This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json) Hash identifier: uYM+vUieVpcsEt/z28gIzHXFaND6QMwYXZgbLuIZp+U= Subject key identifier: DB:11:09:A4:28:15:42:34:40:72:38:46:18:CE:43:F8:5A:1C:71:FF Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9 Certificate serial: 019BFB0A1AD460BEC2723080B4512159F740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft Manifest number: 020C Signing time: Mon 26 Jan 2026 16:01:41 +0000 Manifest this update: Mon 26 Jan 2026 16:01:41 +0000 Manifest next update: Tue 27 Jan 2026 16:01:41 +0000 Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=) 2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: LK+Q9ND8495dCfCe1mEyK3d/kW7JPR4jQA0JX+gNeDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:1a:d4:60:be:c2:72:30:80:b4:51:21:59:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9 Validity Not Before: Jan 26 16:01:41 2026 GMT Not After : Jan 27 16:01:41 2026 GMT Subject: CN=db1109a4281542344072384618ce43f85a1c71ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:41:6c:7f:a1:56:96:d4:93:99:1d:75:e7: 79:41:db:79:4a:5e:2d:2e:08:25:82:92:f2:18:19: a9:57:9f:17:83:4b:28:6f:1d:3c:17:b8:e1:54:46: d4:e5:8e:57:bc:75:7b:b8:8a:ac:1e:08:01:af:19: 88:55:73:b9:49:f7:08:b0:65:b5:a3:a5:21:56:d7: cf:37:0e:35:76:72:b0:33:19:3e:84:9b:00:5b:81: 32:72:7b:7c:cc:d3:f2:ba:28:7c:51:75:48:6a:37: d7:ab:99:80:9a:12:24:c1:6f:30:8b:0e:1d:d1:af: 82:8b:6b:05:b9:5c:31:1a:cd:eb:49:22:b5:38:09: ef:8b:33:16:1c:f4:ad:4e:da:b7:3e:19:74:be:36: 4c:7a:74:b2:2e:d5:4a:1b:b2:b8:23:fa:34:01:3a: c8:4a:6b:6b:94:7c:9c:20:a7:d1:c3:d1:a3:b1:81: fd:b2:bc:3b:4a:1d:23:95:d3:72:0e:5e:8e:ac:13: 11:a4:da:ab:60:c0:79:59:e9:a1:59:2c:15:a9:8a: 68:69:3b:53:54:02:4c:c5:04:77:7d:7e:9c:d6:cc: ef:d3:d7:65:56:c3:0d:46:a0:2c:16:1d:98:68:8a: 8c:aa:42:ce:d5:4e:76:ae:47:a5:eb:06:8e:dc:bf: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:09:A4:28:15:42:34:40:72:38:46:18:CE:43:F8:5A:1C:71:FF X509v3 Authority Key Identifier: keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e0:ea:5c:5f:55:98:bd:e6:9c:21:d5:6f:c9:fd:11:14:10: 57:a3:72:62:fe:aa:68:3d:f5:51:ec:a4:bb:e6:87:d1:75:cd: 8d:d8:2a:33:b0:0c:49:c7:c7:00:eb:9a:3b:1b:62:dc:b6:f0: a4:a7:83:85:a2:f5:a3:a1:5a:5e:8e:54:8d:9f:81:27:18:c4: 5a:d1:3a:b8:c6:5b:dd:70:e7:82:0d:5c:2b:01:17:99:ca:b6: 9c:06:7d:5f:f2:f7:06:fe:65:b6:2c:fd:f0:80:aa:91:85:ac: a4:2f:38:7b:0c:8d:9d:83:21:a4:ef:95:28:f1:3f:e1:99:0f: ee:54:69:ee:36:1b:b4:e1:47:2e:50:4d:89:f9:ee:ed:7f:2d: 46:e1:c5:b2:27:c6:89:fd:60:ae:dc:c0:8d:d1:77:1e:45:7f: 12:49:ba:49:dc:1a:b3:00:24:c8:2c:f1:08:19:93:4b:c9:29: ed:d1:1a:72:5e:ec:9a:eb:53:5d:c2:17:b1:37:d5:5c:82:36: fe:c6:45:82:67:ba:fa:55:41:97:5f:10:2c:70:dd:ef:75:8f: 57:cd:87:48:ef:51:65:08:09:98:a7:f4:70:f6:8f:44:24:83: ff:f1:60:30:a4:4c:cf:b6:a2:68:01:99:d8:17:37:e3:fb:57: 31:20:4d:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ChrUYL7CcjCAtFEhWfdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWZhNzA4ZTA5OGU1Njk0MmIxNjJmMzRlNDYzMzQ5N2Yz YWUyZDkwHhcNMjYwMTI2MTYwMTQxWhcNMjYwMTI3MTYwMTQxWjAzMTEwLwYDVQQD EyhkYjExMDlhNDI4MTU0MjM0NDA3MjM4NDYxOGNlNDNmODVhMWM3MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPVBbH+hVpbUk5kdded5Qdt5Sl4t LgglgpLyGBmpV58Xg0sobx08F7jhVEbU5Y5XvHV7uIqsHggBrxmIVXO5SfcIsGW1 o6UhVtfPNw41dnKwMxk+hJsAW4Eycnt8zNPyuih8UXVIajfXq5mAmhIkwW8wiw4d 0a+Ci2sFuVwxGs3rSSK1OAnvizMWHPStTtq3Phl0vjZMenSyLtVKG7K4I/o0ATrI SmtrlHycIKfRw9GjsYH9srw7Sh0jldNyDl6OrBMRpNqrYMB5WemhWSwVqYpoaTtT VAJMxQR3fX6c1szv09dlVsMNRqAsFh2YaIqMqkLO1U52rkel6waO3L+wmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsRCaQoFUI0QHI4RhjOQ/haHHH/MB8GA1UdIwQY MBaAFICvpwjgmOVpQrFi805GM0l/OuLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUt MmE4YTIyNTNmZTBhLzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUtMmE4YTIyNTNmZTBh LzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuDqXF9V mL3mnCHVb8n9ERQQV6NyYv6qaD31Ueyku+aH0XXNjdgqM7AMScfHAOuaOxti3Lbw pKeDhaL1o6FaXo5UjZ+BJxjEWtE6uMZb3XDngg1cKwEXmcq2nAZ9X/L3Bv5ltiz9 8ICqkYWspC84ewyNnYMhpO+VKPE/4ZkP7lRp7jYbtOFHLlBNifnu7X8tRuHFsifG if1grtzAjdF3HkV/Ekm6SdwaswAkyCzxCBmTS8kp7dEacl7smutTXcIXsTfVXII2 /sZFgme6+lVBl18QLHDd73WPV82HSO9RZQgJmKf0cPaPRCSD//FgMKRMz7aiaAGZ 2Bc34/tXMSBNfg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:23 2026 by rpki-client