This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json) Hash identifier: DDeG5Oev6Y9+9hsLk1Jt8mpCxcfqqrAQKniqDWgbuDE= Subject key identifier: B0:95:49:3A:FF:96:CB:E9:F1:1A:2A:1E:E0:EE:8E:F8:14:42:A4:2D Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd Certificate serial: 019BDF9265CE96CCB2B341415C43CE93DE22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft Manifest number: 0EBE Signing time: Wed 21 Jan 2026 08:01:11 +0000 Manifest this update: Wed 21 Jan 2026 08:01:11 +0000 Manifest next update: Thu 22 Jan 2026 08:01:11 +0000 Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: A+kKzDUKxmYIe+QLX3lLaywa3jlUdujFV0ZP/JDF2N0=) 2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:92:65:ce:96:cc:b2:b3:41:41:5c:43:ce:93:de:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd Validity Not Before: Jan 21 08:01:11 2026 GMT Not After : Jan 22 08:01:11 2026 GMT Subject: CN=b095493aff96cbe9f11a2a1ee0ee8ef81442a42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:24:2c:d9:df:c6:7d:5c:e1:83:c3:82:ef: 7b:7c:cd:0e:ce:8d:96:49:87:a7:03:a7:b5:dd:ec: 25:74:4a:a6:57:ce:4d:d5:58:c9:07:1b:fd:7c:b7: 9e:62:54:7e:02:27:91:9d:d4:5f:4c:ed:92:28:e1: 14:78:6c:db:bc:5f:a6:51:a0:d4:5b:bc:49:cb:e6: 77:60:02:7e:91:b9:23:03:3b:e1:74:b7:3e:67:a5: 11:20:64:d7:79:be:9d:82:32:5f:20:a6:32:06:e1: 76:3a:71:6f:f5:7f:12:0b:7b:b9:9c:9d:dc:95:3f: 04:63:0b:30:b2:39:e2:dd:a6:c3:ca:f5:86:98:4e: 92:0b:15:64:51:ca:00:49:07:b4:ea:19:dd:f9:72: 3e:3a:26:a9:f0:68:93:0c:63:01:b9:59:4d:04:90: 6f:c6:e5:37:20:73:26:3f:1a:fe:da:9f:71:a6:af: a2:68:5d:99:29:49:c5:50:7c:cc:ad:aa:ed:4a:7d: 32:5e:c0:35:58:57:70:fb:15:5a:0f:b7:53:bc:1c: fa:da:95:90:89:6e:84:16:34:e9:f4:c5:81:42:3d: ea:aa:c8:0c:a2:14:7c:dd:ce:2b:f8:d3:f7:31:ef: 81:c8:b6:05:a7:71:8f:ed:13:0b:ca:32:6b:a6:a3: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:95:49:3A:FF:96:CB:E9:F1:1A:2A:1E:E0:EE:8E:F8:14:42:A4:2D X509v3 Authority Key Identifier: keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e0:4e:59:b2:49:d3:e8:bb:a8:b9:55:c4:32:34:84:e1:4b: dd:cf:17:82:c9:d0:f4:0b:13:5a:68:a8:92:a6:e0:c5:ea:3f: 15:33:ac:b1:18:ec:10:76:9a:59:1b:cd:12:4a:7f:6e:19:64: 3d:a2:0d:5e:61:a7:25:18:3a:17:38:22:ec:00:80:7b:be:6b: 98:9a:59:8b:05:78:bf:e6:a6:fe:c5:1d:43:c8:fc:4f:d7:69: 37:70:b9:35:b4:8a:b1:81:5f:ef:b3:bb:dc:b1:d4:90:98:3a: a6:0d:2c:e0:a2:19:21:d8:42:4c:94:16:da:31:a3:f1:58:bb: 56:90:91:83:48:52:c3:f1:07:a0:9b:1d:38:46:57:f4:8a:1f: 68:24:69:b2:c5:66:f1:83:30:a3:e5:ff:71:ec:35:88:b1:e7: 32:99:99:5a:15:70:b1:cd:be:40:75:0e:3d:cb:b6:d0:e2:3b: b9:38:13:f6:d4:64:07:64:58:c6:3e:cb:47:91:00:77:c2:ec: dd:f3:7a:ed:f0:b5:8e:2b:ee:94:6e:6a:81:83:ff:9e:2d:53: 57:79:f1:c2:fe:24:23:15:3f:32:46:36:11:1f:8e:b0:93:a6: bf:a8:c8:e8:04:d8:73:ea:27:f0:19:bd:ce:09:57:8e:f4:6c: 5f:9a:59:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfkmXOlsyys0FBXEPOk94iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTM0NTA1ODQ1ZmEwYTkzZjgyODVhNmRhOGJjZTZkMWQ3 MjAwZGQwHhcNMjYwMTIxMDgwMTExWhcNMjYwMTIyMDgwMTExWjAzMTEwLwYDVQQD EyhiMDk1NDkzYWZmOTZjYmU5ZjExYTJhMWVlMGVlOGVmODE0NDJhNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0skLNnfxn1c4YPDgu97fM0Ozo2W SYenA6e13ewldEqmV85N1VjJBxv9fLeeYlR+AieRndRfTO2SKOEUeGzbvF+mUaDU W7xJy+Z3YAJ+kbkjAzvhdLc+Z6URIGTXeb6dgjJfIKYyBuF2OnFv9X8SC3u5nJ3c lT8EYwswsjni3abDyvWGmE6SCxVkUcoASQe06hnd+XI+Oiap8GiTDGMBuVlNBJBv xuU3IHMmPxr+2p9xpq+iaF2ZKUnFUHzMrartSn0yXsA1WFdw+xVaD7dTvBz62pWQ iW6EFjTp9MWBQj3qqsgMohR83c4r+NP3Me+ByLYFp3GP7RMLyjJrpqN+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCVSTr/lsvp8RoqHuDujvgUQqQtMB8GA1UdIwQY MBaAFIJTRQWEX6CpP4KFptqLzm0dcgDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAt NDdjYzdkMWFiYzZiLzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAtNDdjYzdkMWFiYzZi LzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+BOWbJJ 0+i7qLlVxDI0hOFL3c8XgsnQ9AsTWmiokqbgxeo/FTOssRjsEHaaWRvNEkp/bhlk PaINXmGnJRg6Fzgi7ACAe75rmJpZiwV4v+am/sUdQ8j8T9dpN3C5NbSKsYFf77O7 3LHUkJg6pg0s4KIZIdhCTJQW2jGj8Vi7VpCRg0hSw/EHoJsdOEZX9IofaCRpssVm 8YMwo+X/cew1iLHnMpmZWhVwsc2+QHUOPcu20OI7uTgT9tRkB2RYxj7LR5EAd8Ls 3fN67fC1jivulG5qgYP/ni1TV3nxwv4kIxU/MkY2ER+OsJOmv6jI6ATYc+on8Bm9 zglXjvRsX5pZHQ== -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:56 2026 by rpki-client