This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json) Hash identifier: sUbxS3/Lq++cD6nKX99a4uQ6ZS+i9ZoJtPmpD+o+S9M= Subject key identifier: 3E:74:7B:D6:C9:F4:1D:79:1D:25:0E:31:9F:65:7A:D3:71:AD:B4:1B Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019BFBE56DA102C0667CBB03BA17FD63483C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 20:01:15 +0000 Manifest this update: Mon 26 Jan 2026 20:01:15 +0000 Manifest next update: Tue 27 Jan 2026 20:01:15 +0000 Files and hashes: 1: 7eQNjnQdwqflqSKNBUSkeuNmw7g.roa (hash: KDiDs9BVR3uSy9uhf7YQ+EiuhvYGlWjEWXwSqzhl/zA=) 2: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: T3qqbmrHy8I7YvfzLGBQTpewAuanDYYQOsNVjAchwXk=) 3: HqFdFQd3mJjjEoQudvkZxqIuHF4.roa (hash: Q9RLxw/T80VOo7/+EDUnGtAF2QXxYd4cppakgqAvZwY=) 4: Kp3eYJ7kSiZsDu5GffXxRznucgA.roa (hash: +v7HVtK9kA/9s9DQL3HEcP41QigGiyaFVGj2AlPGBaQ=) 5: _YjoM5RgGEqDATh0dggO_ptSVwA.roa (hash: EvlNg6FSVXOlKLDCdTk6bjISKtxW5D9yTRIIrx19hkM=) 6: h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa (hash: B+fnICpLokTB+5ePuFtzYa/q5V0EfzABtX3v8OW1PdQ=) 7: jJUpXp-wy4eDj-VTQpn033oPZ88.roa (hash: aKtKSKKKZ+/EZ2HpVdvSi+ll3PhhXXP06+cpHPYqgcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:6d:a1:02:c0:66:7c:bb:03:ba:17:fd:63:48:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 26 20:01:15 2026 GMT Not After : Jan 27 20:01:15 2026 GMT Subject: CN=3e747bd6c9f41d791d250e319f657ad371adb41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:5b:f8:cd:df:e2:7d:69:35:35:e3:14:8f: 3f:91:1e:73:f5:a6:0a:bc:49:49:2c:25:52:6c:54: fb:ac:39:04:a5:69:23:f2:c3:c2:d3:30:e4:08:18: cb:8e:05:29:de:88:e8:88:9f:20:e2:50:28:25:2d: 6a:8a:2b:da:83:96:7c:69:44:d5:0a:62:51:cd:d4: 29:62:2e:19:b4:23:3b:2e:35:c6:c7:f7:f4:04:aa: 08:1e:c1:53:50:52:09:28:35:84:71:02:e9:78:33: 60:8a:f7:8e:ab:ee:b5:87:51:ae:34:1b:0f:5f:8a: 15:46:83:ae:d1:d1:9b:9d:7b:8c:2c:28:28:8a:a1: 1f:d6:fe:96:13:65:9d:de:2b:4b:16:0a:42:65:25: d1:c3:bf:ce:bb:af:5b:51:53:a8:99:10:e4:6b:57: f0:fa:7e:1e:4d:c5:b6:97:14:12:1f:a5:4c:56:59: a8:aa:53:6c:72:58:09:ad:d4:9e:3f:ae:63:5d:f4: dd:89:e8:ca:04:c1:fa:fa:ca:ca:8f:12:52:76:91: 5a:eb:58:3f:0c:5c:44:bf:32:69:b7:07:06:69:63: 48:d6:bb:01:8a:7f:bd:93:3d:08:84:15:ad:ca:46: d8:85:48:0e:a4:40:78:02:3a:4b:bc:d2:e2:8a:25: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:74:7B:D6:C9:F4:1D:79:1D:25:0E:31:9F:65:7A:D3:71:AD:B4:1B X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:01:f2:c9:41:46:47:13:f7:7a:ef:8a:19:06:3c:d1:ff:74: 8c:2d:89:3a:2f:be:79:5b:58:07:cc:ef:68:8a:1b:a9:ca:04: 31:60:d0:37:f9:75:da:a4:e0:fd:87:3a:94:c4:57:f0:a6:70: 82:63:9f:5f:91:8c:f9:fb:73:af:de:0c:35:5c:f3:f5:db:66: 0f:69:24:f5:ac:0a:e3:e5:b5:da:8b:02:f7:b7:3c:d7:33:dc: eb:9a:5b:4a:6c:48:46:19:f9:c4:96:16:38:28:ab:1e:bf:88: d3:01:f4:b8:e3:96:63:15:d2:fe:9d:c7:d0:54:1b:0e:04:ce: a5:28:0a:5a:0b:3d:b8:5a:17:dd:78:af:8a:8c:b4:19:42:c8: 98:76:ec:90:39:03:44:b7:ef:7c:75:6e:ee:2e:f0:b4:ce:fc: da:ed:ed:eb:68:78:ca:68:8c:f3:85:cd:c0:3b:91:38:90:8b: 3d:a5:3e:38:b6:86:aa:c3:cd:1c:ac:61:5a:29:c4:b3:0e:68: af:6d:01:59:10:19:b4:ef:a4:20:78:1a:10:ce:dd:e3:12:91: 9b:78:37:76:89:c4:a2:33:3b:a9:7d:a3:80:0f:73:11:9d:ee: d1:7e:4c:12:f9:84:66:78:d0:76:4c:9c:67:ee:88:44:a8:31: 56:61:ce:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75W2hAsBmfLsDuhf9Y0g8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTI2MjAwMTE1WhcNMjYwMTI3MjAwMTE1WjAzMTEwLwYDVQQD EygzZTc0N2JkNmM5ZjQxZDc5MWQyNTBlMzE5ZjY1N2FkMzcxYWRiNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk71b+M3f4n1pNTXjFI8/kR5z9aYK vElJLCVSbFT7rDkEpWkj8sPC0zDkCBjLjgUp3ojoiJ8g4lAoJS1qiivag5Z8aUTV CmJRzdQpYi4ZtCM7LjXGx/f0BKoIHsFTUFIJKDWEcQLpeDNgiveOq+61h1GuNBsP X4oVRoOu0dGbnXuMLCgoiqEf1v6WE2Wd3itLFgpCZSXRw7/Ou69bUVOomRDka1fw +n4eTcW2lxQSH6VMVlmoqlNsclgJrdSeP65jXfTdiejKBMH6+srKjxJSdpFa61g/ DFxEvzJptwcGaWNI1rsBin+9kz0IhBWtykbYhUgOpEB4AjpLvNLiiiV4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD50e9bJ9B15HSUOMZ9letNxrbQbMB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogHyyUFG RxP3eu+KGQY80f90jC2JOi++eVtYB8zvaIobqcoEMWDQN/l12qTg/Yc6lMRX8KZw gmOfX5GM+ftzr94MNVzz9dtmD2kk9awK4+W12osC97c81zPc65pbSmxIRhn5xJYW OCirHr+I0wH0uOOWYxXS/p3H0FQbDgTOpSgKWgs9uFoX3Xivioy0GULImHbskDkD RLfvfHVu7i7wtM782u3t62h4ymiM84XNwDuROJCLPaU+OLaGqsPNHKxhWinEsw5o r20BWRAZtO+kIHgaEM7d4xKRm3g3donEojM7qX2jgA9zEZ3u0X5MEvmEZnjQdkyc Z+6IRKgxVmHOtg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:33:39 2026 by rpki-client