This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json) Hash identifier: M90nYOO9JMuT4xkv2NrvJp3zM5d2So8uBdpFCwkLWVU= Subject key identifier: 5F:1E:07:1E:AF:DB:D7:CC:27:76:14:E1:56:12:95:30:E3:44:4B:9C Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019BFA64D84664AF71F14FD611348DBD8215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft Manifest number: 1805 Signing time: Mon 26 Jan 2026 13:01:11 +0000 Manifest this update: Mon 26 Jan 2026 13:01:11 +0000 Manifest next update: Tue 27 Jan 2026 13:01:11 +0000 Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=) 2: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=) 3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: lVWShrunCtUvSvU4MLk2yJ3PeSTfHlSwPJng3Ox23Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:d8:46:64:af:71:f1:4f:d6:11:34:8d:bd:82:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Jan 26 13:01:11 2026 GMT Not After : Jan 27 13:01:11 2026 GMT Subject: CN=5f1e071eafdbd7cc277614e156129530e3444b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:f0:fe:df:96:0c:67:63:af:d1:aa:4c:9f: 52:92:f6:dc:a8:65:cf:66:d5:47:d1:8b:c7:24:c0: b5:a6:fe:d6:2e:b2:ec:b3:3f:ee:20:cd:90:ea:52: 7c:a3:49:33:1a:b0:66:e4:8d:13:f3:85:1f:fc:83: 56:e9:a8:c9:b0:42:a4:4e:5f:fb:a4:77:58:de:bf: 98:95:ae:8e:71:c5:29:51:f1:c9:c5:c7:3f:0a:f2: fb:b4:67:f1:b9:1d:4b:da:a3:ab:97:35:75:f3:94: f2:2a:75:9a:84:a8:c4:4b:34:b7:31:30:38:c6:67: 31:0a:9a:ed:2e:eb:09:6f:02:cc:3d:02:cc:4b:3b: ee:eb:0c:47:f4:d2:7c:f7:20:0b:53:0c:09:42:10: 62:78:4e:c0:00:6d:53:5b:d1:3d:6c:46:a8:da:2d: 3b:92:48:fe:f9:d3:cd:43:e5:99:1a:d9:05:41:9e: 85:aa:d7:32:4d:0e:a2:80:32:9e:48:e0:8a:f7:8a: e0:a6:b7:cd:77:bc:ee:ff:24:5e:56:05:b1:70:f8: 46:4d:a5:bb:0d:0d:7f:b0:7c:a0:02:85:b2:8a:73: 1a:6b:42:42:b1:b1:49:43:81:ff:25:24:f6:fb:d4: ae:ac:22:a7:64:aa:70:ce:ff:f1:ca:1f:af:45:37: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1E:07:1E:AF:DB:D7:CC:27:76:14:E1:56:12:95:30:E3:44:4B:9C X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d7:a8:8c:99:39:54:2c:47:3a:d7:70:4b:70:1d:ac:f6:db: 3b:2d:36:cf:58:d7:5c:f4:18:75:fb:ec:5d:b5:e6:b1:e3:11: 7b:1c:07:f6:07:ed:ac:f2:b6:27:79:3f:ff:4d:e0:3d:43:0a: f2:4e:b9:3f:33:3d:d7:9a:6a:85:f1:a8:46:f5:3a:ee:5a:24: d1:06:b3:98:24:38:3d:1c:ed:8c:c6:2f:1c:0a:31:6b:11:12: 7c:0b:22:4f:dc:3b:d3:a2:7d:1a:44:76:d0:c7:5d:39:9a:30: 0f:4c:90:b0:05:cb:8a:4e:3b:8f:21:b2:ac:af:be:c2:6e:97: 6d:22:ad:fa:79:72:28:6d:93:68:39:37:bd:be:d5:60:4a:5a: 37:ed:66:40:c5:aa:0c:8f:88:82:5f:90:0e:10:6b:51:b5:f0: 15:29:b3:53:bf:54:57:66:13:42:5f:29:58:24:70:d9:01:1f: c5:bb:87:26:52:2f:58:12:43:82:c2:42:c1:31:ae:08:bb:f9: 1c:96:14:f2:5b:60:38:7c:9a:ee:64:b7:68:cd:81:21:1d:d6: 3d:e5:3a:e7:84:ca:42:3a:d3:1d:c0:6c:13:32:de:94:0a:f3: 82:4c:14:de:18:3e:e0:13:0a:99:4f:f4:dc:0e:62:6e:91:d9: 02:76:c9:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZNhGZK9x8U/WETSNvYIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjYwMTI2MTMwMTExWhcNMjYwMTI3MTMwMTExWjAzMTEwLwYDVQQD Eyg1ZjFlMDcxZWFmZGJkN2NjMjc3NjE0ZTE1NjEyOTUzMGUzNDQ0YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxszw/t+WDGdjr9GqTJ9SkvbcqGXP ZtVH0YvHJMC1pv7WLrLssz/uIM2Q6lJ8o0kzGrBm5I0T84Uf/INW6ajJsEKkTl/7 pHdY3r+Yla6OccUpUfHJxcc/CvL7tGfxuR1L2qOrlzV185TyKnWahKjESzS3MTA4 xmcxCprtLusJbwLMPQLMSzvu6wxH9NJ89yALUwwJQhBieE7AAG1TW9E9bEao2i07 kkj++dPNQ+WZGtkFQZ6FqtcyTQ6igDKeSOCK94rgprfNd7zu/yReVgWxcPhGTaW7 DQ1/sHygAoWyinMaa0JCsbFJQ4H/JST2+9SurCKnZKpwzv/xyh+vRTexEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8eBx6v29fMJ3YU4VYSlTDjREucMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkteojJk5 VCxHOtdwS3AdrPbbOy02z1jXXPQYdfvsXbXmseMRexwH9gftrPK2J3k//03gPUMK 8k65PzM915pqhfGoRvU67lok0QazmCQ4PRztjMYvHAoxaxESfAsiT9w706J9GkR2 0MddOZowD0yQsAXLik47jyGyrK++wm6XbSKt+nlyKG2TaDk3vb7VYEpaN+1mQMWq DI+Igl+QDhBrUbXwFSmzU79UV2YTQl8pWCRw2QEfxbuHJlIvWBJDgsJCwTGuCLv5 HJYU8ltgOHya7mS3aM2BIR3WPeU654TKQjrTHcBsEzLelArzgkwU3hg+4BMKmU/0 3A5ibpHZAnbJNA== -----END CERTIFICATE-----Generated at Mon Jan 26 23:02:32 2026 by rpki-client