This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft File: GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json) Hash identifier: 9sfmGyEZ8p2gX3VqYsV6m+KcVw+nRGdhvVR8+t051Jc= Subject key identifier: 52:38:40:72:9D:36:29:ED:E7:0D:6B:A7:6C:C6:2B:46:59:1F:A7:64 Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019BFD2E610DE2E8E9D0FDF0094E60465265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 02:00:33 +0000 Manifest this update: Tue 27 Jan 2026 02:00:33 +0000 Manifest next update: Wed 28 Jan 2026 02:00:33 +0000 Files and hashes: 1: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (hash: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM=) 2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: gbjXFtrMW3w9Xn1WMJ6rEqGz6mEIkAddrGH8WfUlA5A=) 3: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (hash: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw=) 4: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (hash: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig=) 5: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (hash: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU=) 6: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (hash: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:61:0d:e2:e8:e9:d0:fd:f0:09:4e:60:46:52:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Jan 27 02:00:33 2026 GMT Not After : Jan 28 02:00:33 2026 GMT Subject: CN=523840729d3629ede70d6ba76cc62b46591fa764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:31:00:88:6b:2a:f0:6c:fa:1c:ba:8f:0d: 5d:ed:d5:bd:07:f0:df:35:19:e1:3a:58:21:41:37: ec:e3:cf:54:64:53:ca:42:c4:bd:06:e8:8e:e7:c2: e5:fa:5a:78:9a:b0:3c:08:79:12:3c:49:4e:4e:f7: 4f:1d:03:20:26:dc:3e:0b:90:93:a5:a1:4a:13:0d: 70:54:bb:9c:a3:dd:32:e8:5e:cf:cb:e4:a1:dd:30: cf:57:35:22:d0:f3:65:17:54:f4:09:74:17:11:a2: a3:b9:05:54:3f:6b:75:21:3c:e1:e8:5e:f1:e0:4f: b6:09:60:a2:73:ac:75:29:90:33:76:e5:50:2c:55: e5:18:2a:e3:d3:a5:28:60:a0:88:d4:1f:f2:01:4a: 8d:a5:36:e2:f1:09:ca:b4:48:2c:26:bf:20:22:b9: 8a:ed:4a:f1:0e:e7:77:33:0a:ae:d0:cc:96:95:51: 47:bb:73:24:d4:51:de:26:97:be:7a:28:75:46:21: fe:27:a5:bb:80:04:e3:d1:20:62:3e:98:12:6b:15: 03:0a:2d:ca:88:2d:49:9e:37:4f:a1:46:c5:72:92: b5:67:9b:15:ef:da:b7:ad:43:df:1d:c1:02:69:11: 95:aa:20:0a:47:ac:dd:7a:fc:ae:06:8f:8d:d8:3d: bd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:38:40:72:9D:36:29:ED:E7:0D:6B:A7:6C:C6:2B:46:59:1F:A7:64 X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:64:c7:cd:3e:47:19:3d:f0:54:8f:f0:fd:42:ed:5f:44:28: 2c:ef:e6:aa:d9:83:06:2f:fb:65:86:e5:67:bb:f6:09:08:59: fa:e2:27:56:53:b8:d5:54:0d:6e:42:88:53:af:4c:42:f8:69: 67:d0:ff:ec:88:e4:26:b6:d7:19:bb:c7:06:93:d8:d1:ee:07: 72:37:3f:46:fa:be:a8:91:f1:c1:ad:66:6d:4a:c5:48:35:0e: 90:ac:dd:bf:da:95:6d:84:50:f9:d6:b6:9c:43:e1:0a:23:31: 2b:c7:f2:6b:1c:e2:13:f3:28:f1:5b:f7:c1:a4:fe:62:80:9c: 2c:09:82:a7:f0:9e:82:ff:7f:aa:37:8b:63:cb:f3:38:a1:78: 69:06:19:dc:11:08:77:48:8e:3f:ad:9a:32:4c:cd:46:ff:c2: 42:df:f3:c6:e5:58:97:82:ba:0a:38:bb:11:4b:89:fc:2c:65: a9:b4:2b:84:e8:e0:7d:68:eb:70:aa:f8:4b:49:43:13:32:78: 83:92:96:b8:87:8d:00:a6:b4:3f:ee:b4:14:e5:7b:5f:ae:45: 32:9c:a9:08:8f:f5:6f:f0:88:94:a7:51:e8:86:eb:b4:ae:b3: cc:61:66:16:03:fc:01:6f:da:6d:34:b3:d0:48:62:1e:0c:d9: 8c:84:71:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LmEN4ujp0P3wCU5gRlJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjYwMTI3MDIwMDMzWhcNMjYwMTI4MDIwMDMzWjAzMTEwLwYDVQQD Eyg1MjM4NDA3MjlkMzYyOWVkZTcwZDZiYTc2Y2M2MmI0NjU5MWZhNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4YxAIhrKvBs+hy6jw1d7dW9B/Df NRnhOlghQTfs489UZFPKQsS9BuiO58Ll+lp4mrA8CHkSPElOTvdPHQMgJtw+C5CT paFKEw1wVLuco90y6F7Py+Sh3TDPVzUi0PNlF1T0CXQXEaKjuQVUP2t1ITzh6F7x 4E+2CWCic6x1KZAzduVQLFXlGCrj06UoYKCI1B/yAUqNpTbi8QnKtEgsJr8gIrmK 7UrxDud3Mwqu0MyWlVFHu3Mk1FHeJpe+eih1RiH+J6W7gATj0SBiPpgSaxUDCi3K iC1JnjdPoUbFcpK1Z5sV79q3rUPfHcECaRGVqiAKR6zdevyuBo+N2D294QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI4QHKdNint5w1rp2zGK0ZZH6dkMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmTHzT5H GT3wVI/w/ULtX0QoLO/mqtmDBi/7ZYblZ7v2CQhZ+uInVlO41VQNbkKIU69MQvhp Z9D/7IjkJrbXGbvHBpPY0e4Hcjc/Rvq+qJHxwa1mbUrFSDUOkKzdv9qVbYRQ+da2 nEPhCiMxK8fyaxziE/Mo8Vv3waT+YoCcLAmCp/Cegv9/qjeLY8vzOKF4aQYZ3BEI d0iOP62aMkzNRv/CQt/zxuVYl4K6Cji7EUuJ/CxlqbQrhOjgfWjrcKr4S0lDEzJ4 g5KWuIeNAKa0P+60FOV7X65FMpypCI/1b/CIlKdR6IbrtK6zzGFmFgP8AW/abTSz 0EhiHgzZjIRxqA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:26:47 2026 by rpki-client