This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json) Hash identifier: g0P/242mKNPinvnAeuWBrsePHU66mUX/kI3LJ2p0vfA= Subject key identifier: EC:EB:9F:28:9A:90:D4:D8:CD:8D:1A:14:13:5C:B6:AF:82:12:99:76 Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019BF5AC8B03414AB691B1625F8C0E542067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 15:01:24 +0000 Manifest this update: Sun 25 Jan 2026 15:01:24 +0000 Manifest next update: Mon 26 Jan 2026 15:01:24 +0000 Files and hashes: 1: 4nuDucz_0bFEirmxExrUk31onXI.roa (hash: bvlmYpnQ+5yUhsAQFov12edmygJjaiwbJsbbg7Ct5yk=) 2: 7jXzyl-cnKTE3ScB2oKx8G-v0X8.roa (hash: Ghrf0CTHZ+10oEi1U0BOWezzYINKW7bywRELMjy2uFU=) 3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: go8NUbw4UFnGAWZKkS05HFzEtTp69y1YNlccdWK40uA=) 4: xXiMv43g5gZyliPARvzZ7xyyW2k.roa (hash: lpdFA5yCXN5/FwIwDvBqyIeXJAPjPFSrUa0qNDgv7fQ=) 5: xe9JexTqWxeyzxE1j0Qz0XcC_Qo.roa (hash: xXSsGBvegc8qYSSStq7A7yikuTgP5mU9F9Gcd6J66RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:8b:03:41:4a:b6:91:b1:62:5f:8c:0e:54:20:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Jan 25 15:01:24 2026 GMT Not After : Jan 26 15:01:24 2026 GMT Subject: CN=eceb9f289a90d4d8cd8d1a14135cb6af82129976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:0a:78:5a:27:e1:79:f9:c0:a0:e4:24:40: 79:a4:08:73:32:fc:0f:ea:af:42:01:fc:23:20:b0: 1b:70:91:d6:16:c8:2e:64:2c:47:9f:1a:06:34:89: 6d:d3:55:ed:76:a6:f4:39:17:b7:8c:d6:dd:1a:93: da:65:55:a4:14:ae:36:89:5a:ec:fa:93:92:a4:b9: 52:cd:63:4e:fb:32:07:fd:f9:11:d7:91:c7:b6:87: 1f:6b:d9:07:b0:23:0d:f1:a8:c6:c8:96:a7:27:f3: 17:54:9e:69:58:ba:c8:38:c5:61:0a:8d:cd:31:4e: 4b:65:63:a6:99:c5:3b:d7:ec:c7:b0:31:9e:7d:d7: 0d:f5:cf:66:15:72:86:ed:37:f3:9f:c9:0b:b1:f7: 7c:f8:af:d2:af:50:b9:3f:89:cb:4c:b5:89:23:f8: db:6b:de:07:67:98:41:f9:2d:be:f8:f0:68:b9:4a: 83:b1:27:80:ce:18:1f:68:bf:fe:82:38:dd:e2:ec: 7c:0a:2b:d0:e9:d5:83:0f:81:ba:b2:10:0e:93:db: 1f:08:3b:d7:ef:27:ef:5f:00:36:1e:c3:86:0e:84: fa:5e:d4:01:ff:3b:cc:63:5c:2c:f2:51:b1:df:4b: 63:bd:ee:03:51:71:7e:34:50:64:d5:8d:eb:4a:fc: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EB:9F:28:9A:90:D4:D8:CD:8D:1A:14:13:5C:B6:AF:82:12:99:76 X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b4:4b:ae:35:0b:df:88:ce:06:24:31:bb:6e:56:86:d8:23: c1:08:8a:d6:68:59:d9:87:99:5d:27:24:4d:45:75:5c:08:cc: de:8d:b8:33:c8:55:b6:4f:51:88:30:61:36:62:ea:9c:07:ff: 34:7b:46:1e:76:79:ab:5a:6d:a0:63:70:e9:76:41:18:03:fc: 5e:f9:0e:94:2b:46:3b:4c:0c:5e:1e:85:03:e7:24:8a:97:b8: 49:c3:09:c2:f3:e7:d9:98:ea:02:a3:36:e5:81:50:e2:a2:0e: 45:7e:f3:fc:81:fe:f9:b9:e8:bb:8d:58:1d:f2:71:04:b2:0b: 46:f4:18:f0:51:6f:61:0b:df:c1:d4:0e:09:6d:57:c5:43:b1: 85:c2:b8:9d:99:8d:3b:4c:b5:57:b4:58:18:43:f1:6f:73:24: 2f:c5:4d:53:f0:63:f0:02:35:93:21:04:82:0d:d1:78:1c:fe: 61:69:70:5b:fe:88:c0:30:63:9f:8a:1e:46:5c:a2:84:a1:a5: 3b:09:ca:9e:63:cb:00:7b:b1:b6:59:8c:09:37:33:cf:5f:47: 02:19:42:ae:aa:90:40:52:f3:7b:f3:29:e6:34:c2:98:82:14: 5e:29:63:21:7e:d2:a3:1f:ae:03:e8:31:33:48:11:64:c0:47: 45:fc:1b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIsDQUq2kbFiX4wOVCBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjYwMTI1MTUwMTI0WhcNMjYwMTI2MTUwMTI0WjAzMTEwLwYDVQQD EyhlY2ViOWYyODlhOTBkNGQ4Y2Q4ZDFhMTQxMzVjYjZhZjgyMTI5OTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwMKeFon4Xn5wKDkJEB5pAhzMvwP 6q9CAfwjILAbcJHWFsguZCxHnxoGNIlt01Xtdqb0ORe3jNbdGpPaZVWkFK42iVrs +pOSpLlSzWNO+zIH/fkR15HHtocfa9kHsCMN8ajGyJanJ/MXVJ5pWLrIOMVhCo3N MU5LZWOmmcU71+zHsDGefdcN9c9mFXKG7Tfzn8kLsfd8+K/Sr1C5P4nLTLWJI/jb a94HZ5hB+S2++PBouUqDsSeAzhgfaL/+gjjd4ux8CivQ6dWDD4G6shAOk9sfCDvX 7yfvXwA2HsOGDoT6XtQB/zvMY1ws8lGx30tjve4DUXF+NFBk1Y3rSvzT1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzrnyiakNTYzY0aFBNctq+CEpl2MB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7RLrjUL 34jOBiQxu25WhtgjwQiK1mhZ2YeZXSckTUV1XAjM3o24M8hVtk9RiDBhNmLqnAf/ NHtGHnZ5q1ptoGNw6XZBGAP8XvkOlCtGO0wMXh6FA+ckipe4ScMJwvPn2ZjqAqM2 5YFQ4qIORX7z/IH++bnou41YHfJxBLILRvQY8FFvYQvfwdQOCW1XxUOxhcK4nZmN O0y1V7RYGEPxb3MkL8VNU/Bj8AI1kyEEgg3ReBz+YWlwW/6IwDBjn4oeRlyihKGl OwnKnmPLAHuxtlmMCTczz19HAhlCrqqQQFLze/Mp5jTCmIIUXiljIX7Sox+uA+gx M0gRZMBHRfwbpg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:53 2026 by rpki-client