This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json) Hash identifier: 4KZLpY7PwYwtWwdvZeInkQbJSJlWFowsc1cID6LEZz8= Subject key identifier: 96:B5:0B:3B:5C:0D:2C:51:4B:C3:05:99:04:D0:FD:30:09:51:6C:3B Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26 Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626 Certificate serial: 019BB54D1C31254C14E0C6698F70C0AF8FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft Manifest number: 17C4 Signing time: Tue 13 Jan 2026 03:01:28 +0000 Manifest this update: Tue 13 Jan 2026 03:01:28 +0000 Manifest next update: Wed 14 Jan 2026 03:01:28 +0000 Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: oftgkew14I+tbsaizJZXd5nzsARzhcMWQJE16BYyUcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:4d:1c:31:25:4c:14:e0:c6:69:8f:70:c0:af:8f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626 Validity Not Before: Jan 13 03:01:28 2026 GMT Not After : Jan 14 03:01:28 2026 GMT Subject: CN=96b50b3b5c0d2c514bc3059904d0fd3009516c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:5d:95:e8:d2:3d:2e:ff:e0:af:b3:38:7d: 3d:d5:99:35:7b:ae:74:fb:ba:9d:51:ba:56:0a:a8: fb:55:c3:b1:39:6c:b6:65:a9:8e:e8:e2:5f:01:23: e7:11:e3:e0:87:f2:94:92:36:e5:4a:11:73:95:6d: b4:6d:a4:6a:b9:49:2e:7d:fa:70:64:2f:67:20:2b: 09:4c:32:3e:ba:ae:32:15:10:e2:94:cb:b6:7c:6c: 6d:a2:95:16:be:36:8e:b3:76:46:5b:23:7e:33:fb: 58:78:e5:b6:87:68:df:65:34:04:3a:eb:06:88:d1: 16:1d:51:66:48:9f:c3:c0:75:24:3f:4e:ea:10:90: d9:12:c9:a1:c0:49:4f:74:8d:ab:e1:b7:6a:dc:13: 28:ef:1a:12:d8:5b:a9:1b:5e:d9:8a:6d:b1:3a:3c: 0a:72:7d:fc:2a:13:82:e0:a8:5b:c3:6c:df:6a:16: 22:26:22:ec:10:ad:3e:bf:d9:ea:75:50:83:62:b9: f2:5a:be:5b:68:23:51:34:19:17:68:10:6f:d3:8b: fa:88:ab:ba:4c:04:b5:df:78:1c:ae:81:dd:2d:fa: 6b:25:c4:9b:7b:63:9d:e9:10:9a:10:b2:db:21:b8: c6:3e:e8:25:c9:7a:16:e8:36:a3:f6:b5:86:d7:06: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B5:0B:3B:5C:0D:2C:51:4B:C3:05:99:04:D0:FD:30:09:51:6C:3B X509v3 Authority Key Identifier: keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:77:c5:10:72:71:ac:a4:71:cf:98:05:c6:10:45:42:51:01: 31:9e:4a:b2:b0:af:17:85:8d:7d:cd:2b:10:6b:d3:4b:21:8c: 14:1c:a6:dd:95:63:c7:ba:11:91:83:d3:84:12:12:b8:de:12: 3a:a7:c8:11:6c:e2:30:10:24:bb:5e:a1:03:a1:51:f5:52:67: f9:50:1c:7d:4d:d1:36:33:5a:93:ad:7a:14:23:b8:a2:0a:95: 7b:93:84:dc:c3:a9:9c:be:a9:03:48:ce:69:23:62:c0:91:53: 67:25:12:aa:29:46:c3:40:6f:ad:a5:71:f8:24:92:0b:ad:97: d5:f2:d7:06:e4:d3:7b:40:2e:07:5f:e0:73:ef:68:47:e1:b1: 53:d4:3f:ac:8e:66:30:5e:fc:23:ef:87:8e:75:ca:58:37:eb: dc:a6:b7:50:9e:8b:16:5d:e3:48:c2:4c:0f:05:94:be:4e:d0: dc:33:7b:c1:ea:cd:ef:79:9f:02:21:dc:c2:69:39:5f:96:75: d5:3b:66:d5:fa:d2:9e:67:4d:e4:ae:cb:96:8a:4b:0d:35:cc: bd:86:7e:49:db:b2:38:93:72:5c:1c:87:04:51:87:84:cf:83: 47:2a:38:74:42:29:b0:24:d7:5b:43:ef:8a:17:0a:6a:7e:72: 50:0f:33:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1TRwxJUwU4MZpj3DAr4//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2 Yjc2MjYwHhcNMjYwMTEzMDMwMTI4WhcNMjYwMTE0MDMwMTI4WjAzMTEwLwYDVQQD Eyg5NmI1MGIzYjVjMGQyYzUxNGJjMzA1OTkwNGQwZmQzMDA5NTE2YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOldlejSPS7/4K+zOH091Zk1e650 +7qdUbpWCqj7VcOxOWy2ZamO6OJfASPnEePgh/KUkjblShFzlW20baRquUkuffpw ZC9nICsJTDI+uq4yFRDilMu2fGxtopUWvjaOs3ZGWyN+M/tYeOW2h2jfZTQEOusG iNEWHVFmSJ/DwHUkP07qEJDZEsmhwElPdI2r4bdq3BMo7xoS2FupG17Zim2xOjwK cn38KhOC4Khbw2zfahYiJiLsEK0+v9nqdVCDYrnyWr5baCNRNBkXaBBv04v6iKu6 TAS133gcroHdLfprJcSbe2Od6RCaELLbIbjGPuglyXoW6Daj9rWG1waA+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa1CztcDSxRS8MFmQTQ/TAJUWw7MB8GA1UdIwQY MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnfFEHJx rKRxz5gFxhBFQlEBMZ5KsrCvF4WNfc0rEGvTSyGMFBym3ZVjx7oRkYPThBISuN4S OqfIEWziMBAku16hA6FR9VJn+VAcfU3RNjNak616FCO4ogqVe5OE3MOpnL6pA0jO aSNiwJFTZyUSqilGw0BvraVx+CSSC62X1fLXBuTTe0AuB1/gc+9oR+GxU9Q/rI5m MF78I++HjnXKWDfr3Ka3UJ6LFl3jSMJMDwWUvk7Q3DN7werN73mfAiHcwmk5X5Z1 1Ttm1frSnmdN5K7LlopLDTXMvYZ+SduyOJNyXByHBFGHhM+DRyo4dEIpsCTXW0Pv ihcKan5yUA8zbg== -----END CERTIFICATE-----Generated at Tue Jan 13 11:00:54 2026 by rpki-client