This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json) Hash identifier: SD7/hLVujr2/JiBrlyCBVBl4QmrvbzMhDNxMApSdahY= Subject key identifier: 8C:FB:D4:D3:F8:C6:0F:69:E2:CE:93:95:FD:1C:C4:52:7E:42:36:85 Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019BD76AE7DEBFDB6147C4462341DE223097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft Manifest number: 87 Signing time: Mon 19 Jan 2026 18:01:05 +0000 Manifest this update: Mon 19 Jan 2026 18:01:05 +0000 Manifest next update: Tue 20 Jan 2026 18:01:05 +0000 Files and hashes: 1: 6bjSbhqwKfCJyzuoHErLZFiQKFE.roa (hash: fv9LqISQEhkBU4rB+B0VGbDuz4p90Et8y3hrdyyRFaA=) 2: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=) 3: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: BnjmGenXq1P7MdDgv/QZlO5+oJdIrLKF7e59SbfjuMM=) 4: ISt_Cm9mi8ihjAyxE3N-YOnrclQ.roa (hash: XDxiPqOdkF1uFsD4HB/DDPcVZVTS73Tko3hAigtWvL0=) 5: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=) 6: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=) 7: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=) 8: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:6a:e7:de:bf:db:61:47:c4:46:23:41:de:22:30:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Jan 19 18:01:05 2026 GMT Not After : Jan 20 18:01:05 2026 GMT Subject: CN=8cfbd4d3f8c60f69e2ce9395fd1cc4527e423685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:5d:3f:a4:f4:16:54:01:a7:05:61:67:8d: be:e0:f5:d8:34:f2:7c:57:55:ac:2a:c1:93:c2:1f: 21:3e:9a:4d:3d:5a:29:9c:bb:58:80:33:79:f3:e3: c4:24:75:76:1e:2b:0e:1b:1c:aa:bd:39:2e:13:d9: 96:15:8f:ce:4b:1d:d7:3c:44:0c:8c:04:dc:8d:6d: b0:05:7c:0e:e0:f1:22:c4:a4:e1:c5:fb:79:2b:34: 3e:e2:ce:1a:7d:8e:f9:7c:05:81:a8:0b:84:da:5b: 53:90:5d:71:e6:c3:e5:20:c4:b3:94:ea:91:4c:af: 8e:b9:3d:16:d0:af:88:71:ea:c5:82:df:ad:70:e7: 42:49:6d:66:1b:1e:1d:bf:b4:d9:80:3e:b2:22:3b: be:8a:ab:b7:dc:b1:29:f2:d1:04:27:ad:80:a8:14: 70:98:b4:63:b7:69:8c:fe:fc:19:23:0d:d7:0e:70: b3:3a:e5:1b:09:67:74:f9:11:bb:99:2f:2e:89:58: 5d:20:10:22:93:40:2d:7a:d7:3f:a6:f7:46:5f:a4: f9:bb:e1:09:d8:84:52:15:d6:90:df:89:67:3b:ef: da:e8:38:7f:9f:99:1d:bf:bb:24:78:2b:16:96:3f: ee:e9:2b:9e:54:08:82:56:c7:74:c3:51:2a:a9:20: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:D4:D3:F8:C6:0F:69:E2:CE:93:95:FD:1C:C4:52:7E:42:36:85 X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:0d:bc:b9:47:d6:fd:23:5d:9f:de:4d:25:cc:36:b8:9b: 29:9e:6c:97:28:4a:6f:88:c5:a3:ea:a4:76:17:f5:30:b2:4b: 42:15:fa:68:f5:30:61:8b:1c:38:a4:2d:f4:40:f0:73:ab:2e: 20:ae:5d:4f:2a:9a:8f:e6:0f:51:29:2a:97:bc:3a:22:b5:68: 2a:12:c2:7a:e7:f9:e9:d5:77:4e:e9:a5:c9:be:93:10:e0:bc: 77:9a:b5:6c:98:66:c8:01:e7:1c:a5:b2:8c:91:bd:ca:01:ff: d7:64:60:da:3d:0f:38:8d:ea:92:92:ef:4e:84:3b:38:e0:e8: 17:a3:63:79:a1:b8:ef:a3:32:7b:76:e7:f0:c0:53:1e:9c:70: f3:5e:b3:8f:8b:10:47:e8:ec:51:ed:9c:a0:b8:bf:d8:12:7e: 8b:ed:a6:d3:8c:9b:c5:3e:65:88:27:a2:b9:34:12:7d:71:75: 83:f4:ab:02:67:3f:b9:72:47:05:0a:ca:e3:08:85:f9:02:2c: 14:0f:91:77:32:30:d0:71:a2:4d:3e:15:8b:90:4b:52:ce:2a: be:96:a5:31:19:ab:45:52:79:5e:cd:36:56:2d:06:38:d2:09: 16:bd:92:f8:a3:89:a5:93:25:e2:b0:15:d2:26:95:f3:49:26: a2:2d:28:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXaufev9thR8RGI0HeIjCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjYwMTE5MTgwMTA1WhcNMjYwMTIwMTgwMTA1WjAzMTEwLwYDVQQD Eyg4Y2ZiZDRkM2Y4YzYwZjY5ZTJjZTkzOTVmZDFjYzQ1MjdlNDIzNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC1dP6T0FlQBpwVhZ42+4PXYNPJ8 V1WsKsGTwh8hPppNPVopnLtYgDN58+PEJHV2HisOGxyqvTkuE9mWFY/OSx3XPEQM jATcjW2wBXwO4PEixKThxft5KzQ+4s4afY75fAWBqAuE2ltTkF1x5sPlIMSzlOqR TK+OuT0W0K+IcerFgt+tcOdCSW1mGx4dv7TZgD6yIju+iqu33LEp8tEEJ62AqBRw mLRjt2mM/vwZIw3XDnCzOuUbCWd0+RG7mS8uiVhdIBAik0Atetc/pvdGX6T5u+EJ 2IRSFdaQ34lnO+/a6Dh/n5kdv7skeCsWlj/u6SueVAiCVsd0w1EqqSCeOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz71NP4xg9p4s6Tlf0cxFJ+QjaFMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp4NvLlH 1v0jXZ/eTSXMNribKZ5slyhKb4jFo+qkdhf1MLJLQhX6aPUwYYscOKQt9EDwc6su IK5dTyqaj+YPUSkql7w6IrVoKhLCeuf56dV3Tumlyb6TEOC8d5q1bJhmyAHnHKWy jJG9ygH/12Rg2j0POI3qkpLvToQ7OODoF6NjeaG476Mye3bn8MBTHpxw816zj4sQ R+jsUe2coLi/2BJ+i+2m04ybxT5liCeiuTQSfXF1g/SrAmc/uXJHBQrK4wiF+QIs FA+RdzIw0HGiTT4Vi5BLUs4qvpalMRmrRVJ5Xs02Vi0GONIJFr2S+KOJpZMl4rAV 0iaV80kmoi0oPA== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:55 2026 by rpki-client