This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json) Hash identifier: 9lOUoc3cEJxarKidmseRDs97QNsnyE7OmzVlt6BucGM= Subject key identifier: 32:48:28:DB:2F:FB:1B:B5:9C:2B:C5:58:EC:D7:1A:AD:98:21:71:29 Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94 Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94 Certificate serial: 019BF4D0A0D0AD6213AD9C83DAA4531BE4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft Manifest number: 12EA Signing time: Sun 25 Jan 2026 11:01:11 +0000 Manifest this update: Sun 25 Jan 2026 11:01:11 +0000 Manifest next update: Mon 26 Jan 2026 11:01:11 +0000 Files and hashes: 1: 1-uY3ByKZWX6EbvY022ukUYAIf0A.roa (hash: RrYvBD/sXCQXZ4ZUGRnJ0kZRIByBBH3L6RfLx0gb2ec=) 2: 2VnEP0kZcDQSDl0UL_jzXnG71q4.roa (hash: ZjSYJHerA/IUP/DXVd1u6yoH1Bz+1CyyRDmQ7NJ49jM=) 3: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: YC9/Ahbd4SygTuDu9ZbHgnftuLECHxI3Fl5ar2bUCLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a0:d0:ad:62:13:ad:9c:83:da:a4:53:1b:e4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94 Validity Not Before: Jan 25 11:01:11 2026 GMT Not After : Jan 26 11:01:11 2026 GMT Subject: CN=324828db2ffb1bb59c2bc558ecd71aad98217129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:98:3c:24:5b:e4:61:9d:7b:db:22:0d:19: 6b:4f:a6:bc:40:47:26:9a:09:06:e2:26:a6:a6:fd: 07:60:0e:47:27:f6:26:a6:67:1d:c4:c7:72:41:16: 14:59:5a:26:46:62:1a:8d:ca:75:9e:ff:62:23:07: fd:31:83:c9:45:26:3f:fc:53:fe:ed:64:75:cf:28: 48:1b:bc:0c:a7:07:40:40:ae:fb:52:e9:ca:b2:9b: 01:a0:52:bc:55:a6:39:ce:2c:2e:77:4c:d4:b1:bc: 95:07:0b:d1:06:65:98:dd:1d:1e:fd:ba:93:1e:43: a5:ae:c1:8c:ab:20:01:12:1c:4e:50:bf:a5:e0:53: 31:7d:c6:9c:95:e9:62:d8:9e:d2:35:f8:e8:3a:c9: f9:07:f9:ee:0b:ce:91:4f:bb:a3:cc:56:9d:19:d2: 41:3f:db:36:5b:99:0e:85:fb:14:39:54:b2:e7:bf: ea:a0:b7:a4:a9:41:d2:2f:0b:80:03:d6:9b:82:5d: 79:67:b1:09:90:20:b2:e2:94:9f:c9:4a:8f:5f:02: d7:08:dc:98:83:01:53:dc:c8:50:5c:4b:66:8d:a0: f5:b8:d5:c0:6d:4f:31:41:99:8e:f3:f0:4c:2e:3a: f9:c8:31:e8:35:be:14:af:67:5a:a5:0d:f2:d1:22: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:48:28:DB:2F:FB:1B:B5:9C:2B:C5:58:EC:D7:1A:AD:98:21:71:29 X509v3 Authority Key Identifier: keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:52:a2:36:d9:7d:d6:dc:33:d2:4a:6c:26:42:b7:1b:86:92: 98:7a:5b:e2:15:0f:a0:66:1b:8c:5e:c9:70:6e:bd:c5:1c:3d: 