This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json) Hash identifier: 3zaGxM1KNpSF53J+3/up75fseOP6aukuCx0juKbtHNk= Subject key identifier: 54:16:58:71:6F:63:EC:51:CD:42:AD:E2:B3:29:C3:4F:A8:00:2E:6A Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Certificate serial: 019BF46232BD075EA94F1710D52099460708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft Manifest number: 0206 Signing time: Sun 25 Jan 2026 09:00:34 +0000 Manifest this update: Sun 25 Jan 2026 09:00:34 +0000 Manifest next update: Mon 26 Jan 2026 09:00:34 +0000 Files and hashes: 1: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (hash: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8=) 2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: uYkgmmnJJzps9Jni+S9Qpa9j2NRGeE5Oe3+0YjM37qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:32:bd:07:5e:a9:4f:17:10:d5:20:99:46:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Validity Not Before: Jan 25 09:00:34 2026 GMT Not After : Jan 26 09:00:34 2026 GMT Subject: CN=541658716f63ec51cd42ade2b329c34fa8002e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:a7:2c:13:af:b0:5e:51:5f:8a:f7:3b:4c: 11:ee:e6:c8:4b:bc:06:db:4d:34:2f:84:41:af:9b: 55:06:ad:43:b3:c6:c4:4b:27:33:97:c3:86:3d:19: e1:21:84:5f:0c:7b:03:bf:63:9b:30:fc:98:90:af: 84:73:3e:49:f2:05:d7:31:b8:e8:64:47:4e:d7:01: 82:3d:8f:76:d6:f8:d0:d6:ce:e0:65:78:f0:55:9b: 08:6c:da:b1:57:0a:d8:ae:c0:b5:5a:21:d0:7c:91: 21:84:97:2b:53:e6:48:8e:dd:b1:e0:a0:e3:19:2a: fa:6d:8c:ca:d8:5d:8a:c2:85:a7:48:8a:21:81:2d: 20:e4:69:9b:3c:0e:9e:cc:49:a4:63:0f:b1:49:c5: a5:a1:a2:e4:b5:d5:e7:e9:3f:38:ba:cc:d8:29:f2: 2d:38:77:24:ea:10:a6:14:98:97:d2:43:c1:6e:02: ae:e2:51:2a:1b:13:23:98:f2:9f:4e:69:20:4e:5a: 45:d5:7a:43:3c:fd:f5:0f:ed:57:d5:f8:5e:fd:26: 85:e7:3e:ea:ad:ff:db:fc:d0:48:3b:ec:52:ec:86: 79:a4:9c:ed:e1:ed:10:bf:51:5f:a3:0c:4a:fd:d0: cc:13:66:4b:f2:50:33:b0:9b:9e:b6:98:fc:59:28: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:58:71:6F:63:EC:51:CD:42:AD:E2:B3:29:C3:4F:A8:00:2E:6A X509v3 Authority Key Identifier: keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d0:7e:14:5e:9a:34:8f:08:6a:be:14:ba:d8:10:fc:5e:ff: 09:f4:04:a8:3d:d0:2f:3f:8e:39:e8:47:ee:08:59:6d:1c:69: 2e:49:04:3a:a3:80:24:e8:02:09:f4:71:68:9e:00:5e:8c:dc: df:79:30:73:82:4d:5c:11:e5:40:9f:fe:e9:19:70:fc:96:39: 4e:43:42:b7:22:20:ff:44:be:ec:91:de:8a:0e:ad:f7:7f:40: 4e:b4:2f:9d:6f:a5:2f:71:a7:de:ea:a6:61:ef:69:9d:3d:07: 8a:0a:f1:97:23:62:51:fb:3e:e7:fb:bf:f5:d1:24:c8:f8:ee: 18:e0:99:a1:d5:c0:84:55:a6:ad:be:ed:ce:1b:b2:d8:cc:3f: d1:c1:7a:c7:a3:be:ce:7e:53:3a:43:78:9f:d1:03:38:0d:c5: 66:b7:78:a2:25:22:89:8e:59:09:7e:0f:c8:ff:9d:6e:1c:ad: bc:74:7d:c9:c5:86:40:72:38:01:2f:19:73:8a:db:4b:66:1e: f2:9a:d4:f4:9a:94:a0:57:5c:c9:5f:52:bb:2c:5a:b5:7e:08: ad:12:ca:81:71:65:7d:d2:dd:de:6b:1b:63:cb:34:9a:f7:a4: 02:41:a3:46:85:9d:cf:48:bb:45:3a:8c:82:77:2f:93:fe:c7: 00:f8:aa:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YjK9B16pTxcQ1SCZRgcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl MDJkNGUwHhcNMjYwMTI1MDkwMDM0WhcNMjYwMTI2MDkwMDM0WjAzMTEwLwYDVQQD Eyg1NDE2NTg3MTZmNjNlYzUxY2Q0MmFkZTJiMzI5YzM0ZmE4MDAyZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQSnLBOvsF5RX4r3O0wR7ubIS7wG 2000L4RBr5tVBq1Ds8bESyczl8OGPRnhIYRfDHsDv2ObMPyYkK+Ecz5J8gXXMbjo ZEdO1wGCPY921vjQ1s7gZXjwVZsIbNqxVwrYrsC1WiHQfJEhhJcrU+ZIjt2x4KDj GSr6bYzK2F2KwoWnSIohgS0g5GmbPA6ezEmkYw+xScWloaLktdXn6T84uszYKfIt OHck6hCmFJiX0kPBbgKu4lEqGxMjmPKfTmkgTlpF1XpDPP31D+1X1fhe/SaF5z7q rf/b/NBIO+xS7IZ5pJzt4e0Qv1FfowxK/dDME2ZL8lAzsJuetpj8WSi5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQWWHFvY+xRzUKt4rMpw0+oAC5qMB8GA1UdIwQY MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt N2RmZGU4YjEyZTJjLzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNB+FF6a NI8Iar4UutgQ/F7/CfQEqD3QLz+OOehH7ghZbRxpLkkEOqOAJOgCCfRxaJ4AXozc 33kwc4JNXBHlQJ/+6Rlw/JY5TkNCtyIg/0S+7JHeig6t939ATrQvnW+lL3Gn3uqm Ye9pnT0HigrxlyNiUfs+5/u/9dEkyPjuGOCZodXAhFWmrb7tzhuy2Mw/0cF6x6O+ zn5TOkN4n9EDOA3FZrd4oiUiiY5ZCX4PyP+dbhytvHR9ycWGQHI4AS8Zc4rbS2Ye 8prU9JqUoFdcyV9SuyxatX4IrRLKgXFlfdLd3msbY8s0mvekAkGjRoWdz0i7RTqM gncvk/7HAPiqYw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:12 2026 by rpki-client