This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json) Hash identifier: XT0+cdGWLD38xScfChxQTMra3jD0QNWPoFxf3aGe0mg= Subject key identifier: 09:C0:40:77:BE:E0:60:D8:05:F5:D3:96:38:40:85:7C:33:F3:C7:A4 Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Certificate serial: 019BCFB158A1CFFC2E9FC8EC33285946AD91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft Manifest number: 12A2 Signing time: Sun 18 Jan 2026 06:01:04 +0000 Manifest this update: Sun 18 Jan 2026 06:01:04 +0000 Manifest next update: Mon 19 Jan 2026 06:01:04 +0000 Files and hashes: 1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: gcUeIbbfPGpYnceml34Mlps8uwvE6020de6DpRFNe7g=) 2: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (hash: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:b1:58:a1:cf:fc:2e:9f:c8:ec:33:28:59:46:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Validity Not Before: Jan 18 06:01:04 2026 GMT Not After : Jan 19 06:01:04 2026 GMT Subject: CN=09c04077bee060d805f5d3963840857c33f3c7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:66:b9:89:7b:21:9d:93:c0:c3:69:0e:e2:a6: d5:7c:d0:14:32:a9:9a:8a:0e:c0:17:b2:76:d8:34: b3:27:34:38:9d:9c:29:62:1f:2e:c8:34:33:73:da: c4:af:7b:fa:d0:8a:5e:f7:69:7d:ab:c0:fd:18:ab: fc:a0:6a:02:84:b1:df:98:63:7c:d2:7d:88:77:61: bb:55:c3:f4:8a:6e:e7:4d:98:f5:a0:22:50:8d:96: cb:75:9e:fb:3e:41:f5:43:56:19:31:3f:2b:4a:96: 66:62:31:ca:ed:74:fb:b0:9f:2f:9d:c3:27:c1:c3: 40:d2:3c:e0:9c:08:f3:73:64:d9:fe:e3:af:d2:e5: 85:c7:30:46:a9:96:4b:25:af:40:9f:e9:9d:f2:91: c5:1c:09:70:32:bf:32:77:a4:ef:b9:2a:7c:e1:09: bb:36:89:c0:8e:99:32:87:59:6b:b4:18:e0:96:71: 91:99:c4:e3:e0:41:ca:23:70:b2:64:a9:fd:16:47: bb:53:4f:f4:d4:ad:7a:df:df:e1:4c:bd:13:f3:4c: c3:b5:58:a5:00:80:35:57:d3:e3:6d:99:7b:26:79: 8f:bd:13:14:7a:05:ff:3a:2b:87:2b:7d:c5:de:69: cd:f5:3f:fe:2d:2f:7f:e5:0a:7f:b9:6b:95:85:cf: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:40:77:BE:E0:60:D8:05:F5:D3:96:38:40:85:7C:33:F3:C7:A4 X509v3 Authority Key Identifier: keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5d:da:6a:50:38:61:e0:38:92:b8:78:c7:7f:9d:93:d4:f4: 76:9f:1f:4f:8f:f4:32:48:b9:a6:a5:e3:65:b0:1f:27:b9:89: dc:6a:cb:61:bc:c9:9f:f6:df:82:a2:83:2f:92:26:54:8d:90: be:0f:d2:7b:93:d7:cd:6c:88:99:b3:56:6c:bb:a8:5b:1f:3a: 1b:66:22:14:2e:2e:54:ce:4f:21:c5:94:ee:4d:01:81:d5:fb: 83:cc:aa:2b:67:bc:1e:cb:44:f8:b3:7f:93:e3:67:1b:06:8d: 2f:c1:90:f0:6d:6c:d9:0d:a6:a6:60:f1:61:da:b9:34:6a:99: 82:e4:6c:66:c1:75:2d:52:c8:7c:6c:d1:19:01:3c:de:b3:81: 08:a5:29:e8:1e:c2:b0:b9:35:b8:5a:a7:e3:5b:40:3f:ec:c6: ad:2f:da:0a:54:bf:0e:18:92:2a:ce:f3:07:99:4a:ff:fc:d9: 1e:6e:9e:15:21:24:e1:00:42:71:d5:5b:c6:22:91:ad:58:93: 78:67:b4:8d:19:5d:74:c9:f0:82:f2:24:56:1e:9a:bb:63:e1: c2:37:0f:f0:f7:f4:f9:65:68:64:be:c8:f2:b1:36:1e:0c:09: 7b:8d:ba:06:bc:f2:7c:c2:20:ca:e3:d6:b3:76:d4:79:2a:f5: 7a:0e:0f:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPsVihz/wun8jsMyhZRq2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMThlMGExOWFlNzkwZmE1MDM5NTE1NTlmNDdkNDFiNDdl N2ZkMGYwHhcNMjYwMTE4MDYwMTA0WhcNMjYwMTE5MDYwMTA0WjAzMTEwLwYDVQQD EygwOWMwNDA3N2JlZTA2MGQ4MDVmNWQzOTYzODQwODU3YzMzZjNjN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ma5iXshnZPAw2kO4qbVfNAUMqma ig7AF7J22DSzJzQ4nZwpYh8uyDQzc9rEr3v60Ipe92l9q8D9GKv8oGoChLHfmGN8 0n2Id2G7VcP0im7nTZj1oCJQjZbLdZ77PkH1Q1YZMT8rSpZmYjHK7XT7sJ8vncMn wcNA0jzgnAjzc2TZ/uOv0uWFxzBGqZZLJa9An+md8pHFHAlwMr8yd6TvuSp84Qm7 NonAjpkyh1lrtBjglnGRmcTj4EHKI3CyZKn9Fke7U0/01K1639/hTL0T80zDtVil AIA1V9PjbZl7JnmPvRMUegX/OiuHK33F3mnN9T/+LS9/5Qp/uWuVhc86IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnAQHe+4GDYBfXTljhAhXwz88ekMB8GA1UdIwQY MBaAFBsY4KGa55D6UDlRVZ9H1BtH5/0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgt YTEwNTc3NmMzMzQ3LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgtYTEwNTc3NmMzMzQ3 LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF3aalA4 YeA4krh4x3+dk9T0dp8fT4/0Mki5pqXjZbAfJ7mJ3GrLYbzJn/bfgqKDL5ImVI2Q vg/Se5PXzWyImbNWbLuoWx86G2YiFC4uVM5PIcWU7k0BgdX7g8yqK2e8HstE+LN/ k+NnGwaNL8GQ8G1s2Q2mpmDxYdq5NGqZguRsZsF1LVLIfGzRGQE83rOBCKUp6B7C sLk1uFqn41tAP+zGrS/aClS/DhiSKs7zB5lK//zZHm6eFSEk4QBCcdVbxiKRrViT eGe0jRlddMnwgvIkVh6au2PhwjcP8Pf0+WVoZL7I8rE2HgwJe426BrzyfMIgyuPW s3bUeSr1eg4PIw== -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:26 2026 by rpki-client