This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json) Hash identifier: mcccV06dOOw43nXyDakTPI3NwccBsOIKXE8bZAWjK9c= Subject key identifier: 24:EE:4B:65:22:EE:DA:87:85:D1:B9:B7:AA:36:5B:54:79:88:46:F7 Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Certificate serial: 019BF5E3D9AB8F82E680A857714EF7273304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft Manifest number: 0C67 Signing time: Sun 25 Jan 2026 16:01:48 +0000 Manifest this update: Sun 25 Jan 2026 16:01:48 +0000 Manifest next update: Mon 26 Jan 2026 16:01:48 +0000 Files and hashes: 1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=) 2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: WSY3Oln7kV0q9NwvMrY2ELXY54ZDS5p/ooPVxF56EKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:d9:ab:8f:82:e6:80:a8:57:71:4e:f7:27:33:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Validity Not Before: Jan 25 16:01:48 2026 GMT Not After : Jan 26 16:01:48 2026 GMT Subject: CN=24ee4b6522eeda8785d1b9b7aa365b54798846f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:03:5b:53:bc:3c:83:a1:36:4d:10:93:4c: a3:01:02:e0:a7:34:cd:5c:f5:37:19:33:eb:68:f1: 44:43:34:7b:8e:bf:12:b4:d7:cd:06:65:d5:09:0c: 1d:25:e8:e3:9d:2b:65:86:b1:1b:c9:7e:a9:4a:88: 75:64:0f:d5:02:38:7f:90:3b:cd:d8:d1:63:06:51: a3:85:28:17:15:34:9e:fd:ca:f3:20:3f:ec:57:17: cd:dc:ca:67:99:69:73:e8:9e:05:66:e1:3e:75:fb: 28:99:d1:4a:a9:52:d7:51:cf:26:87:77:4f:d4:27: 0b:9e:95:39:b5:da:1a:b6:71:69:b4:b7:10:d0:42: 21:de:2b:ca:04:69:17:ca:db:61:40:27:bb:69:67: 72:23:2e:ba:82:10:a5:ac:f6:c4:c7:05:1b:d9:fa: 7b:09:5a:a7:b1:0e:e4:03:c3:5d:ce:8c:62:e7:a3: 5b:7a:85:d6:ba:43:aa:11:b8:3e:05:18:b4:a6:ea: 0a:96:99:ca:76:ce:ae:b8:e5:af:a8:51:7f:87:18: c5:09:35:44:f1:ef:88:d7:da:25:78:92:2c:a4:c6: 03:d2:fa:bd:04:b1:55:e1:91:2e:30:a5:68:99:8a: 5a:06:dc:81:06:a3:8d:f3:09:91:d4:d3:22:17:b6: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:4B:65:22:EE:DA:87:85:D1:B9:B7:AA:36:5B:54:79:88:46:F7 X509v3 Authority Key Identifier: keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d2:6c:69:aa:1d:93:12:bf:3f:9d:7b:2f:57:7a:59:86:ad: 32:bb:93:04:5f:3b:05:d0:a3:56:fe:0e:79:ea:06:21:a5:1b: 95:63:cb:34:f2:36:88:70:ca:eb:8f:37:07:1e:6e:43:be:f6: 09:89:04:d6:d8:97:e9:af:07:cc:3c:1e:a9:54:5c:fb:02:0d: 57:f0:6f:05:a5:77:cd:8c:c5:b8:29:34:9c:12:cf:dc:a0:77: 30:a4:93:45:e1:29:73:2f:f7:b9:85:67:bf:e0:70:86:e7:b1: c6:aa:6d:65:4b:34:5c:b1:3c:48:ca:0b:d4:d3:9f:c2:9f:20: 10:3b:27:93:82:04:81:f6:b7:d8:93:ed:d5:03:50:43:a1:0d: 50:fe:c3:b1:ca:67:a9:16:0f:09:3e:3d:0d:d3:ca:b3:d3:46: db:e5:1e:6b:9d:b2:5f:1b:07:e7:97:26:4a:fa:bb:65:bd:d6: d7:03:ff:bb:aa:9c:c3:bf:4c:ec:52:12:d5:80:c9:eb:5a:91: 09:9f:be:6d:1c:92:8d:50:e7:36:ce:9f:96:85:b0:a8:28:47: 51:2d:54:dd:62:06:d0:1b:88:2c:26:49:8a:92:cf:fa:0c:f1: 71:1d:0b:ae:cc:bc:ac:51:5a:d1:4c:53:e0:3f:df:58:e4:4a: 2d:24:24:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv149mrj4LmgKhXcU73JzMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll OTQ3YTQwHhcNMjYwMTI1MTYwMTQ4WhcNMjYwMTI2MTYwMTQ4WjAzMTEwLwYDVQQD EygyNGVlNGI2NTIyZWVkYTg3ODVkMWI5YjdhYTM2NWI1NDc5ODg0NmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpsDW1O8PIOhNk0Qk0yjAQLgpzTN XPU3GTPraPFEQzR7jr8StNfNBmXVCQwdJejjnStlhrEbyX6pSoh1ZA/VAjh/kDvN 2NFjBlGjhSgXFTSe/crzID/sVxfN3MpnmWlz6J4FZuE+dfsomdFKqVLXUc8mh3dP 1CcLnpU5tdoatnFptLcQ0EIh3ivKBGkXytthQCe7aWdyIy66ghClrPbExwUb2fp7 CVqnsQ7kA8Ndzoxi56NbeoXWukOqEbg+BRi0puoKlpnKds6uuOWvqFF/hxjFCTVE 8e+I19oleJIspMYD0vq9BLFV4ZEuMKVomYpaBtyBBqON8wmR1NMiF7bCwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTuS2Ui7tqHhdG5t6o2W1R5iEb3MB8GA1UdIwQY MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt ZTBjOTY2YzE1ZDVmLzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtJsaaod kxK/P517L1d6WYatMruTBF87BdCjVv4OeeoGIaUblWPLNPI2iHDK6483Bx5uQ772 CYkE1tiX6a8HzDweqVRc+wINV/BvBaV3zYzFuCk0nBLP3KB3MKSTReEpcy/3uYVn v+BwhuexxqptZUs0XLE8SMoL1NOfwp8gEDsnk4IEgfa32JPt1QNQQ6ENUP7Dscpn qRYPCT49DdPKs9NG2+Uea52yXxsH55cmSvq7Zb3W1wP/u6qcw79M7FIS1YDJ61qR CZ++bRySjVDnNs6floWwqChHUS1U3WIG0BuILCZJipLP+gzxcR0Lrsy8rFFa0UxT 4D/fWORKLSQk9A== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:35 2026 by rpki-client