This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json) Hash identifier: 5VNtYjTT52s4iZ5mhfbHrXAJJrtiK3/+YwDMIDeFN04= Subject key identifier: 65:70:7C:77:C1:69:CD:FE:3E:54:67:8B:E5:DF:18:D2:EE:2D:20:8C Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Certificate serial: 019BF5751D2FAC830104599B117B655D1900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 14:00:51 +0000 Manifest this update: Sun 25 Jan 2026 14:00:51 +0000 Manifest next update: Mon 26 Jan 2026 14:00:51 +0000 Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: k6RG8ZfjxMvLNJHWiuRZ7HiQAs8Hl9vPgeNTc7TRwYk=) 2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=) 3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:1d:2f:ac:83:01:04:59:9b:11:7b:65:5d:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Validity Not Before: Jan 25 14:00:51 2026 GMT Not After : Jan 26 14:00:51 2026 GMT Subject: CN=65707c77c169cdfe3e54678be5df18d2ee2d208c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:48:f0:ae:3c:3d:ff:e6:4e:e8:5e:3d:bf: 0e:21:d3:ec:42:94:00:ce:4a:13:22:b0:2c:79:87: 51:8e:48:37:f8:d7:4b:7c:40:c5:12:d9:59:6b:a9: 86:de:c1:e2:84:2a:9b:96:91:d8:0d:3a:86:e3:6b: 37:ce:17:9e:78:69:c0:9f:07:12:48:0e:12:b7:4d: f1:3f:a7:a5:d4:50:79:97:be:5a:ad:7e:df:6a:be: 96:50:76:9c:22:d5:53:c0:7e:dc:6c:4b:71:7e:d8: 5b:f3:e8:e1:9d:5b:22:d5:ad:4f:27:5c:ae:b7:a2: 95:da:cb:60:a4:ee:2c:41:92:58:ab:c2:2b:1f:82: d4:67:65:94:59:31:6d:07:b5:15:95:32:77:56:97: bb:c0:c4:fc:d6:c0:1d:ff:3d:a9:50:f3:82:d4:2b: e1:d1:aa:c6:a2:54:5b:1c:3b:44:ca:8b:b9:72:2c: da:be:d5:47:ab:c7:1a:1a:f8:14:c1:88:c7:ba:b2: 0f:64:d6:5e:ca:c9:8d:8a:21:17:e8:b4:6e:9c:2f: ab:45:10:dc:75:82:53:97:18:06:5b:b9:97:fe:63: 8d:69:a0:e8:fd:ac:5b:71:d8:fb:77:26:77:2f:01: 36:10:c8:1c:52:76:08:cd:36:31:5f:bd:41:5c:b9: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:70:7C:77:C1:69:CD:FE:3E:54:67:8B:E5:DF:18:D2:EE:2D:20:8C X509v3 Authority Key Identifier: keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:14:62:f1:e2:2d:0c:3d:05:84:0c:49:49:8e:96:09:8a:98: 27:94:1e:f6:25:eb:e1:55:91:28:11:1d:fc:a2:5c:b6:f0:d5: af:2a:0b:10:df:f0:23:cd:b4:85:15:da:3e:af:3d:db:e0:a1: 39:dc:2d:45:6c:cd:da:49:7a:5e:31:cf:e1:d1:ca:79:a6:cb: 77:35:be:99:c6:bd:2a:cf:68:8f:8c:8c:50:89:56:00:5e:20: a2:f7:b7:43:9c:b5:16:77:bb:03:ed:77:26:69:1f:a9:a8:c1: 48:ab:4a:54:d0:7d:74:90:2d:e0:de:f1:17:37:c1:f0:5f:d8: 30:14:22:8b:ee:06:72:6f:64:d5:f9:01:80:7c:73:59:97:30: fa:6b:d5:c7:d2:46:49:67:a6:dd:99:13:f9:91:24:ef:a0:9a: 2c:fe:51:46:ef:48:aa:31:b1:a6:ce:34:ef:6e:90:bd:d6:ba: 88:05:c3:0c:89:b0:b7:31:1b:ee:f6:b7:39:75:8b:1a:95:8d: d1:52:4c:f8:3b:85:ff:7d:7c:27:b1:fe:a7:d2:fe:69:46:76: a5:43:d7:51:b8:af:6e:68:93:77:ec:e6:d6:aa:f0:7b:95:0e: 4b:d9:e6:ac:c5:e5:d6:67:9a:81:90:c9:8e:a6:73:45:95:fe: b3:09:1a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dR0vrIMBBFmbEXtlXRkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl ODk0MjkwHhcNMjYwMTI1MTQwMDUxWhcNMjYwMTI2MTQwMDUxWjAzMTEwLwYDVQQD Eyg2NTcwN2M3N2MxNjljZGZlM2U1NDY3OGJlNWRmMThkMmVlMmQyMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjtI8K48Pf/mTuhePb8OIdPsQpQA zkoTIrAseYdRjkg3+NdLfEDFEtlZa6mG3sHihCqblpHYDTqG42s3zheeeGnAnwcS SA4St03xP6el1FB5l75arX7far6WUHacItVTwH7cbEtxfthb8+jhnVsi1a1PJ1yu t6KV2stgpO4sQZJYq8IrH4LUZ2WUWTFtB7UVlTJ3Vpe7wMT81sAd/z2pUPOC1Cvh 0arGolRbHDtEyou5cizavtVHq8caGvgUwYjHurIPZNZeysmNiiEX6LRunC+rRRDc dYJTlxgGW7mX/mONaaDo/axbcdj7dyZ3LwE2EMgcUnYIzTYxX71BXLko1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVwfHfBac3+PlRni+XfGNLuLSCMMB8GA1UdIwQY MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt NmJkODAyMmQyZWFlLzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURRi8eIt DD0FhAxJSY6WCYqYJ5Qe9iXr4VWRKBEd/KJctvDVryoLEN/wI820hRXaPq892+Ch OdwtRWzN2kl6XjHP4dHKeabLdzW+mca9Ks9oj4yMUIlWAF4gove3Q5y1Fne7A+13 JmkfqajBSKtKVNB9dJAt4N7xFzfB8F/YMBQii+4Gcm9k1fkBgHxzWZcw+mvVx9JG SWem3ZkT+ZEk76CaLP5RRu9IqjGxps40726Qvda6iAXDDImwtzEb7va3OXWLGpWN 0VJM+DuF/318J7H+p9L+aUZ2pUPXUbivbmiTd+zm1qrwe5UOS9nmrMXl1meagZDJ jqZzRZX+swkaRw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:54:13 2026 by rpki-client