This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json) Hash identifier: QZT3Bz/tZedsKc29tQ3REHvOQ6Diur4qKy6yCapIdnc= Subject key identifier: 78:33:EE:20:E9:4C:05:74:40:9F:DF:EE:C2:0A:C0:4A:C7:54:7E:D8 Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0 Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0 Certificate serial: 019BF2749C015BDEAC2F8DB8EA0BD4134A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft Manifest number: 14C9 Signing time: Sun 25 Jan 2026 00:01:26 +0000 Manifest this update: Sun 25 Jan 2026 00:01:26 +0000 Manifest next update: Mon 26 Jan 2026 00:01:26 +0000 Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: Cgatd7sk9+KDePdYnOpMrqdgbb7MGmBVjBDtYMIpuuM=) 2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=) 3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:9c:01:5b:de:ac:2f:8d:b8:ea:0b:d4:13:4a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0 Validity Not Before: Jan 25 00:01:26 2026 GMT Not After : Jan 26 00:01:26 2026 GMT Subject: CN=7833ee20e94c0574409fdfeec20ac04ac7547ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:9d:2a:61:bc:41:6b:f0:18:67:c4:7c:e0: fe:ac:f5:b3:2d:4c:4e:1b:f0:a7:02:e0:86:08:4d: f0:f9:a3:55:e2:d9:0e:54:17:4d:cd:37:aa:c4:ed: fa:de:e0:d2:9c:4b:d3:cb:0d:c6:ca:23:6c:e6:10: bf:2e:9c:13:60:22:5e:3b:ff:a6:e8:3b:e0:eb:7c: 6d:25:92:ce:de:3c:0b:e6:eb:89:b5:88:6d:59:d4: d9:d2:ed:55:be:6b:88:45:32:9f:f4:87:6a:09:45: 9f:f6:48:e3:89:ba:17:70:cf:5b:c0:c1:6c:8e:6a: 1f:72:fc:79:74:38:21:f2:02:38:2c:6f:cf:1b:de: 0a:ad:08:74:59:db:47:e4:3a:cb:79:17:1f:f8:95: 3d:9d:3a:1a:70:69:33:2c:20:64:36:ce:89:0f:46: cf:a6:98:92:8c:18:6d:a6:93:71:b3:a6:72:52:ec: 86:3b:97:e6:e2:b5:d0:c5:81:83:9c:4d:d6:d3:ef: 9b:52:f6:12:26:d7:71:0e:96:f5:d9:2e:7d:3b:f3: 7b:6f:3a:ad:47:3e:4d:a4:77:95:42:77:ff:07:1d: 26:8e:b2:a9:20:f8:10:6c:7b:33:90:51:1f:c6:75: 29:b8:8f:e9:2e:2b:d0:4d:fd:6d:8e:68:3b:eb:4d: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:33:EE:20:E9:4C:05:74:40:9F:DF:EE:C2:0A:C0:4A:C7:54:7E:D8 X509v3 Authority Key Identifier: keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7f:f7:2b:6e:51:9b:c3:41:96:58:f3:b2:37:9f:74:42:4e: 65:a4:c8:a6:b9:d9:ab:0c:a8:49:dd:10:6a:c7:44:80:af:8f: 55:f9:0f:02:49:79:d5:3f:79:38:98:05:cd:ff:65:c8:8a:7d: 9b:ff:72:e7:3b:ff:6c:ce:dc:8a:e3:a6:d3:97:c2:ae:1e:07: cc:96:90:68:0c:cf:18:dc:54:1f:cf:a2:c0:58:21:b5:dc:ad: 05:06:02:de:88:58:1f:c4:4f:5a:21:8e:35:e0:9c:fa:3d:f9: 5b:e9:dc:4f:7f:9f:1a:7b:e1:ff:a2:d7:bc:68:31:57:82:12: 97:2c:b4:84:6f:a8:83:c5:57:97:b6:48:a2:db:f7:a9:da:5e: fe:f7:11:7a:c2:cc:7b:40:1f:8a:80:88:ec:a2:5e:43:6d:21: d3:36:fb:b9:8e:a9:3f:1a:d9:9a:47:44:bb:6c:51:80:59:52: 38:98:b7:e6:5a:04:4c:4c:16:e1:63:9c:2e:38:1f:0e:04:03: 67:4b:18:5d:d8:c7:a0:e6:3a:c3:83:96:b6:08:ed:cc:4d:2a: a7:3a:2c:b1:ae:ff:b7:fc:ab:27:c9:e8:d7:4e:5e:22:f4:12: d3:34:5f:d7:a9:d2:ca:fd:06:e1:79:fc:db:97:da:94:a6:09: 09:a5:57:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydJwBW96sL4246gvUE0oUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1 N2U0YTAwHhcNMjYwMTI1MDAwMTI2WhcNMjYwMTI2MDAwMTI2WjAzMTEwLwYDVQQD Eyg3ODMzZWUyMGU5NGMwNTc0NDA5ZmRmZWVjMjBhYzA0YWM3NTQ3ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MWdKmG8QWvwGGfEfOD+rPWzLUxO G/CnAuCGCE3w+aNV4tkOVBdNzTeqxO363uDSnEvTyw3GyiNs5hC/LpwTYCJeO/+m 6Dvg63xtJZLO3jwL5uuJtYhtWdTZ0u1VvmuIRTKf9IdqCUWf9kjjiboXcM9bwMFs jmofcvx5dDgh8gI4LG/PG94KrQh0WdtH5DrLeRcf+JU9nToacGkzLCBkNs6JD0bP ppiSjBhtppNxs6ZyUuyGO5fm4rXQxYGDnE3W0++bUvYSJtdxDpb12S59O/N7bzqt Rz5NpHeVQnf/Bx0mjrKpIPgQbHszkFEfxnUpuI/pLivQTf1tjmg7603XgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgz7iDpTAV0QJ/f7sIKwErHVH7YMB8GA1UdIwQY MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0 LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsn/3K25R m8NBlljzsjefdEJOZaTIprnZqwyoSd0QasdEgK+PVfkPAkl51T95OJgFzf9lyIp9 m/9y5zv/bM7ciuOm05fCrh4HzJaQaAzPGNxUH8+iwFghtdytBQYC3ohYH8RPWiGO NeCc+j35W+ncT3+fGnvh/6LXvGgxV4ISlyy0hG+og8VXl7ZIotv3qdpe/vcResLM e0AfioCI7KJeQ20h0zb7uY6pPxrZmkdEu2xRgFlSOJi35loETEwW4WOcLjgfDgQD Z0sYXdjHoOY6w4OWtgjtzE0qpzossa7/t/yrJ8no105eIvQS0zRf16nSyv0G4Xn8 25falKYJCaVXWw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:21 2026 by rpki-client