This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json) Hash identifier: Yrgljrz3Hy9YC+EccR2pqDHGG9vMtkWLRhjwUtfAl+g= Subject key identifier: F1:50:0C:9F:39:C2:1E:0B:D0:2F:98:C2:86:BB:89:9B:28:7E:7C:68 Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Certificate serial: 019B9FD80B8AFFF7660825AEEA88BD1E5D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft Manifest number: 0E2A Signing time: Thu 08 Jan 2026 23:01:34 +0000 Manifest this update: Thu 08 Jan 2026 23:01:34 +0000 Manifest next update: Fri 09 Jan 2026 23:01:34 +0000 Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: tzreQOPu8F1Gd9L+1RrSq+Ar8aZIck0G9UWiSWMeYHk=) 2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=) 3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d8:0b:8a:ff:f7:66:08:25:ae:ea:88:bd:1e:5d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561 Validity Not Before: Jan 8 23:01:34 2026 GMT Not After : Jan 9 23:01:34 2026 GMT Subject: CN=f1500c9f39c21e0bd02f98c286bb899b287e7c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:f2:a8:a2:4c:7c:96:8f:dc:d5:38:8b:cc: 40:13:7c:7d:59:0d:06:f9:3e:94:72:80:13:e8:c9: aa:53:71:e7:1d:d3:b0:1d:3d:af:65:76:83:4a:23: c2:cc:a4:66:fa:4d:dd:8d:90:f1:76:c3:48:05:a8: 1f:41:10:db:0d:ce:82:b8:55:0d:4b:6f:e2:2e:3e: 4b:af:e2:b5:0c:7c:25:a6:f6:ef:1e:82:c9:a2:70: 5d:5a:6c:fc:f8:21:14:0b:a7:d9:68:ca:50:e9:f0: 47:8b:f1:b1:dd:c5:de:09:2a:0a:01:67:a4:37:32: f0:2f:c5:96:17:38:45:93:67:18:74:54:f9:a9:32: 1c:87:f4:8d:34:67:a3:73:fe:05:50:6b:40:08:71: 66:79:4c:fc:23:f3:c6:45:94:fc:ed:16:21:3a:c8: f6:aa:8d:ba:ed:21:62:2b:4b:00:41:fc:6f:fa:a5: af:b3:29:9d:29:74:1b:56:fc:10:89:0e:0c:30:b6: 1c:b5:6d:62:24:7e:98:81:d4:5f:bc:4b:6a:93:19: 49:11:bc:4d:ae:04:44:da:95:aa:af:0d:69:de:e1: 62:fa:bd:bd:17:27:b4:63:6a:b8:6f:93:95:46:59: 77:76:fd:95:7b:0e:5e:cf:9d:c0:b5:b1:b3:53:19: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:0C:9F:39:C2:1E:0B:D0:2F:98:C2:86:BB:89:9B:28:7E:7C:68 X509v3 Authority Key Identifier: keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ca:c0:4a:08:c8:92:e7:50:5e:87:cf:ba:46:d1:54:f1:fa: 62:ad:98:20:26:fd:a4:52:64:eb:fc:b0:9b:d1:92:40:e1:6d: 86:14:b3:9f:97:4b:8f:c9:b4:df:6c:a3:42:53:b3:bf:7f:c6: 49:7e:d2:69:dd:c0:16:0d:16:cb:64:ee:d2:0a:ad:61:d9:fb: 7d:46:b8:75:be:4a:7b:6f:05:78:c9:50:30:d9:1f:03:90:b4: 08:5e:a1:c8:39:37:8f:3b:14:f0:37:c4:69:68:c3:a5:93:00: f0:1e:4a:08:4a:93:f4:06:93:16:2e:3c:3e:62:d8:c2:f0:de: d7:14:c5:57:d8:95:26:fc:91:ec:7d:93:9b:64:6e:80:83:b5: 1c:4b:a3:16:c0:39:da:06:b5:48:f7:97:47:77:5e:d5:2e:f7: ec:66:52:00:36:8b:39:1d:72:99:bb:37:9d:fa:cf:52:02:65: ea:13:b9:9a:38:18:a2:a1:94:a7:41:1f:67:34:8a:a2:7e:7c: 76:3d:4b:95:2f:58:8d:52:e4:26:c3:52:45:04:f2:78:55:47: 41:fb:64:bc:ac:5a:63:f6:d9:9f:22:a8:eb:df:a0:a0:71:f9: 7c:b0:9f:31:b8:45:42:6b:dc:c5:7c:9a:4d:3e:ac:55:e6:12: a6:a5:c3:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf2AuK//dmCCWu6oi9Hl05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0 ZWE1NjEwHhcNMjYwMTA4MjMwMTM0WhcNMjYwMTA5MjMwMTM0WjAzMTEwLwYDVQQD EyhmMTUwMGM5ZjM5YzIxZTBiZDAyZjk4YzI4NmJiODk5YjI4N2U3YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2XyqKJMfJaP3NU4i8xAE3x9WQ0G +T6UcoAT6MmqU3HnHdOwHT2vZXaDSiPCzKRm+k3djZDxdsNIBagfQRDbDc6CuFUN S2/iLj5Lr+K1DHwlpvbvHoLJonBdWmz8+CEUC6fZaMpQ6fBHi/Gx3cXeCSoKAWek NzLwL8WWFzhFk2cYdFT5qTIch/SNNGejc/4FUGtACHFmeUz8I/PGRZT87RYhOsj2 qo267SFiK0sAQfxv+qWvsymdKXQbVvwQiQ4MMLYctW1iJH6YgdRfvEtqkxlJEbxN rgRE2pWqrw1p3uFi+r29Fye0Y2q4b5OVRll3dv2Vew5ez53AtbGzUxnGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFQDJ85wh4L0C+Ywoa7iZsofnxoMB8GA1UdIwQY MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMrASgjI kudQXofPukbRVPH6Yq2YICb9pFJk6/ywm9GSQOFthhSzn5dLj8m032yjQlOzv3/G SX7Sad3AFg0Wy2Tu0gqtYdn7fUa4db5Ke28FeMlQMNkfA5C0CF6hyDk3jzsU8DfE aWjDpZMA8B5KCEqT9AaTFi48PmLYwvDe1xTFV9iVJvyR7H2Tm2RugIO1HEujFsA5 2ga1SPeXR3de1S737GZSADaLOR1ymbs3nfrPUgJl6hO5mjgYoqGUp0EfZzSKon58 dj1LlS9YjVLkJsNSRQTyeFVHQftkvKxaY/bZnyKo69+goHH5fLCfMbhFQmvcxXya TT6sVeYSpqXDXQ== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:30 2026 by rpki-client