This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json) Hash identifier: kn5KaucutzdKxVpZpCOYi8GnkWxaIjy6s+yFmbl0i94= Subject key identifier: FE:7C:82:6C:3C:A6:92:57:81:30:55:9A:A1:23:FB:76:8A:66:7E:8D Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019BFCC114F025FEDDD7270A6B5D212E6D22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft Manifest number: 040B Signing time: Tue 27 Jan 2026 00:01:10 +0000 Manifest this update: Tue 27 Jan 2026 00:01:10 +0000 Manifest next update: Wed 28 Jan 2026 00:01:10 +0000 Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: oZRVAv0LWOKXrQd8z7TgzK0kpPMlorSfP7DAjZseHjI=) 2: 9QlF0IX_u34_i50MZFQglOV4b78.roa (hash: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI=) 3: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (hash: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:14:f0:25:fe:dd:d7:27:0a:6b:5d:21:2e:6d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Jan 27 00:01:10 2026 GMT Not After : Jan 28 00:01:10 2026 GMT Subject: CN=fe7c826c3ca692578130559aa123fb768a667e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:7a:31:b1:01:24:a9:e2:b5:0e:c7:68:43: 17:54:50:1c:88:a6:88:30:56:64:65:74:d1:df:fc: 81:f2:2c:69:2b:e3:ef:fe:22:6e:23:17:81:2f:47: b4:44:de:52:1a:b9:56:b6:fd:c6:32:c6:c2:d4:2e: 7e:9b:20:e7:36:f0:39:6b:6d:c1:47:0a:d3:fe:b5: 1a:bd:4a:6d:06:06:20:2a:6e:d4:84:b8:1a:af:eb: c2:42:4f:d1:95:b2:37:c5:7f:07:2c:79:8f:d1:85: 36:c4:bc:76:f8:63:a1:7e:2d:ab:a3:72:bb:a9:23: 25:da:bd:a5:a2:ec:81:72:ac:57:61:98:6b:a3:91: f6:b9:44:7b:59:53:6c:97:46:d5:fa:47:ce:19:94: 1d:09:43:3f:9f:4f:a6:1d:00:4c:e4:27:a0:89:06: cb:3f:07:25:a8:fb:a7:e5:a1:31:03:63:16:1a:a7: c7:1f:7b:29:72:12:fd:a8:b7:ea:36:0c:14:e5:d9: cd:75:cf:98:ff:e7:ee:59:b9:f0:7b:7d:59:a0:8a: a7:a1:83:0c:32:3e:59:68:a7:4a:c0:bf:ee:7c:2d: a4:a7:c0:66:ba:20:e1:9a:25:a3:e3:03:77:9f:3b: 2a:b3:d1:02:5f:d3:d6:96:e8:51:1b:2f:51:7c:e9: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:82:6C:3C:A6:92:57:81:30:55:9A:A1:23:FB:76:8A:66:7E:8D X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ae:f4:ac:24:fd:cb:64:65:06:74:4f:bc:bf:d2:16:09:b0: 1f:42:9b:db:59:be:82:44:60:54:15:2d:b6:5b:45:0e:51:35: 92:06:82:d1:41:5d:ae:e3:88:6f:32:76:33:cc:c6:b2:6e:68: 7f:25:8d:eb:37:33:99:d2:ca:3f:5c:6f:ee:69:2a:c6:68:fb: c4:3e:d4:80:29:83:70:20:f4:d3:3c:95:92:d9:8c:9a:b3:4c: b9:f5:6f:c4:75:72:f9:69:01:e2:d3:0a:6a:e4:87:e9:b3:5f: 51:a1:45:88:33:99:03:40:d6:10:dc:13:e9:6e:f6:da:93:70: 0b:ef:67:c8:9e:6c:18:8d:da:09:9f:db:56:2c:cb:c4:a5:86: 12:8a:a0:d1:f2:96:ca:cb:da:85:e0:91:fb:6a:98:ee:a0:36: bd:d3:ec:d4:e5:70:c5:e0:3a:46:a1:83:a7:f9:5d:d4:0b:1f: 17:50:71:5f:ab:e7:e2:b8:1e:32:a4:b9:92:3d:ef:06:7d:c3: 56:ec:90:b2:55:25:86:61:0e:d8:39:64:29:62:67:7a:7b:46: 48:2e:de:79:62:83:6a:09:09:d3:7b:97:fc:cd:a2:2c:16:25: b1:4b:1e:7f:1f:3c:30:e0:89:88:0e:c3:a9:49:f7:02:52:53: bf:1e:ca:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wRTwJf7d1ycKa10hLm0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjYwMTI3MDAwMTEwWhcNMjYwMTI4MDAwMTEwWjAzMTEwLwYDVQQD EyhmZTdjODI2YzNjYTY5MjU3ODEzMDU1OWFhMTIzZmI3NjhhNjY3ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZh6MbEBJKnitQ7HaEMXVFAciKaI MFZkZXTR3/yB8ixpK+Pv/iJuIxeBL0e0RN5SGrlWtv3GMsbC1C5+myDnNvA5a23B RwrT/rUavUptBgYgKm7UhLgar+vCQk/RlbI3xX8HLHmP0YU2xLx2+GOhfi2ro3K7 qSMl2r2louyBcqxXYZhro5H2uUR7WVNsl0bV+kfOGZQdCUM/n0+mHQBM5CegiQbL PwclqPun5aExA2MWGqfHH3spchL9qLfqNgwU5dnNdc+Y/+fuWbnwe31ZoIqnoYMM Mj5ZaKdKwL/ufC2kp8BmuiDhmiWj4wN3nzsqs9ECX9PWluhRGy9RfOljmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP58gmw8ppJXgTBVmqEj+3aKZn6NMB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWq70rCT9 y2RlBnRPvL/SFgmwH0Kb21m+gkRgVBUttltFDlE1kgaC0UFdruOIbzJ2M8zGsm5o fyWN6zczmdLKP1xv7mkqxmj7xD7UgCmDcCD00zyVktmMmrNMufVvxHVy+WkB4tMK auSH6bNfUaFFiDOZA0DWENwT6W722pNwC+9nyJ5sGI3aCZ/bVizLxKWGEoqg0fKW ysvaheCR+2qY7qA2vdPs1OVwxeA6RqGDp/ld1AsfF1BxX6vn4rgeMqS5kj3vBn3D VuyQslUlhmEO2DlkKWJnentGSC7eeWKDagkJ03uX/M2iLBYlsUsefx88MOCJiA7D qUn3AlJTvx7KCw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:42:37 2026 by rpki-client