This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft File: Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft (raw, json) Hash identifier: ZVjBKc6LXwA72c5GdqnhbX3gzVekopH+2ymqA9iyz0A= Subject key identifier: 2C:5D:5D:BE:A7:A8:10:16:80:E9:37:42:E5:E3:81:25:BC:19:99:18 Authority key identifier: 1A:5F:EE:44:C4:07:FD:0D:8A:49:53:0E:FA:E3:C2:7B:FC:8C:BF:59 Certificate issuer: /CN=1a5fee44c407fd0d8a49530efae3c27bfc8cbf59 Certificate serial: 019BF53E797DE84125CCDF96BD59B985C714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft Manifest number: 68 Signing time: Sun 25 Jan 2026 13:01:10 +0000 Manifest this update: Sun 25 Jan 2026 13:01:10 +0000 Manifest next update: Mon 26 Jan 2026 13:01:10 +0000 Files and hashes: 1: Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl (hash: l3/nvD2btyfunFg2ND3ms7F4LgSD4aKgc6khy+b6lvM=) 2: IuR2fV6tf7K6Izd_TevUjm1QpPM.asa (hash: emvaUHAZKdAu3XX04l4AghDFW6GxkQO/OSarFY+vPUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:79:7d:e8:41:25:cc:df:96:bd:59:b9:85:c7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5fee44c407fd0d8a49530efae3c27bfc8cbf59 Validity Not Before: Jan 25 13:01:10 2026 GMT Not After : Jan 26 13:01:10 2026 GMT Subject: CN=2c5d5dbea7a8101680e93742e5e38125bc199918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:68:57:80:33:98:c4:cf:62:7e:7b:6b:4e: 39:6f:0e:b8:bb:3c:f2:1b:24:77:ba:8c:b9:ca:8a: a6:29:dc:c6:21:2c:cd:e4:8d:2a:c7:a9:cc:2b:32: 2d:d1:3a:0a:0c:d3:ff:0c:9e:b8:6d:fe:86:24:c5: 35:98:5c:9c:57:5b:c9:9e:91:ce:85:70:67:26:c6: 1a:7e:29:f1:ed:20:6a:8c:19:2c:f8:1f:f6:a1:05: 80:d7:cb:2b:08:c8:9f:c5:94:c8:e3:65:c7:64:73: f0:1a:91:48:5c:52:b4:d5:1b:fe:1b:dd:b2:f4:14: 3a:9d:a2:89:5c:d7:21:a4:7d:28:8a:8b:21:64:fa: a5:09:69:dd:45:80:a1:c7:36:21:2d:d3:25:7f:f0: f5:22:57:64:6b:c1:23:be:13:e8:68:e8:ea:68:ce: 9c:28:5f:3b:71:67:e9:96:88:c3:99:0f:d5:f6:3a: df:78:bd:d9:89:6b:9e:1a:f7:3b:97:8b:ef:20:e4: 2a:ac:c2:f1:18:27:01:b8:ec:02:70:e8:b4:4e:6a: 9a:39:0d:97:f1:7e:9f:6b:02:77:77:40:75:9c:4a: 56:10:09:32:b0:4c:3f:25:75:9c:90:39:48:28:db: 07:a6:66:9b:8a:60:31:0d:77:72:82:54:c6:aa:d8: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:5D:BE:A7:A8:10:16:80:E9:37:42:E5:E3:81:25:BC:19:99:18 X509v3 Authority Key Identifier: keyid:1A:5F:EE:44:C4:07:FD:0D:8A:49:53:0E:FA:E3:C2:7B:FC:8C:BF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e2:ff:ad:2e:94:e4:94:56:29:91:21:12:e5:5a:ec:b2:a3: 