This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json) Hash identifier: Oz5VutsX6D3PUgHMn+AdGSP3KHbqeDOlsiDLPAlyGJk= Subject key identifier: F2:24:F4:76:BF:DE:3C:AD:19:DB:A6:1E:DE:41:2A:71:4A:75:9C:65 Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019BFC52ACAB50C250A9D6048F19DAC0CCB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft Manifest number: 1806 Signing time: Mon 26 Jan 2026 22:00:35 +0000 Manifest this update: Mon 26 Jan 2026 22:00:35 +0000 Manifest next update: Tue 27 Jan 2026 22:00:35 +0000 Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=) 2: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=) 3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: hcrFno2jFXghqm3OS5uEIN0ZQY73q4mnSXh8aZAhC14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:ac:ab:50:c2:50:a9:d6:04:8f:19:da:c0:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Jan 26 22:00:35 2026 GMT Not After : Jan 27 22:00:35 2026 GMT Subject: CN=f224f476bfde3cad19dba61ede412a714a759c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:f0:b9:47:d2:af:6a:66:a4:e9:41:86:00: f6:e2:95:34:fe:95:8b:0d:c6:da:ca:23:74:05:ed: 0a:a3:c7:d9:86:77:d9:1f:40:ad:d7:74:4e:c3:b8: 65:b2:10:3f:ac:4b:82:64:06:83:15:cb:4c:f3:7e: 81:69:94:cb:e7:7f:4c:7d:5c:e2:42:db:22:22:c2: c9:2a:76:bf:58:5d:5c:67:6c:e5:fb:a9:68:0a:57: 94:04:17:6c:91:7e:39:92:67:ae:af:ec:34:00:cd: dd:56:0e:72:b4:4d:eb:e5:3b:c2:bd:5c:0b:c6:12: c8:d9:59:19:c2:cf:65:82:52:6f:25:72:0c:75:47: 26:fb:b3:37:9f:27:26:4f:3f:d3:07:29:ce:94:17: a5:f7:14:a2:01:47:63:98:d6:c3:42:47:99:c1:6c: 2d:59:de:0d:c2:32:43:2e:c8:a6:a4:d0:ff:4f:26: c1:d3:0a:82:e8:b0:a2:a3:0b:97:cf:cf:38:08:d7: 71:e2:44:17:53:2b:e1:eb:f0:97:f8:8e:2d:16:75: 65:f0:41:55:c2:f3:e1:cf:5f:ba:66:4c:7e:72:87: 48:a8:c9:b6:92:5f:ab:83:6c:5c:70:09:b8:2a:94: e6:c3:f1:e0:f6:1a:00:0d:bd:4d:a3:a3:33:58:7e: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:F4:76:BF:DE:3C:AD:19:DB:A6:1E:DE:41:2A:71:4A:75:9C:65 X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cb:63:ea:3f:39:36:ec:96:52:3f:7b:35:a7:76:ac:93:02: 4b:13:da:0d:87:15:c3:52:5f:6b:f5:a0:57:0e:52:18:9a:4f: 43:e1:82:0f:87:19:fa:47:e0:c0:df:56:64:2a:12:2b:28:9d: 55:8f:fe:74:39:16:13:ea:ab:77:d5:65:50:da:20:17:fb:17: c4:40:46:ef:07:18:58:cb:c4:f1:e3:19:35:b2:ca:37:6b:6e: 58:9d:e4:e2:eb:89:f7:25:c3:d3:80:0f:0d:b8:a5:ba:5c:73: 60:e9:07:38:90:7b:aa:f6:b0:c5:1a:0d:3c:dc:75:c5:44:fd: 4e:19:5f:89:8f:d7:eb:44:ff:5c:87:4d:f7:c9:bc:b6:fa:35: 69:8a:76:17:cd:6c:81:17:da:43:bf:b4:88:41:75:4e:d2:52: 7f:44:2b:4b:67:24:fb:d1:fa:3e:59:04:ec:7c:16:00:7e:1e: 70:8d:1f:f7:77:14:02:9b:25:53:6c:50:b1:a9:59:94:0f:f7: c0:25:c5:de:cf:a8:e6:ce:f6:91:87:c4:6f:dc:f6:a4:3b:27: 51:38:e5:3e:56:7f:19:2b:16:56:59:91:ce:ef:35:7e:d4:ab: d0:a0:23:f3:fc:19:e9:c8:00:6d:02:a2:9b:51:29:81:9e:9a: fd:cf:5c:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UqyrUMJQqdYEjxnawMywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjYwMTI2MjIwMDM1WhcNMjYwMTI3MjIwMDM1WjAzMTEwLwYDVQQD EyhmMjI0ZjQ3NmJmZGUzY2FkMTlkYmE2MWVkZTQxMmE3MTRhNzU5YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGrwuUfSr2pmpOlBhgD24pU0/pWL DcbayiN0Be0Ko8fZhnfZH0Ct13ROw7hlshA/rEuCZAaDFctM836BaZTL539MfVzi QtsiIsLJKna/WF1cZ2zl+6loCleUBBdskX45kmeur+w0AM3dVg5ytE3r5TvCvVwL xhLI2VkZws9lglJvJXIMdUcm+7M3nycmTz/TBynOlBel9xSiAUdjmNbDQkeZwWwt Wd4NwjJDLsimpND/TybB0wqC6LCiowuXz884CNdx4kQXUyvh6/CX+I4tFnVl8EFV wvPhz1+6Zkx+codIqMm2kl+rg2xccAm4KpTmw/Hg9hoADb1No6MzWH5apwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIk9Ha/3jytGdumHt5BKnFKdZxlMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8tj6j85 NuyWUj97Nad2rJMCSxPaDYcVw1Jfa/WgVw5SGJpPQ+GCD4cZ+kfgwN9WZCoSKyid VY/+dDkWE+qrd9VlUNogF/sXxEBG7wcYWMvE8eMZNbLKN2tuWJ3k4uuJ9yXD04AP DbilulxzYOkHOJB7qvawxRoNPNx1xUT9ThlfiY/X60T/XIdN98m8tvo1aYp2F81s gRfaQ7+0iEF1TtJSf0QrS2ck+9H6PlkE7HwWAH4ecI0f93cUApslU2xQsalZlA/3 wCXF3s+o5s72kYfEb9z2pDsnUTjlPlZ/GSsWVlmRzu81ftSr0KAj8/wZ6cgAbQKi m1EpgZ6a/c9cuA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:31 2026 by rpki-client