This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json) Hash identifier: YHN3tlYLc8m/vC5O+c7lZT7TOJel466SaFEuLGA0AUk= Subject key identifier: 71:C8:A5:B2:A0:69:E1:2B:C0:B2:CC:DA:7A:87:07:8D:84:C1:82:EB Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9 Certificate serial: 019BF3F4D2C84F4635FD83B75F53056D07BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft Manifest number: 08C2 Signing time: Sun 25 Jan 2026 07:01:06 +0000 Manifest this update: Sun 25 Jan 2026 07:01:06 +0000 Manifest next update: Mon 26 Jan 2026 07:01:06 +0000 Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=) 2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: it0zCfYJ6fqbum9wpFrX8IMLcRrTvRxyWDRL5rckeg0=) 3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=) 4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=) 5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:d2:c8:4f:46:35:fd:83:b7:5f:53:05:6d:07:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9 Validity Not Before: Jan 25 07:01:06 2026 GMT Not After : Jan 26 07:01:06 2026 GMT Subject: CN=71c8a5b2a069e12bc0b2ccda7a87078d84c182eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:45:c2:47:c9:75:d6:bd:54:a2:26:b6:61:ce: 11:01:07:d2:53:a1:38:58:77:84:a8:71:37:b2:5c: c9:4a:f3:d4:f9:ec:69:30:6a:c1:5b:d0:22:66:94: 72:16:57:79:2b:0f:7f:81:3b:e0:fa:72:74:13:70: 51:77:cf:2f:0f:9c:01:c9:db:62:46:2e:b4:38:3f: 9f:19:de:2e:a9:dc:b7:93:6c:ab:99:3d:35:af:45: 7c:06:c0:27:2b:39:f7:15:bb:b3:45:0b:21:fd:14: 83:90:6e:02:04:c2:f6:07:d5:d0:72:c0:12:a3:02: 91:20:1d:c0:f8:54:bc:ec:46:d8:1b:74:cc:e9:af: 11:07:c4:6c:a5:69:c7:49:ce:2d:3d:19:fc:f3:9e: d7:ca:c1:cd:6b:05:38:73:b9:46:4a:cd:26:e6:36: b2:80:dd:9b:ef:a8:1f:89:c5:e2:e1:65:80:3c:05: 2d:de:7f:a7:c5:03:85:84:ab:f4:be:0d:d8:09:d2: 3b:5c:10:5b:5e:80:58:66:32:43:59:70:18:7f:e3: 97:dd:da:58:7a:a1:e4:31:ef:21:fc:e0:7c:0b:34: 2b:81:c4:cb:b7:8e:19:23:78:fb:d9:0c:05:38:63: 1b:40:61:7e:15:e4:a4:cd:7c:b7:61:b1:7a:59:20: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C8:A5:B2:A0:69:E1:2B:C0:B2:CC:DA:7A:87:07:8D:84:C1:82:EB X509v3 Authority Key Identifier: keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:45:28:a7:d1:46:47:80:a6:4b:97:35:65:5d:20:1f:be:31: 5b:57:32:1b:e6:35:31:33:8e:16:83:3e:a1:fd:f1:dc:e2:9f: c0:75:6c:81:b3:c8:02:28:25:b1:c9:06:b2:2f:26:d2:aa:3a: 36:14:68:fc:0b:16:e9:18:ad:b8:18:d7:d5:df:51:f9:26:e6: ac:c1:f0:61:61:2c:49:5b:bc:ff:e7:63:b9:7a:ac:c5:34:d7: a3:6d:e2:5f:ab:74:b0:61:ea:41:2f:06:4e:18:c8:0f:1a:08: a3:43:1c:54:9b:a6:8e:ab:7d:8f:8f:e5:4c:96:f5:88:af:91: ff:bb:85:7d:ff:6b:bc:c1:24:33:f5:bd:5f:e4:82:f3:16:0e: 7c:4c:8d:07:c8:9a:91:10:d7:83:a4:97:2a:11:e6:5b:72:c5: 6e:a0:65:09:7b:78:7d:06:de:7f:2b:52:49:08:2f:08:3f:36: 18:40:cb:2e:fd:3a:e8:ff:8e:32:d9:b3:8e:59:ce:4d:c1:55: 81:cd:24:63:a9:76:24:38:3c:43:60:dc:33:ea:01:c7:77:b2: 9e:da:35:e0:93:e3:7c:7c:ea:90:6b:75:44:86:71:af:95:bd: d5:ae:48:3b:12:62:f4:4b:48:e7:fe:50:06:f8:35:b9:d2:84: 7e:8c:20:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9NLIT0Y1/YO3X1MFbQe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2 NGYzZjkwHhcNMjYwMTI1MDcwMTA2WhcNMjYwMTI2MDcwMTA2WjAzMTEwLwYDVQQD Eyg3MWM4YTViMmEwNjllMTJiYzBiMmNjZGE3YTg3MDc4ZDg0YzE4MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UXCR8l11r1Uoia2Yc4RAQfSU6E4 WHeEqHE3slzJSvPU+expMGrBW9AiZpRyFld5Kw9/gTvg+nJ0E3BRd88vD5wBydti Ri60OD+fGd4uqdy3k2yrmT01r0V8BsAnKzn3FbuzRQsh/RSDkG4CBML2B9XQcsAS owKRIB3A+FS87EbYG3TM6a8RB8RspWnHSc4tPRn8857XysHNawU4c7lGSs0m5jay gN2b76gficXi4WWAPAUt3n+nxQOFhKv0vg3YCdI7XBBbXoBYZjJDWXAYf+OX3dpY eqHkMe8h/OB8CzQrgcTLt44ZI3j72QwFOGMbQGF+FeSkzXy3YbF6WSCaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHIpbKgaeErwLLM2nqHB42EwYLrMB8GA1UdIwQY MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt MTY5YzgzNmJkNmIwLzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEUop9FG R4CmS5c1ZV0gH74xW1cyG+Y1MTOOFoM+of3x3OKfwHVsgbPIAiglsckGsi8m0qo6 NhRo/AsW6RituBjX1d9R+SbmrMHwYWEsSVu8/+djuXqsxTTXo23iX6t0sGHqQS8G ThjIDxoIo0McVJumjqt9j4/lTJb1iK+R/7uFff9rvMEkM/W9X+SC8xYOfEyNB8ia kRDXg6SXKhHmW3LFbqBlCXt4fQbefytSSQgvCD82GEDLLv066P+OMtmzjlnOTcFV gc0kY6l2JDg8Q2DcM+oBx3eynto14JPjfHzqkGt1RIZxr5W91a5IOxJi9EtI5/5Q Bvg1udKEfowg2Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:13 2026 by rpki-client