This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json) Hash identifier: HkdjUazDGzOxCXiIbFH4GWmXcw53j4v693FOoaS+h7M= Subject key identifier: 37:1E:FC:84:2E:18:50:1A:AA:E6:F2:DB:1A:E1:1F:40:0D:28:2B:7A Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8 Certificate serial: 019BFEAF16D4C9D2073313E6F467B21F6273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft Manifest number: 0FB2 Signing time: Tue 27 Jan 2026 09:00:46 +0000 Manifest this update: Tue 27 Jan 2026 09:00:46 +0000 Manifest next update: Wed 28 Jan 2026 09:00:46 +0000 Files and hashes: 1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=) 2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: xRakgpJIKyx1jz8u7l1fU2aNtuAGcVJ4SEHgA4JKEWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:16:d4:c9:d2:07:33:13:e6:f4:67:b2:1f:62:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8 Validity Not Before: Jan 27 09:00:46 2026 GMT Not After : Jan 28 09:00:46 2026 GMT Subject: CN=371efc842e18501aaae6f2db1ae11f400d282b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:54:ca:71:1c:af:3e:39:cf:e3:5c:2f:78:e1: b3:d1:82:88:2a:21:39:be:59:fe:7d:f0:eb:f7:77: 71:0d:0c:af:5a:f9:64:6b:91:90:e5:da:a4:41:5e: 84:25:b4:e8:85:0d:c9:62:23:90:c6:30:82:e7:f9: dc:65:63:11:df:ca:98:bf:d4:df:9c:15:6d:43:f0: c0:70:d3:71:fd:bb:1c:60:c0:03:ac:c5:8d:58:49: 4c:a3:00:ff:66:90:87:33:80:ae:43:5f:cc:61:8c: 98:62:36:a0:93:e7:4e:29:0f:ea:5e:d8:61:e0:70: fe:18:52:fe:1d:0d:c1:6c:7c:e2:34:97:8b:8f:6e: bd:41:be:33:64:26:18:c0:17:7e:ca:e6:f9:be:8e: bf:97:4a:9c:5e:ae:46:27:d7:05:d3:cb:c8:6d:85: 15:07:d6:05:7b:d0:a5:40:9a:c2:69:90:65:2f:24: d1:a0:72:e9:76:aa:84:35:24:6e:eb:a3:be:b2:14: 5e:54:d2:25:eb:7d:a1:c7:16:f6:cf:cd:ed:fe:ef: f4:9f:47:a5:98:00:bf:57:da:a0:ca:c2:14:fc:6d: 6f:98:84:9c:f6:f4:74:b1:9c:97:11:52:22:d0:ab: 7b:60:59:ac:11:24:90:f3:7a:b6:70:ca:a1:85:c5: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:FC:84:2E:18:50:1A:AA:E6:F2:DB:1A:E1:1F:40:0D:28:2B:7A X509v3 Authority Key Identifier: keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:17:dd:42:71:43:6e:82:7a:09:cd:02:31:7a:9e:bc:6a:a1: fa:58:bb:43:97:8e:ac:d4:75:56:20:9f:eb:4e:87:32:60:4e: 84:28:1c:ac:68:fa:4c:2a:e4:a4:96:e5:c9:dc:70:1a:0c:a4: 0e:9f:e6:35:92:09:3c:df:39:0d:2d:8c:17:34:c7:1e:f8:be: 66:bb:38:2c:89:a1:81:3e:77:45:f2:29:89:fb:12:d1:c6:67: 7b:f4:a6:b0:1c:ca:56:f6:5a:c5:c6:1b:84:7e:59:69:98:7b: 7d:49:53:e0:11:65:5f:db:00:43:e6:d5:e9:7a:aa:7b:da:a5: bd:40:90:64:49:8b:72:77:aa:fa:18:c9:a4:fc:3e:c5:54:50: 3d:80:18:83:2a:71:1a:a4:3e:5a:94:66:2c:11:25:78:5f:62: 3a:ab:a6:f2:41:ef:92:0c:86:b2:df:97:1c:81:58:a8:ce:de: 4f:e7:81:e6:85:62:68:dd:25:42:ee:03:43:16:b6:c1:1a:26: a0:74:5a:3a:69:ad:f9:51:44:ba:e7:72:99:6a:c8:79:82:0c: a6:2f:94:e2:fe:af:95:49:58:7e:d2:2e:0f:55:21:5b:ed:17: 9d:22:c3:c4:52:bc:76:91:ee:42:cf:d2:d3:3e:e0:09:08:6c: 29:85:e1:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+rxbUydIHMxPm9GeyH2JzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkw ZGU5ZjgwHhcNMjYwMTI3MDkwMDQ2WhcNMjYwMTI4MDkwMDQ2WjAzMTEwLwYDVQQD EygzNzFlZmM4NDJlMTg1MDFhYWFlNmYyZGIxYWUxMWY0MDBkMjgyYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FTKcRyvPjnP41wveOGz0YKIKiE5 vln+ffDr93dxDQyvWvlka5GQ5dqkQV6EJbTohQ3JYiOQxjCC5/ncZWMR38qYv9Tf nBVtQ/DAcNNx/bscYMADrMWNWElMowD/ZpCHM4CuQ1/MYYyYYjagk+dOKQ/qXthh 4HD+GFL+HQ3BbHziNJeLj269Qb4zZCYYwBd+yub5vo6/l0qcXq5GJ9cF08vIbYUV B9YFe9ClQJrCaZBlLyTRoHLpdqqENSRu66O+shReVNIl632hxxb2z83t/u/0n0el mAC/V9qgysIU/G1vmISc9vR0sZyXEVIi0Kt7YFmsESSQ83q2cMqhhcVPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDce/IQuGFAaquby2xrhH0ANKCt6MB8GA1UdIwQY MBaAFBrcAJPFr4lM9SC1k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUt ZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2 LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBfdQnFD boJ6Cc0CMXqevGqh+li7Q5eOrNR1ViCf606HMmBOhCgcrGj6TCrkpJblydxwGgyk Dp/mNZIJPN85DS2MFzTHHvi+Zrs4LImhgT53RfIpifsS0cZne/SmsBzKVvZaxcYb hH5ZaZh7fUlT4BFlX9sAQ+bV6Xqqe9qlvUCQZEmLcneq+hjJpPw+xVRQPYAYgypx GqQ+WpRmLBEleF9iOqum8kHvkgyGst+XHIFYqM7eT+eB5oViaN0lQu4DQxa2wRom oHRaOmmt+VFEuudymWrIeYIMpi+U4v6vlUlYftIuD1UhW+0XnSLDxFK8dpHuQs/S 0z7gCQhsKYXhvw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:16:11 2026 by rpki-client