This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft File: gjwMX13-U9s74NqofrgP8jOghVU.mft (raw, json) Hash identifier: 1CALn9Y+lA1b03R+GMbZMC1MAqdNQqOhM7Q49PGZ7No= Subject key identifier: 5A:C1:E3:5D:AF:CD:5E:12:75:FD:80:21:A8:C1:39:37:F2:FA:DF:03 Authority key identifier: 82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55 Certificate issuer: /CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555 Certificate serial: 019C1C4C373C0E2B78ACC9564405DEEB0AAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft Manifest number: 1B Signing time: Mon 02 Feb 2026 03:01:22 +0000 Manifest this update: Mon 02 Feb 2026 03:01:22 +0000 Manifest next update: Tue 03 Feb 2026 03:01:22 +0000 Files and hashes: 1: V34l5uFzYw3kKb1sTTfoMorRyxQ.asa (hash: MTaS52CxVyh3Tkcvp3/p/Y0eCYEdwzDZPEbKIi5PiFI=) 2: gjwMX13-U9s74NqofrgP8jOghVU.crl (hash: Ze1scrivMVw+qDgajBrUN+YZwMp9luZFgvGqaJv4VI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4c:37:3c:0e:2b:78:ac:c9:56:44:05:de:eb:0a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555 Validity Not Before: Feb 2 03:01:22 2026 GMT Not After : Feb 3 03:01:22 2026 GMT Subject: CN=5ac1e35dafcd5e1275fd8021a8c13937f2fadf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:a9:66:34:ea:ee:07:91:3f:43:df:0e:1a: 53:c9:f5:e8:cb:37:85:9b:b1:58:d5:f7:f4:88:d8: 07:3b:d6:32:9b:eb:89:4a:92:10:c7:c5:f8:51:1e: 2a:0e:ec:56:e0:1d:e9:00:76:24:68:40:59:59:f6: 0b:9f:86:a7:86:fb:aa:52:96:98:f7:bd:bc:b8:34: e6:5c:ee:cd:52:30:41:25:4b:0b:6a:dc:d8:f6:dc: 06:96:d3:6a:63:86:dc:f2:f5:95:a9:61:e1:83:27: bb:40:6b:a2:c1:0e:93:f8:e3:18:4b:ac:d8:d7:3a: 57:68:34:e8:45:3c:9d:ed:1c:df:96:10:58:0e:b8: 2d:1e:c5:bf:b8:d2:60:d1:fc:67:b1:f5:1d:22:64: 05:be:5f:a7:0a:5a:58:eb:16:91:95:70:33:b5:3e: b5:94:6a:7e:1a:ae:a7:d7:93:18:b8:31:c9:63:d1: c8:92:44:7d:b5:2c:7d:0d:43:dd:da:4e:91:fb:13: 3e:5a:44:8f:60:e9:4a:3d:32:4b:da:79:d3:c3:36: fc:16:3e:e7:a5:81:7f:9f:db:1e:07:5c:9e:ec:cb: 33:e2:ba:6f:51:dd:e3:fa:53:10:12:85:f9:b2:d4: c2:75:81:57:1e:9a:3c:08:64:52:dc:3d:ff:a3:bd: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C1:E3:5D:AF:CD:5E:12:75:FD:80:21:A8:C1:39:37:F2:FA:DF:03 X509v3 Authority Key Identifier: keyid:82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:89:7a:c3:ad:9b:88:e6:92:88:d1:cd:84:41:45:71:fc:4f: 0b:15:5b:b1:dc:fb:42:7d:b2:b4:ad:22:03:7f:66:48:3d:d1: a3:dd:7d:78:ec:b2:df:70:e3:7e:1f:6f:60:d3:09:db:a2:b1: c8:ce:11:5a:b7:c5:de:ff:80:d0:25:ff:a3:3c:2b:8e:f6:9f: 28:70:11:15:22:2b:42:49:bb:a1:20:2a:0a:c5:45:bc:5a:46: 5b:39:9c:7b:eb:15:30:85:02:d1:17:6f:6f:78:b7:54:29:e5: 0e:b2:58:ff:c4:f2:87:f1:9d:35:48:c5:c6:ba:62:44:af:f4: ec:cf:90:76:0d:e8:f3:70:c0:4f:d7:42:0c:96:19:f8:01:a1: 33:ce:6f:b9:58:72:08:5c:bb:da:fd:c7:3c:dc:a0:74:90:ad: 38:4b:0c:3c:72:53:69:5b:44:b5:52:b8:16:d1:d5:79:11:d9: c8:d1:4b:cf:e6:28:0e:e6:38:d3:bc:3e:5b:db:19:23:d0:45: c9:71:a6:3e:bc:04:e0:83:a2:3a:d7:63:df:06:99:ff:fe:83: 9e:78:79:c0:2b:dc:61:f4:cd:80:6a:49:e6:4a:b7:f7:f4:8e: 57:25:e3:a0:1b:d4:6d:ba:16:b2:9f:6f:c5:1c:8e:b5:7f:07: ed:11:c6:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcTDc8Dit4rMlWRAXe6wqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyM2MwYzVmNWRmZTUzZGIzYmUwZGFhODdlYjgwZmYyMzNh MDg1NTUwHhcNMjYwMjAyMDMwMTIyWhcNMjYwMjAzMDMwMTIyWjAzMTEwLwYDVQQD Eyg1YWMxZTM1ZGFmY2Q1ZTEyNzVmZDgwMjFhOGMxMzkzN2YyZmFkZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPepZjTq7geRP0PfDhpTyfXoyzeF m7FY1ff0iNgHO9Yym+uJSpIQx8X4UR4qDuxW4B3pAHYkaEBZWfYLn4anhvuqUpaY 9728uDTmXO7NUjBBJUsLatzY9twGltNqY4bc8vWVqWHhgye7QGuiwQ6T+OMYS6zY 1zpXaDToRTyd7RzflhBYDrgtHsW/uNJg0fxnsfUdImQFvl+nClpY6xaRlXAztT61 lGp+Gq6n15MYuDHJY9HIkkR9tSx9DUPd2k6R+xM+WkSPYOlKPTJL2nnTwzb8Fj7n pYF/n9seB1ye7Msz4rpvUd3j+lMQEoX5stTCdYFXHpo8CGRS3D3/o727BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrB412vzV4Sdf2AIajBOTfy+t8DMB8GA1UdIwQY MBaAFII8DF9d/lPbO+DaqH64D/IzoIVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2It YmU2NjQyN2VhYmZlLzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2ItYmU2NjQyN2VhYmZl LzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIl6w62b iOaSiNHNhEFFcfxPCxVbsdz7Qn2ytK0iA39mSD3Ro919eOyy33Djfh9vYNMJ26Kx yM4RWrfF3v+A0CX/ozwrjvafKHARFSIrQkm7oSAqCsVFvFpGWzmce+sVMIUC0Rdv b3i3VCnlDrJY/8Tyh/GdNUjFxrpiRK/07M+Qdg3o83DAT9dCDJYZ+AGhM85vuVhy CFy72v3HPNygdJCtOEsMPHJTaVtEtVK4FtHVeRHZyNFLz+YoDuY407w+W9sZI9BF yXGmPrwE4IOiOtdj3waZ//6Dnnh5wCvcYfTNgGpJ5kq39/SOVyXjoBvUbboWsp9v xRyOtX8H7RHG4g== -----END CERTIFICATE-----Generated at Mon Feb 2 10:16:36 2026 by rpki-client