This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json) Hash identifier: TTpGxZ6doqgoGieCRxUl74//xN94MS96CgbIOEpyKcg= Subject key identifier: 83:F9:F7:BD:0C:9E:3E:6F:32:BF:B0:AF:0B:7C:4A:AD:36:D7:F9:2B Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Certificate serial: 019BDBB687C40EC0B97D447D8D1C04174C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft Manifest number: 0278 Signing time: Tue 20 Jan 2026 14:02:11 +0000 Manifest this update: Tue 20 Jan 2026 14:02:11 +0000 Manifest next update: Wed 21 Jan 2026 14:02:11 +0000 Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: AX4uDdYsxWDjdcmXUFSKJbr2uP1BT7OsbQQ2FhFcx/U=) 2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=) 3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:b6:87:c4:0e:c0:b9:7d:44:7d:8d:1c:04:17:4c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Validity Not Before: Jan 20 14:02:11 2026 GMT Not After : Jan 21 14:02:11 2026 GMT Subject: CN=83f9f7bd0c9e3e6f32bfb0af0b7c4aad36d7f92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:b4:57:52:7b:6a:03:58:8e:90:b4:ff:4d: c9:16:b7:ca:51:0b:45:43:3d:4f:7f:e6:6f:0b:3a: 63:ef:bb:11:e7:e1:c6:58:6a:d3:12:61:4a:d1:fa: 39:2b:8a:70:61:74:1e:9f:82:85:c1:37:75:aa:61: d2:6f:33:8b:58:d9:70:ef:2a:cd:24:35:c8:ab:bf: 3c:07:56:04:fe:09:c7:b2:f8:fd:af:89:7d:14:02: f3:aa:72:e8:db:7c:73:04:2e:1e:3f:0a:7a:3e:7c: 03:cc:43:d4:b9:df:8d:69:97:6a:a1:fd:9c:a8:6b: 5c:38:5d:4a:48:11:d3:34:2a:c6:4f:81:dd:30:a4: 6e:02:40:55:75:7b:65:e5:2e:f4:32:47:b3:7b:e0: 03:3b:b6:39:de:43:c4:5e:73:7e:d9:55:9f:53:51: 4d:f4:03:88:ac:cd:ab:0b:16:73:bd:fe:2b:aa:b9: 0f:54:27:32:6c:fc:3d:f4:b8:e2:45:c8:de:77:da: ff:0c:5d:32:65:e3:82:f3:f3:d4:a3:b6:0a:62:e2: 4a:89:d4:54:f9:34:ec:a5:0a:a3:e2:58:d4:ce:e0: 1b:63:c9:26:18:6d:1f:c4:d2:60:22:78:47:6c:42: 51:a3:16:57:3c:36:91:1f:aa:23:c0:9b:8b:b7:2a: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F9:F7:BD:0C:9E:3E:6F:32:BF:B0:AF:0B:7C:4A:AD:36:D7:F9:2B X509v3 Authority Key Identifier: keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:ea:b2:8a:9c:56:91:27:ea:dd:a2:bf:a8:65:cd:9f:d7:5d: 3c:c8:65:f1:46:de:5d:7b:74:c4:b1:ce:14:c7:85:37:a8:5e: be:71:c8:da:fc:15:67:bb:03:59:e2:b0:69:dc:75:48:6c:b8: c9:da:0c:32:20:44:dc:32:41:a2:c2:6c:e9:87:df:20:bd:52: 14:8c:e6:e5:67:5f:1b:fb:d8:60:16:a5:4f:ef:b2:bd:9a:d2: 45:0d:b2:e1:ad:1c:79:83:45:2f:91:02:20:6b:58:c7:ae:7c: da:26:48:81:13:a4:c9:a7:ce:fd:1d:e5:25:11:56:d6:74:7d: dc:6f:89:b5:40:bb:87:39:a4:22:d3:73:b4:97:5d:d0:1f:d3: 9e:a1:9f:30:41:18:aa:a0:ae:55:9e:67:58:46:b6:d6:f4:80: b0:ff:88:74:85:f4:b0:48:21:35:d8:04:80:1f:6a:98:ce:5a: 56:c2:e8:3d:49:ba:1b:ca:a9:bb:7e:8b:84:48:3e:3a:43:b9: e8:b0:4f:ac:7a:70:be:71:05:0f:3f:84:1f:4e:2d:e9:f5:e3: 07:1b:21:a0:ca:a6:38:0c:0a:db:8d:52:fa:ef:41:d4:2d:c9: f6:1a:6a:7f:8c:c5:b3:a1:c3:23:ca:24:d4:5e:a0:db:9d:03: a5:d6:56:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvbtofEDsC5fUR9jRwEF0wzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4 MzFmN2QwHhcNMjYwMTIwMTQwMjExWhcNMjYwMTIxMTQwMjExWjAzMTEwLwYDVQQD Eyg4M2Y5ZjdiZDBjOWUzZTZmMzJiZmIwYWYwYjdjNGFhZDM2ZDdmOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYK0V1J7agNYjpC0/03JFrfKUQtF Qz1Pf+ZvCzpj77sR5+HGWGrTEmFK0fo5K4pwYXQen4KFwTd1qmHSbzOLWNlw7yrN JDXIq788B1YE/gnHsvj9r4l9FALzqnLo23xzBC4ePwp6PnwDzEPUud+NaZdqof2c qGtcOF1KSBHTNCrGT4HdMKRuAkBVdXtl5S70Mkeze+ADO7Y53kPEXnN+2VWfU1FN 9AOIrM2rCxZzvf4rqrkPVCcybPw99LjiRcjed9r/DF0yZeOC8/PUo7YKYuJKidRU +TTspQqj4ljUzuAbY8kmGG0fxNJgInhHbEJRoxZXPDaRH6ojwJuLtyrDKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP5970Mnj5vMr+wrwt8Sq021/krMB8GA1UdIwQY MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+qyipxW kSfq3aK/qGXNn9ddPMhl8UbeXXt0xLHOFMeFN6hevnHI2vwVZ7sDWeKwadx1SGy4 ydoMMiBE3DJBosJs6YffIL1SFIzm5WdfG/vYYBalT++yvZrSRQ2y4a0ceYNFL5EC IGtYx6582iZIgROkyafO/R3lJRFW1nR93G+JtUC7hzmkItNztJdd0B/TnqGfMEEY qqCuVZ5nWEa21vSAsP+IdIX0sEghNdgEgB9qmM5aVsLoPUm6G8qpu36LhEg+OkO5 6LBPrHpwvnEFDz+EH04t6fXjBxshoMqmOAwK241S+u9B1C3J9hpqf4zFs6HDI8ok 1F6g250DpdZW4w== -----END CERTIFICATE-----Generated at Tue Jan 20 15:38:35 2026 by rpki-client