This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json) Hash identifier: YXquIDOIxvA+q6ze0eL8sV0/C8IcPx1xP6LZ9+KKLao= Subject key identifier: F0:30:FF:74:DF:44:D9:AD:2D:B3:D9:94:6D:F4:04:05:44:2C:20:BA Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2 Certificate serial: 019BF46272E76C430820EF913AC0C848C056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft Manifest number: 09E5 Signing time: Sun 25 Jan 2026 09:00:51 +0000 Manifest this update: Sun 25 Jan 2026 09:00:51 +0000 Manifest next update: Mon 26 Jan 2026 09:00:51 +0000 Files and hashes: 1: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: OKW+Bsr7TFFjfiAoqh7VmnSmSAS01IZud6yByqa1us8=) 2: JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa (hash: PBsKlZt/RhXzdnMDW9mk8dmSBPIc5dC6MxwZF8UDWyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:72:e7:6c:43:08:20:ef:91:3a:c0:c8:48:c0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2 Validity Not Before: Jan 25 09:00:51 2026 GMT Not After : Jan 26 09:00:51 2026 GMT Subject: CN=f030ff74df44d9ad2db3d9946df40405442c20ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:81:d6:f7:64:c0:66:6e:5c:57:29:20:c1:a4: e6:ac:39:c2:d2:d5:a6:fd:b4:ce:aa:67:b1:4a:45: b4:8a:13:85:17:1d:27:87:96:80:ff:05:71:bd:6b: 06:ed:b9:cf:23:84:50:0e:15:22:9c:b7:f1:82:bb: 3c:c5:79:65:a4:7f:aa:6e:cb:bc:e3:58:a5:43:51: 70:3b:a5:e3:4b:52:14:c1:50:db:60:11:16:2d:07: d0:ed:2a:5e:99:6a:f7:51:bd:cd:bf:3d:5f:24:c5: 80:77:b7:a7:dd:86:e0:a3:6c:b0:9f:5b:15:5d:ba: 9b:9e:5e:08:09:17:b5:bd:76:cf:51:49:63:aa:c1: 3b:45:eb:3a:9b:4b:80:92:63:85:53:ff:c9:8e:d9: 98:c8:33:d5:05:1c:5e:3e:bd:5f:10:f7:70:f7:57: 39:ea:db:44:1b:ee:ae:6b:a2:8c:24:4c:5e:6a:11: 96:3f:c4:1b:47:af:9d:bb:bd:bf:5d:b0:1f:b0:5b: c9:16:aa:9b:1e:46:ac:58:68:52:1d:f0:8d:f1:50: f9:01:0c:03:e6:02:ee:79:02:80:15:0f:d9:e0:55: e6:8a:bc:f0:50:cc:fb:d1:ad:49:1d:57:c2:8d:2a: c1:2f:59:51:f0:b8:76:3f:31:77:1f:58:a4:be:89: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:30:FF:74:DF:44:D9:AD:2D:B3:D9:94:6D:F4:04:05:44:2C:20:BA X509v3 Authority Key Identifier: keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6c:cc:0c:72:7f:2e:1a:36:5b:1a:8c:48:bf:48:5f:cd:5f: b8:8b:bd:f1:cc:14:93:68:ba:bb:8a:72:b8:19:ec:21:65:43: d3:54:d8:ef:e9:71:1a:02:67:fa:9d:78:e9:f5:c5:74:39:8e: 37:53:44:34:3b:23:ed:d1:26:1e:46:bd:e3:fb:bc:52:d8:5d: 74:1a:a8:ee:06:da:a0:02:c5:70:09:0e:0a:de:14:42:9c:68: 87:57:52:58:09:0b:cb:0a:07:b1:47:f7:75:ae:75:dc:33:24: 5f:53:38:57:55:3e:3d:e3:79:90:35:c0:45:c1:08:7b:a6:ba: 7c:61:be:ac:9f:aa:f0:9f:78:63:4f:de:c3:7e:6d:f3:bb:a3: c6:32:4a:7f:c7:2a:ea:b6:1d:b5:83:a7:a9:b0:25:18:4e:8c: 9d:6e:b1:2c:c5:9a:d8:8c:69:4d:33:14:3f:a1:48:4e:a7:85: 74:b0:0a:dc:73:98:63:b8:36:05:81:f2:e6:c3:9c:dd:1f:83: cb:36:8d:fe:07:c2:d1:1f:e0:0e:bc:3e:50:49:bd:5e:1e:02: 48:a4:54:5f:97:c8:e7:86:66:2e:4a:73:ee:76:83:dc:6f:c0: 11:30:20:87:87:18:f9:62:05:e0:ca:a5:c7:9a:1b:71:98:19: 1f:19:10:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YnLnbEMIIO+ROsDISMBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm YzQ3YTIwHhcNMjYwMTI1MDkwMDUxWhcNMjYwMTI2MDkwMDUxWjAzMTEwLwYDVQQD EyhmMDMwZmY3NGRmNDRkOWFkMmRiM2Q5OTQ2ZGY0MDQwNTQ0MmMyMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYHW92TAZm5cVykgwaTmrDnC0tWm /bTOqmexSkW0ihOFFx0nh5aA/wVxvWsG7bnPI4RQDhUinLfxgrs8xXllpH+qbsu8 41ilQ1FwO6XjS1IUwVDbYBEWLQfQ7SpemWr3Ub3Nvz1fJMWAd7en3Ybgo2ywn1sV Xbqbnl4ICRe1vXbPUUljqsE7Res6m0uAkmOFU//JjtmYyDPVBRxePr1fEPdw91c5 6ttEG+6ua6KMJExeahGWP8QbR6+du72/XbAfsFvJFqqbHkasWGhSHfCN8VD5AQwD 5gLueQKAFQ/Z4FXmirzwUMz70a1JHVfCjSrBL1lR8Lh2PzF3H1ikvonLGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAw/3TfRNmtLbPZlG30BAVELCC6MB8GA1UdIwQY MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWzMDHJ/ Lho2WxqMSL9IX81fuIu98cwUk2i6u4pyuBnsIWVD01TY7+lxGgJn+p146fXFdDmO N1NENDsj7dEmHka94/u8UthddBqo7gbaoALFcAkOCt4UQpxoh1dSWAkLywoHsUf3 da513DMkX1M4V1U+PeN5kDXARcEIe6a6fGG+rJ+q8J94Y0/ew35t87ujxjJKf8cq 6rYdtYOnqbAlGE6MnW6xLMWa2IxpTTMUP6FITqeFdLAK3HOYY7g2BYHy5sOc3R+D yzaN/gfC0R/gDrw+UEm9Xh4CSKRUX5fI54ZmLkpz7naD3G/AETAgh4cY+WIF4Mql x5obcZgZHxkQig== -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:09 2026 by rpki-client