This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json) Hash identifier: 8UrdbPOHWdX8kI3QlTPRw7UEiILGvKPJdS7MOZOSOtE= Subject key identifier: BB:DC:96:AF:96:43:A9:26:DE:3A:A9:97:E4:E4:69:8A:61:F5:60:9B Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510 Certificate serial: 019BF91AE1E244BCF75333733AD6AE470667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft Manifest number: 06B0 Signing time: Mon 26 Jan 2026 07:00:47 +0000 Manifest this update: Mon 26 Jan 2026 07:00:47 +0000 Manifest next update: Tue 27 Jan 2026 07:00:47 +0000 Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: o1jWD9aWFpvI14TSIrbLfMAULfL+OEzzGG96BqsvzNo=) 2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:e1:e2:44:bc:f7:53:33:73:3a:d6:ae:47:06:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510 Validity Not Before: Jan 26 07:00:47 2026 GMT Not After : Jan 27 07:00:47 2026 GMT Subject: CN=bbdc96af9643a926de3aa997e4e4698a61f5609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d5:d9:b9:92:a2:dc:36:03:de:1a:78:38:65: b5:35:22:5d:e1:8a:44:a9:f4:6d:36:bd:f5:d7:2f: 1a:d4:c8:2d:48:26:9f:16:4a:f3:6b:4c:0f:60:a8: 23:92:fc:22:09:42:b5:ac:c3:52:f1:1b:62:ab:58: 14:17:54:ee:6e:e5:1d:80:e9:c2:8a:47:d7:e5:2f: ae:25:cb:05:c4:95:7b:2f:79:6f:57:41:89:67:c4: 28:39:a6:cf:aa:75:43:3f:b7:fd:83:5f:7c:14:27: cd:5b:31:bf:14:14:66:82:4d:18:21:e2:b0:27:a1: 30:cb:85:2d:05:97:be:c1:49:fb:73:c8:38:44:9b: 4a:7b:74:69:41:f3:9c:d5:0b:7b:7c:26:d0:34:ae: ef:15:90:50:40:83:13:6f:1a:ef:44:dd:54:e6:af: ed:7b:12:4b:93:a3:17:b3:a3:b4:57:be:bd:25:59: af:f9:c6:fd:d0:34:85:7d:56:ba:36:50:87:f2:ed: fd:fe:b5:37:55:aa:cd:fe:f8:18:5f:05:b3:4a:73: 60:dd:48:7e:f6:e5:80:e3:1b:fb:55:49:41:66:74: bc:e0:c3:16:86:56:73:1c:4f:5f:d5:f5:e3:a9:f0: 1b:c5:cf:86:38:73:9b:da:31:bd:19:f4:39:ca:72: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DC:96:AF:96:43:A9:26:DE:3A:A9:97:E4:E4:69:8A:61:F5:60:9B X509v3 Authority Key Identifier: keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e0:91:64:58:6b:aa:bf:b7:1c:b4:ba:9b:75:a8:cb:0d:da: 49:7c:35:48:7f:83:0a:03:31:76:80:bc:29:a3:6b:9d:2c:71: 3f:32:09:d0:00:c9:47:a2:49:3f:d2:6d:97:02:36:c9:e3:77: 24:39:6b:75:a7:93:5f:4a:0a:75:9a:0b:0c:26:38:d7:c3:64: 46:9c:27:71:96:30:e5:53:84:72:8d:7e:15:9e:eb:9b:47:cc: 38:7a:17:19:53:41:ea:5a:8b:77:b0:3f:7b:4b:5c:4d:0e:b0: 37:14:a9:df:02:6a:3f:14:86:a7:35:f2:9d:75:4a:21:b6:74: 74:63:7c:fd:63:b5:f1:db:2c:0b:34:7f:de:bd:ef:71:f7:06: 39:94:03:1c:df:aa:91:3e:f8:b1:58:f9:f1:7f:b3:ba:31:84: 4c:83:38:e4:b5:0c:aa:1f:cf:69:c0:70:76:dc:dd:89:87:a1: 11:57:74:66:55:ae:c9:53:74:41:bf:2a:b7:80:a1:f0:83:64: 61:a9:91:2f:94:ae:d9:cc:19:9c:df:f2:60:7f:40:a8:34:da: aa:db:9e:a7:55:1a:c3:f8:5c:ba:d6:30:ef:9e:90:23:ba:7f: a8:66:ce:f2:5c:1a:4a:27:f9:9a:f1:e7:fd:e2:b3:99:bc:f7: 55:26:e1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GuHiRLz3UzNzOtauRwZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl NDI1MTAwHhcNMjYwMTI2MDcwMDQ3WhcNMjYwMTI3MDcwMDQ3WjAzMTEwLwYDVQQD EyhiYmRjOTZhZjk2NDNhOTI2ZGUzYWE5OTdlNGU0Njk4YTYxZjU2MDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29XZuZKi3DYD3hp4OGW1NSJd4YpE qfRtNr311y8a1MgtSCafFkrza0wPYKgjkvwiCUK1rMNS8Rtiq1gUF1TubuUdgOnC ikfX5S+uJcsFxJV7L3lvV0GJZ8QoOabPqnVDP7f9g198FCfNWzG/FBRmgk0YIeKw J6Ewy4UtBZe+wUn7c8g4RJtKe3RpQfOc1Qt7fCbQNK7vFZBQQIMTbxrvRN1U5q/t exJLk6MXs6O0V769JVmv+cb90DSFfVa6NlCH8u39/rU3VarN/vgYXwWzSnNg3Uh+ 9uWA4xv7VUlBZnS84MMWhlZzHE9f1fXjqfAbxc+GOHOb2jG9GfQ5ynKYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvclq+WQ6km3jqpl+TkaYph9WCbMB8GA1UdIwQY MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOCRZFhr qr+3HLS6m3Woyw3aSXw1SH+DCgMxdoC8KaNrnSxxPzIJ0ADJR6JJP9JtlwI2yeN3 JDlrdaeTX0oKdZoLDCY418NkRpwncZYw5VOEco1+FZ7rm0fMOHoXGVNB6lqLd7A/ e0tcTQ6wNxSp3wJqPxSGpzXynXVKIbZ0dGN8/WO18dssCzR/3r3vcfcGOZQDHN+q kT74sVj58X+zujGETIM45LUMqh/PacBwdtzdiYehEVd0ZlWuyVN0Qb8qt4Ch8INk YamRL5Su2cwZnN/yYH9AqDTaqtuep1Uaw/hcutYw756QI7p/qGbO8lwaSif5mvHn /eKzmbz3VSbhHw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:10:42 2026 by rpki-client