This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json) Hash identifier: Zi/hkJCEUBvMIh8BGA8Ys/SBdGlABq/j5fkHQdPYr4A= Subject key identifier: BF:1C:BD:DE:67:E3:B6:AC:E6:42:1F:64:4D:95:BA:23:5E:3D:03:F3 Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18 Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18 Certificate serial: 019BDCC8675D104142748A67F08CE3848046 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft Manifest number: 0E8A Signing time: Tue 20 Jan 2026 19:01:19 +0000 Manifest this update: Tue 20 Jan 2026 19:01:19 +0000 Manifest next update: Wed 21 Jan 2026 19:01:19 +0000 Files and hashes: 1: 3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa (hash: xQBHQAaq9hM8X7UsWewldzkOn1BKCLRfc2H9cPBtG10=) 2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: dW0oSmc/KIpe0kWyZD1t/xzGShvEowHbNBOl+SGGbmM=) 3: KEfhpSYDTcA_WVzzetkfLEElZqA.roa (hash: HDmoLstVaitK+4XS6Am6UgsI3Y71lEzDuRcwxhiLGMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:c8:67:5d:10:41:42:74:8a:67:f0:8c:e3:84:80:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18 Validity Not Before: Jan 20 19:01:19 2026 GMT Not After : Jan 21 19:01:19 2026 GMT Subject: CN=bf1cbdde67e3b6ace6421f644d95ba235e3d03f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:70:d9:dc:24:51:b5:e4:33:7d:b5:72:ae: 27:c3:0a:6d:0d:9b:45:e5:ff:4d:e3:5c:a2:3d:ec: c8:d5:55:75:a3:b7:da:96:1b:ad:40:5b:d0:85:74: 00:4e:bb:ea:83:db:2b:89:a2:bb:36:4c:92:b6:47: d4:c1:10:e9:63:60:63:a1:db:eb:b9:ba:f6:4f:74: 4a:6a:d1:5d:d5:38:20:9b:aa:19:ac:88:f5:59:2b: ca:de:c4:23:84:25:69:9e:ed:50:7b:a7:a2:43:63: f1:e1:68:4e:58:75:a7:51:3a:e1:9c:5c:01:69:91: d4:f3:5a:68:9c:81:0d:8d:c0:ad:2e:a0:03:af:5c: 0f:0b:93:f0:75:05:c7:31:e9:a5:98:0f:53:42:7f: d2:de:3c:18:48:c7:b6:7c:d7:6d:7f:7c:05:66:0b: 48:71:94:1d:e0:45:05:b8:54:98:11:83:8a:41:6b: 28:a6:65:7a:83:2e:01:10:fd:5c:a4:fe:74:92:f2: 22:e6:f6:67:ea:2b:76:34:96:bc:15:36:c8:d0:0c: 1d:42:6b:c8:84:12:f2:23:7f:f0:a3:ec:26:c7:1a: 2c:2c:d9:3a:6e:69:d1:65:bc:fa:d0:e5:a9:87:42: 78:7a:0b:9c:7e:44:df:32:66:d0:19:a9:8f:f5:2a: 52:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1C:BD:DE:67:E3:B6:AC:E6:42:1F:64:4D:95:BA:23:5E:3D:03:F3 X509v3 Authority Key Identifier: keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:c9:c1:3d:e6:a7:23:75:b6:03:13:7e:e0:2d:3f:94:37: e0:9d:08:ca:b3:a2:ff:18:ad:f9:54:0e:50:10:ab:95:10:0e: e7:9c:b6:8d:41:50:bf:27:aa:fe:a8:55:b1:50:50:f9:fc:15: 42:5d:5b:49:72:96:08:dd:2c:d2:49:e5:c7:4c:79:33:88:e5: ab:28:9c:c4:89:c5:cf:db:66:ec:aa:50:5a:e1:bd:42:81:aa: 44:a9:e4:2f:aa:a3:04:51:fe:db:17:a6:e2:92:1c:fc:49:55: b6:9c:82:8a:b6:43:32:9b:2a:84:34:af:a3:46:10:0f:5c:4b: 5e:9a:d0:f7:ff:40:c1:aa:4f:e8:bf:ed:e4:b2:bb:be:4d:f8: e3:99:1c:13:f7:12:a3:0d:36:85:53:41:bf:27:50:cf:f9:87: 85:02:ae:76:22:26:f0:41:4f:68:b8:2b:3f:04:74:e7:06:d4: c1:8f:12:76:a1:00:48:dc:34:36:71:c1:fa:d9:ff:52:1e:a8: b1:8e:3b:a1:49:8d:8b:b7:33:ab:de:24:c7:c0:a3:0c:46:67: b3:f6:45:e0:17:73:ab:25:fa:08:43:9b:db:1b:1a:32:c0:11: 70:33:95:2d:c6:51:88:c7:4a:e4:9e:e4:89:f5:da:b7:21:8e: 36:bd:de:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvcyGddEEFCdIpn8IzjhIBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTE1NGUxYzU1NzhiMGZlZjhhYmI3NzlmODExN2U2NGU4 ODRkMTgwHhcNMjYwMTIwMTkwMTE5WhcNMjYwMTIxMTkwMTE5WjAzMTEwLwYDVQQD EyhiZjFjYmRkZTY3ZTNiNmFjZTY0MjFmNjQ0ZDk1YmEyMzVlM2QwM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaZw2dwkUbXkM321cq4nwwptDZtF 5f9N41yiPezI1VV1o7falhutQFvQhXQATrvqg9sriaK7NkyStkfUwRDpY2Bjodvr ubr2T3RKatFd1Tggm6oZrIj1WSvK3sQjhCVpnu1Qe6eiQ2Px4WhOWHWnUTrhnFwB aZHU81ponIENjcCtLqADr1wPC5PwdQXHMemlmA9TQn/S3jwYSMe2fNdtf3wFZgtI cZQd4EUFuFSYEYOKQWsopmV6gy4BEP1cpP50kvIi5vZn6it2NJa8FTbI0AwdQmvI hBLyI3/wo+wmxxosLNk6bmnRZbz60OWph0J4egucfkTfMmbQGamP9SpSLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8cvd5n47as5kIfZE2VuiNePQPzMB8GA1UdIwQY MBaAFBqRVOHFV4sP74q7d5+BF+ZOiE0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDIt Mzg4ZDhhZDJhNWJiLzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDItMzg4ZDhhZDJhNWJi LzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbPJwT3m pyN1tgMTfuAtP5Q34J0IyrOi/xit+VQOUBCrlRAO55y2jUFQvyeq/qhVsVBQ+fwV Ql1bSXKWCN0s0knlx0x5M4jlqyicxInFz9tm7KpQWuG9QoGqRKnkL6qjBFH+2xem 4pIc/ElVtpyCirZDMpsqhDSvo0YQD1xLXprQ9/9AwapP6L/t5LK7vk3445kcE/cS ow02hVNBvydQz/mHhQKudiIm8EFPaLgrPwR05wbUwY8SdqEASNw0NnHB+tn/Uh6o sY47oUmNi7czq94kx8CjDEZns/ZF4BdzqyX6CEOb2xsaMsARcDOVLcZRiMdK5J7k ifXatyGONr3eqw== -----END CERTIFICATE-----Generated at Wed Jan 21 00:19:25 2026 by rpki-client