This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: JQzhLImdt4c7cOItiwbHFAvtfrLWEneFO9n7Jy+oiW4= Subject key identifier: 04:FE:EB:74:E7:B3:A8:D2:EC:98:DC:45:95:20:BE:C5:06:3A:D7:82 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019BCFB1CC6E3589335198AA251F3327A856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 01CF Signing time: Sun 18 Jan 2026 06:01:34 +0000 Manifest this update: Sun 18 Jan 2026 06:01:34 +0000 Manifest next update: Mon 19 Jan 2026 06:01:34 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: nKa062JwUU+5mi+qtP52ASZSD+lHhn3NrDvYQPfeS0Y=) 3: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 4: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 5: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 6: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 7: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 8: dFj5GUqDYd98kL6xaY89BZmV-eM.roa (hash: EnCrHK5NIqJpxBDpMWNrNTC6CqIC7188rVdf1D5/tYM=) 9: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 10: g0w0gW5IMuXa9QuyDN22I9fajeg.roa (hash: XnCM+m5DLyfzTRDuAC+Z5x9dwEbV1mW0N9CtTlchKC8=) 11: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 12: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:b1:cc:6e:35:89:33:51:98:aa:25:1f:33:27:a8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 18 06:01:34 2026 GMT Not After : Jan 19 06:01:34 2026 GMT Subject: CN=04feeb74e7b3a8d2ec98dc459520bec5063ad782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:3b:1d:d1:1e:53:8f:60:8a:4f:b1:97:c9: 70:57:61:c2:43:15:ae:f4:58:ca:db:36:32:12:53: d5:8e:cc:ee:83:d5:99:6e:90:4a:c8:08:98:b7:ed: 61:4a:97:a4:c6:5b:a4:9e:41:73:c5:28:1d:04:dc: 18:3b:f3:fa:aa:19:fd:ee:4d:25:2c:97:27:58:15: 9e:0e:6c:41:c4:ff:ed:ed:46:9d:27:92:f3:24:de: 88:af:00:61:44:c7:39:d5:58:30:3b:29:56:c7:61: b5:92:4b:f5:d8:b4:bd:9c:e6:31:6e:43:b8:05:0c: cd:3b:d6:57:a5:9f:b5:8b:d2:98:82:bc:fe:d5:d8: ea:54:a2:f0:5e:db:3a:83:cf:43:0a:a7:ba:8c:64: 4c:7b:91:8a:a1:29:56:79:ab:e9:ef:59:ce:a6:56: 45:f1:a6:b7:dd:8d:59:47:ad:f9:04:88:72:3a:86: 14:d1:e9:68:fc:fd:f7:c5:68:f0:93:81:04:b5:28: 9b:4c:47:4d:ca:8e:10:06:56:04:21:4d:4a:85:f8: 1f:f2:69:eb:24:2b:51:6d:b2:13:e7:fd:64:e3:f0: 2b:03:78:35:87:ed:67:2b:5a:86:72:7c:08:a7:85: 0d:35:d1:03:86:47:7c:e3:10:79:fc:65:13:08:79: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:EB:74:E7:B3:A8:D2:EC:98:DC:45:95:20:BE:C5:06:3A:D7:82 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:44:88:e0:b6:f2:2b:aa:3e:15:a8:70:15:fd:17:76:cd: 93:67:0c:12:9c:c9:7e:54:96:6c:85:f4:22:a0:78:c9:a4:57: dd:b0:3f:84:8e:70:2d:2d:44:10:55:70:fc:97:62:27:26:42: 9f:a5:c1:f5:6e:d2:36:65:77:01:ae:ee:03:80:e6:48:98:81: 5c:1c:93:7d:4a:71:2f:50:34:26:d4:b8:8b:04:fe:f8:80:2b: e4:42:0c:14:69:34:90:20:14:e9:88:0d:1d:e7:07:d2:85:d7: 94:0a:2e:0a:0c:1e:a2:90:f1:18:eb:80:e9:77:11:62:be:9a: bc:8a:00:35:cf:9c:2c:85:d4:6f:eb:cf:72:5e:0e:37:75:ac: b9:38:d9:f2:c1:0f:c4:dc:86:fe:5a:6b:a2:4b:d0:29:94:0d: 2b:85:4c:98:99:52:45:25:18:c2:bd:6f:2e:95:0a:8f:e2:54: d6:22:44:02:10:c5:c9:71:54:e1:4e:58:33:8e:c2:d9:8f:88: 57:ce:9d:3a:1a:e0:29:ef:21:4d:02:08:47:48:a9:46:4e:df: 9f:a9:17:ae:5b:27:59:dc:b6:39:73:2c:82:07:b5:aa:63:2a: 46:3a:45:72:2d:e0:16:f4:b0:15:02:a6:29:8c:d8:47:52:9c: ba:c7:31:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPscxuNYkzUZiqJR8zJ6hWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTE4MDYwMTM0WhcNMjYwMTE5MDYwMTM0WjAzMTEwLwYDVQQD EygwNGZlZWI3NGU3YjNhOGQyZWM5OGRjNDU5NTIwYmVjNTA2M2FkNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupo7HdEeU49gik+xl8lwV2HCQxWu 9FjK2zYyElPVjszug9WZbpBKyAiYt+1hSpekxluknkFzxSgdBNwYO/P6qhn97k0l LJcnWBWeDmxBxP/t7UadJ5LzJN6IrwBhRMc51VgwOylWx2G1kkv12LS9nOYxbkO4 BQzNO9ZXpZ+1i9KYgrz+1djqVKLwXts6g89DCqe6jGRMe5GKoSlWeavp71nOplZF 8aa33Y1ZR635BIhyOoYU0elo/P33xWjwk4EEtSibTEdNyo4QBlYEIU1Khfgf8mnr JCtRbbIT5/1k4/ArA3g1h+1nK1qGcnwIp4UNNdEDhkd84xB5/GUTCHm8OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT+63Tns6jS7JjcRZUgvsUGOteCMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAialEiOC2 8iuqPhWocBX9F3bNk2cMEpzJflSWbIX0IqB4yaRX3bA/hI5wLS1EEFVw/JdiJyZC n6XB9W7SNmV3Aa7uA4DmSJiBXByTfUpxL1A0JtS4iwT++IAr5EIMFGk0kCAU6YgN HecH0oXXlAouCgweopDxGOuA6XcRYr6avIoANc+cLIXUb+vPcl4ON3WsuTjZ8sEP xNyG/lprokvQKZQNK4VMmJlSRSUYwr1vLpUKj+JU1iJEAhDFyXFU4U5YM47C2Y+I V86dOhrgKe8hTQIIR0ipRk7fn6kXrlsnWdy2OXMsgge1qmMqRjpFci3gFvSwFQKm KYzYR1Kcuscxgg== -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:26 2026 by rpki-client