This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json) Hash identifier: 9B5FfaqLvj972z+JJiR+bgAOtZ1norCcsWSVp8BcOM4= Subject key identifier: 76:5C:3F:A4:D8:F1:A0:A9:92:95:BC:C3:ED:66:6C:34:64:E6:CD:49 Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Certificate serial: 019BFB0960D6B01371A65162C38E55741C4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft Manifest number: 0946 Signing time: Mon 26 Jan 2026 16:00:54 +0000 Manifest this update: Mon 26 Jan 2026 16:00:54 +0000 Manifest next update: Tue 27 Jan 2026 16:00:54 +0000 Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=) 2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: QXvfmTGlG9tkB97lypHuPobtsF4EUQVZX25fgjmSMOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:60:d6:b0:13:71:a6:51:62:c3:8e:55:74:1c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Validity Not Before: Jan 26 16:00:54 2026 GMT Not After : Jan 27 16:00:54 2026 GMT Subject: CN=765c3fa4d8f1a0a99295bcc3ed666c3464e6cd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:86:6b:23:16:83:6a:af:b8:88:da:27:c4: 15:10:b3:58:39:70:2f:d8:4a:e6:97:5b:b5:c0:99: 6d:d0:96:41:fe:6c:ed:8f:b0:1e:32:51:a5:c3:dd: 4d:45:13:03:ef:20:ad:6e:4e:66:9e:b9:31:6b:9e: 97:54:0d:ab:6a:c2:77:53:49:e6:cd:34:b6:de:ae: 51:a5:04:cb:5c:9a:e9:bb:46:f0:fc:55:cd:b4:89: f5:ba:48:3e:a5:59:48:3f:15:2d:c0:e0:3f:9e:f6: 5b:25:c3:2c:2d:05:68:aa:a4:0b:06:1a:fe:7a:7a: 16:93:48:21:48:d4:d8:e7:23:b9:2f:3e:a1:4c:b3: 44:38:9f:72:64:ec:39:2f:75:21:f6:0d:6b:bd:05: bc:6b:c4:be:6b:54:65:96:80:b3:62:e5:da:09:a0: ce:ce:44:ce:b8:8c:23:3e:16:0b:d7:bc:03:e8:6a: b4:d6:4a:82:b8:e3:9d:09:c8:fb:34:05:c8:ed:34: 72:d2:0b:0b:c2:e2:e7:0b:c0:de:d0:64:0f:b1:2c: b0:6e:91:ca:0c:ee:c5:ad:9c:a5:7e:1b:d4:83:07: f3:93:47:a1:fe:9b:65:54:ce:bd:55:43:23:8a:11: bc:b7:f9:5a:4b:bf:7c:e1:36:26:d4:13:10:20:20: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:3F:A4:D8:F1:A0:A9:92:95:BC:C3:ED:66:6C:34:64:E6:CD:49 X509v3 Authority Key Identifier: keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:90:e5:36:3d:30:f9:f5:65:96:4d:50:be:e4:68:3e:87:71: a6:f5:9a:de:3a:f1:96:1b:bb:da:e5:3b:54:23:fb:8c:98:ea: 7e:9f:35:a1:d4:b2:11:72:01:ce:a7:11:1b:12:fd:f3:72:2e: f7:e7:13:77:80:99:3c:05:4c:6b:7c:f4:0d:29:0c:5c:bd:99: 76:c7:a4:b4:dd:75:91:e0:67:9d:c1:ad:72:28:f4:79:b8:b4: 7e:6d:0e:fc:da:4f:e9:4e:b1:3d:b4:24:21:fc:ce:a1:30:d4: 83:28:a5:04:ff:a7:53:7a:0f:51:45:d2:66:50:0b:14:43:f4: 56:cb:5f:3e:2c:ce:e4:31:3d:bf:54:68:79:3f:0b:e6:b6:01: 82:5e:01:ba:80:18:82:f4:13:f0:0f:9c:49:2b:0f:4e:bb:02: 87:c8:75:c1:57:0b:5a:60:4c:fb:bc:02:20:1a:1d:f2:35:ee: 79:7a:26:ff:a5:ae:62:c8:58:d6:a7:ff:07:98:cf:39:cd:d1: 3d:cd:49:c0:27:3b:fb:c5:a5:52:4e:19:23:9c:b8:f9:92:a2: 36:93:fc:59:58:ea:18:13:58:34:9f:56:d4:b9:96:cb:7f:6d: 48:ef:5b:dc:77:ce:aa:89:85:cc:de:25:46:cf:74:14:4d:ce: 5f:b6:82:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CWDWsBNxplFiw45VdBxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi NzZlYjMwHhcNMjYwMTI2MTYwMDU0WhcNMjYwMTI3MTYwMDU0WjAzMTEwLwYDVQQD Eyg3NjVjM2ZhNGQ4ZjFhMGE5OTI5NWJjYzNlZDY2NmMzNDY0ZTZjZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qKGayMWg2qvuIjaJ8QVELNYOXAv 2Erml1u1wJlt0JZB/mztj7AeMlGlw91NRRMD7yCtbk5mnrkxa56XVA2rasJ3U0nm zTS23q5RpQTLXJrpu0bw/FXNtIn1ukg+pVlIPxUtwOA/nvZbJcMsLQVoqqQLBhr+ enoWk0ghSNTY5yO5Lz6hTLNEOJ9yZOw5L3Uh9g1rvQW8a8S+a1RlloCzYuXaCaDO zkTOuIwjPhYL17wD6Gq01kqCuOOdCcj7NAXI7TRy0gsLwuLnC8De0GQPsSywbpHK DO7FrZylfhvUgwfzk0eh/ptlVM69VUMjihG8t/laS7984TYm1BMQICBsSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZcP6TY8aCpkpW8w+1mbDRk5s1JMB8GA1UdIwQY MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpDlNj0w +fVllk1QvuRoPodxpvWa3jrxlhu72uU7VCP7jJjqfp81odSyEXIBzqcRGxL983Iu 9+cTd4CZPAVMa3z0DSkMXL2ZdsektN11keBnncGtcij0ebi0fm0O/NpP6U6xPbQk IfzOoTDUgyilBP+nU3oPUUXSZlALFEP0VstfPizO5DE9v1RoeT8L5rYBgl4BuoAY gvQT8A+cSSsPTrsCh8h1wVcLWmBM+7wCIBod8jXueXom/6WuYshY1qf/B5jPOc3R Pc1JwCc7+8WlUk4ZI5y4+ZKiNpP8WVjqGBNYNJ9W1LmWy39tSO9b3HfOqomFzN4l Rs90FE3OX7aCWw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:30 2026 by rpki-client