This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json) Hash identifier: Jl1LGodP9XnSwScY4mx5e30Y0xXO4El8JqF5Gq3m+hM= Subject key identifier: 7B:55:DA:28:A3:AF:DC:84:BE:4D:B2:30:38:6D:16:C3:32:65:D6:F2 Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9 Certificate serial: 019BF53E2AE578C00AF21E64486F14E9911A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 13:00:50 +0000 Manifest this update: Sun 25 Jan 2026 13:00:50 +0000 Manifest next update: Mon 26 Jan 2026 13:00:50 +0000 Files and hashes: 1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: W9EzvOSSNRD1vBQmLuy5SBqK+tib2q16USj/0LgH14M=) 2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:2a:e5:78:c0:0a:f2:1e:64:48:6f:14:e9:91:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9 Validity Not Before: Jan 25 13:00:50 2026 GMT Not After : Jan 26 13:00:50 2026 GMT Subject: CN=7b55da28a3afdc84be4db230386d16c33265d6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:11:f4:f2:a8:58:55:15:bf:b8:a8:5b:a0: 0d:64:5f:12:17:3f:62:bc:3c:e4:88:f1:5d:f0:31: ac:90:da:f9:c9:ce:bb:df:7a:61:58:49:78:19:16: 02:f8:f7:65:61:4a:ce:a1:a9:d1:63:39:ef:5b:b3: 8b:6b:9b:58:b9:c4:61:f1:a0:07:7c:e9:05:95:b8: 36:fb:0e:ef:d2:e7:0c:ec:7b:a2:c6:98:71:ba:10: 1b:a8:16:50:b2:8d:8c:4b:4c:04:bf:67:90:b9:bc: f9:71:65:34:4d:73:c2:88:26:86:ef:3b:33:29:63: e7:3a:97:d7:27:da:14:f3:eb:36:f8:61:93:48:24: 2a:d9:52:85:76:40:2e:39:75:17:7e:a6:a3:92:bb: ba:3c:ec:09:ad:c2:b1:d9:71:e5:b5:c3:35:c4:8b: 32:67:da:08:a5:2f:be:80:c2:30:a1:39:a2:b1:aa: e4:87:1e:b9:70:d6:83:cb:b1:a8:f3:f0:fe:8e:5c: 5c:be:40:24:d9:8f:f5:7a:b0:c2:2b:30:f9:10:34: b0:61:0f:63:d0:48:a3:21:c7:f5:17:88:73:4e:e4: 65:6d:d9:6d:82:d2:09:71:ff:cc:50:3d:fc:3b:a9: dc:a9:d5:52:52:4e:22:66:5d:86:70:ab:4b:b7:82: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:55:DA:28:A3:AF:DC:84:BE:4D:B2:30:38:6D:16:C3:32:65:D6:F2 X509v3 Authority Key Identifier: keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f3:b3:7f:e0:55:db:e0:b6:82:06:d8:40:33:18:79:ff:d2: 3b:16:d7:cb:07:e0:3a:22:9f:f4:c2:6d:07:3f:13:64:af:56: 1e:a3:ec:56:8f:78:35:6d:71:d9:3a:9d:58:bb:5f:93:1d:b5: dc:0a:f3:ab:51:0e:b9:33:89:97:5a:a7:df:82:9f:df:d8:a2: 12:0a:c4:a2:73:bf:8d:48:ec:d8:44:2e:89:71:74:37:2b:7d: 92:8f:6f:c9:6e:df:62:94:0e:db:93:6c:85:0e:1b:fc:ea:ac: f5:b8:bc:d2:66:32:be:4d:0f:3d:14:a5:f7:3e:8e:78:40:7f: 7c:9c:4f:73:aa:64:1c:1d:d2:f3:1b:8a:ca:be:37:ef:5b:48: f1:6d:c8:ff:2b:f6:ec:27:59:7f:54:23:1f:f7:e5:35:53:87: 2a:88:c9:ed:83:89:d3:d3:b0:e5:bb:9a:2a:fa:9c:04:f6:87: ba:f9:52:fb:be:9f:b8:bf:3b:9b:a1:11:bc:fe:24:67:52:1d: 21:81:f5:70:c9:5f:52:bb:51:d7:6a:b8:88:04:cf:97:64:c2: c6:bd:7f:c8:a4:bd:64:d6:81:dc:0e:60:b0:fc:aa:8c:d1:30: 5a:79:69:92:0d:32:14:12:1f:18:67:c3:50:6c:2d:0f:26:1c: ab:0e:0e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PirleMAK8h5kSG8U6ZEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGM0ZjgxMGQ3YTIwYTc4M2E0ZmFiMWMwMzQ0NjdiODI1 MDUxYjkwHhcNMjYwMTI1MTMwMDUwWhcNMjYwMTI2MTMwMDUwWjAzMTEwLwYDVQQD Eyg3YjU1ZGEyOGEzYWZkYzg0YmU0ZGIyMzAzODZkMTZjMzMyNjVkNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirYR9PKoWFUVv7ioW6ANZF8SFz9i vDzkiPFd8DGskNr5yc6733phWEl4GRYC+PdlYUrOoanRYznvW7OLa5tYucRh8aAH fOkFlbg2+w7v0ucM7HuixphxuhAbqBZQso2MS0wEv2eQubz5cWU0TXPCiCaG7zsz KWPnOpfXJ9oU8+s2+GGTSCQq2VKFdkAuOXUXfqajkru6POwJrcKx2XHltcM1xIsy Z9oIpS++gMIwoTmisarkhx65cNaDy7Go8/D+jlxcvkAk2Y/1erDCKzD5EDSwYQ9j 0EijIcf1F4hzTuRlbdltgtIJcf/MUD38O6ncqdVSUk4iZl2GcKtLt4I2vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtV2iijr9yEvk2yMDhtFsMyZdbyMB8GA1UdIwQY MBaAFIOMT4ENeiCng6T6scA0RnuCUFG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2Et ODNlNDc1ODBiM2VjLzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2EtODNlNDc1ODBiM2Vj LzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/Ozf+BV 2+C2ggbYQDMYef/SOxbXywfgOiKf9MJtBz8TZK9WHqPsVo94NW1x2TqdWLtfkx21 3Arzq1EOuTOJl1qn34Kf39iiEgrEonO/jUjs2EQuiXF0Nyt9ko9vyW7fYpQO25Ns hQ4b/Oqs9bi80mYyvk0PPRSl9z6OeEB/fJxPc6pkHB3S8xuKyr4371tI8W3I/yv2 7CdZf1QjH/flNVOHKojJ7YOJ09Ow5buaKvqcBPaHuvlS+76fuL87m6ERvP4kZ1Id IYH1cMlfUrtR12q4iATPl2TCxr1/yKS9ZNaB3A5gsPyqjNEwWnlpkg0yFBIfGGfD UGwtDyYcqw4OIw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:37 2026 by rpki-client