This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json) Hash identifier: aazd+Hwy4YRWPwFSYnd4jJVYg3AQVbcfZJjd9IfnhSE= Subject key identifier: E0:EF:A4:69:05:D7:35:94:E7:1B:21:E0:3A:47:4C:C0:81:28:3E:2D Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e Certificate serial: 019BFB403BE8DBB7D73D1CA472D70EC0B61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft Manifest number: 02F7 Signing time: Mon 26 Jan 2026 17:00:49 +0000 Manifest this update: Mon 26 Jan 2026 17:00:49 +0000 Manifest next update: Tue 27 Jan 2026 17:00:49 +0000 Files and hashes: 1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=) 2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: 20O5IRRiu0OpivP/fuUi1k2R5H7kWucRCbb3Q68Dq/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:3b:e8:db:b7:d7:3d:1c:a4:72:d7:0e:c0:b6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e Validity Not Before: Jan 26 17:00:49 2026 GMT Not After : Jan 27 17:00:49 2026 GMT Subject: CN=e0efa46905d73594e71b21e03a474cc081283e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:b8:e4:9e:80:d7:bc:c1:90:a4:53:ad:e9: 32:62:ca:00:b3:29:8a:ac:8a:52:66:47:f8:ac:09: 62:f0:63:84:df:fd:0b:29:74:99:18:27:49:95:bb: ae:b2:da:97:a3:4f:d0:00:fa:a5:51:3f:89:f0:5d: 58:d4:c0:11:20:b0:b7:dd:83:45:94:a4:51:33:4a: 9a:82:e3:aa:78:68:db:5c:28:cb:ad:81:91:12:49: f6:6e:ad:88:72:76:c4:9e:b3:06:a3:73:98:9a:62: 42:ac:f3:a2:b7:1c:c7:f2:98:94:e5:8a:92:54:99: dc:64:49:8a:fa:99:5e:5b:a7:31:f7:ab:63:6a:f8: e8:82:d3:bb:37:69:ee:6b:dd:be:48:27:e2:af:87: 07:58:5a:8f:99:53:8a:95:56:53:fa:24:78:43:9e: 58:ec:6a:66:2a:a0:46:2f:f5:c5:46:61:8b:d8:0b: fc:85:d4:08:64:9e:bd:4d:5e:be:bf:56:39:74:3a: a9:fc:f7:ee:e0:da:92:75:be:3d:4b:86:03:2f:8e: 9e:56:9a:a9:eb:30:54:c5:f6:6d:59:a9:a6:b3:df: df:f5:38:b1:d5:31:27:19:11:52:a6:67:fe:f8:0f: 64:83:5c:ad:de:0f:a5:12:f6:ef:43:12:58:6b:66: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EF:A4:69:05:D7:35:94:E7:1B:21:E0:3A:47:4C:C0:81:28:3E:2D X509v3 Authority Key Identifier: keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5e:67:c4:78:1e:16:0f:1c:f6:d6:fb:77:a8:aa:aa:9f:7c: 68:24:f5:8d:c9:4e:00:fb:d5:ab:f2:84:cd:90:4e:6a:4b:9b: 40:a6:8d:fd:24:dd:43:16:63:23:d5:b0:75:6f:6f:9d:65:c0: 15:a6:48:46:b7:fa:f1:0c:42:af:a1:2f:4c:34:34:6a:8f:32: 34:85:f5:bd:ab:ee:41:3f:28:29:e8:db:93:22:5d:43:ac:35: ac:f2:9a:30:5b:cc:51:97:f1:8e:50:3e:71:93:31:91:2e:ea: a8:32:a1:dd:5b:bf:db:3a:03:c5:14:3c:fc:98:77:93:13:55: 8a:3a:fe:df:50:21:03:c2:63:22:0c:94:00:3c:85:ae:72:ab: 4e:59:7e:15:3e:84:0f:4f:45:60:06:62:43:5a:64:70:de:7a: f9:5d:54:26:45:a3:79:9e:bf:a0:c1:16:5c:c8:41:9f:1a:15: 99:71:fb:04:07:88:14:b6:3a:64:6b:db:14:0f:3a:f0:5c:3e: df:fb:3f:fb:0b:97:0c:ff:82:91:54:6b:15:0b:f2:1a:11:03: a5:8f:28:88:3f:f9:e0:34:8c:04:eb:5f:a9:cd:7e:e6:e9:4e: 3e:c6:32:be:27:b2:32:cd:b0:99:e8:79:f3:18:81:0a:d0:f0: 02:bb:e8:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QDvo27fXPRykctcOwLYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2 MDVlMGUwHhcNMjYwMTI2MTcwMDQ5WhcNMjYwMTI3MTcwMDQ5WjAzMTEwLwYDVQQD EyhlMGVmYTQ2OTA1ZDczNTk0ZTcxYjIxZTAzYTQ3NGNjMDgxMjgzZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs++45J6A17zBkKRTrekyYsoAsymK rIpSZkf4rAli8GOE3/0LKXSZGCdJlbuustqXo0/QAPqlUT+J8F1Y1MARILC33YNF lKRRM0qaguOqeGjbXCjLrYGREkn2bq2IcnbEnrMGo3OYmmJCrPOitxzH8piU5YqS VJncZEmK+pleW6cx96tjavjogtO7N2nua92+SCfir4cHWFqPmVOKlVZT+iR4Q55Y 7GpmKqBGL/XFRmGL2Av8hdQIZJ69TV6+v1Y5dDqp/Pfu4NqSdb49S4YDL46eVpqp 6zBUxfZtWamms9/f9Tix1TEnGRFSpmf++A9kg1yt3g+lEvbvQxJYa2ZU2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODvpGkF1zWU5xsh4DpHTMCBKD4tMB8GA1UdIwQY MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt ZGZmM2JjZWU2YjY2LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2 LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF5nxHge Fg8c9tb7d6iqqp98aCT1jclOAPvVq/KEzZBOakubQKaN/STdQxZjI9WwdW9vnWXA FaZIRrf68QxCr6EvTDQ0ao8yNIX1vavuQT8oKejbkyJdQ6w1rPKaMFvMUZfxjlA+ cZMxkS7qqDKh3Vu/2zoDxRQ8/Jh3kxNVijr+31AhA8JjIgyUADyFrnKrTll+FT6E D09FYAZiQ1pkcN56+V1UJkWjeZ6/oMEWXMhBnxoVmXH7BAeIFLY6ZGvbFA868Fw+ 3/s/+wuXDP+CkVRrFQvyGhEDpY8oiD/54DSMBOtfqc1+5ulOPsYyvieyMs2wmeh5 8xiBCtDwArvoLw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:32 2026 by rpki-client