This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json) Hash identifier: BRwVApIt9ohFCXgmcpEIfAVfvorLTSHVlYaPLUfae8I= Subject key identifier: 64:DC:C4:37:B3:8E:CE:18:6E:C0:D5:72:A0:42:57:EB:19:F9:E7:4B Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756 Certificate serial: 019BD6C65B44FE0F60D626907EEE9384E15D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft Manifest number: 06CC Signing time: Mon 19 Jan 2026 15:01:22 +0000 Manifest this update: Mon 19 Jan 2026 15:01:22 +0000 Manifest next update: Tue 20 Jan 2026 15:01:22 +0000 Files and hashes: 1: DKPrKwEm9w_rRG3TMuhv1McAamk.roa (hash: 4OtFjtxkmUmlHY70yrx1zCjgip8Y0WBSl5BdZAXK0TQ=) 2: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: EEy3/gpOvhDo5Tc0klJ6ixJeLl9nVYQbH36H36Fm/VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:c6:5b:44:fe:0f:60:d6:26:90:7e:ee:93:84:e1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756 Validity Not Before: Jan 19 15:01:22 2026 GMT Not After : Jan 20 15:01:22 2026 GMT Subject: CN=64dcc437b38ece186ec0d572a04257eb19f9e74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:10:7c:87:b2:22:3b:34:f5:b1:b7:11:20: 08:27:dc:7c:3a:74:32:62:28:a2:14:74:81:b5:3f: f4:e3:27:66:5f:a4:2a:53:7b:23:6a:65:12:3b:0c: 3b:bc:42:50:99:50:fa:2b:9d:11:26:81:43:f0:55: 9e:84:3d:1c:61:88:b9:47:c5:ad:28:9a:ef:5c:8e: a5:7e:08:80:0c:5c:dc:c6:a6:4a:da:b5:35:e1:f8: 8f:d4:67:cd:d9:96:dd:3b:76:31:57:2a:68:b6:ce: 67:ba:93:14:2f:f5:f2:c1:18:a5:ad:a6:ce:8c:ad: 0d:b0:f0:bf:12:0a:30:c7:98:87:a1:82:c4:fd:7e: c4:3d:31:64:41:bc:9e:cf:a5:0a:06:1e:f6:20:6e: 87:e3:a1:9b:8e:8e:12:2b:a2:9b:2c:f7:c5:82:7a: d9:16:78:32:e6:b4:9f:39:ae:0a:d9:4b:e4:80:3f: 4c:f7:aa:70:a0:3c:0c:c3:9d:bd:95:7d:72:35:07: fe:7b:43:9b:39:28:1f:b2:b4:ec:f8:78:d0:a5:64: c9:51:af:44:2e:f0:73:c9:13:1c:e4:2e:6e:52:06: 9e:fd:56:c4:cc:ed:38:33:1f:dd:d2:3c:f6:2a:50: 79:d4:ea:90:06:32:4c:e9:bd:22:6a:2c:39:dc:d6: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:C4:37:B3:8E:CE:18:6E:C0:D5:72:A0:42:57:EB:19:F9:E7:4B X509v3 Authority Key Identifier: keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6b:b0:16:98:f3:79:af:84:ab:b2:e4:27:85:97:9f:19:06: c9:01:a7:5c:a4:7d:0e:2a:7b:fd:11:63:53:03:06:7f:1e:80: 79:c1:a3:63:c0:b8:20:d6:a4:46:90:a9:1b:61:35:34:42:d4: a2:e3:71:6c:59:5b:01:38:87:42:5f:1e:5c:c5:98:ac:51:8b: bb:f4:e3:82:2e:86:fa:55:5d:b0:c1:28:18:e8:47:b3:08:cb: d9:62:93:c1:fe:b4:57:fc:0c:6c:16:6f:26:18:17:43:a9:20: b9:c8:da:46:9d:21:a1:b4:c9:05:3b:9d:5b:61:e4:1d:bb:77: e3:a2:13:67:0a:ba:36:1f:74:ef:f9:d4:06:98:0a:8f:73:9c: c4:86:5d:6d:99:d9:54:a7:29:52:d0:2e:45:47:ed:32:2a:20: 7d:1f:93:42:70:25:bf:25:ea:19:8d:b8:f2:10:db:4d:0f:8c: d4:5c:c9:30:b3:09:5d:b3:e3:99:dd:a4:86:bf:7a:3f:fc:09: 31:c5:21:69:a9:d1:d4:e8:f0:41:ac:bb:2b:b5:10:30:20:67: 50:88:88:e5:ad:77:02:3a:d0:61:7b:cd:24:5a:7a:ec:cc:89: ff:8b:e2:7d:a3:ef:db:9d:f2:54:82:c8:21:7b:7f:30:1a:7a: 7b:e8:d2:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWxltE/g9g1iaQfu6ThOFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw M2I3NTYwHhcNMjYwMTE5MTUwMTIyWhcNMjYwMTIwMTUwMTIyWjAzMTEwLwYDVQQD Eyg2NGRjYzQzN2IzOGVjZTE4NmVjMGQ1NzJhMDQyNTdlYjE5ZjllNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniMQfIeyIjs09bG3ESAIJ9x8OnQy YiiiFHSBtT/04ydmX6QqU3sjamUSOww7vEJQmVD6K50RJoFD8FWehD0cYYi5R8Wt KJrvXI6lfgiADFzcxqZK2rU14fiP1GfN2ZbdO3YxVypots5nupMUL/XywRilrabO jK0NsPC/Egowx5iHoYLE/X7EPTFkQbyez6UKBh72IG6H46Gbjo4SK6KbLPfFgnrZ Fngy5rSfOa4K2UvkgD9M96pwoDwMw529lX1yNQf+e0ObOSgfsrTs+HjQpWTJUa9E LvBzyRMc5C5uUgae/VbEzO04Mx/d0jz2KlB51OqQBjJM6b0iaiw53NalIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTcxDezjs4YbsDVcqBCV+sZ+edLMB8GA1UdIwQY MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt MDY5YmZhZjJiY2U0LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0 LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWuwFpjz ea+Eq7LkJ4WXnxkGyQGnXKR9Dip7/RFjUwMGfx6AecGjY8C4INakRpCpG2E1NELU ouNxbFlbATiHQl8eXMWYrFGLu/Tjgi6G+lVdsMEoGOhHswjL2WKTwf60V/wMbBZv JhgXQ6kgucjaRp0hobTJBTudW2HkHbt346ITZwq6Nh907/nUBpgKj3OcxIZdbZnZ VKcpUtAuRUftMiogfR+TQnAlvyXqGY248hDbTQ+M1FzJMLMJXbPjmd2khr96P/wJ McUhaanR1OjwQay7K7UQMCBnUIiI5a13AjrQYXvNJFp67MyJ/4vifaPv253yVILI IXt/MBp6e+jSIw== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:15 2026 by rpki-client