This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json) Hash identifier: cagshnNix/tMCdO2Nnux9fon3rb7LFRIn67wnE9LMMg= Subject key identifier: CF:0E:4E:4C:46:06:06:49:51:FE:63:C2:18:CB:4A:F6:E2:05:8F:93 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019BF42B914148096ACB1BE2170237578B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 08:00:54 +0000 Manifest this update: Sun 25 Jan 2026 08:00:54 +0000 Manifest next update: Mon 26 Jan 2026 08:00:54 +0000 Files and hashes: 1: 7eQNjnQdwqflqSKNBUSkeuNmw7g.roa (hash: KDiDs9BVR3uSy9uhf7YQ+EiuhvYGlWjEWXwSqzhl/zA=) 2: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: XCOsrTYNmek3wZgSjRkY4/a4M/DX6OthImXihV7byn4=) 3: HqFdFQd3mJjjEoQudvkZxqIuHF4.roa (hash: Q9RLxw/T80VOo7/+EDUnGtAF2QXxYd4cppakgqAvZwY=) 4: Kp3eYJ7kSiZsDu5GffXxRznucgA.roa (hash: +v7HVtK9kA/9s9DQL3HEcP41QigGiyaFVGj2AlPGBaQ=) 5: _YjoM5RgGEqDATh0dggO_ptSVwA.roa (hash: EvlNg6FSVXOlKLDCdTk6bjISKtxW5D9yTRIIrx19hkM=) 6: h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa (hash: B+fnICpLokTB+5ePuFtzYa/q5V0EfzABtX3v8OW1PdQ=) 7: jJUpXp-wy4eDj-VTQpn033oPZ88.roa (hash: aKtKSKKKZ+/EZ2HpVdvSi+ll3PhhXXP06+cpHPYqgcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:91:41:48:09:6a:cb:1b:e2:17:02:37:57:8b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 25 08:00:54 2026 GMT Not After : Jan 26 08:00:54 2026 GMT Subject: CN=cf0e4e4c4606064951fe63c218cb4af6e2058f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:fb:62:90:6c:aa:13:e7:a0:21:17:60:5f: 8c:d3:bf:50:c8:d9:00:0a:e8:d7:fd:68:6a:2b:6f: c6:fa:ef:ad:4d:b2:14:ab:e8:36:d2:72:ee:c1:2e: 53:28:00:39:97:9f:e3:ac:2a:25:59:2a:e4:1b:f0: a8:cf:52:4c:a8:44:f3:41:a4:e0:52:f1:a4:b6:1f: 25:0b:f8:32:96:27:77:93:22:79:04:b6:d3:7a:c2: eb:9c:9d:68:34:44:9b:42:df:df:58:6f:c9:9e:6f: 09:e0:dc:3e:31:56:5a:3e:c8:bd:30:f3:20:67:48: f3:b9:17:40:9d:cd:aa:8c:97:fb:74:1b:23:7b:a3: d4:26:51:9b:ab:98:99:2f:72:aa:6b:63:18:f4:fa: 36:18:52:ad:5b:82:4d:2c:77:d5:09:8b:39:46:72: 00:4d:dc:f8:fa:94:14:c2:de:2e:56:52:f5:64:99: 43:08:e8:07:4c:22:55:06:35:e3:8b:9f:90:8a:a5: d3:75:8e:d9:a8:a2:1d:fd:53:ee:91:43:56:10:8c: ce:0d:a3:bb:ad:8f:59:ca:96:ae:d6:87:86:c7:83: a3:7b:e3:cc:ac:31:f6:b1:23:18:dc:4d:2e:dd:0c: 30:9f:92:4d:fb:99:3a:dd:e8:2d:34:26:39:9a:dc: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:4E:4C:46:06:06:49:51:FE:63:C2:18:CB:4A:F6:E2:05:8F:93 X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dd:2f:a7:77:8d:f8:6e:de:22:65:ac:45:4c:53:75:7e:63: 8b:77:92:cb:aa:d2:d5:86:f6:f3:5c:04:2e:54:78:63:a7:df: d2:eb:8b:0c:b5:d6:cc:1a:89:0d:49:bf:fa:57:cc:c5:0d:36: bf:26:c5:28:a4:d9:db:01:28:9c:df:92:06:a7:df:13:9a:60: 57:8c:6f:20:fc:2e:ee:31:dc:4e:80:46:b3:b3:35:f6:a1:4d: 5a:11:37:9f:0d:f4:6b:75:0f:2a:01:81:e9:0e:9b:48:a5:e2: cc:44:41:1f:8b:60:c0:0c:e6:0a:f5:38:05:05:b3:f1:c8:5b: 01:cd:9e:48:64:ae:11:9f:f3:de:64:1c:e5:64:7c:cc:3e:d4: 29:a3:58:d5:d4:88:9e:be:eb:7b:aa:28:5c:c7:e2:8c:1b:8c: 5d:af:8b:03:85:21:65:1f:96:c8:56:19:96:2f:ef:9e:aa:4e: 7d:0f:e3:e1:60:ef:80:ba:6f:f5:31:d5:45:24:86:c0:e9:95: 9c:3b:f9:96:b2:ff:02:8f:2a:62:b1:02:95:b5:87:70:96:ed: 0f:ec:b7:81:6a:42:39:b4:c9:1c:fe:eb:ab:32:5c:74:72:1c: 76:e3:a3:d4:6a:0c:cc:79:a0:cc:a1:e4:3a:91:60:c4:b0:39: 66:75:17:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K5FBSAlqyxviFwI3V4sJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTI1MDgwMDU0WhcNMjYwMTI2MDgwMDU0WjAzMTEwLwYDVQQD EyhjZjBlNGU0YzQ2MDYwNjQ5NTFmZTYzYzIxOGNiNGFmNmUyMDU4ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz337YpBsqhPnoCEXYF+M079QyNkA CujX/WhqK2/G+u+tTbIUq+g20nLuwS5TKAA5l5/jrColWSrkG/Coz1JMqETzQaTg UvGkth8lC/gylid3kyJ5BLbTesLrnJ1oNESbQt/fWG/Jnm8J4Nw+MVZaPsi9MPMg Z0jzuRdAnc2qjJf7dBsje6PUJlGbq5iZL3Kqa2MY9Po2GFKtW4JNLHfVCYs5RnIA Tdz4+pQUwt4uVlL1ZJlDCOgHTCJVBjXji5+QiqXTdY7ZqKId/VPukUNWEIzODaO7 rY9Zypau1oeGx4Oje+PMrDH2sSMY3E0u3Qwwn5JN+5k63egtNCY5mtyAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8OTkxGBgZJUf5jwhjLSvbiBY+TMB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG90vp3eN +G7eImWsRUxTdX5ji3eSy6rS1Yb281wELlR4Y6ff0uuLDLXWzBqJDUm/+lfMxQ02 vybFKKTZ2wEonN+SBqffE5pgV4xvIPwu7jHcToBGs7M19qFNWhE3nw30a3UPKgGB 6Q6bSKXizERBH4tgwAzmCvU4BQWz8chbAc2eSGSuEZ/z3mQc5WR8zD7UKaNY1dSI nr7re6ooXMfijBuMXa+LA4UhZR+WyFYZli/vnqpOfQ/j4WDvgLpv9THVRSSGwOmV nDv5lrL/Ao8qYrEClbWHcJbtD+y3gWpCObTJHP7rqzJcdHIcduOj1GoMzHmgzKHk OpFgxLA5ZnUXbA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:56 2026 by rpki-client