This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json) Hash identifier: ULCKINggVbBQoD6/R61KbH2M2ds8XyPmLGhyQ8DwXN0= Subject key identifier: 7A:1A:49:27:AB:B4:F7:C8:9B:4F:8E:8A:FC:5F:CA:66:7F:2D:40:54 Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Certificate serial: 019BAEA62A21DB2610D2BC0F85E7D414B9CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft Manifest number: 069A Signing time: Sun 11 Jan 2026 20:01:23 +0000 Manifest this update: Sun 11 Jan 2026 20:01:23 +0000 Manifest next update: Mon 12 Jan 2026 20:01:23 +0000 Files and hashes: 1: 9RHmDDSrz_TVDy-BB9jwxctiETg.roa (hash: aSoHx1cw90YD5oFMHiMAaXrr40QHCrlwJm1tiyZ2AA8=) 2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: +6HBkprAYr262YAd57Z0BpMkdVz0F8ywqTEo0mp+7sE=) 3: e-bWAWxjxQJbnJGblL9z-udKDeg.roa (hash: F1tIuwxbtLRrgISklNjmuzhPscky9ofsgkm8xnxx5MU=) 4: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 20:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:2a:21:db:26:10:d2:bc:0f:85:e7:d4:14:b9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Validity Not Before: Jan 11 20:01:23 2026 GMT Not After : Jan 12 20:01:23 2026 GMT Subject: CN=7a1a4927abb4f7c89b4f8e8afc5fca667f2d4054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:0a:99:ae:ac:80:20:b1:55:1c:37:9c:15: 61:69:96:64:ad:04:f1:34:bf:c0:d2:58:1f:c6:99: 1d:68:11:31:75:94:f0:ff:62:a5:cf:bb:fd:71:83: 88:e3:80:62:53:d4:f9:09:46:d5:bc:84:f4:c4:2c: 51:c6:43:a0:eb:05:8a:34:c3:ab:8f:21:0e:2f:01: fc:e2:29:da:53:c5:6c:65:c9:02:5b:21:44:7d:e1: 44:fe:13:b4:8c:5c:34:4e:91:db:60:c0:57:14:93: 9e:c5:34:6c:82:b6:05:37:70:b4:58:3c:a3:2a:ea: 55:19:a5:74:19:b8:5f:fd:19:da:db:ac:a0:bc:7d: e9:0f:01:ec:53:6c:eb:78:76:c0:35:0a:c4:02:31: 33:15:23:04:6b:85:79:9f:1c:ed:fb:9e:f3:c4:e5: 42:5d:d0:52:b6:8b:7d:b3:bf:4c:ae:b2:23:cc:f8: 65:32:cb:83:87:6a:e3:83:18:bb:0c:e9:04:d5:4a: 4f:d3:8d:cb:23:20:8a:57:af:fc:0d:c0:e3:bd:27: c2:b9:87:d2:b8:cc:07:d7:ad:f2:7c:1e:42:dc:7e: 41:d0:80:6c:0c:57:09:75:6d:6e:ac:00:79:b1:1d: 40:3a:c3:30:f1:31:b9:04:83:db:5c:24:94:2d:da: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1A:49:27:AB:B4:F7:C8:9B:4F:8E:8A:FC:5F:CA:66:7F:2D:40:54 X509v3 Authority Key Identifier: keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4e:17:6f:67:22:e0:2b:3f:74:30:4a:26:5c:3b:7f:d9:20: c0:1c:fd:f9:f4:d3:42:36:0b:c4:65:7a:92:e6:13:c8:1b:0a: e4:94:79:71:86:26:5d:33:cd:a8:ed:bf:3b:4c:47:ab:9e:44: c5:b7:0f:1a:62:6f:b5:41:e0:71:03:e2:fd:6d:92:37:45:21: 19:ef:38:c8:ce:82:e5:fa:41:1f:13:d9:94:ce:1c:43:cf:8d: d3:d9:04:f9:36:d4:2c:0f:cc:aa:1b:3c:72:77:4b:65:1c:5c: 35:bf:b8:3f:f6:e3:db:6b:a1:2f:f6:19:0a:53:cc:80:2a:dc: cc:73:60:e2:6b:c0:e6:d7:68:fe:7e:14:4c:26:22:32:15:8c: ec:4d:b2:99:4c:12:24:67:38:1d:2c:47:df:96:ff:18:53:71: 84:df:7d:9e:fe:83:36:7e:74:2a:44:ca:03:cf:e0:a2:b7:a4: f0:e3:fa:d8:41:a3:ba:70:92:f5:0b:7a:84:d2:ba:0b:e6:33: 08:82:04:a6:f4:17:6c:44:a6:a5:a1:fd:56:5f:86:ba:e7:b8: 20:4d:7a:1a:c6:4a:10:89:31:ac:22:92:b1:16:d1:3f:f5:0e: a0:d6:6e:33:e1:40:8f:4a:20:0b:27:12:8c:10:eb:38:a5:89: 69:c8:38:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupioh2yYQ0rwPhefUFLnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2 MGVjNDIwHhcNMjYwMTExMjAwMTIzWhcNMjYwMTEyMjAwMTIzWjAzMTEwLwYDVQQD Eyg3YTFhNDkyN2FiYjRmN2M4OWI0ZjhlOGFmYzVmY2E2NjdmMmQ0MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1kKma6sgCCxVRw3nBVhaZZkrQTx NL/A0lgfxpkdaBExdZTw/2Klz7v9cYOI44BiU9T5CUbVvIT0xCxRxkOg6wWKNMOr jyEOLwH84inaU8VsZckCWyFEfeFE/hO0jFw0TpHbYMBXFJOexTRsgrYFN3C0WDyj KupVGaV0Gbhf/Rna26ygvH3pDwHsU2zreHbANQrEAjEzFSMEa4V5nxzt+57zxOVC XdBStot9s79MrrIjzPhlMsuDh2rjgxi7DOkE1UpP043LIyCKV6/8DcDjvSfCuYfS uMwH163yfB5C3H5B0IBsDFcJdW1urAB5sR1AOsMw8TG5BIPbXCSULdrQ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoaSSertPfIm0+OivxfymZ/LUBUMB8GA1UdIwQY MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt MTQ0ZDc0NzNlYTU5LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5 LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc04Xb2ci 4Cs/dDBKJlw7f9kgwBz9+fTTQjYLxGV6kuYTyBsK5JR5cYYmXTPNqO2/O0xHq55E xbcPGmJvtUHgcQPi/W2SN0UhGe84yM6C5fpBHxPZlM4cQ8+N09kE+TbULA/Mqhs8 cndLZRxcNb+4P/bj22uhL/YZClPMgCrczHNg4mvA5tdo/n4UTCYiMhWM7E2ymUwS JGc4HSxH35b/GFNxhN99nv6DNn50KkTKA8/gorek8OP62EGjunCS9Qt6hNK6C+Yz CIIEpvQXbESmpaH9Vl+Guue4IE16GsZKEIkxrCKSsRbRP/UOoNZuM+FAj0ogCycS jBDrOKWJacg4aQ== -----END CERTIFICATE-----Generated at Mon Jan 12 06:00:29 2026 by rpki-client