05:d9:28:6e:7a:c8:b3:9d:4f:e6:85:5f:98:d7:92:17:0d:7b: 4d:a5:2f:41:b1:c6:ec:a5:96:45:7a:ed:a2:fb:ae:fd:ee:b0: 20:3a:07:86:d1:53:23:ad:81:55:bd:74:95:4d:6f:fd:c9:23: eb:81:66:f9:64:6d:8b:d4:2f:db:1a:a4:42:c3:f9:56:c3:de: ad:da:18:1d:e2:e7:df:28:4b:0d:51:f8:01:29:09:c4:1f:66: da:30:be:22:93:20:a6:90:2b:bd:22:37:77:76:56:a2:e4:4e: 3a:5f:b7:7c:a8:74:cf:0f:3b:d1:ec:32:5a:61:33:13:4f:4b: 88:a7:39:6f:93:48:73:c1:fa:2f:6e:93:ba:08:5b:01:a2:88: 00:54:65:24:5d:55:92:50:e7:46:ea:86:48:de:f1:a4:02:38: a6:c5:46:e5:37:89:30:cf:a8:2d:bb:c1:54:cc:b5:1d:6b:46: c8:01:29:e8:00:42:e3:66:78:ab:14:8d:63:7c:90:2d:7f:09: 43:b7:d1:19:ef:84:4d:a6:f7:86:91:d6:7f:9a:2b:50:cb:61: 70:9b:e7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00KDQrWITrZyD2qRTG+T3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDQ4OWRjOWMwYTc0YzJlZDUzZTFkOWUxZmJmZGQ4Yzg3 NzNiOTQwHhcNMjYwMTI1MTEwMTExWhcNMjYwMTI2MTEwMTExWjAzMTEwLwYDVQQD EygzMjQ4MjhkYjJmZmIxYmI1OWMyYmM1NThlY2Q3MWFhZDk4MjE3MTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKKYPCRb5GGde9siDRlrT6a8QEcm mgkG4iampv0HYA5HJ/YmpmcdxMdyQRYUWVomRmIajcp1nv9iIwf9MYPJRSY//FP+ 7WR1zyhIG7wMpwdAQK77UunKspsBoFK8VaY5ziwud0zUsbyVBwvRBmWY3R0e/bqT HkOlrsGMqyABEhxOUL+l4FMxfcacleli2J7SNfjoOsn5B/nuC86RT7ujzFadGdJB P9s2W5kOhfsUOVSy57/qoLekqUHSLwuAA9abgl15Z7EJkCCy4pSfyUqPXwLXCNyY gwFT3MhQXEtmjaD1uNXAbU8xQZmO8/BMLjr5yDHoNb4Ur2dapQ3y0SJfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJIKNsv+xu1nCvFWOzXGq2YIXEpMB8GA1UdIwQY MBaAFBoEidycCnTC7VPh2eH7/djIdzuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dTSjNKd0tkTUx0VS1IWjRmdjkyTWgzTzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMWM1MmMtNDFhYS00ZTk1LWFkNjct YTAyMWE2M2RkZmMzLzEvR2dTSjNKd0tkTUx0VS1IWjRmdjkyTWgzTzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xMWM1MmMtNDFhYS00ZTk1LWFkNjctYTAyMWE2M2RkZmMz LzEvR2dTSjNKd0tkTUx0VS1IWjRmdjkyTWgzTzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1KiNtl9 1twz0kpsJkK3G4aSmHpb4hUPoGYbjF7JcG69xRw9BdkobnrIs51P5oVfmNeSFw17 TaUvQbHG7KWWRXrtovuu/e6wIDoHhtFTI62BVb10lU1v/ckj64Fm+WRti9Qv2xqk QsP5VsPerdoYHeLn3yhLDVH4ASkJxB9m2jC+IpMgppArvSI3d3ZWouROOl+3fKh0 zw870ewyWmEzE09LiKc5b5NIc8H6L26TughbAaKIAFRlJF1VklDnRuqGSN7xpAI4 psVG5TeJMM+oLbvBVMy1HWtGyAEp6ABC42Z4qxSNY3yQLX8JQ7fRGe+ETab3hpHW f5orUMthcJvnHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:21 2026 by rpki-client