This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json) Hash identifier: c68Q+oyVNZcaZrqUUuScxV0/oh6zDwNc6Hophk37svQ= Subject key identifier: C1:8C:F1:C0:47:E7:5C:CD:FB:90:C5:82:09:9F:70:E6:14:66:EB:A7 Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780 Certificate serial: 019BFC532F072B8A59DAFF8216DFA091F3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft Manifest number: 0B9C Signing time: Mon 26 Jan 2026 22:01:08 +0000 Manifest this update: Mon 26 Jan 2026 22:01:08 +0000 Manifest next update: Tue 27 Jan 2026 22:01:08 +0000 Files and hashes: 1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=) 2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: 1hFTYv8zukoBoDhLRX4BjeZjtB90blL6rnN5YDtAuOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:2f:07:2b:8a:59:da:ff:82:16:df:a0:91:f3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780 Validity Not Before: Jan 26 22:01:08 2026 GMT Not After : Jan 27 22:01:08 2026 GMT Subject: CN=c18cf1c047e75ccdfb90c582099f70e61466eba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4c:63:08:99:a6:3e:3a:7a:61:ae:71:7f:a4: 96:cc:1c:5e:b2:67:4e:dd:26:78:51:f8:60:51:10: ce:34:c2:ce:20:ed:0c:f3:ba:ac:c7:12:32:47:14: ef:54:ff:2d:87:c1:00:2d:c7:eb:87:17:2c:a1:41: c1:11:d5:dd:bb:69:6f:c9:cb:5d:32:41:59:47:4d: 2e:d3:34:63:ab:fd:bc:53:99:7f:a6:99:50:00:b3: 00:6b:a9:64:08:a3:22:a7:34:40:fd:f4:59:2e:58: 20:c4:75:4e:0e:ba:cb:bd:47:95:d7:a6:a9:92:7b: fb:92:8c:d2:43:20:c8:95:cd:cf:12:5f:73:79:0d: fd:8e:58:29:37:b2:6f:de:24:bd:fc:c4:d4:34:1f: 46:d7:0c:cb:10:fa:e3:bd:49:5a:a5:db:3c:61:93: 84:b0:db:05:e0:9f:98:99:bf:14:49:db:45:d4:1b: 65:19:81:52:b5:28:77:d2:b6:07:42:8e:d1:2f:46: e4:c0:06:61:34:03:85:a4:bb:81:4f:93:0f:80:42: b7:0a:55:5b:b6:ef:61:a5:3c:c5:f1:95:18:e5:9e: 55:a6:e0:0a:7f:4d:ad:47:73:ad:a3:7a:69:44:94: 4a:01:c0:f2:14:a9:19:4a:e0:8c:19:b8:9b:79:1f: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:F1:C0:47:E7:5C:CD:FB:90:C5:82:09:9F:70:E6:14:66:EB:A7 X509v3 Authority Key Identifier: keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:91:d8:b1:7d:97:98:1c:28:5d:e4:a5:8e:90:78:1d:2a: 9e:f9:5c:92:fe:81:63:d4:ae:60:b7:bc:01:e7:c7:fe:e8:1e: 05:c6:81:05:78:46:c7:c5:98:d8:fd:50:d6:b4:31:55:55:6a: cf:a2:6d:e7:2d:cd:ea:5c:c1:5a:87:0b:43:62:56:2b:1d:e6: b4:eb:2e:91:4f:19:67:7f:35:23:b2:f8:ba:af:72:77:8f:2c: 31:c5:33:1d:30:bd:a8:69:23:92:03:c8:cc:0b:c3:a7:b6:44: 03:2f:dc:54:6e:34:ed:28:52:ce:9d:d9:94:c8:d5:a2:33:8d: a0:66:6b:24:ff:b0:b8:02:1a:c4:da:50:91:55:82:56:06:99: 0f:06:79:c6:e9:a0:30:dc:04:35:3a:a6:3c:cb:5b:f1:19:2a: b4:a0:e8:da:25:2f:7e:b0:e9:76:b5:2d:c4:11:c5:3b:98:aa: 7b:a8:ce:a8:b2:b9:84:13:73:ba:8c:5e:38:d4:61:4a:c6:d7: 17:64:0f:0f:f4:24:db:e1:19:42:bb:fe:6b:70:ea:61:3b:94: 88:e9:01:16:81:26:bc:41:51:9e:9d:a3:b4:ef:c0:cb:8d:75: ba:d1:18:fa:af:71:18:68:93:78:9d:11:d4:c8:68:05:42:2e: db:6f:67:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Uy8HK4pZ2v+CFt+gkfOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0 ZWI3ODAwHhcNMjYwMTI2MjIwMTA4WhcNMjYwMTI3MjIwMTA4WjAzMTEwLwYDVQQD EyhjMThjZjFjMDQ3ZTc1Y2NkZmI5MGM1ODIwOTlmNzBlNjE0NjZlYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ExjCJmmPjp6Ya5xf6SWzBxesmdO 3SZ4UfhgURDONMLOIO0M87qsxxIyRxTvVP8th8EALcfrhxcsoUHBEdXdu2lvyctd MkFZR00u0zRjq/28U5l/pplQALMAa6lkCKMipzRA/fRZLlggxHVODrrLvUeV16ap knv7kozSQyDIlc3PEl9zeQ39jlgpN7Jv3iS9/MTUNB9G1wzLEPrjvUlapds8YZOE sNsF4J+Ymb8USdtF1BtlGYFStSh30rYHQo7RL0bkwAZhNAOFpLuBT5MPgEK3ClVb tu9hpTzF8ZUY5Z5VpuAKf02tR3Oto3ppRJRKAcDyFKkZSuCMGbibeR+AAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGM8cBH51zN+5DFggmfcOYUZuunMB8GA1UdIwQY MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifaR2LF9 l5gcKF3kpY6QeB0qnvlckv6BY9SuYLe8AefH/ugeBcaBBXhGx8WY2P1Q1rQxVVVq z6Jt5y3N6lzBWocLQ2JWKx3mtOsukU8ZZ381I7L4uq9yd48sMcUzHTC9qGkjkgPI zAvDp7ZEAy/cVG407ShSzp3ZlMjVojONoGZrJP+wuAIaxNpQkVWCVgaZDwZ5xumg MNwENTqmPMtb8RkqtKDo2iUvfrDpdrUtxBHFO5iqe6jOqLK5hBNzuoxeONRhSsbX F2QPD/Qk2+EZQrv+a3DqYTuUiOkBFoEmvEFRnp2jtO/Ay411utEY+q9xGGiTeJ0R 1MhoBUIu229nOQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:41 2026 by rpki-client