This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json) Hash identifier: xjZbhwhnc3JqHtOkskNHV91fhuXzbj7xRce4DGtP9Xo= Subject key identifier: 80:31:05:7E:59:57:76:B7:6F:2B:14:3F:FC:22:B9:30:9B:C5:FC:6D Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66 Certificate serial: 019BD5EB6C105723DF1CDBC379CDFB57602D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft Manifest number: 0378 Signing time: Mon 19 Jan 2026 11:02:14 +0000 Manifest this update: Mon 19 Jan 2026 11:02:14 +0000 Manifest next update: Tue 20 Jan 2026 11:02:14 +0000 Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: IWyAFYk8Q/n/YpxatMGbgc3Rw8FE708A3JY9L+ExJlc=) 2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:eb:6c:10:57:23:df:1c:db:c3:79:cd:fb:57:60:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66 Validity Not Before: Jan 19 11:02:14 2026 GMT Not After : Jan 20 11:02:14 2026 GMT Subject: CN=8031057e595776b76f2b143ffc22b9309bc5fc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:c9:57:19:a5:a9:02:7a:4b:8a:1a:58:a3: 33:4d:51:9c:25:f4:0d:32:2f:ff:1b:3a:d7:cb:df: f8:75:f5:0e:86:19:a5:9b:c4:94:0e:54:d0:9f:8b: 87:32:4a:4b:78:0b:e1:98:1e:fe:74:47:5e:a0:d9: a4:fe:83:7a:d5:bc:c5:17:fe:53:a5:25:30:6c:75: 76:17:dd:32:2c:e6:03:a3:88:6a:e2:d7:40:d1:a5: ad:4e:d9:50:41:d2:a6:ac:b0:cf:14:6c:1d:16:23: 51:6e:f9:d3:f3:b6:9d:16:8e:d7:ac:f0:3f:ee:94: 76:db:78:49:30:46:46:ea:40:04:bf:21:00:41:2b: 71:61:bc:23:25:4f:0e:6d:e7:02:87:ad:4f:8c:ae: b6:16:9b:d4:97:9e:79:a4:92:e4:8d:d8:ff:e9:29: 73:40:4b:8c:17:04:62:09:59:6e:a7:40:72:68:2e: d9:14:c9:b8:20:82:5c:92:b8:1e:12:42:70:0e:b1: 0d:50:f1:3f:43:16:d5:28:23:ff:9f:20:5a:3f:d0: 10:fb:40:3d:79:a4:a3:49:e1:0d:cc:e3:e4:a0:c1: f7:c2:43:80:a7:70:46:af:93:ce:cc:46:35:49:7d: e2:10:e5:1c:2a:a5:59:af:a5:59:81:e2:44:78:f2: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:31:05:7E:59:57:76:B7:6F:2B:14:3F:FC:22:B9:30:9B:C5:FC:6D X509v3 Authority Key Identifier: keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f3:d5:f1:a5:69:07:fa:10:88:af:f7:0e:a2:3b:d8:a1:9f: ea:23:20:45:8b:1e:29:9c:be:12:32:15:2a:15:fe:58:5c:c5: 9d:6f:82:c1:6d:53:41:4a:dd:49:17:bf:6b:b3:65:2a:1c:a2: c6:a8:e2:48:e6:43:b7:09:ab:a3:9c:fd:e9:e2:d7:d6:5f:1d: c8:a6:14:e5:2f:b9:3a:dd:3b:c7:4f:41:c7:42:0f:29:b1:c5: 8b:3b:bc:aa:04:76:ea:82:f4:d4:7a:e9:c7:4c:a1:8c:bf:dd: b9:a2:26:f2:2e:5f:61:91:61:a4:52:e2:b5:67:ac:93:14:50: fc:1c:39:c1:79:ba:79:fe:00:22:cd:c0:38:42:25:a4:93:38: 3c:a8:c3:03:da:76:1b:f1:af:2d:e0:71:c8:13:fd:09:3f:8a: 1a:66:d2:36:49:ce:69:01:cb:df:0b:45:d2:be:d0:c7:e3:ea: 7b:32:fb:c2:42:26:e9:3d:98:3f:05:13:75:af:10:1b:91:ba: 51:54:ed:f5:63:80:e9:a8:1b:4d:f6:87:7a:36:f1:1a:93:d3: b8:da:45:21:61:3f:7f:57:ba:b7:56:73:ac:e2:72:33:84:40: f3:1b:4f:bd:c0:37:6b:54:e6:4f:8f:84:81:2e:84:c9:37:64: 1b:52:2b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvV62wQVyPfHNvDec37V2AtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez OGRjNjYwHhcNMjYwMTE5MTEwMjE0WhcNMjYwMTIwMTEwMjE0WjAzMTEwLwYDVQQD Eyg4MDMxMDU3ZTU5NTc3NmI3NmYyYjE0M2ZmYzIyYjkzMDliYzVmYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc7JVxmlqQJ6S4oaWKMzTVGcJfQN Mi//GzrXy9/4dfUOhhmlm8SUDlTQn4uHMkpLeAvhmB7+dEdeoNmk/oN61bzFF/5T pSUwbHV2F90yLOYDo4hq4tdA0aWtTtlQQdKmrLDPFGwdFiNRbvnT87adFo7XrPA/ 7pR223hJMEZG6kAEvyEAQStxYbwjJU8ObecCh61PjK62FpvUl555pJLkjdj/6Slz QEuMFwRiCVlup0ByaC7ZFMm4IIJckrgeEkJwDrENUPE/QxbVKCP/nyBaP9AQ+0A9 eaSjSeENzOPkoMH3wkOAp3BGr5POzEY1SX3iEOUcKqVZr6VZgeJEePIA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAxBX5ZV3a3bysUP/wiuTCbxfxtMB8GA1UdIwQY MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfPV8aVp B/oQiK/3DqI72KGf6iMgRYseKZy+EjIVKhX+WFzFnW+CwW1TQUrdSRe/a7NlKhyi xqjiSOZDtwmro5z96eLX1l8dyKYU5S+5Ot07x09Bx0IPKbHFizu8qgR26oL01Hrp x0yhjL/duaIm8i5fYZFhpFLitWeskxRQ/Bw5wXm6ef4AIs3AOEIlpJM4PKjDA9p2 G/GvLeBxyBP9CT+KGmbSNknOaQHL3wtF0r7Qx+PqezL7wkIm6T2YPwUTda8QG5G6 UVTt9WOA6agbTfaHejbxGpPTuNpFIWE/f1e6t1ZzrOJyM4RA8xtPvcA3a1TmT4+E gS6EyTdkG1IrJg== -----END CERTIFICATE-----Generated at Mon Jan 19 20:02:32 2026 by rpki-client