This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json) Hash identifier: yD6QoGf3EVWdsStFjAVhkfj4eVaCEcdBpMyNC9E/ERI= Subject key identifier: 7A:32:D1:03:BC:5E:A2:2A:3F:B9:5E:6B:D3:E4:CF:6D:92:F3:F8:C0 Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Certificate serial: 019BD5B44571A5510A5D3FC8455009D1848E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft Manifest number: 17DC Signing time: Mon 19 Jan 2026 10:01:59 +0000 Manifest this update: Mon 19 Jan 2026 10:01:59 +0000 Manifest next update: Tue 20 Jan 2026 10:01:59 +0000 Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=) 2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: NPUhSbazApNUcN0q/JnW4+gMfDO6QIO/n71rH4K6fu0=) 3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:b4:45:71:a5:51:0a:5d:3f:c8:45:50:09:d1:84:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Validity Not Before: Jan 19 10:01:59 2026 GMT Not After : Jan 20 10:01:59 2026 GMT Subject: CN=7a32d103bc5ea22a3fb95e6bd3e4cf6d92f3f8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:22:0b:0b:54:c2:0d:3c:52:88:9a:9a:16: 87:a7:a1:33:e7:c5:f5:b0:78:aa:06:d8:03:15:eb: 57:8a:19:a6:0a:9d:28:d5:5c:82:13:b5:93:5e:95: a8:46:4e:05:03:aa:9b:5d:8b:8c:5c:50:22:64:ff: f4:ac:bd:0b:82:8e:b3:1d:e2:7b:fd:1a:a5:fe:e2: 56:87:97:68:a1:90:48:f0:3a:b3:41:0e:87:57:62: c7:64:9c:1c:6f:84:44:94:e0:1d:4d:a1:75:95:c3: 9e:5c:ab:4b:d1:20:24:ab:91:06:4f:6d:84:1c:7f: fc:80:3a:05:d2:2a:52:58:19:c8:ae:05:c5:85:19: 89:36:76:4a:82:d5:c5:a5:8b:d8:94:b8:0d:60:c6: 68:ab:53:f7:6a:1d:13:ec:90:0a:7c:4f:d9:67:88: 75:f6:98:f2:c2:6a:d1:fa:bc:e9:c1:9d:66:21:9f: be:f2:c9:17:c7:ad:5e:2f:a8:f9:89:06:ff:5c:85: ae:09:8e:b0:d5:23:e3:92:fc:ea:98:4d:71:dd:92: 89:e5:63:93:bf:ac:0d:81:db:54:bb:04:6b:41:72: 16:44:6c:a0:79:1d:45:79:61:0c:ae:08:92:0a:73: 9c:a1:12:b6:25:49:d2:2d:c0:48:71:2d:f3:fa:17: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:32:D1:03:BC:5E:A2:2A:3F:B9:5E:6B:D3:E4:CF:6D:92:F3:F8:C0 X509v3 Authority Key Identifier: keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:8b:30:16:77:85:f5:dc:66:fa:a2:fc:b6:a5:43:39:60: 2d:07:73:4a:0d:1b:90:b3:56:89:b3:32:2a:51:61:ef:4c:da: d9:af:f1:3c:d1:81:eb:87:03:30:46:67:a5:1f:be:89:58:cb: 63:22:1a:a1:0c:99:f2:e2:27:59:c5:8e:09:6a:41:bb:fe:08: 89:5b:3a:38:30:76:00:7b:72:c7:5e:34:1f:cb:80:b6:95:7a: df:c6:43:b2:46:ae:ac:f6:70:11:4d:37:cd:60:ee:07:6d:e3: 5e:71:12:5a:15:48:aa:75:21:b4:e2:e8:be:04:16:90:b9:00: b8:0e:2d:b4:c7:c6:10:db:4b:10:c3:f7:17:e9:49:ae:cc:ca: 21:5c:f4:a9:46:d8:83:4e:5c:61:da:3a:ab:0d:ef:80:18:82: a2:36:05:dc:75:d8:f2:80:3c:54:65:29:03:e0:2a:16:0a:aa: 46:5c:9f:fa:9d:26:41:2b:ba:99:a9:1a:67:08:05:57:53:5a: bf:d3:42:00:f1:29:12:27:a3:4d:7f:f1:70:90:b7:2e:f7:09: 98:da:db:43:ae:30:2e:77:00:f4:bb:f3:cf:b5:bc:fa:b7:d0: 16:77:1d:47:5e:48:60:b9:fd:ce:f6:d8:ad:4b:82:bf:ff:a8: 28:be:ee:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVtEVxpVEKXT/IRVAJ0YSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk NDYyZDQwHhcNMjYwMTE5MTAwMTU5WhcNMjYwMTIwMTAwMTU5WjAzMTEwLwYDVQQD Eyg3YTMyZDEwM2JjNWVhMjJhM2ZiOTVlNmJkM2U0Y2Y2ZDkyZjNmOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA8iCwtUwg08UoiamhaHp6Ez58X1 sHiqBtgDFetXihmmCp0o1VyCE7WTXpWoRk4FA6qbXYuMXFAiZP/0rL0Lgo6zHeJ7 /Rql/uJWh5dooZBI8DqzQQ6HV2LHZJwcb4RElOAdTaF1lcOeXKtL0SAkq5EGT22E HH/8gDoF0ipSWBnIrgXFhRmJNnZKgtXFpYvYlLgNYMZoq1P3ah0T7JAKfE/ZZ4h1 9pjywmrR+rzpwZ1mIZ++8skXx61eL6j5iQb/XIWuCY6w1SPjkvzqmE1x3ZKJ5WOT v6wNgdtUuwRrQXIWRGygeR1FeWEMrgiSCnOcoRK2JUnSLcBIcS3z+heGWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoy0QO8XqIqP7lea9Pkz22S8/jAMB8GA1UdIwQY MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHCLMBZ3 hfXcZvqi/LalQzlgLQdzSg0bkLNWibMyKlFh70za2a/xPNGB64cDMEZnpR++iVjL YyIaoQyZ8uInWcWOCWpBu/4IiVs6ODB2AHtyx140H8uAtpV638ZDskaurPZwEU03 zWDuB23jXnESWhVIqnUhtOLovgQWkLkAuA4ttMfGENtLEMP3F+lJrszKIVz0qUbY g05cYdo6qw3vgBiCojYF3HXY8oA8VGUpA+AqFgqqRlyf+p0mQSu6makaZwgFV1Na v9NCAPEpEiejTX/xcJC3LvcJmNrbQ64wLncA9Lvzz7W8+rfQFncdR15IYLn9zvbY rUuCv/+oKL7uBA== -----END CERTIFICATE-----Generated at Mon Jan 19 18:49:28 2026 by rpki-client