This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: 1ZnfhcLQ8zUNYP72hwlnf+JJq+kvxuOC+E8HImhBoZc= Subject key identifier: 9B:66:EF:A6:EF:AA:25:DE:6A:39:D1:81:66:6A:CE:84:7F:49:20:F5 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019C2B50F9E04E46480CA4992C26134C4C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0391 Signing time: Thu 05 Feb 2026 01:00:52 +0000 Manifest this update: Thu 05 Feb 2026 01:00:52 +0000 Manifest next update: Fri 06 Feb 2026 01:00:52 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: NXctLYi2UtRtihl3J7Jat5A5PYL8pFB62J5yrZFxXBY=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2b:50:f9:e0:4e:46:48:0c:a4:99:2c:26:13:4c:4c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Feb 5 01:00:52 2026 GMT Not After : Feb 6 01:00:52 2026 GMT Subject: CN=9b66efa6efaa25de6a39d181666ace847f4920f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:34:d6:e7:23:9e:c9:57:78:f4:59:4a:6f: 6f:97:24:c8:54:da:46:33:23:56:a2:ae:6c:85:94: c3:32:f4:54:18:a1:2f:ef:10:00:b1:03:5b:e2:04: b6:75:6c:5f:3b:fc:71:97:a1:01:cc:db:4a:ca:af: 41:61:cf:c6:48:a9:ca:bd:65:e6:a3:88:7c:7a:a3: 24:24:d4:be:08:91:e9:20:30:c1:90:3c:b1:38:47: 2c:62:e9:c9:ff:67:cf:c8:80:e8:86:b2:21:cb:98: ad:3f:1e:e0:c1:e3:e2:f7:b6:51:ba:eb:bf:d7:7b: 7b:81:d0:f8:82:cf:ab:1e:9b:74:3d:2a:49:c9:27: d6:79:83:f6:c0:e2:fb:a5:d8:b9:c2:b1:cd:60:72: 72:ea:eb:a7:e1:56:ee:e4:0b:a4:35:c6:36:76:5b: 56:63:b8:2e:3c:ff:2b:9e:0c:31:5c:11:d6:54:56: a6:02:26:21:f4:f2:a9:1e:24:43:58:c7:70:e1:c2: 89:d2:1d:16:43:11:b0:4b:6a:4d:55:12:2a:30:d9: 0e:2a:53:81:ea:89:ec:e3:07:a1:6b:2b:3b:8f:35: 58:61:0d:e0:a6:14:a1:22:08:c3:b2:9b:34:62:b5: 13:d2:4e:4b:8e:c8:ce:95:5e:96:92:a1:e6:53:5e: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:66:EF:A6:EF:AA:25:DE:6A:39:D1:81:66:6A:CE:84:7F:49:20:F5 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:71:bd:09:91:e9:81:31:64:fc:13:d8:a5:4a:ae:cf:d0:01: 9f:93:ca:a9:03:d7:aa:35:c1:db:ee:d7:be:d2:8c:71:e0:cb: 3b:8b:75:ba:b4:cf:7b:a8:c3:73:c6:5e:d3:a0:fc:e8:a6:64: 75:78:b2:f0:ae:a1:89:2e:00:78:47:f6:c8:45:9d:68:2a:b3: f2:e9:33:58:38:c4:27:7f:b2:73:49:fa:a0:34:4c:e3:c5:f8: a4:a7:0d:ef:d6:cb:79:35:29:96:ed:9f:ce:4e:f8:08:25:3b: 44:a7:30:b2:f1:ec:d5:56:bd:80:cc:5a:eb:b1:d1:6f:2e:7f: 81:77:52:f7:a2:db:dc:4d:96:a4:0a:1d:c9:55:1f:81:59:bc: 43:f9:b0:45:7e:6c:93:ea:6c:9e:05:8f:c4:d5:9d:b2:ff:9f: a2:c0:80:87:75:56:88:03:ed:48:41:2f:b8:ed:e1:5f:65:00: a3:c9:d8:c4:31:1d:3d:53:bd:6a:4f:de:77:3d:ce:a2:8b:17: d8:67:37:98:8c:3a:6f:69:b6:2b:ea:0e:d4:20:5a:31:93:ee: 88:59:ba:60:0e:05:21:cb:bf:1b:bf:6d:59:26:fa:9c:e1:9a: d8:d6:d0:eb:f5:a0:2e:80:27:68:0b:9a:01:78:6c:c7:ea:5e: 4d:87:90:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwrUPngTkZIDKSZLCYTTEyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMjA1MDEwMDUyWhcNMjYwMjA2MDEwMDUyWjAzMTEwLwYDVQQD Eyg5YjY2ZWZhNmVmYWEyNWRlNmEzOWQxODE2NjZhY2U4NDdmNDkyMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1s01ucjnslXePRZSm9vlyTIVNpG MyNWoq5shZTDMvRUGKEv7xAAsQNb4gS2dWxfO/xxl6EBzNtKyq9BYc/GSKnKvWXm o4h8eqMkJNS+CJHpIDDBkDyxOEcsYunJ/2fPyIDohrIhy5itPx7gwePi97ZRuuu/ 13t7gdD4gs+rHpt0PSpJySfWeYP2wOL7pdi5wrHNYHJy6uun4Vbu5AukNcY2dltW Y7guPP8rngwxXBHWVFamAiYh9PKpHiRDWMdw4cKJ0h0WQxGwS2pNVRIqMNkOKlOB 6ons4wehays7jzVYYQ3gphShIgjDsps0YrUT0k5LjsjOlV6WkqHmU15OoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtm76bvqiXeajnRgWZqzoR/SSD1MB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnG9CZHp gTFk/BPYpUquz9ABn5PKqQPXqjXB2+7XvtKMceDLO4t1urTPe6jDc8Ze06D86KZk dXiy8K6hiS4AeEf2yEWdaCqz8ukzWDjEJ3+yc0n6oDRM48X4pKcN79bLeTUplu2f zk74CCU7RKcwsvHs1Va9gMxa67HRby5/gXdS96Lb3E2WpAodyVUfgVm8Q/mwRX5s k+psngWPxNWdsv+fosCAh3VWiAPtSEEvuO3hX2UAo8nYxDEdPVO9ak/edz3OoosX 2Gc3mIw6b2m2K+oO1CBaMZPuiFm6YA4FIcu/G79tWSb6nOGa2NbQ6/WgLoAnaAua AXhsx+peTYeQ7Q== -----END CERTIFICATE-----Generated at Thu Feb 5 04:52:13 2026 by rpki-client