This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json) Hash identifier: qDqEEqNlMur0jjNV9aIogkkce8UqHgRHHeBokFgkA+c= Subject key identifier: E4:AB:B7:68:A1:9D:B6:A7:A9:69:EF:4C:D3:45:08:16:D3:84:D3:16 Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d Certificate serial: 019BF79AEBFB5E19DA490A00787F9519DFC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft Manifest number: 112C Signing time: Mon 26 Jan 2026 00:01:23 +0000 Manifest this update: Mon 26 Jan 2026 00:01:23 +0000 Manifest next update: Tue 27 Jan 2026 00:01:23 +0000 Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: nX24oUZgQYc0B9GVkHIRUks+C2rhClB0ziYLYKcfRTU=) 2: N7ax4NHfdEnoomaYviGT7ZjPtXU.roa (hash: psD+3SCxgwLTyZrF0izMcXY3kYv7ppA53aHy+BOaM8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:eb:fb:5e:19:da:49:0a:00:78:7f:95:19:df:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d Validity Not Before: Jan 26 00:01:23 2026 GMT Not After : Jan 27 00:01:23 2026 GMT Subject: CN=e4abb768a19db6a7a969ef4cd3450816d384d316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:3e:16:21:46:4c:cb:07:9b:70:f4:6c:78: da:df:25:ca:68:04:14:4d:cb:30:ad:de:1e:d9:24: 3c:1c:80:f3:c2:f9:27:b5:4c:1d:18:87:4c:b6:44: 10:7a:6e:62:13:75:78:81:0f:cd:8f:86:4d:66:38: a3:36:25:97:16:85:ea:70:4b:1c:0f:90:97:48:b3: 0c:7c:e4:90:38:8e:ff:65:5c:f7:a7:36:e8:bf:90: c8:d3:c0:f7:13:5a:50:51:2a:20:25:b2:6f:9e:ec: a2:19:f8:8a:9d:2e:eb:fa:bb:6d:89:61:a7:7b:ef: b0:a7:88:56:04:23:17:55:8d:b6:d7:be:29:96:2f: fc:25:07:4b:a0:1f:ea:0e:a7:0b:c3:84:b2:0c:bd: f9:69:e8:cf:56:42:08:9e:53:d2:6a:2f:1e:37:2a: ce:88:41:bf:f5:b5:d8:dc:bf:cb:c8:84:fa:00:36: f5:f5:2b:ca:b2:50:f6:34:2b:16:4e:52:52:38:73: eb:4b:c7:4a:9d:25:0c:2a:8c:2c:29:f4:a2:50:2e: b6:fc:cc:64:64:5f:fb:ff:5b:72:08:ec:e6:23:81: f8:c8:33:58:f7:b1:db:de:ff:25:ad:82:95:26:cf: 0e:5e:80:fd:08:9c:51:df:54:db:43:e0:69:4a:14: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AB:B7:68:A1:9D:B6:A7:A9:69:EF:4C:D3:45:08:16:D3:84:D3:16 X509v3 Authority Key Identifier: keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:55:4d:5b:fa:99:a9:b8:a5:f3:f3:15:e9:7a:af:04:6c:9f: 9c:6a:a1:1b:58:c2:67:14:ac:2e:3e:1e:cd:3f:c8:90:de:67: 58:07:85:6b:b4:da:61:54:78:35:1f:11:b9:39:1d:00:44:6b: 86:17:02:46:43:69:8c:ce:33:dd:6c:6c:bd:3c:17:c7:f2:6a: ee:d8:2c:26:23:00:17:91:77:b3:cf:c1:21:fe:50:b4:88:a3: 38:85:f6:96:6f:77:9d:85:7c:97:01:cb:51:50:00:c4:6d:cc: 84:4f:94:b8:89:84:94:05:71:a0:ee:a0:81:3a:4a:5e:d8:91: f9:57:e3:1d:7e:28:18:84:6a:af:ef:5c:77:d4:53:dc:f3:b7: 02:8a:dd:51:27:df:59:c6:42:73:87:41:1f:d2:94:6b:0b:18: 94:a7:7f:83:c8:28:f5:32:36:c1:2d:7d:86:bd:2d:4e:cc:5b: f4:0a:fa:9d:1f:ca:86:ae:62:d0:97:f4:cb:73:12:54:fd:24: 90:2e:4c:e5:29:7c:9c:ce:ad:f7:0b:ee:e8:d0:d5:50:61:be: 6b:e5:db:21:59:ea:68:68:1a:a6:75:d2:94:3c:8e:1d:08:41: 2a:f8:75:d3:b2:04:ab:e8:52:96:54:da:66:06:63:48:75:80: ee:25:08:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muv7XhnaSQoAeH+VGd/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw ZTQwMWQwHhcNMjYwMTI2MDAwMTIzWhcNMjYwMTI3MDAwMTIzWjAzMTEwLwYDVQQD EyhlNGFiYjc2OGExOWRiNmE3YTk2OWVmNGNkMzQ1MDgxNmQzODRkMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVE+FiFGTMsHm3D0bHja3yXKaAQU Tcswrd4e2SQ8HIDzwvkntUwdGIdMtkQQem5iE3V4gQ/Nj4ZNZjijNiWXFoXqcEsc D5CXSLMMfOSQOI7/ZVz3pzbov5DI08D3E1pQUSogJbJvnuyiGfiKnS7r+rttiWGn e++wp4hWBCMXVY22174pli/8JQdLoB/qDqcLw4SyDL35aejPVkIInlPSai8eNyrO iEG/9bXY3L/LyIT6ADb19SvKslD2NCsWTlJSOHPrS8dKnSUMKowsKfSiUC62/Mxk ZF/7/1tyCOzmI4H4yDNY97Hb3v8lrYKVJs8OXoD9CJxR31TbQ+BpShRt4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSrt2ihnbanqWnvTNNFCBbThNMWMB8GA1UdIwQY MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClVNW/qZ qbil8/MV6XqvBGyfnGqhG1jCZxSsLj4ezT/IkN5nWAeFa7TaYVR4NR8RuTkdAERr hhcCRkNpjM4z3WxsvTwXx/Jq7tgsJiMAF5F3s8/BIf5QtIijOIX2lm93nYV8lwHL UVAAxG3MhE+UuImElAVxoO6ggTpKXtiR+VfjHX4oGIRqr+9cd9RT3PO3AordUSff WcZCc4dBH9KUawsYlKd/g8go9TI2wS19hr0tTsxb9Ar6nR/Khq5i0Jf0y3MSVP0k kC5M5Sl8nM6t9wvu6NDVUGG+a+XbIVnqaGgapnXSlDyOHQhBKvh107IEq+hSllTa ZgZjSHWA7iUIfw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:30:16 2026 by rpki-client