This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json) Hash identifier: sDI8FIwYXeSo+IKu+sbyipuVae+pde9zHK05a3XoFns= Subject key identifier: 25:70:BC:97:11:0D:EB:B9:DF:B5:09:30:DB:49:2B:61:97:3C:BF:E9 Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Certificate serial: 019BF53EC52F2D3CD59B6546F4FDB4000EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 13:01:30 +0000 Manifest this update: Sun 25 Jan 2026 13:01:30 +0000 Manifest next update: Mon 26 Jan 2026 13:01:30 +0000 Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=) 2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: xxvXZd5RE15/fXFMUmKd5HFoBYNkdbzIw2OLYluFC5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:c5:2f:2d:3c:d5:9b:65:46:f4:fd:b4:00:0e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Validity Not Before: Jan 25 13:01:30 2026 GMT Not After : Jan 26 13:01:30 2026 GMT Subject: CN=2570bc97110debb9dfb50930db492b61973cbfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:26:2b:9f:73:06:37:59:88:85:94:87:66: 31:dd:79:82:6a:b6:f5:4c:9e:fc:a2:20:37:11:07: 05:57:d3:58:ee:c0:d2:03:fe:ee:e7:7e:d2:ea:12: a8:0b:ed:24:d5:f4:76:5a:65:f9:7d:ab:4b:a1:3e: f4:ba:4c:0c:80:92:f2:75:30:28:f1:af:95:89:d8: e1:96:5d:27:e7:c7:d0:37:36:9b:14:d9:a4:bc:2c: 06:bd:e0:1e:35:88:75:e1:1f:78:e7:48:22:f5:cd: 59:d1:f8:bc:1a:b4:27:f6:4e:a4:a2:cd:8b:88:f9: 1f:cd:30:97:58:43:b9:43:31:2b:bf:29:dc:9a:b0: 70:97:47:2b:bd:a4:d6:d0:5a:3b:49:a4:8c:75:a1: 4e:6b:48:b2:ea:e8:ca:71:f0:c0:86:9d:c4:bb:05: c9:22:b8:f3:c1:11:7d:4f:16:64:6d:b0:1d:32:db: 3d:ff:9c:ab:28:75:57:c3:27:ed:d8:96:aa:ec:64: d9:f5:d6:d3:d6:19:da:a1:f3:28:27:99:17:41:c9: 54:d4:f2:5d:ff:1f:12:f1:d9:5b:a8:86:96:c5:d8: 4d:15:d8:e9:88:75:7f:97:d3:b7:b3:c8:e6:d1:4d: c0:c0:59:9c:98:ae:92:70:3c:b0:91:86:97:85:2f: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:70:BC:97:11:0D:EB:B9:DF:B5:09:30:DB:49:2B:61:97:3C:BF:E9 X509v3 Authority Key Identifier: keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:92:5a:e7:d6:fa:2b:57:60:08:0f:37:b3:9d:02:0b:ad: c1:df:c0:f6:24:31:ab:d6:90:1a:e8:47:4c:02:0c:8b:fe:b4: a3:0a:e6:7e:73:0f:16:a4:1f:02:83:89:97:99:94:70:77:58: df:3f:93:86:7f:21:65:2b:01:75:d2:b4:12:3d:f8:da:15:a1: 03:2c:3d:4c:ae:12:c4:85:58:2d:30:54:28:af:4d:3a:6c:ee: 56:92:61:a4:b1:64:96:d1:8f:39:23:4a:16:84:bc:27:30:47: 4b:75:81:03:62:93:bf:6b:a3:1c:d4:9a:f7:38:ff:56:2e:46: ae:11:45:9f:64:3b:56:5b:c6:ba:30:00:c4:77:4b:08:3a:a5: f1:35:3c:65:23:e0:f4:1f:98:cc:55:68:79:a3:9a:e2:36:fd: 9b:d8:56:cf:7e:9f:e1:44:fb:4e:00:41:c1:10:86:77:94:ca: 18:b0:26:8d:ea:3d:c4:1e:c6:52:ca:2d:12:cf:d0:2e:35:25: 73:5a:f1:9d:e2:ff:70:db:56:1e:11:fe:22:e6:1f:7f:b3:f0: 98:f3:d1:05:21:5f:8d:d6:b7:4a:8c:99:12:f0:51:fc:97:11: 3b:15:06:ff:b5:1a:e8:71:6b:44:f6:3a:92:b6:c9:06:76:25: 0d:2a:92:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PsUvLTzVm2VG9P20AA7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk OTNiMGIwHhcNMjYwMTI1MTMwMTMwWhcNMjYwMTI2MTMwMTMwWjAzMTEwLwYDVQQD EygyNTcwYmM5NzExMGRlYmI5ZGZiNTA5MzBkYjQ5MmI2MTk3M2NiZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zwmK59zBjdZiIWUh2Yx3XmCarb1 TJ78oiA3EQcFV9NY7sDSA/7u537S6hKoC+0k1fR2WmX5fatLoT70ukwMgJLydTAo 8a+Vidjhll0n58fQNzabFNmkvCwGveAeNYh14R9450gi9c1Z0fi8GrQn9k6kos2L iPkfzTCXWEO5QzErvyncmrBwl0crvaTW0Fo7SaSMdaFOa0iy6ujKcfDAhp3EuwXJ IrjzwRF9TxZkbbAdMts9/5yrKHVXwyft2Jaq7GTZ9dbT1hnaofMoJ5kXQclU1PJd /x8S8dlbqIaWxdhNFdjpiHV/l9O3s8jm0U3AwFmcmK6ScDywkYaXhS8QSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVwvJcRDeu537UJMNtJK2GXPL/pMB8GA1UdIwQY MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5 LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPCSWufW +itXYAgPN7OdAgutwd/A9iQxq9aQGuhHTAIMi/60owrmfnMPFqQfAoOJl5mUcHdY 3z+Thn8hZSsBddK0Ej342hWhAyw9TK4SxIVYLTBUKK9NOmzuVpJhpLFkltGPOSNK FoS8JzBHS3WBA2KTv2ujHNSa9zj/Vi5GrhFFn2Q7VlvGujAAxHdLCDql8TU8ZSPg 9B+YzFVoeaOa4jb9m9hWz36f4UT7TgBBwRCGd5TKGLAmjeo9xB7GUsotEs/QLjUl c1rxneL/cNtWHhH+IuYff7PwmPPRBSFfjda3SoyZEvBR/JcROxUG/7Ua6HFrRPY6 krbJBnYlDSqSCg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:10 2026 by rpki-client