This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json) Hash identifier: Rv2F9HTOdIgsFcQ+tEhNTPsbrxJ1E1uId2825H3L2v8= Subject key identifier: 2E:86:80:76:46:A2:B2:D3:04:89:F1:BB:9A:B2:F4:46:1B:DB:60:8C Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Certificate serial: 019BF2E227DB88448A67DBD31CD3530D7FB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft Manifest number: 0E55 Signing time: Sun 25 Jan 2026 02:01:06 +0000 Manifest this update: Sun 25 Jan 2026 02:01:06 +0000 Manifest next update: Mon 26 Jan 2026 02:01:06 +0000 Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: yivfXZvPMm79Og/mg1zAbHTvNJ7dTuVcZbaShS6/Dl0=) 2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=) 3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:27:db:88:44:8a:67:db:d3:1c:d3:53:0d:7f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Validity Not Before: Jan 25 02:01:06 2026 GMT Not After : Jan 26 02:01:06 2026 GMT Subject: CN=2e86807646a2b2d30489f1bb9ab2f4461bdb608c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:9c:df:23:fa:ba:32:e0:ab:ed:70:58:df: 07:78:17:10:f2:71:88:19:da:ff:5f:9b:6d:b0:e6: 66:7b:91:3c:d7:20:45:3e:71:ba:50:ec:2e:57:40: e7:d6:ab:83:e5:d7:9f:5b:67:80:b7:c2:44:1a:9a: 0e:84:4d:fb:1f:4f:77:fc:a6:f3:93:73:45:4d:4d: ec:56:d1:86:23:1d:b4:30:d6:b1:b6:11:ba:cb:55: 28:1f:92:68:7a:95:65:86:b1:e1:f5:f7:96:90:fa: 55:d0:1f:5a:97:df:f7:58:42:93:22:0d:09:e7:1b: 78:dc:53:46:ae:6c:a9:a3:8b:09:30:55:ff:f6:a9: d5:83:71:cf:80:a8:58:34:52:0e:8d:cf:57:a5:d1: 6e:be:8e:37:ba:ae:0e:e5:92:76:f9:0b:f6:0b:ad: aa:ab:aa:61:4a:31:42:e8:cc:38:16:32:41:50:11: 98:ce:a3:c0:7a:d5:5c:21:60:97:58:66:f7:87:00: 57:0e:c0:4a:b9:58:f6:21:43:ff:23:59:c3:a4:51: fa:9b:66:c0:5b:ec:58:62:8e:97:91:13:8b:d1:6a: e2:81:50:af:11:d2:15:ec:2f:28:9a:0c:08:2a:a6: 06:65:1e:b6:ce:29:0d:dd:7f:0c:ee:1d:b7:12:92: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:80:76:46:A2:B2:D3:04:89:F1:BB:9A:B2:F4:46:1B:DB:60:8C X509v3 Authority Key Identifier: keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:23:35:dd:e6:34:fa:2a:3a:94:51:83:50:9d:cc:d2:0f:f7: 72:20:85:10:ab:88:f6:fd:47:a9:0e:5e:88:35:c9:7b:e0:d7: 4d:d4:ee:38:89:42:f7:47:4b:58:0f:bb:fc:98:52:02:f3:18: 19:ee:9c:f5:24:bb:d1:66:1d:2e:1e:53:70:b8:ce:a4:7a:5d: 21:d5:9d:d0:2b:74:3b:22:fe:f7:2b:62:0c:ae:1b:5e:59:4d: c4:61:d0:fd:6d:46:51:4b:49:f1:a6:2f:c5:17:6f:a9:1f:7f: 77:5a:1e:6c:ba:dd:c8:9e:01:56:ad:01:51:6b:29:92:9d:47: 0a:e1:cf:6c:30:30:86:86:77:1d:ab:3c:19:31:80:f4:00:d3: 0a:b5:2f:9d:10:9a:94:6e:2d:d2:75:2d:f8:4e:8c:da:90:93: 97:cc:af:66:8c:5e:a4:5a:50:1d:cd:93:24:49:5f:b3:23:a3: 9e:83:25:02:59:bc:f7:aa:81:12:3b:96:bc:cb:58:66:04:b1: f3:9d:ba:08:e0:1c:c2:45:a5:19:f0:6f:76:e7:9d:92:8e:03: 59:66:60:dd:bb:ae:66:05:3f:03:62:1b:75:2c:8d:05:c4:b1: c7:c6:6f:9b:b0:a0:7d:0d:41:a1:8c:7c:5c:63:29:72:7a:58: 03:c3:44:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4ifbiESKZ9vTHNNTDX+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0 ZWE1NjEwHhcNMjYwMTI1MDIwMTA2WhcNMjYwMTI2MDIwMTA2WjAzMTEwLwYDVQQD EygyZTg2ODA3NjQ2YTJiMmQzMDQ4OWYxYmI5YWIyZjQ0NjFiZGI2MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmc3yP6ujLgq+1wWN8HeBcQ8nGI Gdr/X5ttsOZme5E81yBFPnG6UOwuV0Dn1quD5defW2eAt8JEGpoOhE37H093/Kbz k3NFTU3sVtGGIx20MNaxthG6y1UoH5JoepVlhrHh9feWkPpV0B9al9/3WEKTIg0J 5xt43FNGrmypo4sJMFX/9qnVg3HPgKhYNFIOjc9XpdFuvo43uq4O5ZJ2+Qv2C62q q6phSjFC6Mw4FjJBUBGYzqPAetVcIWCXWGb3hwBXDsBKuVj2IUP/I1nDpFH6m2bA W+xYYo6XkROL0WrigVCvEdIV7C8omgwIKqYGZR62zikN3X8M7h23EpI+EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6GgHZGorLTBInxu5qy9EYb22CMMB8GA1UdIwQY MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSM13eY0 +io6lFGDUJ3M0g/3ciCFEKuI9v1HqQ5eiDXJe+DXTdTuOIlC90dLWA+7/JhSAvMY Ge6c9SS70WYdLh5TcLjOpHpdIdWd0Ct0OyL+9ytiDK4bXllNxGHQ/W1GUUtJ8aYv xRdvqR9/d1oebLrdyJ4BVq0BUWspkp1HCuHPbDAwhoZ3Has8GTGA9ADTCrUvnRCa lG4t0nUt+E6M2pCTl8yvZoxepFpQHc2TJElfsyOjnoMlAlm896qBEjuWvMtYZgSx 8526COAcwkWlGfBvduedko4DWWZg3buuZgU/A2IbdSyNBcSxx8Zvm7CgfQ1BoYx8 XGMpcnpYA8NE9w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:16 2026 by rpki-client