This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: TJ8gshowtple3aDtODPdxs//eAk19k4lsK8khu6aG6A= Subject key identifier: 49:4D:3D:C4:43:98:67:AF:18:5D:C4:38:AD:7B:53:8B:CD:7E:30:43 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019BF3506577940935F843ADF8B35407FD54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0C27 Signing time: Sun 25 Jan 2026 04:01:30 +0000 Manifest this update: Sun 25 Jan 2026 04:01:30 +0000 Manifest next update: Mon 26 Jan 2026 04:01:30 +0000 Files and hashes: 1: 7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa (hash: PcU8D+QmugZnXWhyt6suY1+91eR4RbUDaup9F17x2j0=) 2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=) 3: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: dmFbe8u/oO78w3pL/VOiDNmfySBzeWkr9X6zJmbxpFY=) 4: K5IYR-8yKQNbaVCfxNruHxfgy8M.roa (hash: k9/AfvQ6thbh49E8qXhYlNeBQ66bqOlH2PyeFk773uY=) 5: S6miaNucSa6NeEC_GGS4tq2izFo.roa (hash: 8+03nZylwUV80dXnpI8qfIF5rMZUoFiALmnLIt2o7b8=) 6: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=) 7: WtmFuf6cZrghvDAImf8QiXaCIpU.roa (hash: 4EzmQjEOGNW/iYXS0zB7VQgi3+Kgq0BxHT+khs/YIOA=) 8: gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa (hash: 3PftaD58PWAe1nqPJMST42Vt40zBG+AVvzxMfB6cylU=) 9: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=) 10: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=) 11: uXJ4kVp0R1Jf5F3_93hBuWkiwVc.roa (hash: FnTvs0c3/i5yqsDdFaei4bcnSmfeaY6puxtewUwoPcU=) 12: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:65:77:94:09:35:f8:43:ad:f8:b3:54:07:fd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 25 04:01:30 2026 GMT Not After : Jan 26 04:01:30 2026 GMT Subject: CN=494d3dc4439867af185dc438ad7b538bcd7e3043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:fa:4a:67:f0:e4:42:f3:42:7c:c7:ec:58: dd:ce:07:94:a1:98:41:58:44:2f:29:49:29:7a:6d: bc:f5:1b:5d:8c:44:13:a4:76:63:32:2a:2e:63:6e: 51:2b:aa:15:5a:74:6d:52:49:93:04:67:b5:77:e1: 2f:0c:52:5b:69:f2:10:dc:c6:7d:db:10:09:90:ba: 08:1d:67:16:1c:3e:ee:dc:18:c4:3a:d9:da:9c:a2: 35:c6:34:b3:3f:71:6a:9a:73:dc:f7:5b:2d:bf:91: ab:9f:7b:32:ee:52:f1:7b:44:65:19:d1:d9:54:e1: ca:7f:13:f5:b7:38:ed:f9:1d:ba:cc:e4:05:6f:d7: e5:86:da:61:3d:8e:f5:88:ab:3e:66:94:5f:60:53: ec:0e:df:0c:e2:de:b6:2c:b7:d2:17:eb:e8:b4:5f: 2a:99:b7:3f:b0:51:a7:73:e1:a8:3e:2d:20:61:a2: 50:e1:0c:8a:d0:68:05:32:13:15:5b:00:b0:7b:26: 8f:6a:d7:6c:7c:44:bf:bf:76:f8:98:fe:f0:8d:ff: 25:5f:5e:ae:a5:4c:24:6c:a0:7c:6b:ed:a4:f6:39: 95:fa:08:9f:60:74:aa:32:fe:e2:e3:11:3b:0c:e8: 4d:fd:1b:ae:97:32:76:82:a3:12:29:81:73:94:06: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4D:3D:C4:43:98:67:AF:18:5D:C4:38:AD:7B:53:8B:CD:7E:30:43 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:98:ae:61:76:dd:ff:b6:fd:cc:18:fe:e9:2b:15:f1:d3: 5a:ce:02:ec:d9:b0:03:5c:20:8f:9a:41:03:3a:3a:2c:82:27: d3:f0:a3:78:40:ba:f0:83:67:d6:26:54:83:da:a2:f4:b0:0b: 68:cc:ea:4a:7a:b9:f2:c3:8b:43:2e:3a:69:a9:1a:49:67:83: bc:5d:af:11:ef:98:11:b1:29:8e:76:6f:2e:06:91:dc:3e:c7: a5:a4:28:a5:5e:15:63:29:db:17:c8:b0:f9:3f:2b:e0:71:fc: 8e:dd:8a:d2:e5:e8:80:45:0e:b3:cd:ae:a9:c6:b5:9e:9c:c6: 2c:4a:7e:ed:77:dd:1d:6d:5c:4f:8c:24:18:24:65:bb:ba:21: 6d:cb:0e:56:63:23:3c:e2:9a:a6:57:5b:e1:12:cd:6c:40:16: a2:a3:41:ab:7e:ef:f6:9a:66:6d:07:92:a3:28:74:70:a9:cf: 7a:79:e4:26:4c:32:0f:81:b2:f1:5b:ea:88:46:e3:e2:f2:e7: 63:f8:d0:f8:25:64:ce:01:30:51:54:b9:34:7e:2d:6d:7b:79: 11:89:b4:e4:da:ed:66:0c:df:f9:9b:ac:df:e4:f9:e4:6e:e9: 4d:06:ba:f9:a7:d7:67:ba:cf:ce:a9:e2:25:41:8c:19:d3:a5: d7:78:58:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUGV3lAk1+EOt+LNUB/1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTI1MDQwMTMwWhcNMjYwMTI2MDQwMTMwWjAzMTEwLwYDVQQD Eyg0OTRkM2RjNDQzOTg2N2FmMTg1ZGM0MzhhZDdiNTM4YmNkN2UzMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/D6Smfw5ELzQnzH7FjdzgeUoZhB WEQvKUkpem289RtdjEQTpHZjMiouY25RK6oVWnRtUkmTBGe1d+EvDFJbafIQ3MZ9 2xAJkLoIHWcWHD7u3BjEOtnanKI1xjSzP3FqmnPc91stv5Grn3sy7lLxe0RlGdHZ VOHKfxP1tzjt+R26zOQFb9flhtphPY71iKs+ZpRfYFPsDt8M4t62LLfSF+votF8q mbc/sFGnc+GoPi0gYaJQ4QyK0GgFMhMVWwCweyaPatdsfES/v3b4mP7wjf8lX16u pUwkbKB8a+2k9jmV+gifYHSqMv7i4xE7DOhN/RuulzJ2gqMSKYFzlAZGXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElNPcRDmGevGF3EOK17U4vNfjBDMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR6YrmF2 3f+2/cwY/ukrFfHTWs4C7NmwA1wgj5pBAzo6LIIn0/CjeEC68INn1iZUg9qi9LAL aMzqSnq58sOLQy46aakaSWeDvF2vEe+YEbEpjnZvLgaR3D7HpaQopV4VYynbF8iw +T8r4HH8jt2K0uXogEUOs82uqca1npzGLEp+7XfdHW1cT4wkGCRlu7ohbcsOVmMj POKapldb4RLNbEAWoqNBq37v9ppmbQeSoyh0cKnPennkJkwyD4Gy8VvqiEbj4vLn Y/jQ+CVkzgEwUVS5NH4tbXt5EYm05NrtZgzf+Zus3+T55G7pTQa6+afXZ7rPzqni JUGMGdOl13hYGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:08 2026 by rpki-client