This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json) Hash identifier: CIu0cYnD2S4WpRRVX3CoZct/mYoL7EmyVFAk9qVilcU= Subject key identifier: 7B:20:A7:16:AC:FD:A9:FE:CC:31:C8:9E:03:EF:B1:60:22:C2:14:89 Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89 Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89 Certificate serial: 019BFC1C6E8FFEF0ABF2451A41137B3F1DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft Manifest number: 0ECD Signing time: Mon 26 Jan 2026 21:01:20 +0000 Manifest this update: Mon 26 Jan 2026 21:01:20 +0000 Manifest next update: Tue 27 Jan 2026 21:01:20 +0000 Files and hashes: 1: WC6EBIjiAER5lgIGGhXpUnsJaMY.roa (hash: fIsVrWQoNzwMR1jG4hms/me3nMp9f7WFOVArNQIs1TQ=) 2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: xhEdoUmJjz6+xPjWzRN+OS/YKc0ikGOiXhuTO3CXlug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:6e:8f:fe:f0:ab:f2:45:1a:41:13:7b:3f:1d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89 Validity Not Before: Jan 26 21:01:20 2026 GMT Not After : Jan 27 21:01:20 2026 GMT Subject: CN=7b20a716acfda9fecc31c89e03efb16022c21489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:b9:69:9d:0c:00:32:82:3e:a6:36:cc:5e: db:78:cd:44:21:b9:b2:2b:09:89:05:bc:fc:ba:f9: a2:d2:ab:e7:7c:e0:9e:72:e2:c9:79:54:ec:80:88: 2c:c0:b7:87:7f:24:64:f9:89:6a:33:ae:51:03:d6: ce:a8:cd:97:c1:a3:f5:3e:11:a0:06:d4:31:34:60: e9:bd:83:91:b3:cf:bb:d5:c5:1e:86:0c:d7:04:c1: 17:2e:fb:93:80:98:34:b8:4a:7e:ba:a5:a9:75:dc: 2b:ce:1f:ec:e1:88:d2:e0:87:08:b2:a8:41:9c:dc: 90:5c:31:1d:e5:47:18:f0:7d:58:f5:cb:f3:9c:20: f1:ff:88:4e:17:6a:d6:09:cb:9c:25:5e:84:05:f9: cc:62:7f:7c:42:b3:5c:33:29:e2:62:7d:e2:14:06: 2b:23:ff:af:5e:9c:15:e5:2d:9b:e9:2f:7c:29:f5: 04:42:5d:6b:65:87:c4:43:80:1d:4a:fe:62:24:07: 04:00:ae:d5:9b:3f:14:30:e6:32:55:02:48:98:b2: f0:ba:51:2b:9e:f3:be:dd:74:f2:bd:fc:14:f4:a9: 5f:47:4f:9f:03:f6:14:be:31:34:4d:4c:31:de:af: 62:15:f6:74:c7:4d:8a:1e:06:23:6b:59:1b:e5:98: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:20:A7:16:AC:FD:A9:FE:CC:31:C8:9E:03:EF:B1:60:22:C2:14:89 X509v3 Authority Key Identifier: keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:67:a9:38:f2:92:23:8a:51:84:d8:3a:0a:6c:98:bb:d5:4a: f0:65:c8:d0:9b:31:19:8d:61:e2:bb:84:cf:2f:df:93:48:30: b9:9e:ae:b2:59:5b:74:04:99:50:8c:1f:a0:19:26:62:ff:58: c2:a3:ba:a0:50:57:4b:80:80:91:29:26:64:45:1f:20:68:a7: 08:43:4d:bc:77:2e:72:b5:c2:34:2a:12:3a:db:f7:48:50:f8: 1d:9c:f9:f4:72:e1:80:37:99:8e:99:70:1d:49:c3:8c:1a:ac: 45:ad:d4:fb:60:53:1f:3e:87:03:0b:2c:b1:b5:fe:e0:9c:86: 01:83:99:20:cf:8d:a9:67:c5:8a:3a:9a:02:77:d0:d3:bd:56: 34:45:e5:2a:bc:19:88:ff:13:99:0d:45:b1:04:6f:e0:00:c2: 54:3f:6b:23:28:cd:a3:6a:30:35:00:16:25:14:89:a5:82:96: fb:5b:4e:76:2b:1a:01:04:c9:c0:5b:90:f1:cb:52:b8:32:06: 7f:af:b6:5d:17:9a:db:3a:b5:e6:a6:de:b8:a0:34:22:f9:a7: c2:91:0d:f8:d0:cc:ed:87:5e:57:e6:29:11:88:bd:19:f7:2a: ac:7a:bf:20:21:e2:18:94:a3:c4:0b:1e:3a:85:64:f5:80:db: f5:00:95:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HG6P/vCr8kUaQRN7Px3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTg4N2Y0NWFiYmMwODFhYTQ2OWE2NWMxNzk4ZGU2MTEw ZDljODkwHhcNMjYwMTI2MjEwMTIwWhcNMjYwMTI3MjEwMTIwWjAzMTEwLwYDVQQD Eyg3YjIwYTcxNmFjZmRhOWZlY2MzMWM4OWUwM2VmYjE2MDIyYzIxNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Tu5aZ0MADKCPqY2zF7beM1EIbmy KwmJBbz8uvmi0qvnfOCecuLJeVTsgIgswLeHfyRk+YlqM65RA9bOqM2XwaP1PhGg BtQxNGDpvYORs8+71cUehgzXBMEXLvuTgJg0uEp+uqWpddwrzh/s4YjS4IcIsqhB nNyQXDEd5UcY8H1Y9cvznCDx/4hOF2rWCcucJV6EBfnMYn98QrNcMyniYn3iFAYr I/+vXpwV5S2b6S98KfUEQl1rZYfEQ4AdSv5iJAcEAK7Vmz8UMOYyVQJImLLwulEr nvO+3XTyvfwU9KlfR0+fA/YUvjE0TUwx3q9iFfZ0x02KHgYja1kb5ZhEzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsgpxas/an+zDHIngPvsWAiwhSJMB8GA1UdIwQY MBaAFIFYh/Rau8CBqkaaZcF5jeYRDZyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt MzE4YjBlOTk2YWQxLzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx LzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImepOPKS I4pRhNg6CmyYu9VK8GXI0JsxGY1h4ruEzy/fk0gwuZ6usllbdASZUIwfoBkmYv9Y wqO6oFBXS4CAkSkmZEUfIGinCENNvHcucrXCNCoSOtv3SFD4HZz59HLhgDeZjplw HUnDjBqsRa3U+2BTHz6HAwsssbX+4JyGAYOZIM+NqWfFijqaAnfQ071WNEXlKrwZ iP8TmQ1FsQRv4ADCVD9rIyjNo2owNQAWJRSJpYKW+1tOdisaAQTJwFuQ8ctSuDIG f6+2XRea2zq15qbeuKA0IvmnwpEN+NDM7YdeV+YpEYi9GfcqrHq/ICHiGJSjxAse OoVk9YDb9QCVZA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:38 2026 by rpki-client