This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json) Hash identifier: XH3iVsE7lKsQBBStCHkWuUEupEiJWbGeWvbpYWbvDDQ= Subject key identifier: 0C:D4:17:F9:34:93:10:26:F4:A2:7A:C0:CD:F5:6D:A2:7F:5E:B0:0E Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Certificate serial: 019BFA647D511593FCA2516861C4EEB99C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft Manifest number: 130E Signing time: Mon 26 Jan 2026 13:00:48 +0000 Manifest this update: Mon 26 Jan 2026 13:00:48 +0000 Manifest next update: Tue 27 Jan 2026 13:00:48 +0000 Files and hashes: 1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=) 2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=) 3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=) 4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: zb6Rm/fHOlY0on6qj3ZfuPPYFubAPlvgHNTzF/4CmqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:7d:51:15:93:fc:a2:51:68:61:c4:ee:b9:9c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Validity Not Before: Jan 26 13:00:48 2026 GMT Not After : Jan 27 13:00:48 2026 GMT Subject: CN=0cd417f934931026f4a27ac0cdf56da27f5eb00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:93:d4:aa:39:53:09:01:c0:ac:00:d5:dc: 53:fe:e3:1b:b8:9b:ed:7c:db:df:42:ad:f9:d0:60: 38:56:fc:cb:c9:3b:a7:e4:1a:e2:e5:79:54:e1:a2: b7:6c:f0:17:6d:18:a4:62:03:d3:f7:f5:ce:ac:38: 32:cf:87:b1:9c:32:14:57:8d:62:8a:c1:77:dd:e5: 97:83:02:74:ba:3b:91:ac:09:36:65:10:4c:cb:67: c4:21:2b:9f:da:0d:cc:a8:7f:84:b4:40:c0:1b:ea: d6:6d:59:03:f6:19:9c:82:ed:ee:6d:29:d7:f8:03: 61:e3:ea:68:ab:38:33:a0:9b:0e:13:1a:88:c9:c2: 9a:39:2f:a7:64:0f:2e:cb:47:a5:a4:f8:a8:24:96: 55:76:fc:49:a0:09:df:fb:cf:65:cb:90:f1:d5:9e: 8a:ad:5e:d9:cb:51:95:f3:cc:4e:d7:cc:17:35:d5: 39:0d:a4:57:61:a0:d9:de:77:af:86:db:64:c0:ad: 72:b1:54:5a:1a:6f:82:b6:b7:2b:63:40:5f:9e:e8: 12:07:12:df:31:d3:a7:59:01:ad:48:8a:09:74:f7: 68:0c:5f:4b:77:27:93:19:11:fd:b4:1c:85:c6:75: b0:2b:7c:45:b1:93:dc:a6:de:ea:f8:58:5f:e8:da: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D4:17:F9:34:93:10:26:F4:A2:7A:C0:CD:F5:6D:A2:7F:5E:B0:0E X509v3 Authority Key Identifier: keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:93:da:e7:dc:53:72:7b:73:0c:5b:7d:68:b1:ee:2d:fb:10: d1:be:0f:f6:86:ab:9e:5e:b6:d8:6b:71:7f:cd:26:af:e2:69: 5c:90:ad:f1:fe:72:8f:bc:21:6d:47:0f:4d:08:61:cf:cb:a1: dd:e7:66:84:d7:e5:97:fd:ee:0e:16:52:cd:1b:b9:3f:22:90: bf:18:a8:01:db:4f:38:00:15:79:6c:82:f0:2e:9e:e4:df:be: 0e:25:3c:3e:c1:5f:44:e1:97:fe:06:cd:90:0c:d1:7a:8b:24: 09:6f:98:84:56:64:15:a5:02:34:7c:9e:45:b9:85:1d:29:30: 56:48:2e:a1:36:89:5c:2d:de:92:f3:e3:31:91:5f:45:02:b0: 81:32:bf:99:15:ed:82:ca:2a:5b:86:84:e5:74:3c:43:d0:db: cd:88:0b:63:41:d4:81:10:0b:b4:06:23:d3:94:6d:ac:e8:b0: cf:70:8e:41:c2:77:9b:f6:7b:d1:80:39:02:86:25:f6:df:62: 7f:b5:ae:dd:02:1a:f0:5d:fd:ff:72:57:31:49:ab:06:88:dd: f9:4d:a2:ab:35:20:fa:29:ed:44:db:29:9f:a8:c8:6b:f6:57: 25:67:3e:0b:ff:b8:10:09:24:41:40:18:c0:ba:67:9b:31:65: b6:9c:46:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZH1RFZP8olFoYcTuuZw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4 NWIzNWEwHhcNMjYwMTI2MTMwMDQ4WhcNMjYwMTI3MTMwMDQ4WjAzMTEwLwYDVQQD EygwY2Q0MTdmOTM0OTMxMDI2ZjRhMjdhYzBjZGY1NmRhMjdmNWViMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHmT1Ko5UwkBwKwA1dxT/uMbuJvt fNvfQq350GA4VvzLyTun5Bri5XlU4aK3bPAXbRikYgPT9/XOrDgyz4exnDIUV41i isF33eWXgwJ0ujuRrAk2ZRBMy2fEISuf2g3MqH+EtEDAG+rWbVkD9hmcgu3ubSnX +ANh4+poqzgzoJsOExqIycKaOS+nZA8uy0elpPioJJZVdvxJoAnf+89ly5Dx1Z6K rV7Zy1GV88xO18wXNdU5DaRXYaDZ3nevhttkwK1ysVRaGm+CtrcrY0BfnugSBxLf MdOnWQGtSIoJdPdoDF9LdyeTGRH9tByFxnWwK3xFsZPcpt7q+Fhf6NpGMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzUF/k0kxAm9KJ6wM31baJ/XrAOMB8GA1UdIwQY MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt MDE0NGEzMjgyYTJlLzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5Pa59xT cntzDFt9aLHuLfsQ0b4P9oarnl622Gtxf80mr+JpXJCt8f5yj7whbUcPTQhhz8uh 3edmhNfll/3uDhZSzRu5PyKQvxioAdtPOAAVeWyC8C6e5N++DiU8PsFfROGX/gbN kAzReoskCW+YhFZkFaUCNHyeRbmFHSkwVkguoTaJXC3ekvPjMZFfRQKwgTK/mRXt gsoqW4aE5XQ8Q9DbzYgLY0HUgRALtAYj05RtrOiwz3COQcJ3m/Z70YA5AoYl9t9i f7Wu3QIa8F39/3JXMUmrBojd+U2iqzUg+intRNspn6jIa/ZXJWc+C/+4EAkkQUAY wLpnmzFltpxGmA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:45:42 2026 by rpki-client