This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json) Hash identifier: AeZBO68wkEcPTTPmQHIbb0ufl/Iy5DPo+Iq+06gqpAc= Subject key identifier: 2E:09:BF:92:F4:B7:12:BF:F3:05:4F:09:EB:51:54:43:C3:AC:56:27 Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab Certificate serial: 019BFB0927F66DEEF0DF740C66046CB8203D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 16:00:39 +0000 Manifest this update: Mon 26 Jan 2026 16:00:39 +0000 Manifest next update: Tue 27 Jan 2026 16:00:39 +0000 Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=) 2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: QB1r+TfGpiSRbF14GhylB8vRzRZcCxpQ2Ha29XsTNCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:27:f6:6d:ee:f0:df:74:0c:66:04:6c:b8:20:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab Validity Not Before: Jan 26 16:00:39 2026 GMT Not After : Jan 27 16:00:39 2026 GMT Subject: CN=2e09bf92f4b712bff3054f09eb515443c3ac5627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:42:be:08:f1:ee:b7:8d:e1:65:84:88:8f: e7:a6:72:75:6d:8a:2c:91:89:36:5d:f3:37:be:c2: b9:a4:d6:7e:b9:2c:6e:d4:7c:fb:22:7f:a9:7d:3c: 81:29:02:1b:e8:9d:de:81:4a:bc:91:60:ef:1a:70: 14:1c:49:40:f5:59:26:bb:d0:2d:dd:b8:38:ae:49: 76:ba:18:b4:03:30:ab:f1:73:39:2f:ed:94:ca:18: 26:7e:00:c7:de:75:b2:e4:fd:c6:d8:76:d5:06:f9: dc:08:a9:44:85:fb:0a:f5:43:87:d2:7e:b1:d5:55: fb:54:d9:9e:43:86:90:31:84:94:dd:e1:50:77:ae: 37:ea:ef:b0:5d:49:d2:4d:ff:36:09:8e:ef:f2:b2: 6e:de:f6:d9:d8:27:77:8e:53:b6:f5:99:f4:29:07: 3c:ab:c6:9e:0d:38:b6:fe:c9:9b:51:36:c0:ff:b6: cb:50:ee:ae:be:25:f3:38:30:7b:22:39:bc:25:50: ba:58:17:24:e1:12:b6:26:84:d9:e9:25:c0:b3:55: 3a:2a:10:c3:98:0b:50:19:a1:fb:9a:dd:fb:60:7c: 9b:e2:1b:2d:d8:b2:de:c1:29:29:d1:ed:23:eb:ce: 47:8d:d1:db:73:18:5b:e6:ba:ff:9c:08:1b:60:e0: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:09:BF:92:F4:B7:12:BF:F3:05:4F:09:EB:51:54:43:C3:AC:56:27 X509v3 Authority Key Identifier: keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:21:6f:80:86:60:2f:77:36:02:84:dc:87:9f:50:0f:fb:e8: da:30:13:c0:40:32:60:af:00:5a:48:38:1b:ae:d2:9c:0f:ca: ff:5d:46:d8:f3:41:fa:43:9c:9d:8f:95:c2:31:55:74:20:6e: e2:4f:7a:60:d6:45:96:42:38:e5:7b:fe:7e:8b:3e:cf:c4:1b: 32:ac:c5:1a:02:81:bd:7b:a6:9a:3b:39:60:3f:ba:af:37:c7: 2e:78:3b:a3:5d:eb:0e:35:76:90:d7:dc:1e:df:16:2c:47:b7: df:d8:cc:7f:5b:8e:89:d0:40:cd:96:20:a3:18:bf:09:5d:3a: 4d:b2:ab:c9:0e:3a:97:7c:53:c4:ff:92:84:63:b9:ff:fe:31: c6:76:42:dd:e6:11:26:6d:0e:5b:8f:be:fb:d9:f6:aa:cb:a6: 17:fa:3f:e0:46:19:89:55:41:a1:32:12:6f:2d:34:c1:a2:28: dd:5c:a5:76:fc:a5:79:c1:46:11:8e:14:1f:ba:0b:6f:64:56: 3d:bf:fe:13:c0:1e:05:a7:f2:30:0d:29:39:00:4c:13:f6:da: 17:81:3e:95:b1:de:29:37:86:c5:0d:a7:2e:e4:fe:22:0f:3f: 7e:10:c8:c1:cb:92:72:ec:54:45:4b:f6:1a:c8:42:63:c8:e0: 69:67:4f:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CSf2be7w33QMZgRsuCA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3 NmRiYWIwHhcNMjYwMTI2MTYwMDM5WhcNMjYwMTI3MTYwMDM5WjAzMTEwLwYDVQQD EygyZTA5YmY5MmY0YjcxMmJmZjMwNTRmMDllYjUxNTQ0M2MzYWM1NjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtplCvgjx7reN4WWEiI/npnJ1bYos kYk2XfM3vsK5pNZ+uSxu1Hz7In+pfTyBKQIb6J3egUq8kWDvGnAUHElA9Vkmu9At 3bg4rkl2uhi0AzCr8XM5L+2UyhgmfgDH3nWy5P3G2HbVBvncCKlEhfsK9UOH0n6x 1VX7VNmeQ4aQMYSU3eFQd6436u+wXUnSTf82CY7v8rJu3vbZ2Cd3jlO29Zn0KQc8 q8aeDTi2/smbUTbA/7bLUO6uviXzODB7Ijm8JVC6WBck4RK2JoTZ6SXAs1U6KhDD mAtQGaH7mt37YHyb4hst2LLewSkp0e0j685HjdHbcxhb5rr/nAgbYODPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4Jv5L0txK/8wVPCetRVEPDrFYnMB8GA1UdIwQY MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCFvgIZg L3c2AoTch59QD/vo2jATwEAyYK8AWkg4G67SnA/K/11G2PNB+kOcnY+VwjFVdCBu 4k96YNZFlkI45Xv+fos+z8QbMqzFGgKBvXummjs5YD+6rzfHLng7o13rDjV2kNfc Ht8WLEe339jMf1uOidBAzZYgoxi/CV06TbKryQ46l3xTxP+ShGO5//4xxnZC3eYR Jm0OW4+++9n2qsumF/o/4EYZiVVBoTISby00waIo3VyldvylecFGEY4UH7oLb2RW Pb/+E8AeBafyMA0pOQBME/baF4E+lbHeKTeGxQ2nLuT+Ig8/fhDIwcuScuxURUv2 GshCY8jgaWdPfw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:43 2026 by rpki-client