This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json) Hash identifier: T+Mc4hZ8Bk7PJfLOnMHcWQNfK/8Gos4DV0YTguX2agE= Subject key identifier: A5:C8:95:8D:40:5A:71:84:B8:AF:F2:6C:DB:8A:37:3E:D0:F4:DD:D3 Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd Certificate serial: 019BF6BF16E5954C723D374B01EEB8CAB285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft Manifest number: 0ECA Signing time: Sun 25 Jan 2026 20:01:16 +0000 Manifest this update: Sun 25 Jan 2026 20:01:16 +0000 Manifest next update: Mon 26 Jan 2026 20:01:16 +0000 Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: rFTZbQ4W/7W/aiZ+QSFG8Z+ew5HEGXhzmIwoqId1cec=) 2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:16:e5:95:4c:72:3d:37:4b:01:ee:b8:ca:b2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd Validity Not Before: Jan 25 20:01:16 2026 GMT Not After : Jan 26 20:01:16 2026 GMT Subject: CN=a5c8958d405a7184b8aff26cdb8a373ed0f4ddd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:84:57:c4:3e:aa:bd:49:be:02:5d:10:c4: 7c:68:c3:7f:ad:2a:46:a6:14:ad:21:1e:c2:0e:ab: e5:c0:d1:dd:5d:fe:b6:59:16:f1:2a:b2:95:74:03: 6e:3a:d4:5f:24:b2:fd:78:13:44:5f:71:f7:67:ba: 1a:0a:ff:13:0c:16:e9:d3:b8:8e:ab:10:ec:cb:b3: dd:91:c8:a0:f3:63:e0:93:ff:6d:b8:ca:34:e5:31: f1:f4:28:45:1d:c8:cf:18:c3:fe:42:1b:cc:0b:a4: d6:2f:df:21:8f:2f:73:5f:d5:84:ef:dd:be:e3:98: 06:45:77:0c:69:1f:9d:9f:f0:f9:59:be:96:ff:73: d1:a1:cf:b2:a8:3c:06:92:54:9d:ad:e8:2d:e7:4e: ed:c9:25:8c:50:19:c9:33:77:78:dd:6e:bb:0c:1d: 69:33:7f:6b:33:6d:85:42:96:01:af:f8:d1:7f:c8: 23:a2:fc:d1:cf:5c:0b:a9:83:d6:6e:a0:90:bc:fd: 72:4c:b2:54:53:ba:d9:75:fe:e5:de:f1:28:32:d0: e3:8d:1b:b1:6e:ad:51:61:6e:21:41:0e:11:6a:e7: 7b:a5:37:1c:de:03:a1:33:04:e8:e1:91:e4:44:f6: 33:7f:9b:e6:2f:e4:0d:5a:71:a6:e9:a0:75:2a:11: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:95:8D:40:5A:71:84:B8:AF:F2:6C:DB:8A:37:3E:D0:F4:DD:D3 X509v3 Authority Key Identifier: keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:88:cf:9b:96:b6:ea:e1:b5:78:a6:91:5c:f7:2f:7d:b9:e8: 69:ee:69:5f:68:01:0f:16:aa:16:e2:74:59:f9:60:7c:2c:98: 8b:16:a9:5d:2b:eb:09:a8:5a:30:fe:a9:23:10:b9:a3:77:e0: 77:94:e5:9d:12:dd:21:25:9a:e7:33:20:14:02:70:db:d7:de: 18:b1:dc:74:5d:8a:86:a3:77:68:7d:49:06:c2:47:1e:e3:bf: 64:f3:db:61:a6:86:26:18:26:e0:1c:90:8b:d3:13:1e:38:d6: f0:14:ae:58:2b:cd:61:3b:12:e4:87:c0:b2:08:8d:b0:d4:f9: 94:70:3f:70:7c:ed:66:70:03:ce:8e:4c:9c:40:20:de:a6:26: 4e:b4:d4:21:ab:3f:2e:51:c0:97:e3:26:4f:54:65:95:35:ed: 63:e8:e1:a9:b0:c0:87:07:03:de:c9:2f:73:7e:9e:cc:ff:fd: 89:95:6f:7a:d6:6c:a8:76:31:7e:b6:c1:45:34:80:87:93:06: 7e:06:e9:60:c9:3e:10:f0:a2:e2:81:a9:33:df:bb:d9:ff:c2: d4:9e:59:0b:4e:00:58:ed:8b:67:d2:42:47:cc:9d:c3:7d:32: 62:91:0f:d0:1c:4e:5f:ce:df:a4:dc:e5:13:cd:c2:46:2b:88: 5d:ee:b8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxbllUxyPTdLAe64yrKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTM0NTA1ODQ1ZmEwYTkzZjgyODVhNmRhOGJjZTZkMWQ3 MjAwZGQwHhcNMjYwMTI1MjAwMTE2WhcNMjYwMTI2MjAwMTE2WjAzMTEwLwYDVQQD EyhhNWM4OTU4ZDQwNWE3MTg0YjhhZmYyNmNkYjhhMzczZWQwZjRkZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbOEV8Q+qr1JvgJdEMR8aMN/rSpG phStIR7CDqvlwNHdXf62WRbxKrKVdANuOtRfJLL9eBNEX3H3Z7oaCv8TDBbp07iO qxDsy7Pdkcig82Pgk/9tuMo05THx9ChFHcjPGMP+QhvMC6TWL98hjy9zX9WE792+ 45gGRXcMaR+dn/D5Wb6W/3PRoc+yqDwGklSdregt507tySWMUBnJM3d43W67DB1p M39rM22FQpYBr/jRf8gjovzRz1wLqYPWbqCQvP1yTLJUU7rZdf7l3vEoMtDjjRux bq1RYW4hQQ4Raud7pTcc3gOhMwTo4ZHkRPYzf5vmL+QNWnGm6aB1KhEw3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXIlY1AWnGEuK/ybNuKNz7Q9N3TMB8GA1UdIwQY MBaAFIJTRQWEX6CpP4KFptqLzm0dcgDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAt NDdjYzdkMWFiYzZiLzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAtNDdjYzdkMWFiYzZi LzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4jPm5a2 6uG1eKaRXPcvfbnoae5pX2gBDxaqFuJ0WflgfCyYixapXSvrCahaMP6pIxC5o3fg d5TlnRLdISWa5zMgFAJw29feGLHcdF2KhqN3aH1JBsJHHuO/ZPPbYaaGJhgm4ByQ i9MTHjjW8BSuWCvNYTsS5IfAsgiNsNT5lHA/cHztZnADzo5MnEAg3qYmTrTUIas/ LlHAl+MmT1RllTXtY+jhqbDAhwcD3skvc36ezP/9iZVvetZsqHYxfrbBRTSAh5MG fgbpYMk+EPCi4oGpM9+72f/C1J5ZC04AWO2LZ9JCR8ydw30yYpEP0BxOX87fpNzl E83CRiuIXe64zg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:16 2026 by rpki-client