This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json) Hash identifier: cn55xVHqRaH1Kmi9Fs15m2Xgx6HjbWqcHBtvvXL/+Fk= Subject key identifier: B5:3B:75:F7:E8:6B:A4:08:EE:2C:68:10:C1:CC:92:4B:04:A1:BF:BD Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019BE25BE6A82325F8A4AFCAAEC520DF8417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft Manifest number: 17E2 Signing time: Wed 21 Jan 2026 21:00:32 +0000 Manifest this update: Wed 21 Jan 2026 21:00:32 +0000 Manifest next update: Thu 22 Jan 2026 21:00:32 +0000 Files and hashes: 1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=) 2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=) 3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=) 4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=) 5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=) 6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: MQBhZelGOWIqI5+ET+8a0feQefTlFYOEiVgK++zVPsU=) 7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=) 8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:5b:e6:a8:23:25:f8:a4:af:ca:ae:c5:20:df:84:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Jan 21 21:00:32 2026 GMT Not After : Jan 22 21:00:32 2026 GMT Subject: CN=b53b75f7e86ba408ee2c6810c1cc924b04a1bfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:e4:c5:8e:3f:a1:5b:fe:ab:f2:01:15:f0: 38:1c:b5:c7:57:ad:e9:a2:e1:9e:38:25:95:be:a7: 5b:c8:7a:c6:bd:95:b3:4c:87:bb:bd:af:01:48:28: 5f:ac:d7:fa:32:b6:00:52:09:5a:b7:e7:c7:13:73: a5:a6:17:c2:df:9e:d3:d2:47:51:d6:fa:96:e7:5a: 6f:9a:93:c3:d5:59:e8:9c:f2:e3:62:75:f7:9d:5b: 36:39:af:bb:81:83:2a:b2:c0:a5:4f:e2:95:aa:b8: 4c:55:67:4c:5d:d2:6d:84:dc:67:ae:52:04:3c:68: af:49:3d:bb:73:ec:a1:85:80:44:88:1f:00:fc:e0: e5:2b:3f:98:cd:6e:83:c0:8d:d1:1e:31:49:c0:9c: ec:02:74:a6:ec:45:a0:49:be:71:25:75:07:01:d4: 47:60:67:f7:9e:0f:a2:5f:48:99:1a:87:83:67:55: 83:82:6d:21:e0:2e:79:c6:d4:9f:3e:e7:d4:2e:24: d9:e2:d2:50:4b:8b:07:2d:c0:29:cd:09:10:ac:d3: 89:3e:96:44:82:93:1f:57:60:77:7a:24:45:53:6d: 5a:0f:54:f9:89:c6:b8:6c:33:70:7c:40:54:34:ac: af:5c:05:3c:a3:87:f2:41:68:75:65:5c:11:b3:9d: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:75:F7:E8:6B:A4:08:EE:2C:68:10:C1:CC:92:4B:04:A1:BF:BD X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d3:2c:9a:c0:54:56:83:eb:09:ea:c7:a6:49:72:b1:89:c5: bd:e9:df:8b:e9:10:a3:fd:65:ce:9c:ac:67:b7:04:51:7a:1a: ea:aa:0f:e8:d3:91:b8:5f:6d:c6:b2:7b:ba:31:df:35:4c:cc: cc:92:0d:b5:79:91:be:4a:b8:dc:f7:dc:7f:4f:66:f9:b0:1d: 7f:c7:fa:d4:83:8f:d2:65:68:b3:81:08:07:ab:2b:60:64:e3: e4:e4:b6:c8:d3:d5:21:3c:f1:6c:6a:5f:7e:6f:ed:1a:c1:24: 65:6f:1c:7f:c9:c2:94:32:9f:d4:34:a6:48:f0:03:7e:6d:37: 0b:a0:49:a2:de:3c:a7:78:4e:87:cb:a8:7e:8f:86:7f:15:ea: ba:34:6d:f3:28:75:01:d4:12:fc:36:f9:67:08:5b:67:b9:d8: b0:fd:84:56:d3:fb:45:ff:2f:e5:fa:f0:1b:58:f1:f0:38:8b: bf:c2:ee:b8:e7:bc:38:41:1e:96:65:95:2e:2c:1a:6c:09:e6: 17:8c:ef:1c:a4:ec:dd:9e:0e:00:0c:c8:9d:d3:6c:bb:6d:35: 3b:f9:2a:52:01:22:eb:35:21:3c:7a:a2:62:34:28:4d:15:29: 1f:23:b8:3e:9e:e2:44:6a:ac:8e:9e:c0:d9:1e:a2:7a:25:35: 93:f2:fb:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZviW+aoIyX4pK/KrsUg34QXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjYwMTIxMjEwMDMyWhcNMjYwMTIyMjEwMDMyWjAzMTEwLwYDVQQD EyhiNTNiNzVmN2U4NmJhNDA4ZWUyYzY4MTBjMWNjOTI0YjA0YTFiZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaLkxY4/oVv+q/IBFfA4HLXHV63p ouGeOCWVvqdbyHrGvZWzTIe7va8BSChfrNf6MrYAUglat+fHE3OlphfC357T0kdR 1vqW51pvmpPD1VnonPLjYnX3nVs2Oa+7gYMqssClT+KVqrhMVWdMXdJthNxnrlIE PGivST27c+yhhYBEiB8A/ODlKz+YzW6DwI3RHjFJwJzsAnSm7EWgSb5xJXUHAdRH YGf3ng+iX0iZGoeDZ1WDgm0h4C55xtSfPufULiTZ4tJQS4sHLcApzQkQrNOJPpZE gpMfV2B3eiRFU21aD1T5ica4bDNwfEBUNKyvXAU8o4fyQWh1ZVwRs51KmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU7dffoa6QI7ixoEMHMkksEob+9MB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9MsmsBU VoPrCerHpklysYnFvenfi+kQo/1lzpysZ7cEUXoa6qoP6NORuF9txrJ7ujHfNUzM zJINtXmRvkq43Pfcf09m+bAdf8f61IOP0mVos4EIB6srYGTj5OS2yNPVITzxbGpf fm/tGsEkZW8cf8nClDKf1DSmSPADfm03C6BJot48p3hOh8uofo+GfxXqujRt8yh1 AdQS/Db5ZwhbZ7nYsP2EVtP7Rf8v5frwG1jx8DiLv8LuuOe8OEEelmWVLiwabAnm F4zvHKTs3Z4OAAzIndNsu201O/kqUgEi6zUhPHqiYjQoTRUpHyO4Pp7iRGqsjp7A 2R6ieiU1k/L7kA== -----END CERTIFICATE-----Generated at Thu Jan 22 02:37:42 2026 by rpki-client