This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft File: gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json) Hash identifier: 0hkSY0E/Fg166SVQcaBzD7lyb8FMSFpuuJuI31IBlLA= Subject key identifier: AA:12:38:3C:8A:06:0F:E6:34:B5:72:25:FE:51:F6:EA:C1:A1:11:D9 Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019BA234E07C8C8680751AF1039AE14004F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft Manifest number: 17CB Signing time: Fri 09 Jan 2026 10:02:12 +0000 Manifest this update: Fri 09 Jan 2026 10:02:12 +0000 Manifest next update: Sat 10 Jan 2026 10:02:12 +0000 Files and hashes: 1: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (hash: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E=) 2: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (hash: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ=) 3: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: Hh56ecdLN2ijrEE1v/cuwZSwd7RFvEGcPo8qdZQM4eE=) 4: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (hash: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8=) 5: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (hash: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:34:e0:7c:8c:86:80:75:1a:f1:03:9a:e1:40:04:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Jan 9 10:02:12 2026 GMT Not After : Jan 10 10:02:12 2026 GMT Subject: CN=aa12383c8a060fe634b57225fe51f6eac1a111d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:f9:8f:14:f8:8a:94:ff:ba:3d:00:f7:dc: 35:65:df:54:9d:59:6a:c8:63:19:90:5d:d4:ff:0b: f0:35:a0:b9:74:b1:f3:1d:84:a0:37:25:45:8b:4a: 03:42:bf:5e:a2:e5:7a:33:37:22:29:78:a3:3e:ee: 0d:6e:2d:56:72:12:68:0b:1b:e9:cd:e6:0d:e1:0f: 4e:48:49:c9:01:2c:07:e5:01:5f:f6:57:bb:1c:d4: 48:44:1a:43:70:68:0f:ec:43:47:c2:c1:e0:cd:b8: db:4a:ff:44:c6:41:9b:3d:57:89:a2:bd:4a:12:40: 9b:e6:e4:1d:00:f5:26:c5:02:68:cb:2b:bf:5e:67: 02:01:d0:84:ea:ab:74:8a:c1:ef:15:1e:2b:2f:10: 68:b5:a6:28:b6:5f:04:28:a5:4e:95:01:4c:7f:93: 34:f9:40:d5:bd:90:80:6d:cf:07:93:55:a6:12:7e: 12:8c:8c:b5:82:0d:a5:aa:85:22:d1:12:ae:a1:e5: 16:c3:37:4e:fa:1e:79:30:61:3e:dd:89:8d:cb:97: d2:bf:c3:44:54:d3:4f:12:67:da:bd:79:37:4f:d9: b4:8a:c0:87:30:47:4e:b9:28:72:e0:ed:67:8f:72: 80:0d:19:d4:25:48:56:f2:3e:9a:0a:7a:80:34:87: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:38:3C:8A:06:0F:E6:34:B5:72:25:FE:51:F6:EA:C1:A1:11:D9 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:34:e4:4c:e1:57:6f:eb:59:5b:da:a8:f5:6e:4f:88:54:5d: cb:79:58:2d:c9:2a:ad:88:f4:02:e7:47:a3:63:d8:d5:a5:5e: eb:2e:82:3d:bb:6d:17:54:ad:e2:22:f0:dd:10:94:1c:87:ef: 19:4b:ec:9e:49:5b:3f:94:74:8f:b1:91:15:27:f7:06:eb:4b: 45:0c:7c:93:86:8f:f2:7a:b9:48:37:da:13:c9:17:f9:12:de: 64:6b:90:39:4f:0b:36:d8:d3:09:dc:72:33:17:fb:1e:0c:05: 09:f4:00:a0:35:b0:fa:82:39:07:b2:d6:e6:47:23:7a:e8:ed: 35:11:88:f6:42:51:5a:da:75:64:68:bf:9d:0e:00:89:35:fd: 69:66:3d:57:df:cc:61:d8:99:83:c2:9b:5d:d1:d3:16:dd:48: 37:8e:d0:69:3b:7a:54:6b:af:ed:4b:03:50:7c:0f:ff:6d:b7: ab:59:c3:53:ce:cc:6f:f7:da:85:cd:bb:90:6c:31:64:f3:0c: 22:82:0b:f5:ce:c2:4a:b8:56:71:35:09:c6:d3:ad:57:c0:31: ba:f1:e3:17:45:05:20:93:55:11:e7:2f:7e:c1:21:a3:2d:b5: 8f:73:86:eb:e6:ed:17:74:76:39:d2:c0:1e:94:57:4f:6a:0b: 37:b2:8e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiNOB8jIaAdRrxA5rhQATwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjYwMTA5MTAwMjEyWhcNMjYwMTEwMTAwMjEyWjAzMTEwLwYDVQQD EyhhYTEyMzgzYzhhMDYwZmU2MzRiNTcyMjVmZTUxZjZlYWMxYTExMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms/5jxT4ipT/uj0A99w1Zd9UnVlq yGMZkF3U/wvwNaC5dLHzHYSgNyVFi0oDQr9eouV6MzciKXijPu4Nbi1WchJoCxvp zeYN4Q9OSEnJASwH5QFf9le7HNRIRBpDcGgP7ENHwsHgzbjbSv9ExkGbPVeJor1K EkCb5uQdAPUmxQJoyyu/XmcCAdCE6qt0isHvFR4rLxBotaYotl8EKKVOlQFMf5M0 +UDVvZCAbc8Hk1WmEn4SjIy1gg2lqoUi0RKuoeUWwzdO+h55MGE+3YmNy5fSv8NE VNNPEmfavXk3T9m0isCHMEdOuShy4O1nj3KADRnUJUhW8j6aCnqANIeOjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoSODyKBg/mNLVyJf5R9urBoRHZMB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTTkTOFX b+tZW9qo9W5PiFRdy3lYLckqrYj0AudHo2PY1aVe6y6CPbttF1St4iLw3RCUHIfv GUvsnklbP5R0j7GRFSf3ButLRQx8k4aP8nq5SDfaE8kX+RLeZGuQOU8LNtjTCdxy Mxf7HgwFCfQAoDWw+oI5B7LW5kcjeujtNRGI9kJRWtp1ZGi/nQ4AiTX9aWY9V9/M YdiZg8KbXdHTFt1IN47QaTt6VGuv7UsDUHwP/223q1nDU87Mb/fahc27kGwxZPMM IoIL9c7CSrhWcTUJxtOtV8AxuvHjF0UFIJNVEecvfsEhoy21j3OG6+btF3R2OdLA HpRXT2oLN7KOqw== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:27 2026 by rpki-client