This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json) Hash identifier: KpN5nr7Af3dBFfYnPCNlUWgu/j3wHnNM54JuLYTZLII= Subject key identifier: C4:91:F4:13:D8:7B:6C:D7:03:53:84:23:11:60:B0:1A:72:78:82:B9 Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780 Certificate serial: 019BF6881600CF6EC1F15191969A023E53D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft Manifest number: 0B99 Signing time: Sun 25 Jan 2026 19:01:12 +0000 Manifest this update: Sun 25 Jan 2026 19:01:12 +0000 Manifest next update: Mon 26 Jan 2026 19:01:12 +0000 Files and hashes: 1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=) 2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: 8+bpawFFc5LszCjDgoILsQkv7ljn2P8osQt1LftNf2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:16:00:cf:6e:c1:f1:51:91:96:9a:02:3e:53:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780 Validity Not Before: Jan 25 19:01:12 2026 GMT Not After : Jan 26 19:01:12 2026 GMT Subject: CN=c491f413d87b6cd7035384231160b01a727882b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:bf:b9:a8:d9:12:14:b3:36:7f:73:0b:b3: ab:89:4e:b5:e8:8d:ac:5c:92:33:92:20:6b:fa:f1: 32:91:16:44:a8:fd:08:fd:fd:08:88:1d:ab:33:94: de:34:d7:f4:24:0e:8c:4c:a1:b2:85:2a:f1:76:a8: 4d:6e:23:33:b5:05:10:bd:17:ea:8c:91:b6:f6:33: 64:3b:bd:bf:6a:56:ce:46:d2:b9:bc:5f:43:f6:d9: ae:e6:ee:bf:74:26:4d:82:33:6a:0c:56:7b:f2:10: 64:59:95:90:a6:1d:bf:2f:2d:fd:8a:1c:9a:1e:fb: 47:5b:4f:53:da:8f:ad:1b:b1:fd:80:0a:1e:df:5f: 33:15:7b:3f:ce:93:11:f2:ff:74:04:78:30:58:27: 8a:7d:3e:88:a8:ee:f6:53:65:29:2c:08:13:66:54: 59:e5:ad:ae:3c:61:64:13:5d:23:4e:90:81:29:bd: 4a:58:f6:15:24:cc:2e:40:57:0a:92:bd:a7:26:da: a5:9c:23:a7:55:bd:99:fc:01:18:f2:51:ff:7c:6b: 09:c0:36:9e:98:93:25:e8:b1:6c:aa:9a:58:9e:b6: 74:ae:61:db:73:0a:49:83:9b:d1:9f:87:21:ea:ec: 6f:59:6d:8d:bd:4d:92:6c:10:72:82:aa:f8:6a:49: 5c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:F4:13:D8:7B:6C:D7:03:53:84:23:11:60:B0:1A:72:78:82:B9 X509v3 Authority Key Identifier: keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1f:cc:1e:9e:f8:54:24:88:4c:ca:c9:2a:68:82:bb:1a:36: ca:25:c6:a1:77:5e:1c:43:4a:18:20:05:ba:e7:0e:0e:f3:54: ae:32:85:cd:b5:ec:97:3e:36:38:64:04:df:4a:b1:5b:00:4c: 6d:5c:65:20:cd:8d:39:9e:be:f3:6e:9a:c1:2d:97:0d:32:25: 49:ec:f4:ae:8c:4a:b1:ea:8b:2d:73:21:b7:a0:1e:d0:86:c5: b1:9a:34:88:49:42:77:21:10:1d:6b:34:9a:92:ce:41:25:b7: 7c:99:c6:1a:dc:03:06:9a:f9:43:21:cd:a9:49:86:60:b0:37: a4:74:6a:8e:7a:7d:79:13:93:86:17:01:d5:38:26:e9:20:f5: fc:c1:df:e7:fb:f0:20:53:15:a0:40:fe:d4:30:61:6f:f7:bc: 1b:71:24:8e:29:44:a8:ae:a2:8e:40:f9:36:0a:f7:f9:92:37: 51:01:e4:4a:5e:32:59:b7:15:9a:0f:20:a1:30:2c:b5:c0:c3: 86:49:eb:30:e9:0a:be:5b:08:cf:9b:dc:8f:6a:23:91:2b:0b: 1b:04:e2:f0:6f:d4:20:1e:2d:5b:0d:5d:ba:88:fb:4b:6e:f5: 51:09:da:f4:77:75:f3:51:86:04:1c:d3:62:0e:fc:fe:23:88: f0:6c:bb:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBYAz27B8VGRlpoCPlPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0 ZWI3ODAwHhcNMjYwMTI1MTkwMTEyWhcNMjYwMTI2MTkwMTEyWjAzMTEwLwYDVQQD EyhjNDkxZjQxM2Q4N2I2Y2Q3MDM1Mzg0MjMxMTYwYjAxYTcyNzg4MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4q/uajZEhSzNn9zC7OriU616I2s XJIzkiBr+vEykRZEqP0I/f0IiB2rM5TeNNf0JA6MTKGyhSrxdqhNbiMztQUQvRfq jJG29jNkO72/albORtK5vF9D9tmu5u6/dCZNgjNqDFZ78hBkWZWQph2/Ly39ihya HvtHW09T2o+tG7H9gAoe318zFXs/zpMR8v90BHgwWCeKfT6IqO72U2UpLAgTZlRZ 5a2uPGFkE10jTpCBKb1KWPYVJMwuQFcKkr2nJtqlnCOnVb2Z/AEY8lH/fGsJwDae mJMl6LFsqppYnrZ0rmHbcwpJg5vRn4ch6uxvWW2NvU2SbBBygqr4aklcOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSR9BPYe2zXA1OEIxFgsBpyeIK5MB8GA1UdIwQY MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR/MHp74 VCSITMrJKmiCuxo2yiXGoXdeHENKGCAFuucODvNUrjKFzbXslz42OGQE30qxWwBM bVxlIM2NOZ6+826awS2XDTIlSez0roxKseqLLXMht6Ae0IbFsZo0iElCdyEQHWs0 mpLOQSW3fJnGGtwDBpr5QyHNqUmGYLA3pHRqjnp9eROThhcB1Tgm6SD1/MHf5/vw IFMVoED+1DBhb/e8G3EkjilEqK6ijkD5Ngr3+ZI3UQHkSl4yWbcVmg8goTAstcDD hknrMOkKvlsIz5vcj2ojkSsLGwTi8G/UIB4tWw1duoj7S271UQna9Hd181GGBBzT Yg78/iOI8Gy7sw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:48 2026 by rpki-client