This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json) Hash identifier: DfPvUgOluc7ndnj8nZA5i8WrjWyYEbbUAx//EupfCCY= Subject key identifier: A7:28:D4:40:DA:AA:09:1C:03:0A:F4:1C:10:20:85:8C:33:B8:D0:BD Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22 Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722 Certificate serial: 019BF619A5621A268148570AF74FAD077F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft Manifest number: 173F Signing time: Sun 25 Jan 2026 17:00:34 +0000 Manifest this update: Sun 25 Jan 2026 17:00:34 +0000 Manifest next update: Mon 26 Jan 2026 17:00:34 +0000 Files and hashes: 1: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: M1whjDgGWXwUVyFJ+CPCgfc1ebmBbJfwJOxqog6FX8k=) 2: _Q4Z6jbF8NYTsaR27vIk58vSUlI.roa (hash: 7qWyZfAO4daLpycwI/J3xaTZkHMp77aXgml30PjFR4w=) 3: f3kPFs4waiX6locgjDdwFUiP7tk.roa (hash: 4sDGfuSEROWxAzi+C1qp5I+6lZx1ktDF8owXbaFpZn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:a5:62:1a:26:81:48:57:0a:f7:4f:ad:07:7f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722 Validity Not Before: Jan 25 17:00:34 2026 GMT Not After : Jan 26 17:00:34 2026 GMT Subject: CN=a728d440daaa091c030af41c1020858c33b8d0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:2f:f8:ca:9c:e3:a8:bf:8a:c9:ba:88:85: e2:67:b1:65:e4:a6:9c:72:82:10:c5:00:e5:23:62: e9:7a:cd:c0:e0:66:6d:12:e2:62:26:28:e8:80:83: 09:4d:d8:8c:bf:fd:4a:1d:7e:3f:d2:c1:4b:29:b6: 5e:d0:c8:37:19:0f:9f:9f:64:48:51:6c:9e:2a:8b: dd:23:08:bd:66:02:e6:bd:37:9d:23:89:bd:04:34: 7b:ba:0b:4f:37:e4:09:a2:a3:24:17:89:55:6c:f0: f4:f4:d8:e8:57:20:93:b5:be:04:b3:31:1f:63:2e: 4c:d8:0f:06:48:f7:af:88:f6:da:50:7d:04:aa:67: fa:b3:59:6c:ad:a5:10:65:94:66:49:3c:8f:b6:b5: ea:d4:f6:4b:39:ce:a7:81:f1:e6:5f:0b:76:2f:bb: 36:13:15:49:3e:dc:3e:88:a0:33:10:a7:40:45:ca: 0d:e7:d7:d3:24:0c:34:e0:e1:b7:a3:77:c5:c9:78: fc:80:6c:e1:55:27:5a:00:f5:f0:60:e6:b0:d6:05: db:46:e6:fc:5a:c1:ef:13:e0:1e:03:81:8a:f1:79: 08:4c:10:59:aa:f3:5f:53:b8:3c:b3:27:88:88:bf: 1f:4a:fc:ca:90:09:85:78:57:86:ff:71:35:e1:37: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:28:D4:40:DA:AA:09:1C:03:0A:F4:1C:10:20:85:8C:33:B8:D0:BD X509v3 Authority Key Identifier: keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b6:39:08:96:5c:0e:58:25:8c:cd:fd:17:c4:3b:2e:69:52: 96:cf:03:2e:c8:d2:2c:e9:2c:cf:c2:39:8b:64:9c:71:b7:05: 7c:34:38:ea:4a:c2:64:7d:81:3b:8b:55:b5:f0:8e:b2:92:79: 5d:e5:73:7b:b9:08:0d:d8:bb:6c:5a:55:e0:7f:29:eb:2c:85: 50:f8:3f:5e:91:ee:e4:5d:15:6b:43:96:93:8a:3e:88:0d:9b: f2:67:90:14:4f:d0:53:45:a9:fd:ac:fa:af:e0:b6:5f:a9:95: 2a:62:44:d7:97:a4:7f:e6:02:c1:51:1d:4b:19:29:b2:9e:63: 5f:8c:87:bf:ce:96:8e:a7:58:c9:d9:08:94:90:3a:4d:49:e4: 03:41:51:53:6a:86:50:b5:9e:92:8e:5f:a0:c9:68:e2:36:b3: 1d:13:fe:99:0a:97:b7:78:6b:6d:9a:b2:13:7b:4a:97:4e:1c: b0:52:59:a8:b5:df:20:c0:e8:80:66:15:cb:0e:90:2e:e9:a3: 73:b6:c8:60:cc:f2:bb:c9:c0:f1:a0:c3:bf:f2:64:fc:f1:22: 6d:92:8c:0d:29:da:ce:38:bd:63:7d:68:c8:54:db:12:89:f9: ef:9a:21:43:b5:5d:d3:bc:43:64:30:20:71:7c:73:c2:94:0b: 45:c0:ac:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GaViGiaBSFcK90+tB3+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxNjc4ODgzOTdmZjljYWE4NDRmNTU0ZmY4MzdjZmRi Zjk3MjIwHhcNMjYwMTI1MTcwMDM0WhcNMjYwMTI2MTcwMDM0WjAzMTEwLwYDVQQD EyhhNzI4ZDQ0MGRhYWEwOTFjMDMwYWY0MWMxMDIwODU4YzMzYjhkMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhYv+Mqc46i/ism6iIXiZ7Fl5Kac coIQxQDlI2Lpes3A4GZtEuJiJijogIMJTdiMv/1KHX4/0sFLKbZe0Mg3GQ+fn2RI UWyeKovdIwi9ZgLmvTedI4m9BDR7ugtPN+QJoqMkF4lVbPD09NjoVyCTtb4EszEf Yy5M2A8GSPeviPbaUH0Eqmf6s1lsraUQZZRmSTyPtrXq1PZLOc6ngfHmXwt2L7s2 ExVJPtw+iKAzEKdARcoN59fTJAw04OG3o3fFyXj8gGzhVSdaAPXwYOaw1gXbRub8 WsHvE+AeA4GK8XkITBBZqvNfU7g8syeIiL8fSvzKkAmFeFeG/3E14TftjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKco1EDaqgkcAwr0HBAghYwzuNC9MB8GA1UdIwQY MBaAFBulFniIOX/5yqhE9VT/g3z9v5ciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYt NTNmNDFkZmU0MDdmLzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYtNTNmNDFkZmU0MDdm LzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7Y5CJZc DlgljM39F8Q7LmlSls8DLsjSLOksz8I5i2SccbcFfDQ46krCZH2BO4tVtfCOspJ5 XeVze7kIDdi7bFpV4H8p6yyFUPg/XpHu5F0Va0OWk4o+iA2b8meQFE/QU0Wp/az6 r+C2X6mVKmJE15ekf+YCwVEdSxkpsp5jX4yHv86WjqdYydkIlJA6TUnkA0FRU2qG ULWeko5foMlo4jazHRP+mQqXt3hrbZqyE3tKl04csFJZqLXfIMDogGYVyw6QLumj c7bIYMzyu8nA8aDDv/Jk/PEibZKMDSnazji9Y31oyFTbEon575ohQ7Vd07xDZDAg cXxzwpQLRcCs8w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:03 2026 by rpki-client