This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json) Hash identifier: xeewCp5W8ZtnSz6IAROsM/6AJf2A2Tfz0xAK3mhLLsc= Subject key identifier: 37:C3:8B:92:EC:2E:1B:D1:A3:18:5A:14:A6:09:34:11:B5:26:5D:31 Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Certificate serial: 019BF91C102857D42859D8EA0CD7EEBFDF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:02:04 +0000 Manifest this update: Mon 26 Jan 2026 07:02:04 +0000 Manifest next update: Tue 27 Jan 2026 07:02:04 +0000 Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: jCRbNNJnOZIGvxF8dt/gdr509EdVXZPFIn7E/QUiUrA=) 2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1c:10:28:57:d4:28:59:d8:ea:0c:d7:ee:bf:df:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Validity Not Before: Jan 26 07:02:04 2026 GMT Not After : Jan 27 07:02:04 2026 GMT Subject: CN=37c38b92ec2e1bd1a3185a14a6093411b5265d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:07:50:3c:45:a1:6a:82:7d:1c:85:45:5f: 07:12:11:dc:84:64:dd:ca:e6:f1:ac:be:ab:a5:a0: 27:e8:69:40:63:ce:16:b6:d5:40:d1:52:5b:1e:d0: 37:8b:68:ee:f3:85:5e:47:86:ea:6a:d1:f2:b3:29: 08:b2:8f:f5:3f:1b:71:6c:79:78:47:0e:cb:a4:38: 78:a9:6d:d5:90:28:91:ce:11:ab:b4:45:61:66:51: 02:a1:f9:11:ac:ca:75:5b:f7:50:39:e0:8d:43:78: 8b:cb:28:9a:62:5d:83:b6:66:e1:a3:1f:c9:ba:61: 5f:bb:6c:e4:29:48:6b:2a:d1:38:67:b5:65:ce:a0: 14:c6:d8:45:72:74:6f:8f:46:95:d8:7a:5e:07:79: 79:e3:d1:d9:01:b4:59:30:a0:c9:7c:74:3e:72:6b: 27:5e:22:8c:81:92:14:ab:56:a9:42:36:f1:e5:da: 25:e3:44:1e:6f:47:ee:35:f7:df:8b:a2:4b:32:1e: d1:77:5b:03:dd:2e:41:fa:d0:70:4b:10:92:df:a3: 76:7f:2f:5f:bf:c2:f0:e9:85:e4:58:7c:f1:20:51: 9c:2a:58:24:1d:ee:07:b5:c7:fd:ad:1b:a0:a0:44: 20:03:e5:0a:6f:28:ec:de:5e:a3:10:50:4f:30:b0: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:8B:92:EC:2E:1B:D1:A3:18:5A:14:A6:09:34:11:B5:26:5D:31 X509v3 Authority Key Identifier: keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:f5:4a:bf:57:e7:43:75:da:97:72:e3:d1:82:5e:a3:42:c4: 55:00:4b:ce:d9:ac:53:0f:3d:9e:88:e1:4f:d4:11:d2:62:a9: 2e:bd:75:10:9e:a1:04:49:2a:b1:e6:33:a3:e9:1c:4e:2d:8c: 8e:de:0c:99:e9:22:03:dd:06:62:18:a2:5c:aa:27:f6:5e:75: 48:04:39:ac:6c:24:09:88:04:7e:8b:bb:20:23:2b:9a:c8:ab: 6c:20:4b:35:77:de:d7:61:f5:46:1a:f2:de:8e:59:1a:1a:e7: 2a:e6:ae:f3:fd:a7:3a:b7:e1:d4:fb:f3:c8:40:49:93:c3:89: d7:bd:7d:b1:5c:30:64:42:2d:4c:5f:9a:bc:f5:c9:ff:56:a9: b2:8e:19:d0:a6:cf:f3:e3:bc:b7:ee:e6:69:f9:6a:0c:8a:0e: dc:bb:45:43:c8:57:10:34:85:11:ff:b7:10:36:11:2c:13:e9: 6a:a2:c3:c4:1f:b6:35:4d:e5:b4:59:b1:30:e3:3c:73:d7:a1: 77:87:64:21:0b:d1:43:6f:ff:74:12:88:5d:c6:f6:75:12:01: a1:f6:e4:d1:27:e7:5e:ac:d5:ef:d4:2f:da:1f:e2:02:85:0e: 3f:56:ee:b7:06:9b:e0:a6:0a:38:89:43:fb:4e:22:4e:47:6e: 21:57:27:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5HBAoV9QoWdjqDNfuv98FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl YTU3MjAwHhcNMjYwMTI2MDcwMjA0WhcNMjYwMTI3MDcwMjA0WjAzMTEwLwYDVQQD EygzN2MzOGI5MmVjMmUxYmQxYTMxODVhMTRhNjA5MzQxMWI1MjY1ZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSIHUDxFoWqCfRyFRV8HEhHchGTd yubxrL6rpaAn6GlAY84WttVA0VJbHtA3i2ju84VeR4bqatHysykIso/1PxtxbHl4 Rw7LpDh4qW3VkCiRzhGrtEVhZlECofkRrMp1W/dQOeCNQ3iLyyiaYl2Dtmbhox/J umFfu2zkKUhrKtE4Z7VlzqAUxthFcnRvj0aV2HpeB3l549HZAbRZMKDJfHQ+cmsn XiKMgZIUq1apQjbx5dol40Qeb0fuNfffi6JLMh7Rd1sD3S5B+tBwSxCS36N2fy9f v8Lw6YXkWHzxIFGcKlgkHe4Htcf9rRugoEQgA+UKbyjs3l6jEFBPMLDZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfDi5LsLhvRoxhaFKYJNBG1Jl0xMB8GA1UdIwQY MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0PVKv1fn Q3Xal3Lj0YJeo0LEVQBLztmsUw89nojhT9QR0mKpLr11EJ6hBEkqseYzo+kcTi2M jt4MmekiA90GYhiiXKon9l51SAQ5rGwkCYgEfou7ICMrmsirbCBLNXfe12H1Rhry 3o5ZGhrnKuau8/2nOrfh1PvzyEBJk8OJ1719sVwwZEItTF+avPXJ/1apso4Z0KbP 8+O8t+7maflqDIoO3LtFQ8hXEDSFEf+3EDYRLBPpaqLDxB+2NU3ltFmxMOM8c9eh d4dkIQvRQ2//dBKIXcb2dRIBofbk0SfnXqzV79Qv2h/iAoUOP1butwab4KYKOIlD +04iTkduIVcnBA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:09:09 2026 by rpki-client