This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json) Hash identifier: M2eZgsJEIndJqQtO+fIJUNE64cm+YhdD6Nfow4Xgkys= Subject key identifier: A3:A6:88:3A:3D:F5:11:BA:D5:A2:1D:BF:EA:73:1A:90:3F:F9:F2:66 Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6 Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6 Certificate serial: 019B9FD81DED7EA6D553EA8DD4F5431F294F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft Manifest number: 0950 Signing time: Thu 08 Jan 2026 23:01:39 +0000 Manifest this update: Thu 08 Jan 2026 23:01:39 +0000 Manifest next update: Fri 09 Jan 2026 23:01:39 +0000 Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: CiHeXsjqKxDw83/q/ti6N99r1IdoYlMSyWaFZPaniBc=) 2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d8:1d:ed:7e:a6:d5:53:ea:8d:d4:f5:43:1f:29:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6 Validity Not Before: Jan 8 23:01:39 2026 GMT Not After : Jan 9 23:01:39 2026 GMT Subject: CN=a3a6883a3df511bad5a21dbfea731a903ff9f266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:18:e0:37:c6:69:49:ae:f7:6d:59:93:fd: ea:ef:b7:77:d4:5c:21:d0:ac:64:1d:e9:59:13:74: eb:41:7e:c7:a1:fe:37:fa:fa:14:4e:84:2c:9e:8d: 8d:b5:fb:9d:a9:ea:33:92:fc:aa:6a:d6:19:54:82: 19:39:18:5e:d6:af:5e:a7:55:6f:03:72:38:7c:2b: 2b:98:6d:30:76:03:68:f0:23:8f:c2:53:b9:5f:7b: 3c:1a:83:f8:66:40:51:b3:6f:32:1f:c8:84:b6:28: f7:b0:65:e3:35:32:71:99:00:c5:45:ac:5b:0b:6e: f2:52:b6:af:3b:e1:97:3e:f4:7b:eb:90:dc:27:a0: 89:0e:9c:8b:de:7f:5b:83:67:30:58:87:c3:5f:1b: d7:e8:a9:ec:34:cc:23:39:ef:59:20:38:d1:e6:fe: 9c:64:1c:94:43:ef:58:0f:a0:2b:77:a5:ee:d9:7c: 44:fb:07:d3:b1:37:47:21:d8:e5:57:d8:2b:7a:48: 0e:44:f3:58:34:fc:e0:03:75:2b:a8:61:c2:b9:f0: ba:65:f4:b1:32:ea:a9:dd:81:61:93:76:51:d6:28: 87:a6:2a:bb:38:5b:9a:8e:4b:76:2c:a5:fc:65:92: 63:27:12:35:24:ae:b8:b1:df:c8:2f:57:7c:c9:06: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:88:3A:3D:F5:11:BA:D5:A2:1D:BF:EA:73:1A:90:3F:F9:F2:66 X509v3 Authority Key Identifier: keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:d1:6a:33:15:9c:57:53:94:e7:57:c0:39:06:d6:d9:5d: 1e:ac:19:9e:87:32:8f:53:ec:e3:56:14:f6:12:2c:68:6b:f6: 34:dc:5f:b2:3c:b9:80:a8:ae:87:93:41:d6:5b:5c:8b:31:a1: d8:98:45:49:bf:38:7a:b4:ce:a3:1a:0f:f1:f9:e1:c9:30:64: 2e:93:22:f4:bd:39:06:31:a4:de:0f:43:7c:b4:38:60:46:5c: 04:29:4b:8f:5b:a4:96:76:43:12:d8:82:67:4e:79:14:a5:06: 93:b5:c0:1c:ff:fe:31:eb:16:16:48:04:2f:2f:fe:91:e1:86: c6:07:1e:8a:63:d8:dd:35:24:f8:d4:e3:36:c2:b2:c7:3d:f1: bf:0a:ee:56:11:d6:af:86:99:c8:b9:27:33:65:00:bb:2f:c7: 76:72:37:6a:c9:56:0f:ea:2b:35:1f:be:15:36:ae:e3:b0:ed: 47:4a:fc:66:eb:d7:77:75:dc:6b:53:67:08:6a:40:e6:56:de: 0f:4b:c9:b9:98:c0:2d:1c:1b:b9:3b:e3:32:72:f7:0e:fe:f4: 65:41:a8:f1:ac:bb:8f:88:a1:39:76:e5:9b:c6:92:1f:29:dd: bd:05:ed:14:aa:a1:3f:57:79:3b:d8:cb:1e:e4:01:9c:b2:2b: d6:ed:b4:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf2B3tfqbVU+qN1PVDHylPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDU4MDI5Yzk2Y2UyOGFmODAxOGQ1N2Y4ZmE0MDMxMjYx NTFiZTYwHhcNMjYwMTA4MjMwMTM5WhcNMjYwMTA5MjMwMTM5WjAzMTEwLwYDVQQD EyhhM2E2ODgzYTNkZjUxMWJhZDVhMjFkYmZlYTczMWE5MDNmZjlmMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH0Y4DfGaUmu921Zk/3q77d31Fwh 0KxkHelZE3TrQX7Hof43+voUToQsno2NtfudqeozkvyqatYZVIIZORhe1q9ep1Vv A3I4fCsrmG0wdgNo8COPwlO5X3s8GoP4ZkBRs28yH8iEtij3sGXjNTJxmQDFRaxb C27yUravO+GXPvR765DcJ6CJDpyL3n9bg2cwWIfDXxvX6KnsNMwjOe9ZIDjR5v6c ZByUQ+9YD6Ard6Xu2XxE+wfTsTdHIdjlV9grekgORPNYNPzgA3UrqGHCufC6ZfSx Muqp3YFhk3ZR1iiHpiq7OFuajkt2LKX8ZZJjJxI1JK64sd/IL1d8yQbkvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOmiDo99RG61aIdv+pzGpA/+fJmMB8GA1UdIwQY MBaAFBoFgCnJbOKK+AGNV/j6QDEmFRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAt MjI4Mzk3NjY5NjBhLzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAtMjI4Mzk3NjY5NjBh LzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYnRajMV nFdTlOdXwDkG1tldHqwZnocyj1Ps41YU9hIsaGv2NNxfsjy5gKiuh5NB1ltcizGh 2JhFSb84erTOoxoP8fnhyTBkLpMi9L05BjGk3g9DfLQ4YEZcBClLj1uklnZDEtiC Z055FKUGk7XAHP/+MesWFkgELy/+keGGxgceimPY3TUk+NTjNsKyxz3xvwruVhHW r4aZyLknM2UAuy/HdnI3aslWD+orNR++FTau47DtR0r8ZuvXd3Xca1NnCGpA5lbe D0vJuZjALRwbuTvjMnL3Dv70ZUGo8ay7j4ihOXblm8aSHyndvQXtFKqhP1d5O9jL HuQBnLIr1u209g== -----END CERTIFICATE-----Generated at Fri Jan 9 01:14:29 2026 by rpki-client