This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json) Hash identifier: 4wBcrEzhNFkuRJZTTni/rzKtNxtRtEbfAxb9GtJQVsA= Subject key identifier: 88:8A:55:73:6F:AB:8A:E9:D3:03:80:F4:44:8B:4C:55:AA:88:DC:B0 Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Certificate serial: 019BB6CD61524E3BFBFF64F255DC2BAE53B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft Manifest number: 17C4 Signing time: Tue 13 Jan 2026 10:01:11 +0000 Manifest this update: Tue 13 Jan 2026 10:01:11 +0000 Manifest next update: Wed 14 Jan 2026 10:01:11 +0000 Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: RhcFKUGTwvERznooxqPIcfxyLDd038szBPUH5lXAwvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:cd:61:52:4e:3b:fb:ff:64:f2:55:dc:2b:ae:53:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Validity Not Before: Jan 13 10:01:11 2026 GMT Not After : Jan 14 10:01:11 2026 GMT Subject: CN=888a55736fab8ae9d30380f4448b4c55aa88dcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:09:5e:5b:59:3e:a3:f3:f2:81:3b:97:84: 10:d6:37:19:e0:55:1e:ca:ac:20:1a:b2:d8:6c:e9: bb:a3:a9:c6:df:44:0c:87:74:cb:5d:b9:4e:6f:28: 29:13:06:9b:e0:a3:cb:ee:35:98:1f:e0:48:25:f3: b3:17:b6:b1:4c:2e:65:31:c9:80:6d:c5:ae:74:8e: bf:bb:0c:c9:b2:77:b2:3e:3f:2e:5e:05:92:0f:87: e6:e3:a5:c6:fa:56:5b:c7:ce:67:3b:7a:77:6f:17: b1:36:5c:b9:ec:4e:15:4b:ba:1f:88:51:1f:d0:e6: 3e:21:ff:f1:a4:98:d4:dd:7d:d5:a4:a0:5b:be:d9: 4c:44:6b:ff:2f:e0:b1:e8:49:62:31:2e:3c:94:b1: d1:42:a8:27:b0:ba:1e:4e:1c:ca:5d:95:c6:3d:a9: c6:40:6e:e3:0f:f6:23:13:a1:8d:c2:73:1d:19:e5: 0b:24:a5:79:18:00:25:d4:56:f6:2c:77:59:15:8b: 16:dd:7d:33:49:e4:91:e9:3c:74:53:e8:f2:05:00: 4e:2a:37:a5:ed:0d:da:c7:fc:40:ad:79:bb:f8:f1: b7:fa:59:20:93:6c:56:64:5a:4d:91:6c:b5:34:1e: 7b:2a:5f:af:62:f8:e9:1f:39:b1:e2:1a:00:78:8b: c7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:55:73:6F:AB:8A:E9:D3:03:80:F4:44:8B:4C:55:AA:88:DC:B0 X509v3 Authority Key Identifier: keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d6:28:cc:78:6a:d6:cb:8f:ed:31:ca:19:97:6e:ba:98:6d: a3:43:2f:54:b5:9a:1b:99:35:22:6d:7c:d0:2c:d3:79:17:47: 1e:62:e2:f2:1a:8f:7e:be:ab:dc:62:f4:81:59:81:1d:2a:6d: c7:74:1d:2c:97:ba:e5:fc:d9:b7:e6:14:43:0e:f4:28:b9:21: b6:b3:59:9d:41:83:cb:d5:77:6a:e2:b3:59:07:32:96:04:9a: 4f:b5:4d:aa:6d:35:30:13:71:2e:51:16:8e:59:ac:da:a4:97: ac:a1:5d:59:56:e3:af:ec:6a:87:0e:f2:72:b2:9e:70:38:09: 2f:a6:98:14:17:50:7d:b3:24:ab:71:d8:2e:2c:18:30:27:ff: d2:0c:27:d3:6c:dc:70:e7:91:5e:b3:aa:ec:34:de:dc:b9:31: 67:48:ce:4d:46:8c:2a:1e:2d:9a:7c:15:a9:04:11:67:05:4f: 12:31:97:a5:90:77:34:89:a9:25:29:fd:7e:8e:66:ae:cd:bb: 86:8f:50:95:25:b9:f3:e7:85:f7:56:c3:f6:2d:ee:c9:b3:55: 7f:ae:56:f8:0d:04:04:3c:e4:8e:95:ad:63:f6:21:f7:6d:3b: df:ee:31:42:c6:bb:32:ac:13:c0:f3:10:0a:6e:14:de:23:17: 42:bf:6a:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2zWFSTjv7/2TyVdwrrlOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw ODVhNDMwHhcNMjYwMTEzMTAwMTExWhcNMjYwMTE0MTAwMTExWjAzMTEwLwYDVQQD Eyg4ODhhNTU3MzZmYWI4YWU5ZDMwMzgwZjQ0NDhiNGM1NWFhODhkY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDsJXltZPqPz8oE7l4QQ1jcZ4FUe yqwgGrLYbOm7o6nG30QMh3TLXblObygpEwab4KPL7jWYH+BIJfOzF7axTC5lMcmA bcWudI6/uwzJsneyPj8uXgWSD4fm46XG+lZbx85nO3p3bxexNly57E4VS7ofiFEf 0OY+If/xpJjU3X3VpKBbvtlMRGv/L+Cx6EliMS48lLHRQqgnsLoeThzKXZXGPanG QG7jD/YjE6GNwnMdGeULJKV5GAAl1Fb2LHdZFYsW3X0zSeSR6Tx0U+jyBQBOKjel 7Q3ax/xArXm7+PG3+lkgk2xWZFpNkWy1NB57Kl+vYvjpHzmx4hoAeIvHTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiKVXNvq4rp0wOA9ESLTFWqiNywMB8GA1UdIwQY MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNYozHhq 1suP7THKGZduuphto0MvVLWaG5k1Im180CzTeRdHHmLi8hqPfr6r3GL0gVmBHSpt x3QdLJe65fzZt+YUQw70KLkhtrNZnUGDy9V3auKzWQcylgSaT7VNqm01MBNxLlEW jlms2qSXrKFdWVbjr+xqhw7ycrKecDgJL6aYFBdQfbMkq3HYLiwYMCf/0gwn02zc cOeRXrOq7DTe3LkxZ0jOTUaMKh4tmnwVqQQRZwVPEjGXpZB3NImpJSn9fo5mrs27 ho9QlSW58+eF91bD9i3uybNVf65W+A0EBDzkjpWtY/Yh92073+4xQsa7MqwTwPMQ Cm4U3iMXQr9q8A== -----END CERTIFICATE-----Generated at Tue Jan 13 12:32:31 2026 by rpki-client