This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json) Hash identifier: tbtrSv31TckjSo4zpgFOsATq1kqCqiZcj497V6ByjWU= Subject key identifier: 93:38:96:9C:33:F7:CC:2C:66:31:1F:55:20:11:5B:A5:05:2E:67:F7 Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84 Certificate serial: 019BF4995851616D921461A0FD6273A6BC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft Manifest number: 0B2B Signing time: Sun 25 Jan 2026 10:00:48 +0000 Manifest this update: Sun 25 Jan 2026 10:00:48 +0000 Manifest next update: Mon 26 Jan 2026 10:00:48 +0000 Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: uXGuhMwqOL/a+Gz4HvP2FtviTkWBV5R4gs8d+RcoMHg=) 2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:58:51:61:6d:92:14:61:a0:fd:62:73:a6:bc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84 Validity Not Before: Jan 25 10:00:48 2026 GMT Not After : Jan 26 10:00:48 2026 GMT Subject: CN=9338969c33f7cc2c66311f5520115ba5052e67f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:9a:0f:a4:94:ff:59:3d:7b:f0:d9:50:9b: a9:2c:44:01:d8:85:a5:1e:3d:9f:18:c2:b8:23:96: 7d:66:67:12:2a:bb:1c:d2:4c:8e:cd:b4:5d:82:e1: 8d:a9:80:27:f6:c4:20:2b:15:81:db:b2:91:9e:01: 72:f1:2c:43:32:14:36:60:2a:f7:d2:67:44:c1:85: 76:3f:25:24:02:c2:01:17:0a:6c:22:76:bf:36:72: 0a:ac:8f:34:bf:03:ca:f8:83:95:1c:85:f8:34:0f: 34:de:3f:14:bb:de:bb:c4:be:38:1a:ac:8f:dd:3d: 92:fd:a5:32:cf:69:60:58:ab:07:38:59:27:0e:f9: 5a:8a:08:5c:bd:d7:1b:0d:c4:9c:0d:2e:65:84:f2: a6:9e:7d:7c:4c:9e:07:90:eb:9b:ba:d1:ff:cc:c7: fd:ba:ea:a8:a0:92:9f:ee:4e:e2:32:8e:bd:9d:33: 4f:1b:54:bc:c8:25:24:ab:3a:8f:db:28:b2:62:35: 3b:30:14:7c:a3:7b:3a:6b:7a:f5:8d:6f:b5:ac:b2: ae:36:c0:8e:35:5d:ae:e9:9e:af:79:85:d7:f8:ca: 90:bd:17:a7:74:6f:cb:fe:b6:94:74:b9:b7:d1:54: 15:a1:18:de:03:ba:33:71:b6:b1:1d:97:43:2a:6e: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:38:96:9C:33:F7:CC:2C:66:31:1F:55:20:11:5B:A5:05:2E:67:F7 X509v3 Authority Key Identifier: keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e1:cf:51:ac:c8:b8:54:ba:d2:2f:1d:0f:3c:ac:47:f9:1c: bf:ca:46:2e:37:20:88:7a:d8:27:d9:40:4d:f6:2b:3d:9b:dd: 49:87:e2:a1:d6:ea:95:76:41:fd:01:44:d6:06:a8:79:95:7b: b1:b2:75:14:64:67:3d:67:65:18:7b:ff:3d:a0:53:49:68:f9: 9c:73:14:40:59:50:1a:02:49:9e:0a:11:7c:a1:ab:3f:39:53: b7:89:b5:e8:6b:ee:b9:47:e8:52:75:82:8c:09:9f:91:12:50: 4a:f7:a3:42:f2:5a:f7:3c:8a:5e:8d:73:d4:c8:52:62:77:85: 2a:6c:b8:4a:6c:8c:5b:71:41:3a:94:9b:4c:98:92:74:6a:25: a1:0b:1c:4a:49:48:1d:d7:f4:91:cd:1f:a3:b8:46:6c:79:0a: d6:1a:78:49:a6:03:11:b4:0f:a8:45:4d:0f:46:4b:c4:7d:9d: 35:51:b8:37:0a:10:19:ca:fc:1f:18:3e:59:cd:b6:61:ed:1e: 9e:25:f9:de:b7:76:e2:27:19:15:bb:4d:4a:c4:e7:91:47:af: 78:01:98:7c:f1:8d:21:63:83:a1:ec:9d:45:93:0d:13:47:fe: 7f:84:16:ec:de:41:93:fa:90:c2:c9:c7:d1:7d:f7:7d:83:dd: 73:50:c5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mVhRYW2SFGGg/WJzprxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2 OTRjODQwHhcNMjYwMTI1MTAwMDQ4WhcNMjYwMTI2MTAwMDQ4WjAzMTEwLwYDVQQD Eyg5MzM4OTY5YzMzZjdjYzJjNjYzMTFmNTUyMDExNWJhNTA1MmU2N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DyaD6SU/1k9e/DZUJupLEQB2IWl Hj2fGMK4I5Z9ZmcSKrsc0kyOzbRdguGNqYAn9sQgKxWB27KRngFy8SxDMhQ2YCr3 0mdEwYV2PyUkAsIBFwpsIna/NnIKrI80vwPK+IOVHIX4NA803j8Uu967xL44GqyP 3T2S/aUyz2lgWKsHOFknDvlaighcvdcbDcScDS5lhPKmnn18TJ4HkOubutH/zMf9 uuqooJKf7k7iMo69nTNPG1S8yCUkqzqP2yiyYjU7MBR8o3s6a3r1jW+1rLKuNsCO NV2u6Z6veYXX+MqQvRendG/L/raUdLm30VQVoRjeA7ozcbaxHZdDKm5/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM4lpwz98wsZjEfVSARW6UFLmf3MB8GA1UdIwQY MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4 LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseHPUazI uFS60i8dDzysR/kcv8pGLjcgiHrYJ9lATfYrPZvdSYfiodbqlXZB/QFE1gaoeZV7 sbJ1FGRnPWdlGHv/PaBTSWj5nHMUQFlQGgJJngoRfKGrPzlTt4m16GvuuUfoUnWC jAmfkRJQSvejQvJa9zyKXo1z1MhSYneFKmy4SmyMW3FBOpSbTJiSdGoloQscSklI Hdf0kc0fo7hGbHkK1hp4SaYDEbQPqEVND0ZLxH2dNVG4NwoQGcr8Hxg+Wc22Ye0e niX53rd24icZFbtNSsTnkUeveAGYfPGNIWODoeydRZMNE0f+f4QW7N5Bk/qQwsnH 0X33fYPdc1DFLA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:17 2026 by rpki-client