This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json) Hash identifier: rTxy2VAx9aBNGJKP2kT553dJzWP92th++TAukTLfu4s= Subject key identifier: 10:5A:A1:57:CB:42:7D:42:5B:05:72:CB:C0:70:ED:FF:4C:EF:56:2A Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Certificate serial: 019BF42B87EB257D15F9ED1E52B914960682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft Manifest number: 038B Signing time: Sun 25 Jan 2026 08:00:51 +0000 Manifest this update: Sun 25 Jan 2026 08:00:51 +0000 Manifest next update: Mon 26 Jan 2026 08:00:51 +0000 Files and hashes: 1: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: RMKstija97eFBqzfqpGHBcuXimhIF1LT6oXuFuyunK0=) 2: qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa (hash: UhoY5Jxel6+XTofYPqKQ5kLj+eG01D/abRAxNfVn9cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:87:eb:25:7d:15:f9:ed:1e:52:b9:14:96:06:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Validity Not Before: Jan 25 08:00:51 2026 GMT Not After : Jan 26 08:00:51 2026 GMT Subject: CN=105aa157cb427d425b0572cbc070edff4cef562a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:c5:b8:1a:7c:4b:a1:99:84:29:67:bc:e9: 15:77:da:26:0b:e0:ff:4b:a0:b2:6f:9a:5d:7a:bd: 7a:e5:c6:40:df:34:e9:d7:a1:6f:4d:5c:74:7b:c3: 76:f2:d9:7c:67:10:d0:4e:3f:0c:87:c7:c4:92:7a: 8b:59:13:8b:b3:ce:ea:e6:7a:e2:53:6c:dd:01:67: e3:b6:a9:92:22:06:81:8c:9a:50:65:9b:df:04:c1: be:4b:71:66:09:d6:26:eb:82:fb:20:1a:f4:85:58: 4e:cb:5b:0d:ea:0a:41:99:bb:c1:4b:b4:31:70:cb: 72:2f:af:ab:9d:4f:92:b8:9a:6f:d4:44:66:c0:77: a6:67:57:30:23:c6:38:9a:f6:5f:2d:4a:fd:6b:63: 01:8a:bd:37:f8:7c:c3:16:09:8e:ef:37:f4:2c:b8: 51:92:a4:7b:1c:e9:52:41:38:f9:3f:1f:81:c9:ff: a9:d4:35:ed:fe:ad:2a:89:96:98:3f:d0:9f:d9:9c: 08:fd:f1:23:a7:39:32:f8:ad:34:07:e4:76:d8:6a: 28:67:19:04:da:4a:bd:37:64:34:6f:18:af:26:20: 69:1e:f8:cf:ba:04:f4:74:aa:52:c7:ff:f7:67:63: ae:62:71:7c:27:bf:54:02:38:2c:a0:e9:e2:22:75: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5A:A1:57:CB:42:7D:42:5B:05:72:CB:C0:70:ED:FF:4C:EF:56:2A X509v3 Authority Key Identifier: keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9d:2e:43:5c:3b:8a:0c:2a:da:de:b3:90:dd:69:9a:0b:1b: 5a:c2:e5:31:ea:c4:63:80:6c:61:2b:fe:c3:49:b9:b9:34:92: 7c:f2:11:63:56:10:a4:64:85:cc:bd:dc:e7:af:e7:c6:f7:35: d0:b7:d2:6b:71:60:b6:f8:66:87:00:6d:6f:77:12:3c:63:3d: 70:e7:ff:80:e1:4a:dd:06:75:fd:a2:f2:bb:a6:6d:16:46:4f: 7a:5b:f8:f0:0a:57:93:8e:ba:4a:80:55:29:86:dd:a6:41:fa: 43:0b:89:2a:49:f2:12:ee:12:d0:d4:a1:49:b3:f8:6a:cc:18: ab:dd:4b:32:83:b4:e7:3a:ac:17:40:0e:27:9e:c9:4d:55:8f: d1:73:6c:3b:87:d6:2c:c5:32:ef:d2:e8:06:d1:da:b9:68:a1: ad:79:f5:2f:64:ee:70:5d:82:19:01:07:d6:66:79:fb:0d:82: a7:09:46:58:f4:55:87:4d:7b:72:e7:30:7f:9b:9a:f5:5e:b1: 90:40:ab:c4:9c:8d:08:f9:9a:47:be:7b:be:12:94:af:b4:5f: 06:f4:10:f6:94:03:84:4a:15:2a:b9:be:3c:7b:0b:3d:89:1a: 49:a1:2a:d1:bf:fa:b0:ab:85:53:b8:00:4c:86:d6:dd:a1:be: 36:0a:18:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K4frJX0V+e0eUrkUlgaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy ZjdmOTUwHhcNMjYwMTI1MDgwMDUxWhcNMjYwMTI2MDgwMDUxWjAzMTEwLwYDVQQD EygxMDVhYTE1N2NiNDI3ZDQyNWIwNTcyY2JjMDcwZWRmZjRjZWY1NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ezFuBp8S6GZhClnvOkVd9omC+D/ S6Cyb5pder165cZA3zTp16FvTVx0e8N28tl8ZxDQTj8Mh8fEknqLWROLs87q5nri U2zdAWfjtqmSIgaBjJpQZZvfBMG+S3FmCdYm64L7IBr0hVhOy1sN6gpBmbvBS7Qx cMtyL6+rnU+SuJpv1ERmwHemZ1cwI8Y4mvZfLUr9a2MBir03+HzDFgmO7zf0LLhR kqR7HOlSQTj5Px+Byf+p1DXt/q0qiZaYP9Cf2ZwI/fEjpzky+K00B+R22GooZxkE 2kq9N2Q0bxivJiBpHvjPugT0dKpSx//3Z2OuYnF8J79UAjgsoOniInU7gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBaoVfLQn1CWwVyy8Bw7f9M71YqMB8GA1UdIwQY MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADp0uQ1w7 igwq2t6zkN1pmgsbWsLlMerEY4BsYSv+w0m5uTSSfPIRY1YQpGSFzL3c56/nxvc1 0LfSa3FgtvhmhwBtb3cSPGM9cOf/gOFK3QZ1/aLyu6ZtFkZPelv48ApXk466SoBV KYbdpkH6QwuJKknyEu4S0NShSbP4aswYq91LMoO05zqsF0AOJ57JTVWP0XNsO4fW LMUy79LoBtHauWihrXn1L2TucF2CGQEH1mZ5+w2CpwlGWPRVh017cucwf5ua9V6x kECrxJyNCPmaR757vhKUr7RfBvQQ9pQDhEoVKrm+PHsLPYkaSaEq0b/6sKuFU7gA TIbW3aG+NgoYgw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:27 2026 by rpki-client