This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json) Hash identifier: VXoENMUBXTxvf7CDUNKIvjB/ZiK35HmBmaenPSkoDZI= Subject key identifier: 29:B5:A2:27:C9:29:E6:23:46:F9:0E:3C:7C:20:27:C6:8A:4C:01:F2 Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Certificate serial: 019BFA9C6643D2E01BFEF95D5445905CB8A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft Manifest number: 1821 Signing time: Mon 26 Jan 2026 14:01:52 +0000 Manifest this update: Mon 26 Jan 2026 14:01:52 +0000 Manifest next update: Tue 27 Jan 2026 14:01:52 +0000 Files and hashes: 1: WvR_PyZn7HQBLy1Van9znwED4dU.roa (hash: 5FqxeqmUCHn2vzUhg58G9qJL/lfqVbvp/uqG5bnLGIU=) 2: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: 5d14xyG1JChxkKJqe58sruv/jj/TE2LhN4utAtUAcws=) 3: nMPTAs5xTPzaigESDSn0xkt8iVs.roa (hash: 8O1aTwpd0sgnwDGnx2ZKtPazmYV80Blqc480oPelgoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:66:43:d2:e0:1b:fe:f9:5d:54:45:90:5c:b8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Validity Not Before: Jan 26 14:01:52 2026 GMT Not After : Jan 27 14:01:52 2026 GMT Subject: CN=29b5a227c929e62346f90e3c7c2027c68a4c01f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:2b:3a:84:ae:9f:e4:e2:02:38:cf:21:a9: 5c:d8:5f:11:b6:e3:88:20:09:86:dc:78:53:b0:c7: 39:bb:8f:be:9b:7d:93:7d:a3:4a:53:18:a4:93:d2: 62:30:d3:56:83:c4:82:74:85:4f:d1:d2:01:b7:bd: a4:5b:25:5f:c7:ee:a7:68:c4:22:99:5e:6c:3c:eb: 47:de:e3:f0:65:04:2a:a7:a2:1f:08:62:f0:4c:0a: 73:ef:94:60:22:2d:38:d4:5e:c0:bd:bf:25:14:0b: 05:85:3e:e6:59:76:b4:07:9b:6c:8c:f7:82:10:2c: 1e:29:37:39:de:75:87:13:26:01:11:e4:4d:6e:ab: 65:64:00:0d:2a:7a:d4:29:20:c6:e9:20:f8:79:89: 59:af:68:39:a4:94:97:b7:92:f5:29:3f:b7:bf:97: 7c:51:d4:a2:34:3b:00:28:f1:25:7e:19:81:04:0a: 3d:a0:b6:50:81:d5:30:38:c6:79:94:70:6e:13:e0: 46:92:d4:8b:f4:3e:72:76:28:a6:33:03:eb:be:05: 00:80:50:06:ec:9d:bd:bc:21:34:b5:89:62:2f:a4: 79:aa:48:d6:1e:ff:c3:e5:75:6f:be:28:35:ba:ef: 24:50:01:30:c4:a3:35:1f:69:7d:f1:bd:68:13:1d: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B5:A2:27:C9:29:E6:23:46:F9:0E:3C:7C:20:27:C6:8A:4C:01:F2 X509v3 Authority Key Identifier: keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bc:91:0a:1a:f6:cc:e2:6a:0e:7e:dd:fa:8d:7e:90:6a:26: c4:d3:4c:27:c4:b7:9b:f7:79:1d:d6:63:b4:d1:a3:a5:01:24: f2:a9:ee:65:f2:2c:2a:b4:03:da:19:5c:10:69:85:69:4e:d9: 41:48:53:4e:8a:92:70:ba:58:24:e2:5a:07:75:b7:46:f8:fd: 9d:06:65:15:66:be:03:b0:90:dd:18:b6:d3:5d:14:af:2f:15: 22:99:25:94:92:36:ca:43:a4:47:20:ba:e1:29:99:7f:08:fa: 80:56:67:ca:83:a1:f1:e7:b9:a2:91:9e:1b:61:7e:51:0a:2e: 93:cd:4f:72:28:74:25:c0:4f:14:80:b8:0d:00:14:e9:bb:0a: 4f:37:0c:79:ee:54:66:9f:64:df:40:66:fd:b8:86:fa:02:77: 68:af:a4:49:05:94:86:3c:6b:75:56:57:9b:1e:f5:e4:df:39: a4:ff:7b:91:36:d3:38:b0:d2:a2:b5:62:23:c4:11:3e:89:95: 11:ba:01:3d:77:c0:78:3a:d9:88:fd:df:e1:12:83:4a:30:49: 49:18:23:70:38:bf:d2:26:a5:07:ed:a9:9e:31:96:de:02:74: b4:02:b4:27:2f:ac:ed:02:21:17:df:c2:94:ab:ea:03:f1:d8: 1f:5c:d9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nGZD0uAb/vldVEWQXLihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm OWQxNTUwHhcNMjYwMTI2MTQwMTUyWhcNMjYwMTI3MTQwMTUyWjAzMTEwLwYDVQQD EygyOWI1YTIyN2M5MjllNjIzNDZmOTBlM2M3YzIwMjdjNjhhNGMwMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oIrOoSun+TiAjjPIalc2F8RtuOI IAmG3HhTsMc5u4++m32TfaNKUxikk9JiMNNWg8SCdIVP0dIBt72kWyVfx+6naMQi mV5sPOtH3uPwZQQqp6IfCGLwTApz75RgIi041F7Avb8lFAsFhT7mWXa0B5tsjPeC ECweKTc53nWHEyYBEeRNbqtlZAANKnrUKSDG6SD4eYlZr2g5pJSXt5L1KT+3v5d8 UdSiNDsAKPElfhmBBAo9oLZQgdUwOMZ5lHBuE+BGktSL9D5ydiimMwPrvgUAgFAG 7J29vCE0tYliL6R5qkjWHv/D5XVvvig1uu8kUAEwxKM1H2l98b1oEx2t4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm1oifJKeYjRvkOPHwgJ8aKTAHyMB8GA1UdIwQY MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt NDdkOThlNTg1NDVhLzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbyRChr2 zOJqDn7d+o1+kGomxNNMJ8S3m/d5HdZjtNGjpQEk8qnuZfIsKrQD2hlcEGmFaU7Z QUhTToqScLpYJOJaB3W3Rvj9nQZlFWa+A7CQ3Ri2010Ury8VIpkllJI2ykOkRyC6 4SmZfwj6gFZnyoOh8ee5opGeG2F+UQouk81Pcih0JcBPFIC4DQAU6bsKTzcMee5U Zp9k30Bm/biG+gJ3aK+kSQWUhjxrdVZXmx715N85pP97kTbTOLDSorViI8QRPomV EboBPXfAeDrZiP3f4RKDSjBJSRgjcDi/0ialB+2pnjGW3gJ0tAK0Jy+s7QIhF9/C lKvqA/HYH1zZ0A== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:37 2026 by rpki-client