This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json) Hash identifier: ND4E+WFRNphrcfUPKt4b29XKhsT51NWPdjDrdcHMlfI= Subject key identifier: C2:72:D4:6B:79:DE:EE:A8:DE:5A:A1:6E:90:6E:54:3F:CF:57:B5:6E Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Certificate serial: 019C1D277B20283DEAED20726DDCF4B6CC4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft Manifest number: 1790 Signing time: Mon 02 Feb 2026 07:00:52 +0000 Manifest this update: Mon 02 Feb 2026 07:00:52 +0000 Manifest next update: Tue 03 Feb 2026 07:00:52 +0000 Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: L7xPJyP4tjxPjUi/G8efEQqrOT62xruub/j2UgUdSZ0=) 2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:27:7b:20:28:3d:ea:ed:20:72:6d:dc:f4:b6:cc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Validity Not Before: Feb 2 07:00:52 2026 GMT Not After : Feb 3 07:00:52 2026 GMT Subject: CN=c272d46b79deeea8de5aa16e906e543fcf57b56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:50:0c:37:e0:c3:fd:9f:5e:a7:69:69:f7: 39:54:47:60:f2:5e:cd:6a:d9:cd:7e:38:23:3a:ec: 27:e9:2b:49:7e:54:ca:3e:e0:9c:19:d8:69:61:20: 20:70:33:21:35:77:29:43:aa:49:be:1f:a4:92:03: b6:c3:5a:12:f1:78:90:71:74:2b:24:6e:c1:a3:7f: 75:90:b8:ce:6e:d1:27:a5:97:a3:7a:4c:ad:1d:77: ad:68:45:65:9a:a2:14:63:5d:ba:e9:a8:16:e4:bd: 8a:79:17:dd:77:31:ef:7e:d2:1e:b8:e6:89:b0:5d: 01:63:d5:76:f4:bb:21:17:fe:14:eb:5a:32:87:ea: 87:f5:12:3d:8d:11:8f:ad:b1:6e:e8:db:5b:7a:11: e1:be:73:94:69:8c:63:9e:1e:c1:52:9e:55:2f:c6: ea:ce:5f:41:78:62:eb:c7:69:1e:30:7a:7a:a4:96: 47:98:14:24:2c:d0:57:51:ed:a1:79:47:19:a0:da: 80:0a:15:c4:d7:93:eb:f9:09:38:b9:59:85:7c:58: 5a:8d:fb:6b:bf:ae:05:51:af:23:ab:f9:06:bc:70: 8e:c3:43:7a:c8:ec:e1:b4:29:07:11:a7:01:ca:1b: 95:8b:c7:87:6f:ab:23:a9:70:02:47:20:21:a9:ea: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:D4:6B:79:DE:EE:A8:DE:5A:A1:6E:90:6E:54:3F:CF:57:B5:6E X509v3 Authority Key Identifier: keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0d:e4:f1:bc:3a:1d:d6:b1:c1:6f:5a:b8:be:36:7a:9f:09: fe:e7:03:6a:32:cb:fe:b9:15:1b:3a:89:e1:04:f4:ae:8a:78: 00:71:21:03:15:61:03:45:11:c7:c3:e5:1c:2f:7a:f6:e6:a4: b3:78:89:08:ee:94:65:cb:84:9e:e9:0f:dd:e3:ed:b5:96:43: 26:dc:9e:5f:db:8d:14:fb:c1:cb:4a:ae:ee:7b:5b:d9:5a:1b: d4:3a:c0:f4:76:ad:09:99:5c:2e:e5:0f:ce:03:89:75:7c:2f: 3f:e7:d7:40:ee:2c:b2:8d:aa:4c:1e:67:ee:03:7f:4a:33:72: a4:de:b0:7e:52:f1:4c:2e:44:a8:65:a4:71:a4:71:04:ef:3b: 53:ab:06:e8:0e:b7:15:82:38:fe:b3:de:42:fc:f2:45:a1:7f: 80:34:ca:5c:9a:89:07:d8:f9:54:f4:4b:ce:33:ba:24:1b:ef: fc:95:20:a0:97:4f:01:41:fe:51:b6:64:59:b4:70:93:09:50: 73:58:03:9f:54:f6:6a:b5:77:42:e4:1d:aa:b9:98:52:54:d3: 26:83:42:60:f9:83:ec:80:24:15:f6:2e:5f:ef:e4:40:76:c6: 21:10:e6:9e:aa:13:2b:3c:48:c2:b2:18:74:82:68:c9:e6:c9: 04:70:cf:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdJ3sgKD3q7SBybdz0tsxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3 MmZmYTgwHhcNMjYwMjAyMDcwMDUyWhcNMjYwMjAzMDcwMDUyWjAzMTEwLwYDVQQD EyhjMjcyZDQ2Yjc5ZGVlZWE4ZGU1YWExNmU5MDZlNTQzZmNmNTdiNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSVQDDfgw/2fXqdpafc5VEdg8l7N atnNfjgjOuwn6StJflTKPuCcGdhpYSAgcDMhNXcpQ6pJvh+kkgO2w1oS8XiQcXQr JG7Bo391kLjObtEnpZejekytHXetaEVlmqIUY1266agW5L2KeRfddzHvftIeuOaJ sF0BY9V29LshF/4U61oyh+qH9RI9jRGPrbFu6NtbehHhvnOUaYxjnh7BUp5VL8bq zl9BeGLrx2keMHp6pJZHmBQkLNBXUe2heUcZoNqAChXE15Pr+Qk4uVmFfFhajftr v64FUa8jq/kGvHCOw0N6yOzhtCkHEacByhuVi8eHb6sjqXACRyAhqepX9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJy1Gt53u6o3lqhbpBuVD/PV7VuMB8GA1UdIwQY MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ3k8bw6 HdaxwW9auL42ep8J/ucDajLL/rkVGzqJ4QT0rop4AHEhAxVhA0URx8PlHC969uak s3iJCO6UZcuEnukP3ePttZZDJtyeX9uNFPvBy0qu7ntb2Vob1DrA9HatCZlcLuUP zgOJdXwvP+fXQO4sso2qTB5n7gN/SjNypN6wflLxTC5EqGWkcaRxBO87U6sG6A63 FYI4/rPeQvzyRaF/gDTKXJqJB9j5VPRLzjO6JBvv/JUgoJdPAUH+UbZkWbRwkwlQ c1gDn1T2arV3QuQdqrmYUlTTJoNCYPmD7IAkFfYuX+/kQHbGIRDmnqoTKzxIwrIY dIJoyebJBHDPSg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:29:01 2026 by rpki-client