This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json) Hash identifier: wrbYnfVNwtYh9oMrMjIkoaUqaYRx10IklFnCFkkEoUE= Subject key identifier: 61:99:E2:C0:AC:0C:B8:09:48:55:6E:CD:65:98:89:A2:59:66:80:38 Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Certificate serial: 019BF50735414FC11A920ED64594B15CD58B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 12:00:48 +0000 Manifest this update: Sun 25 Jan 2026 12:00:48 +0000 Manifest next update: Mon 26 Jan 2026 12:00:48 +0000 Files and hashes: 1: Jl68zYVqXRal67PopoREeqdxbg8.roa (hash: xD50qSlfLrwmHdVWTozHtqTpDA+X5IuU1okzXOkjlqM=) 2: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (hash: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig=) 3: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: ZhD06Ny4VwfmRbe2NH2R03GipkVxLEzF+7n3lwAgSj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:35:41:4f:c1:1a:92:0e:d6:45:94:b1:5c:d5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Validity Not Before: Jan 25 12:00:48 2026 GMT Not After : Jan 26 12:00:48 2026 GMT Subject: CN=6199e2c0ac0cb80948556ecd659889a259668038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:a2:fe:f4:16:68:4e:3a:50:21:15:27:08: 0b:de:97:a6:d9:ef:f2:7e:f1:aa:15:6e:0c:8f:95: 60:e8:ee:a8:ba:26:99:dc:75:7d:6d:8e:05:ad:10: be:a1:cc:76:07:51:f4:47:6e:53:0d:da:2c:a5:07: ae:02:38:7d:21:b6:9c:0b:22:33:5b:1a:c2:53:79: 04:b5:50:bd:df:6a:83:7a:c3:92:60:1a:6e:0f:ef: 75:ea:1f:53:28:f3:37:38:33:d1:80:ef:f7:25:45: f1:50:fe:99:11:7f:f7:f1:fb:a6:19:3a:08:6d:f4: 7f:7c:11:5c:45:ff:7e:30:67:f5:94:e7:47:1d:d6: f7:60:49:6e:af:55:7d:0a:b8:d1:a1:da:4d:3d:79: 8a:f8:25:cc:c9:db:59:c7:28:93:8a:8d:ab:f8:7c: bc:11:e2:bc:41:51:32:8d:13:08:20:23:d2:3c:f4: 32:c4:9e:35:f4:23:7b:98:a5:ad:d9:18:93:86:3d: e9:46:60:4c:8c:5b:8d:d6:99:3f:f1:94:70:bc:db: 51:af:75:ed:b8:4b:e0:cb:0d:7b:4d:2c:8f:f1:75: c7:e2:16:a6:65:2c:88:e8:fc:15:ce:4a:34:7b:31: e8:0d:e4:43:35:82:ce:44:9b:f0:4e:66:5c:a2:95: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:E2:C0:AC:0C:B8:09:48:55:6E:CD:65:98:89:A2:59:66:80:38 X509v3 Authority Key Identifier: keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:94:50:55:9e:d2:3f:53:f2:5d:44:95:0b:fc:f6:18:9e:2b: ef:da:0e:f1:ed:ec:6f:58:8b:6f:21:33:e8:16:77:d1:a9:a7: b4:82:f6:13:09:f2:73:47:06:4e:67:6d:ae:cc:04:cb:57:da: 7b:e7:62:1d:2a:33:67:b0:56:e7:89:4f:eb:e2:f5:37:19:42: fa:f4:d7:de:37:aa:9e:92:63:1f:4e:e0:b4:f4:91:6f:9a:7b: e9:ee:8b:03:5d:27:b1:1a:12:65:0b:46:a8:bd:6c:9a:25:c2: be:a9:99:07:2e:b8:8d:c6:e9:e1:e7:e8:d3:7f:2c:66:45:a3: 12:70:eb:94:42:f1:df:ab:11:a0:37:8d:5e:3b:77:ef:4d:bd: 80:44:9f:33:4e:fe:ea:ab:97:68:80:a8:2f:47:76:af:e3:b4: 65:f7:5a:e6:81:10:64:ce:00:a7:a6:df:51:5f:0b:09:cd:86: a1:74:6a:5b:cc:52:5f:6d:2b:79:5a:74:97:7f:ec:78:e6:9e: 55:63:55:51:12:62:79:41:ed:8a:85:19:97:ea:96:2e:62:ae: 4f:27:f6:9a:54:23:51:56:2f:02:19:e0:70:b6:b0:43:ff:57: fb:75:c4:ea:7d:99:7b:34:63:b5:cb:e8:75:f5:09:13:81:19: 5a:7d:8a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzVBT8Eakg7WRZSxXNWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx MWUyMmEwHhcNMjYwMTI1MTIwMDQ4WhcNMjYwMTI2MTIwMDQ4WjAzMTEwLwYDVQQD Eyg2MTk5ZTJjMGFjMGNiODA5NDg1NTZlY2Q2NTk4ODlhMjU5NjY4MDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKCi/vQWaE46UCEVJwgL3pem2e/y fvGqFW4Mj5Vg6O6ouiaZ3HV9bY4FrRC+ocx2B1H0R25TDdospQeuAjh9IbacCyIz WxrCU3kEtVC932qDesOSYBpuD+916h9TKPM3ODPRgO/3JUXxUP6ZEX/38fumGToI bfR/fBFcRf9+MGf1lOdHHdb3YElur1V9CrjRodpNPXmK+CXMydtZxyiTio2r+Hy8 EeK8QVEyjRMIICPSPPQyxJ419CN7mKWt2RiThj3pRmBMjFuN1pk/8ZRwvNtRr3Xt uEvgyw17TSyP8XXH4hamZSyI6PwVzko0ezHoDeRDNYLORJvwTmZcopX9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGZ4sCsDLgJSFVuzWWYiaJZZoA4MB8GA1UdIwQY MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0 LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJRQVZ7S P1PyXUSVC/z2GJ4r79oO8e3sb1iLbyEz6BZ30amntIL2Ewnyc0cGTmdtrswEy1fa e+diHSozZ7BW54lP6+L1NxlC+vTX3jeqnpJjH07gtPSRb5p76e6LA10nsRoSZQtG qL1smiXCvqmZBy64jcbp4efo038sZkWjEnDrlELx36sRoDeNXjt37029gESfM07+ 6quXaICoL0d2r+O0Zfda5oEQZM4Ap6bfUV8LCc2GoXRqW8xSX20reVp0l3/seOae VWNVURJieUHtioUZl+qWLmKuTyf2mlQjUVYvAhngcLawQ/9X+3XE6n2ZezRjtcvo dfUJE4EZWn2KZg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:07 2026 by rpki-client