This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json) Hash identifier: mbMsgY3OKK4l/3qIg4R8Kze0uuQOr8OpLjegFO1QLuU= Subject key identifier: 4F:7C:2F:78:BC:4A:86:C0:0F:24:02:74:F2:53:55:C9:67:05:9F:6C Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Certificate serial: 019BD19FECCEED3813A3C3F84FE45050E710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft Manifest number: 01F4 Signing time: Sun 18 Jan 2026 15:01:17 +0000 Manifest this update: Sun 18 Jan 2026 15:01:17 +0000 Manifest next update: Mon 19 Jan 2026 15:01:17 +0000 Files and hashes: 1: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (hash: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8=) 2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: CcMFQ9+EcwA/As7QCRqOhQmabCtJ8wWTfUUTmOXprJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:9f:ec:ce:ed:38:13:a3:c3:f8:4f:e4:50:50:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Validity Not Before: Jan 18 15:01:17 2026 GMT Not After : Jan 19 15:01:17 2026 GMT Subject: CN=4f7c2f78bc4a86c00f240274f25355c967059f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:d7:29:31:5f:bd:2f:63:1e:3b:a0:3d:1d: 75:88:07:bc:66:6c:7a:18:d0:0b:a3:ee:34:23:75: 6d:a7:e5:9b:04:32:ed:1d:ce:c5:bc:91:4d:f8:e0: 41:9f:e1:76:15:1a:ff:d9:c2:fb:7b:96:4a:14:e0: 8e:43:70:59:f0:86:24:17:d5:c0:9a:21:51:05:95: 04:9d:ac:9a:6d:fa:80:36:28:cd:e9:d2:7c:38:e0: 82:ef:d5:43:2b:3b:0b:46:43:16:c0:79:f2:3e:54: 55:7c:21:cc:66:bb:61:82:80:0b:4e:f4:c3:5c:b9: fb:e3:93:5f:70:aa:c0:74:96:0f:4c:a9:ee:49:bb: ad:68:d3:82:45:ab:81:ca:ed:dc:b4:92:af:7c:c1: c0:1c:ab:dc:c4:0c:f1:ef:17:d2:ab:e5:0f:3e:d2: 66:51:9a:71:c8:80:9e:c3:ef:64:f0:e2:ae:4c:38: e0:5d:17:80:3f:df:9b:80:e8:7c:f6:52:c2:19:c0: 8e:33:27:d1:60:cb:8a:b4:23:40:01:65:eb:c0:e7: e6:60:16:88:99:68:4d:96:1d:7b:83:29:bc:6e:2d: 6d:05:44:ca:64:33:8f:b8:32:57:36:85:4b:e3:7a: 7c:4c:fa:30:e1:93:74:96:44:be:64:b6:11:a7:bc: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:2F:78:BC:4A:86:C0:0F:24:02:74:F2:53:55:C9:67:05:9F:6C X509v3 Authority Key Identifier: keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cb:04:f3:0a:a8:a1:16:53:47:88:73:cd:6f:13:81:18:73: 57:9e:49:6b:bc:45:6b:72:b7:01:3d:00:36:27:c5:13:0e:f0: 32:78:dd:c2:c1:e8:d8:ce:e8:b8:6f:09:b7:c5:6f:3c:ee:da: 43:3d:b5:73:d0:27:de:93:64:44:4f:0c:2c:1d:66:32:11:91: 35:ff:d3:04:68:59:ff:35:60:f7:4b:b9:76:b2:67:6e:fa:70: 61:98:00:3c:76:c7:a7:e5:e9:20:e2:3f:05:c8:49:3d:1e:f2: c8:12:ef:a0:50:62:b1:d9:d1:44:c0:f5:ba:a0:e9:71:54:56: 81:c6:1b:68:24:1a:9a:ea:c6:7f:69:bb:c4:77:10:86:69:4f: aa:06:a4:aa:08:68:42:4b:23:0d:7a:71:db:6c:d3:3a:fd:00: f3:09:09:a4:8a:d6:dd:5e:ae:b6:20:40:24:70:d8:75:41:b9: b8:af:39:af:45:2e:0b:4a:63:e3:b6:33:68:87:d8:67:41:43: 81:e9:5a:73:93:6c:c9:09:1f:d5:b2:4d:06:53:2f:d8:c3:fc: d4:3a:7b:e0:62:23:72:3a:ec:33:ce:96:30:6d:47:d1:96:f5: 26:16:12:ea:d1:c9:6f:15:30:83:90:3d:d8:36:dd:52:67:0c: b3:47:f0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRn+zO7TgTo8P4T+RQUOcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl MDJkNGUwHhcNMjYwMTE4MTUwMTE3WhcNMjYwMTE5MTUwMTE3WjAzMTEwLwYDVQQD Eyg0ZjdjMmY3OGJjNGE4NmMwMGYyNDAyNzRmMjUzNTVjOTY3MDU5ZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIjXKTFfvS9jHjugPR11iAe8Zmx6 GNALo+40I3Vtp+WbBDLtHc7FvJFN+OBBn+F2FRr/2cL7e5ZKFOCOQ3BZ8IYkF9XA miFRBZUEnayabfqANijN6dJ8OOCC79VDKzsLRkMWwHnyPlRVfCHMZrthgoALTvTD XLn745NfcKrAdJYPTKnuSbutaNOCRauByu3ctJKvfMHAHKvcxAzx7xfSq+UPPtJm UZpxyICew+9k8OKuTDjgXReAP9+bgOh89lLCGcCOMyfRYMuKtCNAAWXrwOfmYBaI mWhNlh17gym8bi1tBUTKZDOPuDJXNoVL43p8TPow4ZN0lkS+ZLYRp7yg8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE98L3i8SobADyQCdPJTVclnBZ9sMB8GA1UdIwQY MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt N2RmZGU4YjEyZTJjLzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8sE8wqo oRZTR4hzzW8TgRhzV55Ja7xFa3K3AT0ANifFEw7wMnjdwsHo2M7ouG8Jt8VvPO7a Qz21c9An3pNkRE8MLB1mMhGRNf/TBGhZ/zVg90u5drJnbvpwYZgAPHbHp+XpIOI/ BchJPR7yyBLvoFBisdnRRMD1uqDpcVRWgcYbaCQamurGf2m7xHcQhmlPqgakqgho QksjDXpx22zTOv0A8wkJpIrW3V6utiBAJHDYdUG5uK85r0UuC0pj47YzaIfYZ0FD gelac5NsyQkf1bJNBlMv2MP81Dp74GIjcjrsM86WMG1H0Zb1JhYS6tHJbxUwg5A9 2DbdUmcMs0fwhA== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:36 2026 by rpki-client