This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json) Hash identifier: vInaYT2Jks0iUXm5Avry1mOBpaxQINwbks58emc7Pns= Subject key identifier: 5C:45:32:20:31:A0:51:B2:30:F0:50:76:77:BE:5D:87:67:16:F5:B0 Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429 Certificate serial: 019BFD2E5B1F4CC8DB772BDBBCB28CD982FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 02:00:32 +0000 Manifest this update: Tue 27 Jan 2026 02:00:32 +0000 Manifest next update: Wed 28 Jan 2026 02:00:32 +0000 Files and hashes: 1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=) 2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: XDxj0nkXtx7SrtevL68unqs1azc3ep6TZjvIqU50/Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:5b:1f:4c:c8:db:77:2b:db:bc:b2:8c:d9:82:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429 Validity Not Before: Jan 27 02:00:32 2026 GMT Not After : Jan 28 02:00:32 2026 GMT Subject: CN=5c45322031a051b230f0507677be5d876716f5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:2b:45:0c:4e:1d:77:2a:85:67:a7:88:52: fc:77:f0:f1:58:2b:d0:69:7e:5c:80:77:95:b8:00: 08:65:66:c0:60:e6:83:95:4d:a9:dc:28:d5:db:19: 18:62:0b:7a:ab:0b:9b:89:a8:59:61:ed:d9:7a:23: 4d:29:bd:08:e0:26:40:64:78:59:7b:0d:64:78:15: b7:09:ca:a1:a0:5d:a7:ea:46:6d:f8:4a:5c:fc:b8: 2c:0e:68:9a:f3:e5:62:c0:44:83:f1:28:38:0f:17: 72:97:2a:16:90:c3:f0:28:6b:51:3d:c7:fc:bb:ea: 1a:c4:e4:4b:e8:fd:ed:55:15:7f:b4:85:3d:5f:04: cc:19:78:b0:b9:ce:c9:2f:b3:b5:98:ad:19:35:a3: 60:46:92:b9:73:f1:0e:76:71:af:5d:74:09:04:00: b6:ec:8a:6a:be:47:bb:94:84:32:d7:ea:38:98:56: 3c:93:0d:0d:53:d4:c0:05:2f:64:16:17:eb:75:a8: ee:2d:26:79:b6:ac:5e:6c:45:f4:78:9f:e2:07:78: f3:da:44:4b:f7:a7:71:1e:b3:ea:89:dc:e0:60:ef: 2b:9e:ab:0e:a4:84:22:d8:52:96:be:ac:3f:b0:c3: b7:b9:b9:f9:00:63:33:bc:17:03:18:2c:81:89:52: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:32:20:31:A0:51:B2:30:F0:50:76:77:BE:5D:87:67:16:F5:B0 X509v3 Authority Key Identifier: keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bc:4d:07:51:31:a3:c8:1e:17:e6:02:ba:ed:29:8f:39:59: a0:41:7c:f6:d2:1a:0f:cf:37:8b:1d:9d:fc:b8:2f:60:df:ad: 03:c2:cf:0e:a2:c9:1e:1f:a5:92:d6:87:da:3a:8a:a0:e6:ce: b8:77:12:ec:27:21:0d:60:a2:6e:dc:0f:04:1f:35:5f:88:c9: 21:28:e2:1b:ce:30:93:2d:03:e8:6b:ed:c3:41:0b:ae:88:d6: 4c:5d:28:b7:fa:8a:20:58:3c:16:1a:fe:5f:21:53:27:3d:84: ec:ac:c9:ea:c8:3f:5d:45:e1:cd:ba:2f:26:19:e8:74:ec:e6: 69:15:7b:ae:e1:2b:c5:a1:08:7e:4e:6f:b3:43:19:f1:e8:51: 63:6a:c3:f9:fa:04:9f:7a:c4:ac:ba:54:ab:69:fa:11:6c:5c: a5:7d:5f:39:a9:ca:0c:72:3f:9a:b6:2a:5d:f1:5f:20:fb:5c: e2:88:49:3a:4a:63:7f:36:37:8f:66:e6:27:c7:1e:5d:49:bc: 03:c0:da:8c:dd:22:35:12:7f:9c:51:cf:e0:f5:38:4a:ee:a4: 0c:d7:6a:a9:3d:72:63:36:89:63:fa:81:58:6f:e8:70:06:35: 06:2d:c4:38:9f:8b:7d:72:bf:ae:7c:e7:d8:c7:e5:77:04:1c: 7f:62:9f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LlsfTMjbdyvbvLKM2YL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0 NjA0MjkwHhcNMjYwMTI3MDIwMDMyWhcNMjYwMTI4MDIwMDMyWjAzMTEwLwYDVQQD Eyg1YzQ1MzIyMDMxYTA1MWIyMzBmMDUwNzY3N2JlNWQ4NzY3MTZmNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvkrRQxOHXcqhWeniFL8d/DxWCvQ aX5cgHeVuAAIZWbAYOaDlU2p3CjV2xkYYgt6qwubiahZYe3ZeiNNKb0I4CZAZHhZ ew1keBW3CcqhoF2n6kZt+Epc/LgsDmia8+ViwESD8Sg4DxdylyoWkMPwKGtRPcf8 u+oaxORL6P3tVRV/tIU9XwTMGXiwuc7JL7O1mK0ZNaNgRpK5c/EOdnGvXXQJBAC2 7Ipqvke7lIQy1+o4mFY8kw0NU9TABS9kFhfrdajuLSZ5tqxebEX0eJ/iB3jz2kRL 96dxHrPqidzgYO8rnqsOpIQi2FKWvqw/sMO3ubn5AGMzvBcDGCyBiVKlvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxFMiAxoFGyMPBQdne+XYdnFvWwMB8GA1UdIwQY MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt NzdlZmJjMzYyNTAzLzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrxNB1Ex o8geF+YCuu0pjzlZoEF89tIaD883ix2d/LgvYN+tA8LPDqLJHh+lktaH2jqKoObO uHcS7CchDWCibtwPBB81X4jJISjiG84wky0D6Gvtw0ELrojWTF0ot/qKIFg8Fhr+ XyFTJz2E7KzJ6sg/XUXhzbovJhnodOzmaRV7ruErxaEIfk5vs0MZ8ehRY2rD+foE n3rErLpUq2n6EWxcpX1fOanKDHI/mrYqXfFfIPtc4ohJOkpjfzY3j2bmJ8ceXUm8 A8DajN0iNRJ/nFHP4PU4Su6kDNdqqT1yYzaJY/qBWG/ocAY1Bi3EOJ+LfXK/rnzn 2MfldwQcf2KfFQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:39 2026 by rpki-client