This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json) Hash identifier: YA6WxAcyeb3IJdtz8BqgGC4LZGYiwC9rCsYygutYDyA= Subject key identifier: BD:AE:A5:20:F9:FB:B0:60:93:0A:2E:D5:29:57:82:EC:C2:DA:86:EC Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c Certificate serial: 019BFE7861ED7C51B98136D166B43CB1C43A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft Manifest number: 0F1D Signing time: Tue 27 Jan 2026 08:01:00 +0000 Manifest this update: Tue 27 Jan 2026 08:01:00 +0000 Manifest next update: Wed 28 Jan 2026 08:01:00 +0000 Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=) 2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: mP6GawHErBRiEVwJwm0LS9QhBXipbLnSj5rmObf+03E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:61:ed:7c:51:b9:81:36:d1:66:b4:3c:b1:c4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Validity Not Before: Jan 27 08:01:00 2026 GMT Not After : Jan 28 08:01:00 2026 GMT Subject: CN=bdaea520f9fbb060930a2ed5295782ecc2da86ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:66:97:7f:08:2c:49:f6:d2:64:f9:04:a9: 8e:0f:28:ed:2d:fb:8b:f0:f4:df:f3:4d:9f:7e:37: 7b:af:30:59:63:94:14:9f:7d:c0:23:8b:9e:a9:47: dc:a6:2d:59:cf:04:82:a0:cf:ea:af:f9:47:43:98: 37:d7:19:de:d4:4b:69:60:38:28:54:e7:ae:12:d3: 5b:f9:59:be:8d:e9:81:2a:3e:70:bf:95:00:4a:5b: 02:b4:50:6c:1a:e4:c1:12:32:fc:5f:a1:41:72:38: 7f:db:9c:f8:e1:5b:dc:e1:a7:de:5a:6d:eb:b7:26: a9:d0:0f:d7:64:f6:aa:e0:d1:a0:7a:31:be:90:56: 52:65:fe:13:b4:7a:af:f0:17:c2:3f:31:82:83:79: 77:b0:d5:05:ff:44:ae:a0:db:da:85:91:4c:0f:6e: 75:d5:c3:e6:31:27:79:20:c6:44:2e:47:2b:1b:79: 00:50:18:6d:41:9a:9b:39:9a:2b:12:19:bc:ef:d6: f7:d3:71:a8:4c:27:e0:c9:59:38:8f:48:6b:06:0d: b3:3e:70:e6:02:4c:30:f3:c5:a8:6c:bc:78:fe:62: 6c:56:c5:05:cf:2e:1b:ca:d4:4f:78:d7:8a:c8:7e: d6:72:e1:23:18:66:55:42:b8:32:af:16:bb:59:e7: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:A5:20:F9:FB:B0:60:93:0A:2E:D5:29:57:82:EC:C2:DA:86:EC X509v3 Authority Key Identifier: keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bf:3c:84:75:58:af:b0:37:7b:f6:f0:f0:1e:24:8f:d1:65: ce:b8:b6:58:ec:89:1d:f1:8e:c4:bb:25:b3:bb:84:bf:1b:84: 74:41:b8:bd:41:f7:a7:70:e1:54:e9:72:47:e5:e2:32:f9:a0: 51:a8:b0:d4:98:4b:69:79:79:58:c7:0a:23:3a:e6:3f:c3:b6: 8d:5b:ac:59:10:c1:b1:95:c4:80:07:d0:6e:db:e4:6a:8a:15: f4:da:c0:bf:eb:e3:1b:5a:2a:00:39:88:f0:19:55:21:8e:b5: 82:88:dc:16:2f:90:bd:21:d2:4c:bc:67:7a:c8:53:53:a3:01: 56:f7:1f:3a:6b:ab:ee:9e:cc:c3:9d:16:9e:86:6d:ad:54:93: 82:b8:48:cb:fb:5e:1c:a5:36:48:a2:31:24:62:6f:24:0d:b6: bd:a7:36:45:71:d3:20:d8:84:4c:47:35:f9:aa:77:0c:79:23: b2:f2:85:1d:dd:cd:f0:71:aa:30:6c:27:ca:bf:33:14:b4:6e: 66:2c:17:c4:a0:07:58:45:aa:13:a8:89:10:c1:50:82:d3:43: 10:99:09:49:eb:17:13:cd:28:91:3f:52:03:48:e7:ef:8e:ef: 2b:e2:c1:b6:29:75:f7:bf:ad:1f:1a:33:c1:24:da:82:47:ce: ec:72:30:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eGHtfFG5gTbRZrQ8scQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2 YmFlNGMwHhcNMjYwMTI3MDgwMTAwWhcNMjYwMTI4MDgwMTAwWjAzMTEwLwYDVQQD EyhiZGFlYTUyMGY5ZmJiMDYwOTMwYTJlZDUyOTU3ODJlY2MyZGE4NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrpml38ILEn20mT5BKmODyjtLfuL 8PTf802ffjd7rzBZY5QUn33AI4ueqUfcpi1ZzwSCoM/qr/lHQ5g31xne1EtpYDgo VOeuEtNb+Vm+jemBKj5wv5UASlsCtFBsGuTBEjL8X6FBcjh/25z44Vvc4afeWm3r tyap0A/XZPaq4NGgejG+kFZSZf4TtHqv8BfCPzGCg3l3sNUF/0SuoNvahZFMD251 1cPmMSd5IMZELkcrG3kAUBhtQZqbOZorEhm879b303GoTCfgyVk4j0hrBg2zPnDm Akww88WobLx4/mJsVsUFzy4bytRPeNeKyH7WcuEjGGZVQrgyrxa7WedD7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2upSD5+7Bgkwou1SlXguzC2obsMB8GA1UdIwQY MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr88hHVY r7A3e/bw8B4kj9Flzri2WOyJHfGOxLsls7uEvxuEdEG4vUH3p3DhVOlyR+XiMvmg Uaiw1JhLaXl5WMcKIzrmP8O2jVusWRDBsZXEgAfQbtvkaooV9NrAv+vjG1oqADmI 8BlVIY61gojcFi+QvSHSTLxneshTU6MBVvcfOmur7p7Mw50WnoZtrVSTgrhIy/te HKU2SKIxJGJvJA22vac2RXHTINiETEc1+ap3DHkjsvKFHd3N8HGqMGwnyr8zFLRu ZiwXxKAHWEWqE6iJEMFQgtNDEJkJSesXE80okT9SA0jn747vK+LBtil197+tHxoz wSTagkfO7HIwBw== -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:09 2026 by rpki-client