This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json) Hash identifier: cHEHxHvVxvwXc1/qpZxdtUHkF7LmFXb+TyUCpb2zUtA= Subject key identifier: 31:09:25:A0:FD:1D:84:06:84:CC:57:2A:D8:ED:E8:44:6B:A7:59:19 Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d Certificate serial: 019BF318C1D3970BC75D3EAFE4FF7AE3C9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft Manifest number: 0CF2 Signing time: Sun 25 Jan 2026 03:00:44 +0000 Manifest this update: Sun 25 Jan 2026 03:00:44 +0000 Manifest next update: Mon 26 Jan 2026 03:00:44 +0000 Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=) 2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: l8Iysn12KxojJCPKTQ00HCTf4cKUjoouySNsMwKC5Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:c1:d3:97:0b:c7:5d:3e:af:e4:ff:7a:e3:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bde70af153494354946648acd641163e2af1b1d Validity Not Before: Jan 25 03:00:44 2026 GMT Not After : Jan 26 03:00:44 2026 GMT Subject: CN=310925a0fd1d840684cc572ad8ede8446ba75919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:5f:eb:e2:22:75:cb:fa:dc:9e:51:62:c3: 29:81:71:fc:48:3a:b6:ba:bb:17:a3:3d:e0:c6:64: ef:ac:7e:e7:fe:eb:31:20:ed:a0:e5:3d:65:ba:cb: af:5f:36:14:cf:bf:95:27:70:12:01:48:4c:ec:1d: 1e:55:62:67:4f:9a:c0:af:c2:f3:61:81:aa:f1:5c: 4b:4b:aa:6e:a1:8e:46:ef:0b:77:07:57:7e:15:b3: a8:97:50:73:41:60:2d:75:86:65:23:f0:c4:fc:43: d1:46:9c:14:92:a8:a8:63:a2:2e:35:ff:2a:f1:38: 60:02:a5:2a:f5:11:7a:31:ad:e7:55:f5:e3:b8:b0: cb:22:1e:00:4c:84:5c:a1:7e:57:23:6a:63:85:54: ce:34:4f:f5:e1:3e:13:64:08:44:db:31:cc:14:ec: 45:71:87:82:d5:65:93:41:f1:60:8f:d8:32:d8:1e: 1a:9d:52:e7:6f:ec:3e:b6:9f:45:c7:fb:54:56:18: 06:d2:c7:a2:c6:be:06:f7:39:51:4e:a1:1f:c4:d3: c5:64:1c:7a:1e:be:98:d4:12:29:a8:17:2a:e9:12: ae:c2:62:1f:6a:83:24:53:18:1f:cf:f3:46:eb:fa: f4:2d:d7:bb:2f:47:18:8a:d1:b1:2c:8a:1f:7b:5e: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:25:A0:FD:1D:84:06:84:CC:57:2A:D8:ED:E8:44:6B:A7:59:19 X509v3 Authority Key Identifier: keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ba:61:ff:2a:6f:07:e0:11:38:0d:46:77:56:39:28:af:0a: 95:b1:b8:1e:21:f8:e5:2c:2e:93:9f:c7:35:8b:eb:d4:73:fb: f9:17:cc:9e:04:d6:5a:e5:dd:d5:bc:24:8a:a8:35:7a:05:da: dd:c0:31:0c:2f:01:5f:5e:0d:fa:ef:7e:01:2c:80:e2:3f:80: b7:1a:bf:48:64:c7:0d:5c:e9:b2:eb:7b:25:8b:01:f4:87:5c: 6f:14:b7:f0:6e:01:68:89:68:00:2d:23:cd:e3:8e:99:98:c6: 26:46:31:2b:50:1b:21:22:cb:50:1a:fa:85:6a:3a:d6:d8:27: 36:17:6b:a7:7c:f7:3a:2f:fa:59:59:22:71:41:c5:71:79:36: 38:cb:7e:3f:1d:c5:20:10:d2:b1:26:72:db:67:50:43:d1:36: 40:ce:cd:0b:6d:12:14:4c:8a:37:11:7f:56:32:24:0d:89:fb: d1:b3:40:12:1f:49:d1:b8:90:ed:b5:ce:3a:d6:a9:1b:2a:81: 96:08:d8:8f:9f:68:2b:9f:f8:66:0c:99:2c:9d:34:6c:bc:54: e7:21:a4:e5:27:b4:72:03:4f:43:5e:1c:69:f6:f8:4c:a8:dc: 0e:be:3b:5a:ce:fa:cf:a5:ca:cf:37:d6:2e:1f:1f:e6:e4:cc: d0:eb:cf:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGMHTlwvHXT6v5P9648nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGU3MGFmMTUzNDk0MzU0OTQ2NjQ4YWNkNjQxMTYzZTJh ZjFiMWQwHhcNMjYwMTI1MDMwMDQ0WhcNMjYwMTI2MDMwMDQ0WjAzMTEwLwYDVQQD EygzMTA5MjVhMGZkMWQ4NDA2ODRjYzU3MmFkOGVkZTg0NDZiYTc1OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5f6+Iidcv63J5RYsMpgXH8SDq2 ursXoz3gxmTvrH7n/usxIO2g5T1lusuvXzYUz7+VJ3ASAUhM7B0eVWJnT5rAr8Lz YYGq8VxLS6puoY5G7wt3B1d+FbOol1BzQWAtdYZlI/DE/EPRRpwUkqioY6IuNf8q 8ThgAqUq9RF6Ma3nVfXjuLDLIh4ATIRcoX5XI2pjhVTONE/14T4TZAhE2zHMFOxF cYeC1WWTQfFgj9gy2B4anVLnb+w+tp9Fx/tUVhgG0seixr4G9zlRTqEfxNPFZBx6 Hr6Y1BIpqBcq6RKuwmIfaoMkUxgfz/NG6/r0Lde7L0cYitGxLIofe15U/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEJJaD9HYQGhMxXKtjt6ERrp1kZMB8GA1UdIwQY MBaAFBvecK8VNJQ1SUZkis1kEWPirxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYt ZWNmODIzMDJmNzI2LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYtZWNmODIzMDJmNzI2 LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7ph/ypv B+AROA1Gd1Y5KK8KlbG4HiH45Swuk5/HNYvr1HP7+RfMngTWWuXd1bwkiqg1egXa 3cAxDC8BX14N+u9+ASyA4j+Atxq/SGTHDVzpsut7JYsB9IdcbxS38G4BaIloAC0j zeOOmZjGJkYxK1AbISLLUBr6hWo61tgnNhdrp3z3Oi/6WVkicUHFcXk2OMt+Px3F IBDSsSZy22dQQ9E2QM7NC20SFEyKNxF/VjIkDYn70bNAEh9J0biQ7bXOOtapGyqB lgjYj59oK5/4ZgyZLJ00bLxU5yGk5Se0cgNPQ14cafb4TKjcDr47Ws76z6XKzzfW Lh8f5uTM0OvPuA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:55:01 2026 by rpki-client