This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json) Hash identifier: 3xwyVF9RvlNFEp5nOStvsIbrYLE6SMgBDtEA+7Oah0M= Subject key identifier: 94:D8:1D:11:5A:A4:36:C5:10:2D:6A:96:7A:02:95:6F:AB:1D:FB:C8 Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Certificate serial: 019BF8ADD8E581B52212034893D1C5C1B774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft Manifest number: 0948 Signing time: Mon 26 Jan 2026 05:01:41 +0000 Manifest this update: Mon 26 Jan 2026 05:01:41 +0000 Manifest next update: Tue 27 Jan 2026 05:01:41 +0000 Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: MEi2UYPjJ6PO+qiJlG8fzGzMyx9viSscoug2UF5BPTI=) 2: jZRy-3Fxbh9CfMaGDbVO9ZrP7QM.roa (hash: l2vMq5ofdygHJTaEMvFxOysLBC/j3LYxWsrlWfvSH3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:d8:e5:81:b5:22:12:03:48:93:d1:c5:c1:b7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Validity Not Before: Jan 26 05:01:41 2026 GMT Not After : Jan 27 05:01:41 2026 GMT Subject: CN=94d81d115aa436c5102d6a967a02956fab1dfbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:5b:d3:8d:b7:44:03:8e:38:bb:93:3d:aa: 33:2b:b7:64:96:04:52:4e:df:ad:e5:ee:e4:d8:9a: d4:2a:b2:6e:e6:54:c4:a8:a8:06:be:15:fe:d3:3c: e8:66:b6:8b:9e:b8:c1:b6:28:31:98:4e:33:8f:7f: 8c:7f:83:f0:11:0c:d7:35:ad:ba:ab:31:6b:e0:2c: f0:b4:71:b2:8f:d0:c4:eb:00:92:35:a7:bc:91:f7: 05:4b:55:ca:ae:4e:db:64:04:b1:1b:43:fa:02:3f: c0:eb:48:0f:58:1b:a0:4d:73:5c:e4:76:3a:a2:d5: c8:6e:cb:49:5b:9b:65:b0:40:97:f7:42:0f:4b:da: 67:74:2d:2c:c7:3d:db:ee:ab:d2:c4:5b:33:50:f1: 3c:2e:b7:fa:17:21:ee:bc:7f:17:62:5a:e3:e3:d0: a9:cf:ff:9e:fb:2d:a8:4b:be:a9:8e:ad:58:7b:80: 0d:69:6a:6a:a6:03:9a:dd:4e:99:47:18:d5:15:37: d4:c8:16:76:cd:2c:c1:fe:16:c4:49:38:e1:50:5a: 54:bb:16:b4:30:39:cd:dd:a8:de:b3:30:12:08:a0: 1b:12:23:48:11:b7:b2:0b:d8:9d:d7:47:fb:dc:44: 7c:a7:4e:e7:79:f0:3e:55:ba:d0:49:89:ff:43:90: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D8:1D:11:5A:A4:36:C5:10:2D:6A:96:7A:02:95:6F:AB:1D:FB:C8 X509v3 Authority Key Identifier: keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:bc:c6:1d:51:53:c0:91:27:43:80:b5:ae:2e:1c:bc:05:55: a1:cf:53:b7:9f:b4:0e:09:1b:45:94:eb:76:3c:6f:84:97:20: d5:e9:ad:d5:b1:5a:1e:c7:ab:b3:a9:49:4f:73:09:71:e8:32: 56:cc:f1:e6:3f:cc:89:f8:84:30:c8:c3:48:db:90:5b:13:89: 70:48:78:e8:f8:88:69:23:5f:a5:4d:5c:e5:81:e4:60:e9:b5: 09:93:16:65:88:d8:5d:7d:2e:0a:43:97:72:c2:ab:f7:00:ee: b1:95:8a:6e:ad:5c:ad:be:12:ed:e7:b3:b0:37:1d:0f:2c:8e: c1:50:41:c5:de:71:69:48:a2:f4:39:4e:83:9f:ac:e9:27:63: 53:2c:46:03:4e:8f:20:b8:e9:76:b7:2b:aa:16:2a:37:dd:e1: 3c:71:b7:2b:b2:ea:0a:d9:42:5c:e0:16:7b:ef:d1:43:de:54: a5:87:57:98:15:33:35:59:8e:95:e9:0e:8e:47:ff:8f:cb:62: b6:83:bc:f1:da:35:5e:ff:07:e8:30:5d:c7:05:63:01:56:ae: 66:30:6b:a1:fa:2b:4b:a6:1d:10:f6:e1:e7:12:28:41:7e:9c: a8:c2:04:54:55:b8:bd:bc:23:35:04:f4:f3:91:e9:55:64:41: e3:9c:83:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rdjlgbUiEgNIk9HFwbd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmJhMzhhODcwN2ZkMjMxYzM4ODdlNGE1MmJkY2RlZGFi MjAzMjMwHhcNMjYwMTI2MDUwMTQxWhcNMjYwMTI3MDUwMTQxWjAzMTEwLwYDVQQD Eyg5NGQ4MWQxMTVhYTQzNmM1MTAyZDZhOTY3YTAyOTU2ZmFiMWRmYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndVb0423RAOOOLuTPaozK7dklgRS Tt+t5e7k2JrUKrJu5lTEqKgGvhX+0zzoZraLnrjBtigxmE4zj3+Mf4PwEQzXNa26 qzFr4CzwtHGyj9DE6wCSNae8kfcFS1XKrk7bZASxG0P6Aj/A60gPWBugTXNc5HY6 otXIbstJW5tlsECX90IPS9pndC0sxz3b7qvSxFszUPE8Lrf6FyHuvH8XYlrj49Cp z/+e+y2oS76pjq1Ye4ANaWpqpgOa3U6ZRxjVFTfUyBZ2zSzB/hbESTjhUFpUuxa0 MDnN3ajeszASCKAbEiNIEbeyC9id10f73ER8p07nefA+VbrQSYn/Q5DkOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTYHRFapDbFEC1qlnoClW+rHfvIMB8GA1UdIwQY MBaAFBr7o4qHB/0jHDiH5KUr3N7asgMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEt MDk5NmFlZDMyZjNiLzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEtMDk5NmFlZDMyZjNi LzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbzGHVFT wJEnQ4C1ri4cvAVVoc9Tt5+0DgkbRZTrdjxvhJcg1emt1bFaHsers6lJT3MJcegy Vszx5j/MifiEMMjDSNuQWxOJcEh46PiIaSNfpU1c5YHkYOm1CZMWZYjYXX0uCkOX csKr9wDusZWKbq1crb4S7eezsDcdDyyOwVBBxd5xaUii9DlOg5+s6SdjUyxGA06P ILjpdrcrqhYqN93hPHG3K7LqCtlCXOAWe+/RQ95UpYdXmBUzNVmOlekOjkf/j8ti toO88do1Xv8H6DBdxwVjAVauZjBroforS6YdEPbh5xIoQX6cqMIEVFW4vbwjNQT0 85HpVWRB45yDJw== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:24 2026 by rpki-client