This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json) Hash identifier: xY79vl0LRP/qOIw4uI3p1wBkG3Uhdg8MQfkyZ+ALyLA= Subject key identifier: 7A:8B:88:92:AC:3B:BF:E3:36:3B:5A:5D:5D:AD:BD:B5:1A:17:F9:34 Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Certificate serial: 019BF42BD61ED5FD8BF217C1AC8B66492B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft Manifest number: 11DF Signing time: Sun 25 Jan 2026 08:01:11 +0000 Manifest this update: Sun 25 Jan 2026 08:01:11 +0000 Manifest next update: Mon 26 Jan 2026 08:01:11 +0000 Files and hashes: 1: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=) 2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: /Cm/aUHfuZTjZb7h9uKaMXIJ+l54z6i5PnbIHbO24O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:d6:1e:d5:fd:8b:f2:17:c1:ac:8b:66:49:2b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Validity Not Before: Jan 25 08:01:11 2026 GMT Not After : Jan 26 08:01:11 2026 GMT Subject: CN=7a8b8892ac3bbfe3363b5a5d5dadbdb51a17f934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:3e:70:d7:80:9b:d8:1b:52:d6:ec:17:ce: fc:a3:78:2c:46:90:b0:63:38:5d:5d:bc:a7:4d:56: 23:48:4c:ec:ee:8c:f5:4f:3d:5a:9b:9e:51:44:b3: 5b:35:84:c4:e1:f7:11:df:7d:84:78:db:c4:bf:81: c9:ce:70:32:59:04:b5:19:85:26:6f:c1:61:7a:19: 72:da:55:f5:6e:cc:e3:d5:d7:91:ec:25:e9:3f:3a: bf:f0:63:98:61:b2:d8:1c:63:5c:79:64:d0:e9:db: f5:2e:b5:f1:fd:d8:cc:f8:a7:60:e2:04:cf:d7:be: 84:cd:c6:52:71:e7:a7:f5:34:d9:3e:ef:85:27:d9: 37:2b:73:2f:8f:3d:2e:df:b0:e1:f0:82:dc:9c:7b: 83:64:0e:d0:16:8a:85:6e:e8:be:a5:a7:2b:7a:e3: 3c:29:e1:3b:23:11:0d:fb:94:a7:f8:b7:b8:91:6d: d8:df:e1:c5:13:9b:be:76:d6:5f:f9:1b:45:e0:6d: 49:9f:30:dd:4c:8b:ef:df:58:5e:cf:56:58:ca:1d: 44:31:26:14:22:87:37:cd:a9:24:4a:9c:a6:8a:a1: d6:cd:de:e2:1e:82:26:48:fa:29:1a:36:58:9e:21: 3f:e3:2a:a3:89:06:b6:eb:e3:b6:3b:18:aa:3d:39: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:88:92:AC:3B:BF:E3:36:3B:5A:5D:5D:AD:BD:B5:1A:17:F9:34 X509v3 Authority Key Identifier: keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:47:dc:c3:a2:83:07:38:89:2a:88:cb:07:8f:ab:9c:e9:0d: 14:66:2b:f4:db:aa:1f:90:7b:85:9a:a9:5f:e6:da:ce:08:86: 82:45:ea:38:07:0f:8b:18:a1:09:72:31:89:81:09:17:47:ec: a0:bb:31:79:db:6e:0d:af:2c:96:a4:c2:7f:99:8b:83:d7:e6: da:e4:e4:97:d7:77:72:99:8d:6b:fb:5e:ad:11:51:bb:12:40: 08:9b:36:a0:81:21:8e:e7:9e:aa:e5:32:d4:23:5d:ad:08:16: 4d:7f:e6:cc:81:61:58:5a:e3:e8:df:63:4b:c7:d2:6f:b7:72: 38:1b:7f:57:80:91:cc:70:6b:ba:b8:e6:32:86:25:34:11:46: 39:cf:09:74:2d:fe:77:53:72:3a:25:4e:b2:a0:e6:39:46:34: 7f:cd:e7:5d:8e:e6:cc:77:80:fa:bd:fe:2b:96:74:58:62:d2: db:9b:5a:8f:e0:34:e9:f7:4c:6b:44:e5:b2:f4:9e:cf:86:5c: 9f:f0:5d:16:38:9d:58:ac:26:1e:79:8d:da:72:f3:f6:9a:39: bf:15:ae:38:3d:c7:a4:58:cb:60:a2:e9:02:76:8b:a9:2d:79: 77:99:26:a3:14:39:fb:56:25:c0:3a:c1:23:d5:64:78:97:04: a8:5d:ba:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9Ye1f2L8hfBrItmSSuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDdhOTU4ZTZiM2RmZDc4ZGEzNTBiMTAzZDNiOTAyN2Uw ZmUzZjAwHhcNMjYwMTI1MDgwMTExWhcNMjYwMTI2MDgwMTExWjAzMTEwLwYDVQQD Eyg3YThiODg5MmFjM2JiZmUzMzYzYjVhNWQ1ZGFkYmRiNTFhMTdmOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tw+cNeAm9gbUtbsF878o3gsRpCw YzhdXbynTVYjSEzs7oz1Tz1am55RRLNbNYTE4fcR332EeNvEv4HJznAyWQS1GYUm b8Fhehly2lX1bszj1deR7CXpPzq/8GOYYbLYHGNceWTQ6dv1LrXx/djM+Kdg4gTP 176EzcZSceen9TTZPu+FJ9k3K3Mvjz0u37Dh8ILcnHuDZA7QFoqFbui+pacreuM8 KeE7IxEN+5Sn+Le4kW3Y3+HFE5u+dtZf+RtF4G1JnzDdTIvv31hez1ZYyh1EMSYU Ioc3zakkSpymiqHWzd7iHoImSPopGjZYniE/4yqjiQa26+O2OxiqPTnfUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqLiJKsO7/jNjtaXV2tvbUaF/k0MB8GA1UdIwQY MBaAFIAHqVjms9/XjaNQsQPTuQJ+D+PwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEt M2UxNzFiZDVlZmMzLzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEtM2UxNzFiZDVlZmMz LzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEfcw6KD BziJKojLB4+rnOkNFGYr9NuqH5B7hZqpX+bazgiGgkXqOAcPixihCXIxiYEJF0fs oLsxedtuDa8slqTCf5mLg9fm2uTkl9d3cpmNa/terRFRuxJACJs2oIEhjueequUy 1CNdrQgWTX/mzIFhWFrj6N9jS8fSb7dyOBt/V4CRzHBrurjmMoYlNBFGOc8JdC3+ d1NyOiVOsqDmOUY0f83nXY7mzHeA+r3+K5Z0WGLS25taj+A06fdMa0TlsvSez4Zc n/BdFjidWKwmHnmN2nLz9po5vxWuOD3HpFjLYKLpAnaLqS15d5kmoxQ5+1YlwDrB I9VkeJcEqF262A== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:23 2026 by rpki-client