This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: 4/y1Xe0/3Dds6ANneHSv6LsoWVR3UpjbQj63lkp5Zuw= Subject key identifier: A7:6A:33:99:43:7F:78:C3:15:D8:8F:9F:7E:46:57:5E:FD:C6:6A:DE Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019BF42C019CC9E4B1632DD525C3CF7B8D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1875 Signing time: Sun 25 Jan 2026 08:01:23 +0000 Manifest this update: Sun 25 Jan 2026 08:01:23 +0000 Manifest next update: Mon 26 Jan 2026 08:01:23 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa (hash: SGIsX6Mvd8sx49+iI/8SLNHNRb2rZpZ8MC5HnpSmZVU=) 3: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 4: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 5: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 6: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 7: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 8: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 9: LqYm4D3B3E2FFGXtJXw3kgLOLDI.roa (hash: JksgLIgsZpcPfg5QMvqz9txCxaYLptCGbZJW6YSihME=) 10: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (hash: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8=) 11: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 12: VCCai5hKE4XyQWqFov6fc3xa1aY.roa (hash: 34+FtDd+on4O39KtLYdqjlzggjPjtmx3Bfdph3/yB80=) 13: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: 67Sv0QtlzvvXKOIVuG1/tWyEfIHHHSCdFwT76RQ2qxs=) 14: hCfYHkk0WVWAVNiGnZaMduxS2MM.roa (hash: sHk1k6gDs5FjVUXp9YDHQ14y++c+/P5klSoklKCCrLU=) 15: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 16: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:01:9c:c9:e4:b1:63:2d:d5:25:c3:cf:7b:8d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 25 08:01:23 2026 GMT Not After : Jan 26 08:01:23 2026 GMT Subject: CN=a76a3399437f78c315d88f9f7e46575efdc66ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bd:61:74:be:2d:04:c8:93:99:c3:56:79:a6: 63:d6:c7:9d:d9:10:6f:bb:58:65:c5:71:b5:2e:12: 47:c0:32:1d:ee:1a:e7:56:f6:9a:8c:f2:de:a2:42: 61:bf:02:88:ef:e4:5e:20:06:03:8a:90:ab:09:ea: f5:86:98:9d:0f:5f:b5:7e:da:76:30:8c:2f:b1:1a: d8:d7:fb:bc:67:77:b2:a3:29:8d:49:ce:b4:f1:90: 79:aa:91:5b:ec:e7:38:7f:c4:18:ea:da:e6:4b:a3: 67:2a:34:3c:69:24:34:c8:3f:5c:28:1f:48:53:eb: 19:ec:91:7b:dd:98:5d:35:81:28:3e:7c:29:51:e9: 04:20:32:fc:1c:c7:6c:61:12:44:bb:d9:e7:f2:80: 3c:6f:d2:6d:eb:dd:4e:d8:cc:78:92:65:8d:c3:9d: 9c:a5:e2:05:4c:7a:73:88:32:60:2d:eb:5d:22:17: 63:ae:ed:a7:3e:de:fd:b9:16:18:1a:49:37:53:ca: 52:f6:56:b1:fc:e4:4a:3e:6a:a6:48:00:01:c7:0b: de:84:1f:87:78:2d:cb:89:ca:e0:e6:ef:8f:2e:a9: c2:95:c4:5c:66:90:c9:30:93:86:a5:1b:9d:3e:17: c3:77:5f:04:48:7e:86:8d:45:81:e3:2c:09:22:f3: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:33:99:43:7F:78:C3:15:D8:8F:9F:7E:46:57:5E:FD:C6:6A:DE X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2d:1a:cb:a9:e1:76:1f:cc:f9:6a:a2:fb:e4:f1:e3:3b:4f: 5e:3d:b5:a1:16:17:82:78:06:05:f6:33:3d:18:51:39:30:d2: e6:7e:d7:b5:44:d7:d1:bf:08:ce:0f:07:b4:17:61:e9:7c:9d: 00:bb:dc:b3:87:f9:95:cc:ac:df:64:52:cb:00:8e:25:9f:1d: f3:b7:3f:c1:34:de:13:9d:23:05:f7:62:bc:89:60:b0:88:ce: cf:9f:88:aa:dc:43:9f:6e:86:3c:df:70:1a:61:87:82:a0:93: 22:86:48:2b:3f:f0:3f:fd:a9:2a:91:42:1e:48:b8:35:91:f1: a1:90:6b:4c:f4:be:09:1b:fc:66:ec:e6:e9:4d:68:86:a9:c1: d7:15:5e:b8:8a:2b:2f:e6:02:cf:5f:8d:92:61:4f:20:0c:1a: d4:5d:7a:f2:6c:aa:c4:af:16:3f:2d:47:d6:bd:11:93:8c:ee: a2:b0:61:a6:a6:0e:e5:80:c5:77:9b:1b:25:ba:54:e9:f6:82: cf:67:07:23:86:05:3f:a4:65:0c:09:f0:b0:6a:81:a6:6c:d1: 83:2d:4a:3d:b6:f7:47:69:51:3c:32:0b:bc:24:e6:eb:43:e2: db:e3:fb:4b:6e:b8:f9:b3:76:a0:05:e7:38:3e:61:e5:5d:6c: 22:99:ba:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LAGcyeSxYy3VJcPPe40TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTI1MDgwMTIzWhcNMjYwMTI2MDgwMTIzWjAzMTEwLwYDVQQD EyhhNzZhMzM5OTQzN2Y3OGMzMTVkODhmOWY3ZTQ2NTc1ZWZkYzY2YWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA671hdL4tBMiTmcNWeaZj1sed2RBv u1hlxXG1LhJHwDId7hrnVvaajPLeokJhvwKI7+ReIAYDipCrCer1hpidD1+1ftp2 MIwvsRrY1/u8Z3eyoymNSc608ZB5qpFb7Oc4f8QY6trmS6NnKjQ8aSQ0yD9cKB9I U+sZ7JF73ZhdNYEoPnwpUekEIDL8HMdsYRJEu9nn8oA8b9Jt691O2Mx4kmWNw52c peIFTHpziDJgLetdIhdjru2nPt79uRYYGkk3U8pS9lax/ORKPmqmSAABxwvehB+H eC3Licrg5u+PLqnClcRcZpDJMJOGpRudPhfDd18ESH6GjUWB4ywJIvP1mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdqM5lDf3jDFdiPn35GV179xmreMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy0ay6nh dh/M+Wqi++Tx4ztPXj21oRYXgngGBfYzPRhROTDS5n7XtUTX0b8Izg8HtBdh6Xyd ALvcs4f5lcys32RSywCOJZ8d87c/wTTeE50jBfdivIlgsIjOz5+IqtxDn26GPN9w GmGHgqCTIoZIKz/wP/2pKpFCHki4NZHxoZBrTPS+CRv8Zuzm6U1ohqnB1xVeuIor L+YCz1+NkmFPIAwa1F168myqxK8WPy1H1r0Rk4zuorBhpqYO5YDFd5sbJbpU6faC z2cHI4YFP6RlDAnwsGqBpmzRgy1KPbb3R2lRPDILvCTm60Pi2+P7S264+bN2oAXn OD5h5V1sIpm6cA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:35 2026 by rpki-client