This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json) Hash identifier: eEzqi5mgAsLgMoaEHcKLiZVXrPXP1X+fowCQuIJIod0= Subject key identifier: AA:DE:9C:00:7A:F8:73:7D:88:76:1E:5D:16:11:4C:87:6A:4F:01:D9 Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Certificate serial: 019BFD65F4C77F015E30D5BB1DC08D9C1970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft Manifest number: 16B3 Signing time: Tue 27 Jan 2026 03:01:15 +0000 Manifest this update: Tue 27 Jan 2026 03:01:15 +0000 Manifest next update: Wed 28 Jan 2026 03:01:15 +0000 Files and hashes: 1: HPyxVmhWa0oX9049IA0pvGqnfzo.roa (hash: Xh7orn/xGXMl7UIHm2Sci3exo6U2x74Uy1ubsHeYYoo=) 2: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (hash: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs=) 3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: h0EThjW741HFs4UUaotopVhWv0Kok0GU3as+UicWvcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:f4:c7:7f:01:5e:30:d5:bb:1d:c0:8d:9c:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Validity Not Before: Jan 27 03:01:15 2026 GMT Not After : Jan 28 03:01:15 2026 GMT Subject: CN=aade9c007af8737d88761e5d16114c876a4f01d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:f2:86:ee:d7:de:bb:cd:bd:94:ed:ec:3e: 18:f7:c1:ec:ae:03:8e:16:53:89:cf:84:c6:b7:2f: 2d:7f:bc:28:49:33:fa:4d:80:8a:0d:e6:37:43:d6: 2e:fd:02:fa:6b:19:46:f4:b9:35:71:a6:35:29:cf: 09:ed:ee:2f:ab:3e:0a:a7:61:ec:e7:08:91:6a:3c: 59:2e:d0:7b:28:41:8a:1e:7b:41:22:6d:cd:d0:82: dd:ae:77:72:df:0b:d3:ec:01:0c:37:ce:47:74:19: b3:0d:88:aa:ac:3d:10:90:db:ed:89:42:60:5d:5f: c9:51:27:8e:9e:79:cd:36:0c:ba:fc:d6:ae:0b:b2: dd:1e:8d:4e:b0:e1:df:a6:00:e6:d1:29:5a:2c:21: d3:53:7f:11:d3:a7:4f:f1:20:cd:75:c5:61:c3:95: 87:03:a7:2d:77:07:8c:7c:85:ce:e3:28:19:a0:d1: 86:a7:4e:d7:b1:0b:ec:72:7e:74:4c:2c:03:2b:58: 2a:c0:57:ec:d5:ad:6c:0a:ae:41:31:64:e1:fc:ac: d2:e1:b7:84:d5:01:23:e0:6c:9e:aa:5f:6e:7a:61: 94:d8:00:e2:77:53:58:e1:39:ae:e3:d1:e8:4f:78: ff:6d:20:81:ec:4f:cc:01:4d:89:8e:ec:98:83:f7: 7c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:9C:00:7A:F8:73:7D:88:76:1E:5D:16:11:4C:87:6A:4F:01:D9 X509v3 Authority Key Identifier: keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fa:96:bd:ce:a4:32:45:89:4e:3f:56:b0:a5:c2:ac:10:71: 6e:76:a9:b2:8a:41:4f:8d:45:02:fc:3b:de:13:1c:04:4e:d8: 5e:02:95:5e:a9:70:52:a6:0c:e1:20:e2:96:f5:18:65:ff:64: a8:09:ab:da:7b:44:a6:3f:1f:ef:64:5d:e3:cf:f3:67:53:8e: 67:30:10:3b:ad:66:23:29:68:a1:3a:40:81:c0:db:51:40:1e: dd:11:83:3b:ec:e3:32:21:24:a6:35:48:ff:8d:7b:5e:57:c3: 77:91:f3:e9:16:4e:9f:de:63:58:c7:ef:9a:4b:e3:78:9a:00: 6c:5f:52:f1:53:a7:51:c3:a3:2d:35:21:42:96:d4:ec:97:a6: e2:92:9d:5a:f8:44:44:1f:b7:7d:5f:b5:b0:10:68:27:76:1b: 6f:7c:1d:67:2e:d7:ab:e3:db:bf:ea:61:24:d7:8d:89:ea:3f: 8f:7d:f4:69:fc:1d:af:8e:5c:5c:96:32:8f:82:63:9a:ba:5d: ec:11:c8:7c:32:70:40:fc:24:b5:03:e5:5f:10:b4:0e:52:5b: a1:ad:14:36:10:8f:1a:5f:35:61:9b:b2:65:80:f0:af:f2:3f: 81:c5:b2:86:41:92:6b:8e:a8:e9:b2:7a:48:4a:54:39:27:aa: c0:6f:f3:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZfTHfwFeMNW7HcCNnBlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw MzIyZjkwHhcNMjYwMTI3MDMwMTE1WhcNMjYwMTI4MDMwMTE1WjAzMTEwLwYDVQQD EyhhYWRlOWMwMDdhZjg3MzdkODg3NjFlNWQxNjExNGM4NzZhNGYwMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHyhu7X3rvNvZTt7D4Y98HsrgOO FlOJz4TGty8tf7woSTP6TYCKDeY3Q9Yu/QL6axlG9Lk1caY1Kc8J7e4vqz4Kp2Hs 5wiRajxZLtB7KEGKHntBIm3N0ILdrndy3wvT7AEMN85HdBmzDYiqrD0QkNvtiUJg XV/JUSeOnnnNNgy6/NauC7LdHo1OsOHfpgDm0SlaLCHTU38R06dP8SDNdcVhw5WH A6ctdweMfIXO4ygZoNGGp07XsQvscn50TCwDK1gqwFfs1a1sCq5BMWTh/KzS4beE 1QEj4Gyeql9uemGU2ADid1NY4Tmu49HoT3j/bSCB7E/MAU2JjuyYg/d82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrenAB6+HN9iHYeXRYRTIdqTwHZMB8GA1UdIwQY MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5 LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPqWvc6k MkWJTj9WsKXCrBBxbnapsopBT41FAvw73hMcBE7YXgKVXqlwUqYM4SDilvUYZf9k qAmr2ntEpj8f72Rd48/zZ1OOZzAQO61mIylooTpAgcDbUUAe3RGDO+zjMiEkpjVI /417XlfDd5Hz6RZOn95jWMfvmkvjeJoAbF9S8VOnUcOjLTUhQpbU7Jem4pKdWvhE RB+3fV+1sBBoJ3Ybb3wdZy7Xq+Pbv+phJNeNieo/j330afwdr45cXJYyj4Jjmrpd 7BHIfDJwQPwktQPlXxC0DlJboa0UNhCPGl81YZuyZYDwr/I/gcWyhkGSa46o6bJ6 SEpUOSeqwG/z/g== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:26 2026 by rpki-client