This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft File: glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json) Hash identifier: /1n29V/D4UxUqkJeQY7bQvJYNSzpdHewXUESEMG6wyE= Subject key identifier: 14:E3:60:9A:71:B4:7C:F9:E1:F1:D1:06:21:7C:E8:A1:22:03:47:C0 Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Certificate serial: 019BF574FCF8A4ED1B936C0E18A937CEA582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 14:00:43 +0000 Manifest this update: Sun 25 Jan 2026 14:00:43 +0000 Manifest next update: Mon 26 Jan 2026 14:00:43 +0000 Files and hashes: 1: 4FDNWntT8HGm47C46owaTOgYZFY.roa (hash: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio=) 2: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (hash: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c=) 3: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (hash: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0=) 4: MxTmbVkJmB_lTh2o1kTnP_BFeDY.roa (hash: ttGF8f4pFYCjKqu0HAUvABDoHst3U1ecGF8sI6MFc/8=) 5: SSZXBlYC8HRLyEBgcVeFIXi-Zbg.roa (hash: 7JMK2h+HH0ge6JJyog9isIH7U/WCw5GQsuyNPYb8o94=) 6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: 91iDEju3k3XhRFbo/WUm1LYyrkzLcXJoR4+CmsfumjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:fc:f8:a4:ed:1b:93:6c:0e:18:a9:37:ce:a5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Validity Not Before: Jan 25 14:00:43 2026 GMT Not After : Jan 26 14:00:43 2026 GMT Subject: CN=14e3609a71b47cf9e1f1d106217ce8a1220347c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:37:b8:ed:e1:50:1d:b1:01:f6:6e:49:53: 27:ba:a8:3f:da:ff:9c:38:bd:c4:fe:88:5e:5a:d1: 0f:d4:3a:ff:71:e0:7a:98:3a:28:b6:d8:82:91:77: 53:64:f2:91:2b:94:3b:77:b1:78:4d:34:59:94:08: fc:36:c4:18:91:b5:79:d9:ec:c4:92:3a:26:d7:1b: a7:8f:bf:25:0e:d0:d0:82:a1:ee:e6:04:66:a7:aa: c3:b6:9c:fd:70:e9:ad:97:f4:ba:3e:32:2d:94:7f: e3:1e:d8:3d:80:d1:bc:6c:0c:23:4e:95:dc:9c:f3: 0d:9a:dd:a4:04:11:1f:ce:0d:de:bd:f2:42:db:e1: 53:80:64:82:86:9b:98:71:7e:58:26:52:19:1d:20: 80:0e:f6:c1:3f:d6:9d:f9:03:13:02:e6:4d:22:46: e8:17:cc:3b:86:2d:23:3e:18:ae:af:3c:13:b0:bb: 84:1b:bb:e4:1d:e5:ef:04:3a:2c:f4:59:27:1f:4e: cf:15:b5:a1:db:0e:ee:75:c7:f3:75:68:a9:aa:78: 10:5d:74:37:eb:3e:7a:45:8c:37:4a:d7:fb:00:0f: 26:b3:f1:7d:fb:4a:2a:80:e3:4f:ef:cf:23:6b:24: cf:3c:90:e4:c4:dd:ce:88:7e:f3:c8:15:0c:41:45: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E3:60:9A:71:B4:7C:F9:E1:F1:D1:06:21:7C:E8:A1:22:03:47:C0 X509v3 Authority Key Identifier: keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:02:17:e1:b1:53:ac:aa:b1:f3:56:3b:41:0c:6b:cd:e4:4c: c0:73:c3:8f:24:53:c2:86:5c:87:e4:b6:f3:fa:32:7a:86:19: 4c:79:75:5d:fc:c0:73:f0:f8:d4:48:2e:aa:c5:bf:7b:bf:3d: 53:24:13:3f:51:63:29:35:d7:8c:6a:2a:93:a5:a2:b5:b5:df: 1e:90:a2:3b:bb:2f:51:74:4b:3f:9f:b4:49:ef:11:54:f0:29: 91:ad:c9:92:c2:91:be:07:23:b0:c4:2b:0f:28:9b:1b:7b:1a: 2c:48:a5:74:47:02:8d:c6:59:25:10:a3:05:08:a9:1c:ff:ad: a2:de:35:32:13:c6:0f:d4:73:1b:15:3a:77:1e:23:d5:bd:94: 25:a3:43:eb:e5:8d:38:0e:c8:05:29:b4:63:61:af:ee:b8:c6: 37:96:be:96:42:b1:f5:c6:75:a1:42:f9:73:d9:d5:a1:1f:73: 57:f4:bc:1f:85:8b:8a:e0:fc:e9:f7:ff:8b:f5:7e:cd:df:e9: 60:28:ec:1b:63:d2:6b:92:19:d7:29:2f:67:30:d8:48:ef:a4: 78:bd:03:db:dd:8d:8e:a3:01:b0:15:ad:a3:b1:66:b3:3a:78: 07:bf:48:11:d7:8a:88:c2:27:fd:de:ba:1f:36:1d:54:df:49: 1a:c0:82:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPz4pO0bk2wOGKk3zqWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz NTlkYjIwHhcNMjYwMTI1MTQwMDQzWhcNMjYwMTI2MTQwMDQzWjAzMTEwLwYDVQQD EygxNGUzNjA5YTcxYjQ3Y2Y5ZTFmMWQxMDYyMTdjZThhMTIyMDM0N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK83uO3hUB2xAfZuSVMnuqg/2v+c OL3E/oheWtEP1Dr/ceB6mDoottiCkXdTZPKRK5Q7d7F4TTRZlAj8NsQYkbV52ezE kjom1xunj78lDtDQgqHu5gRmp6rDtpz9cOmtl/S6PjItlH/jHtg9gNG8bAwjTpXc nPMNmt2kBBEfzg3evfJC2+FTgGSChpuYcX5YJlIZHSCADvbBP9ad+QMTAuZNIkbo F8w7hi0jPhiurzwTsLuEG7vkHeXvBDos9FknH07PFbWh2w7udcfzdWipqngQXXQ3 6z56RYw3Stf7AA8ms/F9+0oqgONP788jayTPPJDkxN3OiH7zyBUMQUV6GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTjYJpxtHz54fHRBiF86KEiA0fAMB8GA1UdIwQY MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct ZDNhNDg3Mjk1NDkxLzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQIX4bFT rKqx81Y7QQxrzeRMwHPDjyRTwoZch+S28/oyeoYZTHl1XfzAc/D41EguqsW/e789 UyQTP1FjKTXXjGoqk6WitbXfHpCiO7svUXRLP5+0Se8RVPApka3JksKRvgcjsMQr DyibG3saLEildEcCjcZZJRCjBQipHP+tot41MhPGD9RzGxU6dx4j1b2UJaND6+WN OA7IBSm0Y2Gv7rjGN5a+lkKx9cZ1oUL5c9nVoR9zV/S8H4WLiuD86ff/i/V+zd/p YCjsG2PSa5IZ1ykvZzDYSO+keL0D292NjqMBsBWto7Fmszp4B79IEdeKiMIn/d66 HzYdVN9JGsCCUA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:09 2026 by rpki-client