This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json) Hash identifier: PpCcxohCsTSXt4nzWiJMIbuErOxaQNIbMtgWf9BDVX0= Subject key identifier: 5F:B9:CB:BB:32:C3:EE:8F:37:88:2C:82:A5:54:43:F2:36:09:B0:FE Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Certificate serial: 019BFB773D19BD4EC2E87896736FAB9E1263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 18:00:54 +0000 Manifest this update: Mon 26 Jan 2026 18:00:54 +0000 Manifest next update: Tue 27 Jan 2026 18:00:54 +0000 Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: 9ondbf6/Apr0upeI2WFJkIKQBZXRfssjmZNSIkjIhRo=) 2: cKcEH95-xZkMRq9n8qxJQ8taC0I.roa (hash: 5CGu3gKojPJu4bccEdLgCE4zbwffs6jrhAuLccKD0VM=) 3: qOGZnmJn9twBLNZ-YPGtBuaarUA.roa (hash: 8dGXa2ecQGk4C5r7XMrelqu+XdDeVoRN8xB6oD32Evs=) 4: r7k-qYwu_gVhVP_qzP1I3k06xN8.roa (hash: Qmj2gAagugrdnVz/mHy0g80G5C8fPaZdzMVSJwy2cLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:3d:19:bd:4e:c2:e8:78:96:73:6f:ab:9e:12:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Validity Not Before: Jan 26 18:00:54 2026 GMT Not After : Jan 27 18:00:54 2026 GMT Subject: CN=5fb9cbbb32c3ee8f37882c82a55443f23609b0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:f4:49:73:ec:08:59:27:aa:7b:c7:07:2c: 5e:6a:fe:0c:6f:2d:6e:12:5c:41:e0:39:2c:14:00: 9a:63:89:28:e1:93:51:d9:17:ee:eb:3a:73:a6:b0: aa:47:82:cf:69:64:9b:c5:04:46:a4:9d:12:39:db: 36:86:ba:d3:3f:f0:54:56:67:1b:f3:05:37:ff:dd: 7c:e7:1f:9b:1a:8b:e0:db:c2:3f:16:46:9b:c6:f6: 6f:aa:2f:e2:4e:c9:b2:57:0f:f2:db:e1:0b:61:7c: 13:51:46:45:aa:77:83:e3:b3:0b:ca:a9:3a:89:2f: 40:fe:b5:a9:83:ba:32:cc:60:8f:19:d9:de:8a:86: ba:f8:c3:99:a9:e1:1a:5f:4f:7a:a4:de:66:8a:0c: 0f:77:22:bd:d0:98:b8:97:9b:2c:0e:2e:3f:f9:04: 7b:f4:79:82:7a:84:91:5e:79:3c:ac:db:c3:39:e5: f8:1e:9a:0d:98:21:e8:41:03:dc:0e:d5:2d:05:86: 2e:d6:72:9a:22:a4:cc:73:8d:5a:f4:87:35:d4:67: a2:9a:61:c8:3e:6a:eb:7a:17:98:f6:b4:7a:cb:7a: 22:38:80:6f:16:f4:47:f4:2c:cc:ef:fd:77:7b:f5: bb:20:b4:11:6a:36:b2:d0:de:25:63:33:23:5e:0e: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B9:CB:BB:32:C3:EE:8F:37:88:2C:82:A5:54:43:F2:36:09:B0:FE X509v3 Authority Key Identifier: keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:09:2a:df:6f:9e:73:b2:56:4c:a5:33:66:19:96:ad:15:85: a1:45:50:24:38:38:9e:52:6f:7b:80:00:3a:ce:06:b0:ec:78: ed:78:01:2c:46:00:24:7a:2c:50:93:73:2d:4e:17:31:ab:a6: 5f:75:23:62:6c:34:70:61:83:90:2e:1d:fd:97:53:31:15:4f: ee:c7:1a:71:94:ad:d1:5e:ed:83:79:29:40:1c:1d:34:cb:77: 44:4f:9c:08:fa:9d:5f:12:cb:5f:99:f9:d1:96:2c:6c:8e:4e: 3f:06:d6:46:58:99:d6:2d:6c:cc:b5:0c:fd:f6:3a:db:d7:a0: 92:85:9e:55:00:97:80:dc:cc:cf:ca:1d:98:91:b7:ac:b8:ec: 8a:c2:12:65:c3:44:d1:95:e8:39:6b:b6:b3:27:34:83:26:c5: de:62:5d:ec:68:2c:06:91:1f:ae:e7:5e:39:44:93:d5:54:91: 6e:ef:e1:68:21:12:09:f0:d3:e4:6e:04:01:c6:a4:a7:9b:dc: 69:d8:85:2c:b0:09:f6:82:68:55:7b:f2:2f:66:e4:12:cc:6e: c6:b5:c6:5b:96:42:25:00:ab:41:72:0e:45:c8:29:c3:d1:dc: e3:e0:46:75:76:48:1d:30:1f:57:13:34:b6:72:3d:20:60:d1: 88:56:76:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dz0ZvU7C6HiWc2+rnhJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTM4NDliZmYzMzdkZjhiOGIwYmQxYWUyNTJlZTYxMTlk OGE2MWYwHhcNMjYwMTI2MTgwMDU0WhcNMjYwMTI3MTgwMDU0WjAzMTEwLwYDVQQD Eyg1ZmI5Y2JiYjMyYzNlZThmMzc4ODJjODJhNTU0NDNmMjM2MDliMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlb0SXPsCFknqnvHByxeav4Mby1u ElxB4DksFACaY4ko4ZNR2Rfu6zpzprCqR4LPaWSbxQRGpJ0SOds2hrrTP/BUVmcb 8wU3/9185x+bGovg28I/FkabxvZvqi/iTsmyVw/y2+ELYXwTUUZFqneD47MLyqk6 iS9A/rWpg7oyzGCPGdneioa6+MOZqeEaX096pN5migwPdyK90Ji4l5ssDi4/+QR7 9HmCeoSRXnk8rNvDOeX4HpoNmCHoQQPcDtUtBYYu1nKaIqTMc41a9Ic11GeimmHI PmrreheY9rR6y3oiOIBvFvRH9CzM7/13e/W7ILQRajay0N4lYzMjXg5sHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+5y7syw+6PN4gsgqVUQ/I2CbD+MB8GA1UdIwQY MBaAFBqThJv/M334uLC9GuJS7mEZ2KYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjkt NDNlNjdkNWQwYTg1LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjktNDNlNjdkNWQwYTg1 LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAkq32+e c7JWTKUzZhmWrRWFoUVQJDg4nlJve4AAOs4GsOx47XgBLEYAJHosUJNzLU4XMaum X3UjYmw0cGGDkC4d/ZdTMRVP7scacZSt0V7tg3kpQBwdNMt3RE+cCPqdXxLLX5n5 0ZYsbI5OPwbWRliZ1i1szLUM/fY629egkoWeVQCXgNzMz8odmJG3rLjsisISZcNE 0ZXoOWu2syc0gybF3mJd7GgsBpEfrudeOUST1VSRbu/haCESCfDT5G4EAcakp5vc adiFLLAJ9oJoVXvyL2bkEsxuxrXGW5ZCJQCrQXIORcgpw9Hc4+BGdXZIHTAfVxM0 tnI9IGDRiFZ2Kw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:23:15 2026 by rpki-client