50:8E:C5:1B:5F:78:E7:85:56 X509v3 Authority Key Identifier: keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:90:2a:2e:16:62:f7:3c:b8:c8:e9:fa:34:15:98:fc:74:27: 16:25:91:e9:7c:d3:4e:99:3d:67:88:ba:be:a9:00:7c:62:21: 79:cc:39:47:7b:c9:fb:62:90:23:7e:e3:3d:aa:af:16:92:5d: 16:6f:b3:cb:c2:f8:d4:ea:f7:a1:78:ec:88:22:c3:70:9c:94: 8e:c8:21:2f:3a:53:d7:2d:7f:e8:43:1e:22:a6:df:df:97:80: 52:f6:bf:24:b5:39:35:aa:0f:da:08:e2:15:dc:0c:ae:5d:e7: f4:5a:c4:33:f7:d5:3a:22:da:74:a4:d8:f9:cc:74:64:c6:ea: f7:b1:11:1b:ee:48:b9:8f:7c:66:73:17:44:f7:0a:1c:56:98: 6d:5d:ea:b1:10:a1:c7:97:3f:39:e8:89:f8:e4:b4:3e:17:7f: 05:b0:57:0f:df:c3:0e:57:a6:a0:2d:38:c0:61:9d:0e:45:f4: 10:36:c6:cb:14:25:68:9b:99:a7:29:f1:c1:a9:da:62:72:eb: ba:1a:33:82:9e:3a:0b:54:71:3b:44:66:c6:a0:e5:b4:89:9a: 87:aa:be:d6:ef:51:b9:93:bf:ed:cd:8c:43:bf:08:4f:b9:19: 6c:a8:8e:65:b8:97:17:25:9c:3f:88:e6:1d:f0:60:2c:ef:77: 13:22:0e:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29afszdL/4KDy5KUNqAKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl Yzk0NTQwHhcNMjYwMTI1MjEwMDUyWhcNMjYwMTI2MjEwMDUyWjAzMTEwLwYDVQQD EyhkMDgyM2MyOWM0MGVmZTc3MDc2N2JkNTA4ZWM1MWI1Zjc4ZTc4NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlJNXxo+CXgy2t+oaq+6toMe8sLa sftpz22jL3Zvy8mJgXRpM6Y3unXr7Ln9Sx9uzObgKDakaROXDyS5XhLr2/01hhJA 5b2I3nYmtGNDfFPZ979SVyVK1eRYBx1Kd5DKc6OEKh742Yhy4kGlniE7nMt1uESm XpHnEhsDyY+pDzqFeazg4DL7pyL7/NQA334zzI3Z98AGSia4m2ldtzstdNdtrRXP WsUlPgMff/zm2JNIBeuQ5t9m6P60kI9aHFXuPyUOuVpDyKBRmYJBWDq7wVwup1PC UO9qtqku0Q3Xd8dfjFNpjFfBfXknHlhUkcueM78nKbFQf/FRyZ2AzT9f2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCCPCnEDv53B2e9UI7FG19454VWMB8GA1UdIwQY MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt MzQ3YjU2NmRkYmQxLzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZAqLhZi 9zy4yOn6NBWY/HQnFiWR6XzTTpk9Z4i6vqkAfGIhecw5R3vJ+2KQI37jPaqvFpJd Fm+zy8L41Or3oXjsiCLDcJyUjsghLzpT1y1/6EMeIqbf35eAUva/JLU5NaoP2gji FdwMrl3n9FrEM/fVOiLadKTY+cx0ZMbq97ERG+5IuY98ZnMXRPcKHFaYbV3qsRCh x5c/OeiJ+OS0Phd/BbBXD9/DDlemoC04wGGdDkX0EDbGyxQlaJuZpynxwanaYnLr uhozgp46C1RxO0RmxqDltImah6q+1u9RuZO/7c2MQ78IT7kZbKiOZbiXFyWcP4jm HfBgLO93EyIOOw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:50 2026 by rpki-client