This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json) Hash identifier: UATOtBxGxyMs5OkZOEBo9g3mRjMl7DDRytOAjDXJcik= Subject key identifier: DF:B9:40:5C:2E:FA:EC:CB:3D:79:F8:23:B6:9C:09:A2:7F:F1:B7:72 Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Certificate serial: 019BF8E4200023A1A500C3349B8818DAC932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 06:00:58 +0000 Manifest this update: Mon 26 Jan 2026 06:00:58 +0000 Manifest next update: Tue 27 Jan 2026 06:00:58 +0000 Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=) 2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: zZStPHIcD/EUk94XeHPYD7c6U+dy90DFRgTFU/Uk+tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:20:00:23:a1:a5:00:c3:34:9b:88:18:da:c9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Validity Not Before: Jan 26 06:00:58 2026 GMT Not After : Jan 27 06:00:58 2026 GMT Subject: CN=dfb9405c2efaeccb3d79f823b69c09a27ff1b772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:28:8c:2b:f5:6f:42:83:33:14:c6:b8:2c: 8e:76:a1:d7:74:c9:f1:c6:eb:4c:3f:a3:a4:1b:42: b3:33:10:e1:0c:5f:87:89:84:f2:09:bf:dc:45:a2: d7:28:6f:e4:e3:80:67:7a:dc:45:bf:3e:c6:af:13: ab:93:9f:9e:e3:77:69:94:0b:04:55:b0:bb:ec:fc: 7c:3f:49:d6:64:ca:8c:e7:08:df:60:72:42:4b:d7: c6:bf:e9:21:a3:e6:0e:65:3b:59:18:e7:f6:48:b7: aa:bd:66:a0:33:b5:f5:87:d4:10:52:79:41:ac:00: ce:d4:82:37:cb:9a:45:ca:87:72:7e:69:84:eb:e4: 9f:94:8c:82:a6:1d:76:fd:f6:4e:26:f4:66:92:ef: 08:88:a6:22:af:e7:f1:f4:62:ee:9e:6c:67:50:32: d9:fe:8f:cd:b3:0f:eb:5b:67:75:10:5c:6c:31:68: 2a:c6:7d:b3:31:48:64:e3:cb:a3:0c:ef:e0:82:fd: 62:ea:5f:5b:68:30:31:dc:a0:1a:64:25:db:b8:50: c1:d3:9f:22:69:a4:70:28:5f:09:ee:fb:f4:a9:94: 96:60:61:f0:a1:93:18:e5:fb:ee:8c:83:fb:5d:5e: 16:4a:9c:4b:4e:ce:19:50:60:fd:f5:3e:30:67:f7: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:40:5C:2E:FA:EC:CB:3D:79:F8:23:B6:9C:09:A2:7F:F1:B7:72 X509v3 Authority Key Identifier: keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ad:62:6a:4d:23:2e:a1:68:de:64:c7:f3:77:77:bd:e8:af: 12:5b:63:c8:f2:7d:91:76:3e:84:19:7c:c8:b4:d5:57:1a:74: b9:e7:58:d4:06:1d:38:96:5c:c1:8d:23:4e:b8:39:c8:b8:bb: ab:c2:df:63:7a:65:ec:12:4d:8c:59:63:63:29:bf:93:6d:83: ac:50:69:63:7e:f9:2a:c4:b2:87:28:36:3d:f4:ad:e3:d4:b5: c9:66:1b:90:26:c7:b8:71:eb:db:d0:bb:10:d3:1f:72:c6:c3: 8d:0a:c5:b6:e5:c6:9d:9a:af:c7:f7:5a:2f:dd:3b:5b:f5:69: 9e:b3:e3:8d:08:0c:0a:c9:41:4d:65:8a:f2:3d:d0:ea:3b:f8: 74:d7:4c:fd:12:07:4b:6c:02:3c:ef:73:d1:b5:c0:e0:cf:06: 5c:6a:f2:dd:c1:c0:02:48:c0:08:bb:ed:47:95:25:42:ca:f0: 7b:96:97:d7:1e:54:4a:c6:d7:54:9d:1a:22:36:16:6d:04:4d: c6:ee:59:46:b9:f3:6a:be:42:f3:6b:f2:4d:26:53:87:23:25: 2a:55:c1:ed:dd:af:b0:85:fa:33:15:c4:05:94:b3:c6:0c:92: 94:c0:25:18:8b:f1:0c:fe:39:83:ba:32:02:08:89:06:f2:92: f5:20:49:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45CAAI6GlAMM0m4gY2skyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0 ODk2YWIwHhcNMjYwMTI2MDYwMDU4WhcNMjYwMTI3MDYwMDU4WjAzMTEwLwYDVQQD EyhkZmI5NDA1YzJlZmFlY2NiM2Q3OWY4MjNiNjljMDlhMjdmZjFiNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/0ojCv1b0KDMxTGuCyOdqHXdMnx xutMP6OkG0KzMxDhDF+HiYTyCb/cRaLXKG/k44BnetxFvz7GrxOrk5+e43dplAsE VbC77Px8P0nWZMqM5wjfYHJCS9fGv+kho+YOZTtZGOf2SLeqvWagM7X1h9QQUnlB rADO1II3y5pFyodyfmmE6+SflIyCph12/fZOJvRmku8IiKYir+fx9GLunmxnUDLZ /o/Nsw/rW2d1EFxsMWgqxn2zMUhk48ujDO/ggv1i6l9baDAx3KAaZCXbuFDB058i aaRwKF8J7vv0qZSWYGHwoZMY5fvujIP7XV4WSpxLTs4ZUGD99T4wZ/eQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+5QFwu+uzLPXn4I7acCaJ/8bdyMB8GA1UdIwQY MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt NWU3MDBkZDZiOWVlLzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFK1iak0j LqFo3mTH83d3veivEltjyPJ9kXY+hBl8yLTVVxp0uedY1AYdOJZcwY0jTrg5yLi7 q8LfY3pl7BJNjFljYym/k22DrFBpY375KsSyhyg2PfSt49S1yWYbkCbHuHHr29C7 ENMfcsbDjQrFtuXGnZqvx/daL907W/VpnrPjjQgMCslBTWWK8j3Q6jv4dNdM/RIH S2wCPO9z0bXA4M8GXGry3cHAAkjACLvtR5UlQsrwe5aX1x5USsbXVJ0aIjYWbQRN xu5ZRrnzar5C82vyTSZThyMlKlXB7d2vsIX6MxXEBZSzxgySlMAlGIvxDP45g7oy AgiJBvKS9SBJNw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:57:29 2026 by rpki-client