This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json) Hash identifier: AyS305Fl8jOer1F8X7yTzs0R/bFU5mX/0PgKRJBJ+88= Subject key identifier: DF:E1:9A:64:3A:4A:7E:6D:0B:B5:34:58:5E:6E:3A:DB:C9:27:5D:1A Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595 Certificate serial: 019BF507AC5E5807CAB55FEE1B23BAE21802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft Manifest number: 140C Signing time: Sun 25 Jan 2026 12:01:19 +0000 Manifest this update: Sun 25 Jan 2026 12:01:19 +0000 Manifest next update: Mon 26 Jan 2026 12:01:19 +0000 Files and hashes: 1: 32XVVyKt3ZJBnx5kqWWCO02zJAA.roa (hash: 3DDnAdyDbtTrETxx+GoP22rNSd7sG+VR15SajuKvXIs=) 2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: 4IhwxGJww7VEs/ImWPVRbNTyvW9UsxffBHfj+bKb/W0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:ac:5e:58:07:ca:b5:5f:ee:1b:23:ba:e2:18:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595 Validity Not Before: Jan 25 12:01:19 2026 GMT Not After : Jan 26 12:01:19 2026 GMT Subject: CN=dfe19a643a4a7e6d0bb534585e6e3adbc9275d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:8a:65:2b:91:94:0b:93:a0:46:30:a7:9d: 9a:d4:32:e1:a1:8c:bc:6a:5f:54:66:02:48:4b:01: 71:dc:80:17:ea:3f:39:19:89:85:a9:04:84:2e:d2: 38:40:07:3b:b0:cc:8f:da:62:55:45:e7:af:d0:0b: 0a:44:b9:47:7a:f2:5f:74:02:73:61:ac:39:ac:b7: 52:47:ad:4a:50:1e:82:21:9a:83:59:46:6c:a9:9c: 4c:3d:f3:3d:e2:86:2a:8a:8e:75:88:e7:60:02:ef: 87:0f:51:d4:53:c9:9a:a7:0a:fd:c8:54:d8:a3:bd: c3:70:74:bd:06:e6:51:01:23:73:cb:c5:cd:ab:5c: 1d:99:5a:8b:0e:d0:b4:8b:cc:68:a7:1b:5d:4c:0e: be:56:3e:a6:37:ba:05:67:44:3e:62:5e:00:9e:4b: b7:c9:06:53:5c:57:6a:10:87:ae:fb:e4:97:61:cf: ad:c6:0d:48:39:d8:65:51:65:be:06:4b:ee:11:8d: ae:aa:bb:de:21:40:fe:88:bb:ff:71:1c:ed:92:1c: 0f:d9:96:11:a8:fe:5f:39:97:02:4d:12:60:87:62: ac:f5:a4:47:11:e0:c2:f0:4f:83:d7:fd:d5:da:e1: 35:e2:e0:8e:3a:20:e1:c0:fa:be:34:be:6b:aa:47: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E1:9A:64:3A:4A:7E:6D:0B:B5:34:58:5E:6E:3A:DB:C9:27:5D:1A X509v3 Authority Key Identifier: keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:92:df:c2:f4:5c:c5:7e:3f:63:37:df:39:07:e3:6d:19:cc: 27:b1:7c:97:9b:88:59:51:e9:aa:13:41:65:fd:53:ea:2a:c2: 81:4e:b4:a7:52:8e:51:79:93:93:5e:18:00:ce:e8:18:01:8b: a3:61:1e:50:3b:dc:38:6e:e3:9c:70:ed:fe:49:bc:f8:4e:a9: 4f:25:09:8b:34:f6:b5:d8:e3:44:ef:ac:f2:f3:3e:7f:bd:58: b2:aa:bf:85:3f:4b:80:3e:a4:13:31:2a:be:03:88:bb:7f:10: c4:30:3f:94:fd:57:cd:32:3e:42:50:13:ac:e1:4c:a8:b3:f3: 68:56:c0:8c:f9:3b:23:fe:ee:8a:02:4b:dd:83:b7:05:e3:8f: 9d:25:18:03:1b:f0:27:bf:00:b6:9f:50:4d:0c:fa:fc:78:7e: 2d:80:bb:cf:d8:d2:b2:8f:4b:f2:b8:27:28:42:e2:05:7b:fc: 7a:7d:84:9d:2c:15:b1:f5:6d:e3:8e:4e:41:0d:62:de:91:49: 9f:5b:01:e8:94:c2:43:bb:e3:8f:16:ac:a0:b3:61:82:87:37: df:4f:58:6c:a7:b4:58:6c:06:8a:9e:32:c9:b4:d5:a5:cb:0f: 96:ba:49:9f:06:fb:15:d2:a1:ad:78:dd:75:b8:50:ad:1a:64: 79:c6:56:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6xeWAfKtV/uGyO64hgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi MzM1OTUwHhcNMjYwMTI1MTIwMTE5WhcNMjYwMTI2MTIwMTE5WjAzMTEwLwYDVQQD EyhkZmUxOWE2NDNhNGE3ZTZkMGJiNTM0NTg1ZTZlM2FkYmM5Mjc1ZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQOKZSuRlAuToEYwp52a1DLhoYy8 al9UZgJISwFx3IAX6j85GYmFqQSELtI4QAc7sMyP2mJVReev0AsKRLlHevJfdAJz Yaw5rLdSR61KUB6CIZqDWUZsqZxMPfM94oYqio51iOdgAu+HD1HUU8mapwr9yFTY o73DcHS9BuZRASNzy8XNq1wdmVqLDtC0i8xopxtdTA6+Vj6mN7oFZ0Q+Yl4Anku3 yQZTXFdqEIeu++SXYc+txg1IOdhlUWW+BkvuEY2uqrveIUD+iLv/cRztkhwP2ZYR qP5fOZcCTRJgh2Ks9aRHEeDC8E+D1/3V2uE14uCOOiDhwPq+NL5rqkf3eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/hmmQ6Sn5tC7U0WF5uOtvJJ10aMB8GA1UdIwQY MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5 LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5LfwvRc xX4/YzffOQfjbRnMJ7F8l5uIWVHpqhNBZf1T6irCgU60p1KOUXmTk14YAM7oGAGL o2EeUDvcOG7jnHDt/km8+E6pTyUJizT2tdjjRO+s8vM+f71Ysqq/hT9LgD6kEzEq vgOIu38QxDA/lP1XzTI+QlATrOFMqLPzaFbAjPk7I/7uigJL3YO3BeOPnSUYAxvw J78Atp9QTQz6/Hh+LYC7z9jSso9L8rgnKELiBXv8en2EnSwVsfVt445OQQ1i3pFJ n1sB6JTCQ7vjjxasoLNhgoc3309YbKe0WGwGip4yybTVpcsPlrpJnwb7FdKhrXjd dbhQrRpkecZWJw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:36 2026 by rpki-client