This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json) Hash identifier: Cjc4ztXqa1ovsIdz/ylRZYoJ2W856rYrOBBxqcbfsIQ= Subject key identifier: FC:B5:4D:FE:18:BC:32:12:7F:1B:73:76:C5:39:8C:A5:74:D3:22:4F Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e Certificate serial: 019BF7634095E5DDFD6DB6EF1AD7DD17908D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft Manifest number: 02F5 Signing time: Sun 25 Jan 2026 23:00:35 +0000 Manifest this update: Sun 25 Jan 2026 23:00:35 +0000 Manifest next update: Mon 26 Jan 2026 23:00:35 +0000 Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=) 2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: E4+hEL1UPi6jharVHiu6awqwLeDWw4KCYzYlUX+wPFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:40:95:e5:dd:fd:6d:b6:ef:1a:d7:dd:17:90:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e Validity Not Before: Jan 25 23:00:35 2026 GMT Not After : Jan 26 23:00:35 2026 GMT Subject: CN=fcb54dfe18bc32127f1b7376c5398ca574d3224f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:35:c5:42:09:1b:95:48:1f:ee:da:8b:41: f9:d7:9e:5f:34:ff:92:66:10:e7:5e:ed:ac:73:36: 9c:47:bd:91:61:01:5e:7b:1b:58:1d:3f:15:61:9f: 79:07:8a:0a:9c:03:90:bb:88:6d:f3:d5:9f:fe:2c: 03:f7:dd:2d:d7:fd:32:a1:ef:5f:33:2e:c2:4e:0b: 22:f4:04:d1:e2:4a:af:6b:c8:7b:36:5c:c8:c6:79: 8e:11:6a:88:e0:93:f8:74:7a:07:1e:89:6c:46:99: 65:92:02:97:80:51:46:cf:53:07:71:28:3f:d8:05: e0:ad:9f:19:33:5b:69:95:19:5e:34:89:9b:44:df: 91:1f:e6:ca:08:7a:59:c6:62:71:9b:b1:be:3c:f9: e1:f4:8b:a0:e7:b2:5f:30:17:54:f7:78:13:4c:dc: 99:0c:55:87:80:cb:74:7b:4f:05:13:7d:d7:b2:fa: c4:b8:47:2e:4a:c6:af:4b:84:8f:f3:0a:9a:af:7c: 70:c6:18:13:5e:7b:5b:78:1d:4b:b1:c0:d2:cb:81: 1c:2f:16:6e:68:f2:77:19:6c:37:56:70:fa:fc:80: 60:03:d1:0b:36:98:16:d4:2c:92:40:92:db:2d:0f: 6c:7a:13:33:e3:31:cf:04:e8:8d:66:db:b6:4c:b6: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B5:4D:FE:18:BC:32:12:7F:1B:73:76:C5:39:8C:A5:74:D3:22:4F X509v3 Authority Key Identifier: keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5e:b7:ae:4a:f6:72:3b:70:35:34:bb:9a:38:32:07:3f:71: a3:a1:50:6e:fb:af:45:d9:ba:78:82:b2:19:ca:00:e7:6e:dd: 0e:92:57:e3:bb:b9:80:97:cb:e8:ec:cd:5b:68:d9:23:9a:ee: f4:d7:2f:24:cb:20:28:d7:3e:58:72:01:f7:8a:7a:f7:f5:d4: aa:c1:7c:64:f3:ed:e3:2c:0b:43:50:12:a5:03:85:bc:eb:a2: 19:81:5c:d8:92:2f:05:1d:5e:7e:e7:c7:51:18:de:d9:35:2a: 4d:7e:3c:5b:0f:af:00:28:22:be:db:df:1a:1c:a8:3d:25:43: 83:ad:25:24:a8:8e:b3:e8:3d:c3:84:ef:45:79:e4:10:db:09: 44:f2:31:cb:cc:a4:81:a2:c6:28:e6:9c:06:22:12:60:1b:67: f3:2e:c2:64:fc:de:c8:18:a1:28:b7:34:4c:75:6c:06:73:62: a0:08:b4:8a:2c:0f:94:c4:95:fb:98:de:5b:be:90:41:28:8c: df:7e:00:5b:18:d0:a9:30:8d:e8:c6:51:48:24:f3:3a:f7:d1: 9e:3f:27:e0:31:b3:e3:71:69:95:90:8c:ab:26:ef:a9:1a:cd: 9b:57:b9:fc:20:f0:87:9d:18:29:85:61:ee:e1:f4:ca:e9:6d: 4b:01:7f:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0CV5d39bbbvGtfdF5CNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2 MDVlMGUwHhcNMjYwMTI1MjMwMDM1WhcNMjYwMTI2MjMwMDM1WjAzMTEwLwYDVQQD EyhmY2I1NGRmZTE4YmMzMjEyN2YxYjczNzZjNTM5OGNhNTc0ZDMyMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGg1xUIJG5VIH+7ai0H5155fNP+S ZhDnXu2sczacR72RYQFeextYHT8VYZ95B4oKnAOQu4ht89Wf/iwD990t1/0yoe9f My7CTgsi9ATR4kqva8h7NlzIxnmOEWqI4JP4dHoHHolsRpllkgKXgFFGz1MHcSg/ 2AXgrZ8ZM1tplRleNImbRN+RH+bKCHpZxmJxm7G+PPnh9Iug57JfMBdU93gTTNyZ DFWHgMt0e08FE33XsvrEuEcuSsavS4SP8wqar3xwxhgTXntbeB1LscDSy4EcLxZu aPJ3GWw3VnD6/IBgA9ELNpgW1CySQJLbLQ9sehMz4zHPBOiNZtu2TLa1yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy1Tf4YvDISfxtzdsU5jKV00yJPMB8GA1UdIwQY MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt ZGZmM2JjZWU2YjY2LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2 LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH163rkr2 cjtwNTS7mjgyBz9xo6FQbvuvRdm6eIKyGcoA527dDpJX47u5gJfL6OzNW2jZI5ru 9NcvJMsgKNc+WHIB94p69/XUqsF8ZPPt4ywLQ1ASpQOFvOuiGYFc2JIvBR1efufH URje2TUqTX48Ww+vACgivtvfGhyoPSVDg60lJKiOs+g9w4TvRXnkENsJRPIxy8yk gaLGKOacBiISYBtn8y7CZPzeyBihKLc0THVsBnNioAi0iiwPlMSV+5jeW76QQSiM 334AWxjQqTCN6MZRSCTzOvfRnj8n4DGz43FplZCMqybvqRrNm1e5/CDwh50YKYVh 7uH0yultSwF/UA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:09 2026 by rpki-client