This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json) Hash identifier: zC1u5NNeMsthbqV++ZHhk5Uo94ncViTRI0POmyab6ZE= Subject key identifier: D2:48:34:6A:FA:75:AE:4C:69:9F:6F:66:7D:DB:27:D6:C2:81:68:63 Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Certificate serial: 019BF79A7064E3867745550AA3B7E31EEBC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft Manifest number: 024B Signing time: Mon 26 Jan 2026 00:00:52 +0000 Manifest this update: Mon 26 Jan 2026 00:00:52 +0000 Manifest next update: Tue 27 Jan 2026 00:00:52 +0000 Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: cyw5R66oCAKKrZZ8zha31jV/qe7m9ez95cH9eYBE0OU=) 2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:70:64:e3:86:77:45:55:0a:a3:b7:e3:1e:eb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Validity Not Before: Jan 26 00:00:52 2026 GMT Not After : Jan 27 00:00:52 2026 GMT Subject: CN=d248346afa75ae4c699f6f667ddb27d6c2816863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:ec:7e:ba:ad:48:70:ee:34:71:d8:60:3f: fe:1d:8a:41:8e:16:9a:cb:7f:21:ac:54:6b:94:a3: 23:b9:60:dc:54:3b:1d:8d:64:e3:67:28:43:88:a3: 15:da:84:06:9b:cd:9b:db:a8:0c:23:ad:b8:b8:4d: 4c:08:be:f1:9a:65:6d:e8:51:4a:52:06:5a:cb:e5: 63:e4:8e:02:ca:81:ac:f7:21:80:b8:00:10:3e:82: 2e:a5:a7:b3:12:bd:13:d8:11:6e:a7:3c:84:c7:d3: 2c:fc:f1:f0:33:e5:5e:de:40:8e:27:51:2f:55:97: c4:72:c9:81:b1:2e:f2:c6:c5:d0:8f:35:c0:b4:82: c2:cc:03:4a:c5:f1:91:51:46:07:95:17:42:10:ad: 53:a2:0a:a6:2d:6d:19:27:a4:0e:21:4f:c1:ab:1b: dd:fa:26:1f:97:94:db:6a:fa:c0:22:25:0e:9f:70: f8:2a:29:1a:98:f5:ea:3e:d5:74:11:bb:6b:c2:69: 04:92:46:ad:de:d9:22:f8:28:fe:33:9b:d9:8c:1c: 8e:7b:8e:67:fd:75:5d:cc:88:94:67:5e:d4:f8:a8: b3:99:04:84:86:ba:89:f1:88:23:9e:c4:cf:51:b5: 34:24:92:c6:ed:64:c5:ba:8a:cc:04:08:5c:d8:c7: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:48:34:6A:FA:75:AE:4C:69:9F:6F:66:7D:DB:27:D6:C2:81:68:63 X509v3 Authority Key Identifier: keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:ca:cd:97:83:d4:72:15:31:0f:f2:33:3b:76:2f:f9:34:aa: eb:4a:c9:5d:c0:b7:0d:9b:aa:c4:c2:7c:40:43:5c:f1:0e:b7: 6c:72:b6:59:af:ef:53:d4:a7:32:66:43:5b:b3:60:19:40:0c: d0:9b:65:20:2f:64:42:4a:28:b4:c3:b4:81:6a:12:bd:4a:77: a7:ef:15:c7:d0:70:eb:94:24:81:b5:0b:57:32:88:bd:ac:72: 6c:1a:ad:28:0e:86:43:3e:34:06:17:8a:21:db:59:13:85:b8: cf:eb:bf:4f:3e:e2:e7:a5:6a:40:1a:51:1c:d6:86:1e:d3:f7: 7a:73:cb:c5:71:78:40:0a:b6:0e:57:ef:69:0a:79:5c:30:03: 01:e2:17:7a:52:b3:85:7e:60:5b:79:aa:e5:3c:87:be:88:df: c1:a8:a4:46:b6:06:e4:82:fb:59:44:ae:bd:b7:5f:87:c8:ea: a6:36:5f:a7:f6:ef:8b:b2:f3:bd:0b:8f:51:5c:cc:7b:3c:79: 86:0c:25:a8:74:4a:aa:48:19:74:d3:f5:cc:ce:c4:63:23:f7: e6:48:99:bc:6e:e2:06:65:5b:70:82:69:33:46:d1:7b:28:1c: 15:fd:61:21:a5:79:d4:2a:c1:a5:db:3e:ca:e7:8b:7e:9e:97: 9b:26:a3:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnBk44Z3RVUKo7fjHuvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzY4YWQ2ZjE0YmUyMTcyYzdkMGM5NGY0YjRkNGQwMDE5 MzNiYjQwHhcNMjYwMTI2MDAwMDUyWhcNMjYwMTI3MDAwMDUyWjAzMTEwLwYDVQQD EyhkMjQ4MzQ2YWZhNzVhZTRjNjk5ZjZmNjY3ZGRiMjdkNmMyODE2ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGbsfrqtSHDuNHHYYD/+HYpBjhaa y38hrFRrlKMjuWDcVDsdjWTjZyhDiKMV2oQGm82b26gMI624uE1MCL7xmmVt6FFK UgZay+Vj5I4CyoGs9yGAuAAQPoIupaezEr0T2BFupzyEx9Ms/PHwM+Ve3kCOJ1Ev VZfEcsmBsS7yxsXQjzXAtILCzANKxfGRUUYHlRdCEK1TogqmLW0ZJ6QOIU/Bqxvd +iYfl5TbavrAIiUOn3D4KikamPXqPtV0EbtrwmkEkkat3tki+Cj+M5vZjByOe45n /XVdzIiUZ17U+KizmQSEhrqJ8YgjnsTPUbU0JJLG7WTFuorMBAhc2MdCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJINGr6da5MaZ9vZn3bJ9bCgWhjMB8GA1UdIwQY MBaAFBjGitbxS+IXLH0MlPS01NABkzu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUt MTk4MDNiMWZiMWYwLzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUtMTk4MDNiMWZiMWYw LzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzMrNl4PU chUxD/IzO3Yv+TSq60rJXcC3DZuqxMJ8QENc8Q63bHK2Wa/vU9SnMmZDW7NgGUAM 0JtlIC9kQkootMO0gWoSvUp3p+8Vx9Bw65QkgbULVzKIvaxybBqtKA6GQz40BheK IdtZE4W4z+u/Tz7i56VqQBpRHNaGHtP3enPLxXF4QAq2DlfvaQp5XDADAeIXelKz hX5gW3mq5TyHvojfwaikRrYG5IL7WUSuvbdfh8jqpjZfp/bvi7LzvQuPUVzMezx5 hgwlqHRKqkgZdNP1zM7EYyP35kiZvG7iBmVbcIJpM0bReygcFf1hIaV51CrBpds+ yueLfp6XmyajQg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:32:41 2026 by rpki-client