This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json) Hash identifier: 54PJARZj8inM/TyRIPICA+mmtCEXk0CxalRfddIK34c= Subject key identifier: 76:5C:4F:7D:B3:53:9C:11:02:7C:45:59:D2:EB:95:F6:EE:82:45:7A Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019BF3F4F454AF0651082BF95BCEF46E685B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft Manifest number: 1041 Signing time: Sun 25 Jan 2026 07:01:15 +0000 Manifest this update: Sun 25 Jan 2026 07:01:15 +0000 Manifest next update: Mon 26 Jan 2026 07:01:15 +0000 Files and hashes: 1: 8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa (hash: cCjd/UNv//U8Wz2A7iG4uR2Nv+n8ykigX0NiqbbBYBw=) 2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=) 3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: p53MeQ6KE5cq16mjZ4yBVn+1g4Bnjq2vJwN6qCUE55k=) 4: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=) 5: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:f4:54:af:06:51:08:2b:f9:5b:ce:f4:6e:68:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Jan 25 07:01:15 2026 GMT Not After : Jan 26 07:01:15 2026 GMT Subject: CN=765c4f7db3539c11027c4559d2eb95f6ee82457a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:5e:10:55:97:4a:5e:48:80:43:82:8f:72: f2:60:40:f0:cd:a9:80:24:9c:f3:78:dc:bc:de:f1: 30:6d:1d:70:37:ba:1b:df:cd:74:6a:bd:7f:7a:29: 6c:63:d5:78:b0:0c:7d:48:63:5e:d0:fa:a4:27:90: 92:16:cc:43:85:77:ae:63:fd:6c:67:e3:97:63:8b: d6:05:73:3f:3d:03:82:50:08:80:23:c2:14:36:3f: b0:61:0d:93:0d:18:7b:12:a0:86:b4:ac:d9:b9:ad: 1d:4d:7a:61:6b:3b:aa:91:29:a8:7f:7e:95:21:db: 3e:f9:5c:7d:6a:f5:81:91:6d:ed:65:cf:56:f3:2b: a1:f6:c1:d9:69:37:21:e6:50:ea:ef:4c:d3:1c:43: 0c:ba:a1:ac:dc:06:76:49:57:0f:00:d5:7f:2f:6a: c6:1c:df:e3:c8:22:83:8a:d2:99:2f:f1:ea:d9:04: a5:80:80:f6:89:07:d9:17:41:1a:f1:ce:05:a3:65: 4f:c3:a6:50:4e:0c:b0:34:f7:d7:1f:a0:00:bd:7e: 04:1b:db:f6:9c:65:96:75:aa:51:dd:57:35:02:ae: 19:b0:c7:78:69:55:d0:d5:d2:8d:61:27:99:38:06: e3:43:ae:45:7d:1b:92:e4:0b:6b:5c:a1:de:8e:fc: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:4F:7D:B3:53:9C:11:02:7C:45:59:D2:EB:95:F6:EE:82:45:7A X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:88:96:54:bc:c1:21:f4:42:13:ce:77:1b:07:56:c7:7c:5e: 7a:34:2f:3c:d1:1f:8f:5a:c6:7e:07:85:17:3b:14:0a:20:19: 94:ec:ff:dd:be:d3:5c:93:4a:2b:2f:4d:3a:0c:b7:9d:13:38: 45:b7:23:04:c5:c5:f8:78:8e:0f:ab:5a:68:74:87:bf:18:97: 8d:49:4b:3a:14:b4:18:cf:53:cd:75:08:30:db:0d:57:d2:f4: 55:44:6f:a2:34:e1:73:89:a7:26:0f:ba:56:3d:6c:95:e4:89: ea:24:d6:8e:a4:54:94:3e:ae:01:ea:78:73:ea:98:d1:ed:14: a3:97:6c:8a:50:2a:af:bf:77:74:0b:9c:79:f4:39:71:3b:a9: 4d:ba:a5:c7:31:4d:41:8f:dc:11:dd:8c:5a:80:67:26:aa:2c: a5:96:75:ce:60:dc:c9:c5:91:c7:79:7b:b0:70:16:52:0b:e8: 31:49:ed:41:c1:e2:b8:11:7c:05:0e:62:63:52:ea:e6:59:8e: b0:f3:d4:16:77:f0:8f:87:68:1f:6c:d7:4d:5e:9b:fc:97:05: ea:2c:46:e2:19:bf:b8:f9:80:76:96:92:07:de:08:12:01:fc: db:23:b5:75:5e:9b:dc:10:22:0a:c6:4b:bd:9c:ab:34:cb:96: 99:d1:70:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9PRUrwZRCCv5W870bmhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjYwMTI1MDcwMTE1WhcNMjYwMTI2MDcwMTE1WjAzMTEwLwYDVQQD Eyg3NjVjNGY3ZGIzNTM5YzExMDI3YzQ1NTlkMmViOTVmNmVlODI0NTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMZeEFWXSl5IgEOCj3LyYEDwzamA JJzzeNy83vEwbR1wN7ob3810ar1/eilsY9V4sAx9SGNe0PqkJ5CSFsxDhXeuY/1s Z+OXY4vWBXM/PQOCUAiAI8IUNj+wYQ2TDRh7EqCGtKzZua0dTXphazuqkSmof36V Ids++Vx9avWBkW3tZc9W8yuh9sHZaTch5lDq70zTHEMMuqGs3AZ2SVcPANV/L2rG HN/jyCKDitKZL/Hq2QSlgID2iQfZF0Ea8c4Fo2VPw6ZQTgywNPfXH6AAvX4EG9v2 nGWWdapR3Vc1Aq4ZsMd4aVXQ1dKNYSeZOAbjQ65FfRuS5AtrXKHejvzW8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZcT32zU5wRAnxFWdLrlfbugkV6MB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4iWVLzB IfRCE853GwdWx3xeejQvPNEfj1rGfgeFFzsUCiAZlOz/3b7TXJNKKy9NOgy3nRM4 RbcjBMXF+HiOD6taaHSHvxiXjUlLOhS0GM9TzXUIMNsNV9L0VURvojThc4mnJg+6 Vj1sleSJ6iTWjqRUlD6uAep4c+qY0e0Uo5dsilAqr793dAucefQ5cTupTbqlxzFN QY/cEd2MWoBnJqospZZ1zmDcycWRx3l7sHAWUgvoMUntQcHiuBF8BQ5iY1Lq5lmO sPPUFnfwj4doH2zXTV6b/JcF6ixG4hm/uPmAdpaSB94IEgH82yO1dV6b3BAiCsZL vZyrNMuWmdFwgA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:00 2026 by rpki-client