14:9b:93:cc:2a:2f:37:cf:c8:f9:bc:29:04:96:a7:7f:d4:13: 1f:c8:18:b0:c5:ab:bb:4d:3c:bc:8b:4e:1e:e9:d9:49:1f:ae: 0a:91:d0:97:ef:79:f4:39:40:9b:d5:9a:02:e8:80:59:8a:45: 45:82:67:8d:a0:30:98:ab:9d:e3:8e:96:34:34:b4:4e:22:b6: 90:2f:ca:23:08:aa:e9:d8:a9:a0:be:50:08:da:43:8f:46:ef: 4e:4d:45:6e:08:76:9d:eb:75:b8:d7:7a:f9:ec:f5:0f:45:0e: 70:95:8d:a7:69:68:46:55:96:00:53:c2:ee:69:7c:5e:f9:6c: 74:3f:e4:3f:02:47:6d:a8:21:40:84:a5:57:d4:8a:a1:8b:f9: 7c:db:3c:70:c2:07:6f:45:e2:a4:9e:2c:93:e5:e5:71:ef:7a: f6:9b:d1:e6:86:7a:f6:95:d7:b8:22:37:5b:e5:0e:de:f9:53: 1c:a7:4d:f0:e7:f5:f1:30:5e:7a:07:8d:7f:01:06:2c:fb:27: 07:9e:dc:94:da:39:2d:e2:2d:e2:cd:ae:5b:0d:ef:4a:90:47: 45:0e:25:64:2b:ae:8c:66:44:9e:a2:f7:ec:b6:87:90:75:67: 80:e3:a0:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pnl96EElzN+WvVm5hccUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWZlZTQ0YzQwN2ZkMGQ4YTQ5NTMwZWZhZTNjMjdiZmM4 Y2JmNTkwHhcNMjYwMTI1MTMwMTEwWhcNMjYwMTI2MTMwMTEwWjAzMTEwLwYDVQQD EygyYzVkNWRiZWE3YTgxMDE2ODBlOTM3NDJlNWUzODEyNWJjMTk5OTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoxoV4AzmMTPYn57a045bw64uzzy GyR3uoy5yoqmKdzGISzN5I0qx6nMKzIt0ToKDNP/DJ64bf6GJMU1mFycV1vJnpHO hXBnJsYafinx7SBqjBks+B/2oQWA18srCMifxZTI42XHZHPwGpFIXFK01Rv+G92y 9BQ6naKJXNchpH0oioshZPqlCWndRYChxzYhLdMlf/D1Ildka8EjvhPoaOjqaM6c KF87cWfplojDmQ/V9jrfeL3ZiWueGvc7l4vvIOQqrMLxGCcBuOwCcOi0TmqaOQ2X 8X6fawJ3d0B1nEpWEAkysEw/JXWckDlIKNsHpmabimAxDXdyglTGqtj0uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxdXb6nqBAWgOk3QuXjgSW8GZkYMB8GA1UdIwQY MBaAFBpf7kTEB/0NiklTDvrjwnv8jL9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xfdVJNUUhfUTJLU1ZNTy11UENlX3lNdjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kMzQ4ZjQtNWU3ZC00NmE5LTllNDYt MTA2ZTJhNDczNWRhLzEvR2xfdVJNUUhfUTJLU1ZNTy11UENlX3lNdjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kMzQ4ZjQtNWU3ZC00NmE5LTllNDYtMTA2ZTJhNDczNWRh LzEvR2xfdVJNUUhfUTJLU1ZNTy11UENlX3lNdjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOL/rS6U 5JRWKZEhEuVa7LKjFJuTzCovN8/I+bwpBJanf9QTH8gYsMWru008vItOHunZSR+u CpHQl+959DlAm9WaAuiAWYpFRYJnjaAwmKud446WNDS0TiK2kC/KIwiq6dipoL5Q CNpDj0bvTk1Fbgh2net1uNd6+ez1D0UOcJWNp2loRlWWAFPC7ml8XvlsdD/kPwJH baghQISlV9SKoYv5fNs8cMIHb0XipJ4sk+Xlce969pvR5oZ69pXXuCI3W+UO3vlT HKdN8Of18TBeegeNfwEGLPsnB57clNo5LeIt4s2uWw3vSpBHRQ4lZCuujGZEnqL3 7LaHkHVngOOgzA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:01 2026 by rpki-client