This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json) Hash identifier: oBOAi4XaWz6nAMoUrinJm+M6EmVhnBnTY+BMhatbl10= Subject key identifier: D2:4C:6B:5D:52:1A:01:82:29:52:C7:B1:73:C7:48:60:FC:9D:31:3C Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516 Certificate serial: 019BF8E3E2CE76D2E30B361650B2EA83B453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 06:00:42 +0000 Manifest this update: Mon 26 Jan 2026 06:00:42 +0000 Manifest next update: Tue 27 Jan 2026 06:00:42 +0000 Files and hashes: 1: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (hash: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8=) 2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: mDEQWLaRUGnio9YnfaGqf6TlndCgD3W3S5Wd7Loyn00=) 3: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (hash: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:e2:ce:76:d2:e3:0b:36:16:50:b2:ea:83:b4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516 Validity Not Before: Jan 26 06:00:42 2026 GMT Not After : Jan 27 06:00:42 2026 GMT Subject: CN=d24c6b5d521a01822952c7b173c74860fc9d313c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:a6:72:88:67:da:43:fb:d7:54:74:03:c6: a8:fc:3f:03:63:fa:6a:d0:20:ad:e9:4c:c5:d6:79: 2f:bb:9b:b1:3c:79:be:a8:ff:80:81:9a:be:8b:bd: 9a:5e:74:ef:83:12:36:44:a0:60:82:fa:b0:a2:d4: 9b:c2:9d:2b:18:f1:f6:d4:63:b0:60:65:92:41:c8: b6:b1:b2:84:05:31:07:de:65:1e:8d:63:0c:b6:b7: ee:a0:f6:de:d8:d5:54:53:4f:5f:4a:be:76:04:d7: ff:d7:3b:bf:d1:bf:36:ae:46:40:7c:9b:f9:15:c7: 2c:9a:c9:cd:52:33:82:34:3e:7c:9a:17:47:0a:4e: dc:7a:35:cd:72:79:54:00:c9:04:32:81:24:ed:14: d3:6d:a2:6b:7a:27:98:dd:b5:76:b2:6c:47:c8:50: 0e:20:63:85:3f:c6:6a:2b:87:c7:d3:1b:56:91:30: ed:51:e0:d2:b8:df:da:a7:57:82:4b:e1:dd:e2:93: ee:9d:f4:7d:97:fd:81:99:02:be:7c:77:09:ac:2f: 1b:7a:ba:41:1b:46:2a:89:7b:a6:87:e9:49:b0:d3: e2:ca:fc:c1:ae:11:33:0f:91:02:8a:7b:81:08:7a: 26:44:ab:28:a9:0d:b5:73:c2:60:d1:4a:93:28:b1: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4C:6B:5D:52:1A:01:82:29:52:C7:B1:73:C7:48:60:FC:9D:31:3C X509v3 Authority Key Identifier: keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b1:a4:eb:95:ec:7e:d5:6e:e7:50:f6:81:95:36:dc:93:14: ed:e2:56:f5:e4:7b:5c:2a:00:12:43:a1:22:52:4f:1d:fb:0b: 90:bd:91:e1:ed:7d:90:2d:87:18:84:73:bc:e2:8a:4b:66:7e: f8:19:97:e1:63:74:52:b1:c4:b4:e6:d0:f3:d8:45:3a:2d:b2: cc:eb:62:9d:81:23:62:c7:d4:ae:be:dd:76:f1:e2:3d:8f:85: d6:53:bc:83:2a:d0:d5:6f:03:13:c2:a8:29:6c:77:ab:88:a8: 1b:16:d9:ff:9b:c8:87:91:4a:57:a1:2a:a3:6e:3d:6d:89:71: b6:4d:29:20:fe:1b:65:e8:a9:be:8f:19:d2:8a:33:3d:33:d1: fa:1e:eb:6a:61:76:4e:88:69:89:f8:3a:73:c3:dc:48:9b:fc: 73:ee:f0:a1:d5:ab:fb:59:f5:a6:1e:3b:0a:fc:39:25:7d:0e: 0e:39:6f:c2:db:93:33:9c:e0:f1:e1:51:32:a9:87:ff:7e:36: bf:bc:0c:cb:dd:f7:79:a4:a0:6d:05:3e:09:51:c9:41:f1:10: b9:6b:14:5a:d7:0b:e0:86:cc:7e:5e:df:7c:f4:c3:65:96:53: 86:8c:ee:d1:20:b1:4d:db:38:36:89:d8:8a:ee:c5:ca:c8:1f: f8:22:10:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv44+LOdtLjCzYWULLqg7RTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2 MDA1MTYwHhcNMjYwMTI2MDYwMDQyWhcNMjYwMTI3MDYwMDQyWjAzMTEwLwYDVQQD EyhkMjRjNmI1ZDUyMWEwMTgyMjk1MmM3YjE3M2M3NDg2MGZjOWQzMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogumcohn2kP711R0A8ao/D8DY/pq 0CCt6UzF1nkvu5uxPHm+qP+AgZq+i72aXnTvgxI2RKBggvqwotSbwp0rGPH21GOw YGWSQci2sbKEBTEH3mUejWMMtrfuoPbe2NVUU09fSr52BNf/1zu/0b82rkZAfJv5 FccsmsnNUjOCND58mhdHCk7cejXNcnlUAMkEMoEk7RTTbaJreieY3bV2smxHyFAO IGOFP8ZqK4fH0xtWkTDtUeDSuN/ap1eCS+Hd4pPunfR9l/2BmQK+fHcJrC8berpB G0YqiXumh+lJsNPiyvzBrhEzD5ECinuBCHomRKsoqQ21c8Jg0UqTKLFHmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJMa11SGgGCKVLHsXPHSGD8nTE8MB8GA1UdIwQY MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLGk65Xs ftVu51D2gZU23JMU7eJW9eR7XCoAEkOhIlJPHfsLkL2R4e19kC2HGIRzvOKKS2Z+ +BmX4WN0UrHEtObQ89hFOi2yzOtinYEjYsfUrr7ddvHiPY+F1lO8gyrQ1W8DE8Ko KWx3q4ioGxbZ/5vIh5FKV6Eqo249bYlxtk0pIP4bZeipvo8Z0oozPTPR+h7ramF2 Tohpifg6c8PcSJv8c+7wodWr+1n1ph47Cvw5JX0ODjlvwtuTM5zg8eFRMqmH/342 v7wMy933eaSgbQU+CVHJQfEQuWsUWtcL4IbMfl7ffPTDZZZThozu0SCxTds4NonY iu7Fysgf+CIQfw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:44 2026 by rpki-client