This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft File: GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json) Hash identifier: soY+3ZsciXpgZ9gqhdG45MgX5cKaD/LmmN/SvKb3ug0= Subject key identifier: 35:EB:A2:B1:24:3C:29:A9:60:DA:15:C4:C0:C8:C2:B1:DC:1C:1C:58 Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84 Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84 Certificate serial: 019C040C96B8F28A7AA7DBBA0FC9168377C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft Manifest number: 0510 Signing time: Wed 28 Jan 2026 10:00:59 +0000 Manifest this update: Wed 28 Jan 2026 10:00:59 +0000 Manifest next update: Thu 29 Jan 2026 10:00:59 +0000 Files and hashes: 1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: IMYa+eezCF/IGUZjYas5T1g0s8lQlzbz0hItm6JsqeA=) 2: Ip5f-rtoZ2VJ7SiwM6fpe8-kxhs.roa (hash: VpZtyINbjieT/4qcJpty0j6h8djbUlkDrnIQP/pseyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:96:b8:f2:8a:7a:a7:db:ba:0f:c9:16:83:77:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84 Validity Not Before: Jan 28 10:00:59 2026 GMT Not After : Jan 29 10:00:59 2026 GMT Subject: CN=35eba2b1243c29a960da15c4c0c8c2b1dc1c1c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:d5:15:30:d6:0f:8d:d5:3e:19:6a:85:22: a9:1f:22:53:1a:f5:3f:28:e8:06:4f:7f:63:18:87: f4:46:8e:20:9a:51:d7:ad:09:16:a6:02:da:e4:e7: bf:a6:7d:02:c7:da:8f:ed:e5:18:aa:0c:16:be:d4: 9a:08:b1:d1:94:39:54:0a:1e:1f:4c:be:d9:03:b8: 47:10:f2:e4:5b:b8:69:90:8e:03:36:e1:a8:cf:fb: 2f:b4:23:71:64:a5:44:19:36:df:7e:47:10:e5:04: b3:89:86:2f:9a:f2:51:40:1b:e9:8a:46:82:39:4a: f5:3e:50:98:5b:5c:ff:2e:c0:46:7f:16:26:2b:52: 05:d2:1d:99:29:b0:3e:a4:65:60:1a:cf:ba:77:45: ae:fa:e2:8d:21:73:c2:8b:89:37:a0:69:ee:e1:8f: 5f:9e:2f:ab:19:a3:fa:e9:9a:12:af:dc:b6:79:71: fa:90:df:07:0d:ac:ab:9d:b1:52:13:39:0f:3d:68: c7:c6:e0:94:3a:de:48:08:4e:b6:6e:02:a1:68:87: 0f:6c:fd:d8:d7:46:9e:fc:18:cd:ea:e4:c9:63:f3: 74:18:a0:3c:a2:de:27:b6:6f:51:4c:43:4e:bc:6a: c4:a6:b3:e5:24:61:4f:54:a1:0c:e2:96:83:47:a0: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EB:A2:B1:24:3C:29:A9:60:DA:15:C4:C0:C8:C2:B1:DC:1C:1C:58 X509v3 Authority Key Identifier: keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e8:85:5d:b4:14:d0:89:68:4a:34:0d:f3:88:0e:de:97:30: a0:0f:aa:a2:2d:8c:dd:36:ca:b4:a4:da:bd:2d:88:bf:42:83: 46:91:c5:ce:64:3b:7f:b8:31:7f:2e:0d:62:11:84:e0:a2:49: 8f:13:15:b1:2f:45:47:8d:30:09:76:af:c4:31:ef:15:cd:c9: 77:a0:12:d8:38:72:9d:fa:3f:62:52:9f:71:df:99:69:1c:ef: ae:75:a7:53:8f:47:d9:78:2a:0f:1d:64:65:4d:f7:bc:6f:f6: 18:82:99:95:63:8f:39:88:f4:5a:ff:90:65:73:fb:31:c2:55: d3:62:42:63:5b:fb:1a:60:e4:7b:a1:40:be:d7:0d:ca:5b:af: 23:77:cf:fa:4d:40:5f:d5:10:d8:04:ed:18:3c:6d:62:3f:e2: 15:bc:29:5c:0f:87:d6:c9:4e:79:8b:9c:07:85:f6:0b:18:ca: bf:75:87:e0:b3:45:27:f3:f1:8e:e6:8c:57:dd:53:b8:1a:75: 1c:d1:08:28:c1:3c:3e:d7:60:57:4b:d1:06:4b:63:61:08:73: a6:21:a5:5b:46:a1:5e:31:94:e7:8f:a5:f6:5d:94:ff:3e:08: 6e:d2:0e:1d:30:0e:7f:50:a7:18:ce:28:c5:14:f9:4d:56:e0: f4:0c:86:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDJa48op6p9u6D8kWg3fEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmIzMmEyNjYyZjkwNWMwZDhiZjI0N2VjZTBkYmM2Nzlh MTZiODQwHhcNMjYwMTI4MTAwMDU5WhcNMjYwMTI5MTAwMDU5WjAzMTEwLwYDVQQD EygzNWViYTJiMTI0M2MyOWE5NjBkYTE1YzRjMGM4YzJiMWRjMWMxYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08fVFTDWD43VPhlqhSKpHyJTGvU/ KOgGT39jGIf0Ro4gmlHXrQkWpgLa5Oe/pn0Cx9qP7eUYqgwWvtSaCLHRlDlUCh4f TL7ZA7hHEPLkW7hpkI4DNuGoz/svtCNxZKVEGTbffkcQ5QSziYYvmvJRQBvpikaC OUr1PlCYW1z/LsBGfxYmK1IF0h2ZKbA+pGVgGs+6d0Wu+uKNIXPCi4k3oGnu4Y9f ni+rGaP66ZoSr9y2eXH6kN8HDayrnbFSEzkPPWjHxuCUOt5ICE62bgKhaIcPbP3Y 10ae/BjN6uTJY/N0GKA8ot4ntm9RTENOvGrEprPlJGFPVKEM4paDR6CnDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXrorEkPCmpYNoVxMDIwrHcHBxYMB8GA1UdIwQY MBaAFBm7MqJmL5BcDYvyR+zg28Z5oWuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWIt YzQyMTRjNzljOGI4LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWItYzQyMTRjNzljOGI4 LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuiFXbQU 0IloSjQN84gO3pcwoA+qoi2M3TbKtKTavS2Iv0KDRpHFzmQ7f7gxfy4NYhGE4KJJ jxMVsS9FR40wCXavxDHvFc3Jd6AS2Dhynfo/YlKfcd+ZaRzvrnWnU49H2XgqDx1k ZU33vG/2GIKZlWOPOYj0Wv+QZXP7McJV02JCY1v7GmDke6FAvtcNyluvI3fP+k1A X9UQ2ATtGDxtYj/iFbwpXA+H1slOeYucB4X2CxjKv3WH4LNFJ/PxjuaMV91TuBp1 HNEIKME8PtdgV0vRBktjYQhzpiGlW0ahXjGU54+l9l2U/z4IbtIOHTAOf1CnGM4o xRT5TVbg9AyG+Q== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:27 2026 by rpki-client