This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft File: gjwMX13-U9s74NqofrgP8jOghVU.mft (raw, json) Hash identifier: CzaUuj+a6tWv2SPN/Ar3LxEn/pV4iO9J+uOoY8MHWqM= Subject key identifier: F2:F4:31:04:05:92:36:1C:7A:A3:15:FC:0B:76:D7:22:FC:D4:C8:F7 Authority key identifier: 82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55 Certificate issuer: /CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555 Certificate serial: 019BF5ACA4504D54AE2DAF8777EA8CF677E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft Manifest number: 07 Signing time: Sun 25 Jan 2026 15:01:30 +0000 Manifest this update: Sun 25 Jan 2026 15:01:30 +0000 Manifest next update: Mon 26 Jan 2026 15:01:30 +0000 Files and hashes: 1: V34l5uFzYw3kKb1sTTfoMorRyxQ.asa (hash: MTaS52CxVyh3Tkcvp3/p/Y0eCYEdwzDZPEbKIi5PiFI=) 2: gjwMX13-U9s74NqofrgP8jOghVU.crl (hash: urlJdP+5algjLdRayHUeXixa1shxb0FsQpmO7qpTi/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:a4:50:4d:54:ae:2d:af:87:77:ea:8c:f6:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555 Validity Not Before: Jan 25 15:01:30 2026 GMT Not After : Jan 26 15:01:30 2026 GMT Subject: CN=f2f431040592361c7aa315fc0b76d722fcd4c8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:a5:e3:11:35:1f:54:7b:f4:e4:8a:6c:65: f5:4a:01:55:5e:78:a4:35:a9:1f:61:ba:dc:4a:57: cf:67:54:29:1d:f0:04:ff:c8:76:ae:94:b1:22:63: 75:31:0b:bc:c5:df:bf:0a:71:5b:20:7d:21:29:83: a5:93:c0:16:bb:ef:9e:bb:81:7d:46:55:25:df:ce: 92:59:88:58:41:d1:ed:d3:6c:e2:2f:d9:d3:af:dd: 93:f1:77:70:fa:49:ed:19:c3:73:05:d4:1e:84:1c: eb:b1:3c:c1:be:6b:fa:30:73:fb:bc:78:db:ba:a1: 19:6e:eb:b5:c2:21:de:6f:35:27:be:4f:e4:6f:f2: d9:44:c3:60:61:e2:58:24:83:27:dc:56:d8:2c:32: b5:4c:4d:0c:61:cc:3e:5b:9e:16:83:91:53:54:39: af:ad:47:d9:04:b1:ab:44:0d:e2:0b:f3:67:af:81: e2:59:2c:27:6c:e8:bc:0f:cf:5a:f5:77:7c:e3:8a: 75:dc:4d:8b:c3:a1:11:b1:e5:81:ac:c5:35:87:f5: 88:d1:97:77:b8:9b:20:86:9e:71:96:c0:54:1d:d6: 49:3f:f4:02:85:92:b6:80:cc:a7:60:83:f3:f7:a1: 54:ae:86:9d:1d:d8:c9:32:d1:a4:7a:09:3c:2b:85: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:31:04:05:92:36:1C:7A:A3:15:FC:0B:76:D7:22:FC:D4:C8:F7 X509v3 Authority Key Identifier: keyid:82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0b:4f:89:3e:e7:ef:3b:0c:f5:8f:ba:84:2b:47:d5:69:77: 86:65:31:8e:62:e3:c9:3d:76:17:d6:8a:03:77:b6:f8:e8:f8: 75:1d:99:18:b3:6a:bc:05:37:87:d4:2b:db:ed:ff:7e:f5:25: fb:d2:76:39:b6:7c:b8:12:34:20:a3:c8:f0:77:6a:1c:5f:3b: 94:40:93:23:90:45:b6:0d:5c:1d:f5:6e:c0:6c:8e:a5:12:fe: e1:5c:b8:a9:61:9f:1a:f3:ea:7d:62:f0:ea:2a:14:0d:7b:ac: fa:25:b9:a1:6f:50:da:00:17:61:5a:fb:e2:bf:f2:ce:f6:c8: c7:a1:68:b4:6f:0f:4e:e9:3d:b4:e6:21:48:c3:13:00:ce:51: fb:0e:39:9c:f2:31:8d:61:5a:26:67:ec:cb:20:2d:9c:43:13: 6f:de:80:55:10:9b:6e:02:78:4b:15:0d:c7:38:73:ff:23:e1: 0c:1f:bf:4c:fc:67:0e:67:91:de:ed:f2:b9:52:9f:28:17:2c: 12:77:f2:3d:a2:ab:cc:7e:95:78:19:0f:54:93:49:a3:23:6a: 35:ad:51:d8:7a:7f:cf:6f:f7:65:75:25:91:04:36:e8:55:fb: c2:51:5a:92:8c:c4:9e:ec:00:de:c9:6a:bd:0a:92:b1:80:a9: 91:dd:3e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rKRQTVSuLa+Hd+qM9nfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyM2MwYzVmNWRmZTUzZGIzYmUwZGFhODdlYjgwZmYyMzNh MDg1NTUwHhcNMjYwMTI1MTUwMTMwWhcNMjYwMTI2MTUwMTMwWjAzMTEwLwYDVQQD EyhmMmY0MzEwNDA1OTIzNjFjN2FhMzE1ZmMwYjc2ZDcyMmZjZDRjOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWl4xE1H1R79OSKbGX1SgFVXnik NakfYbrcSlfPZ1QpHfAE/8h2rpSxImN1MQu8xd+/CnFbIH0hKYOlk8AWu++eu4F9 RlUl386SWYhYQdHt02ziL9nTr92T8Xdw+kntGcNzBdQehBzrsTzBvmv6MHP7vHjb uqEZbuu1wiHebzUnvk/kb/LZRMNgYeJYJIMn3FbYLDK1TE0MYcw+W54Wg5FTVDmv rUfZBLGrRA3iC/Nnr4HiWSwnbOi8D89a9Xd844p13E2Lw6ERseWBrMU1h/WI0Zd3 uJsghp5xlsBUHdZJP/QChZK2gMynYIPz96FUroadHdjJMtGkegk8K4XzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL0MQQFkjYceqMV/At21yL81Mj3MB8GA1UdIwQY MBaAFII8DF9d/lPbO+DaqH64D/IzoIVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2It YmU2NjQyN2VhYmZlLzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2ItYmU2NjQyN2VhYmZl LzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgtPiT7n 7zsM9Y+6hCtH1Wl3hmUxjmLjyT12F9aKA3e2+Oj4dR2ZGLNqvAU3h9Qr2+3/fvUl +9J2ObZ8uBI0IKPI8HdqHF87lECTI5BFtg1cHfVuwGyOpRL+4Vy4qWGfGvPqfWLw 6ioUDXus+iW5oW9Q2gAXYVr74r/yzvbIx6FotG8PTuk9tOYhSMMTAM5R+w45nPIx jWFaJmfsyyAtnEMTb96AVRCbbgJ4SxUNxzhz/yPhDB+/TPxnDmeR3u3yuVKfKBcs EnfyPaKrzH6VeBkPVJNJoyNqNa1R2Hp/z2/3ZXUlkQQ26FX7wlFakozEnuwA3slq vQqSsYCpkd0+0A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:14 2026 by rpki-client