This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json) Hash identifier: FHZRRm9QX7W9PX+AMaOipulH/KtEXUvcSImFoPHhgj8= Subject key identifier: 30:9B:9B:82:49:47:B9:F1:04:F4:91:E9:77:AE:8C:25:BC:F9:65:A9 Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27 Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27 Certificate serial: 019BAEA66558EDCF8A6518E59362D2C56ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft Manifest number: 1756 Signing time: Sun 11 Jan 2026 20:01:38 +0000 Manifest this update: Sun 11 Jan 2026 20:01:38 +0000 Manifest next update: Mon 12 Jan 2026 20:01:38 +0000 Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: BiLI55SFLjWRL5ravsBRQ2WkryMVjkjtJQMPuM9Q5/A=) 2: eIPNgPUYQZlq-n_9mt6Q4q91rPk.roa (hash: DizOEdr2TMu6P8YAoF1vtJ1S55eopXRESZDog/i+PLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:65:58:ed:cf:8a:65:18:e5:93:62:d2:c5:6e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27 Validity Not Before: Jan 11 20:01:38 2026 GMT Not After : Jan 12 20:01:38 2026 GMT Subject: CN=309b9b824947b9f104f491e977ae8c25bcf965a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:02:46:84:c3:1c:74:89:79:5b:74:81:72: d1:41:f0:33:b0:22:c5:c4:a7:68:27:bb:a3:fc:9e: 40:d8:56:b6:86:07:7d:43:20:aa:e8:69:09:1f:2e: c2:13:8f:9d:a4:eb:86:7e:0a:4a:c5:59:0a:bb:40: df:da:5f:b2:a9:27:82:08:66:77:ea:f7:ce:90:c0: 9a:6a:7a:4d:86:ca:7f:b2:e0:14:9d:04:da:7d:b6: c9:f1:f4:79:ac:c8:cc:ea:6d:d7:ed:b0:77:59:e5: c8:09:92:29:f3:e4:fc:1b:05:cd:4a:13:e4:2a:27: 09:7d:70:c0:a3:08:43:54:67:63:f8:91:44:f4:5e: c1:70:d4:a0:e4:9c:12:1d:78:39:f8:3f:fa:d2:92: af:fe:8e:ab:23:34:a9:c6:ec:30:05:85:da:b3:f1: b1:e8:2b:c4:a0:81:06:16:8c:5a:87:b5:b8:9d:65: 86:e8:fe:1f:aa:50:75:dc:80:9f:04:b4:94:a9:3c: d8:80:37:39:de:8a:4d:b9:48:ad:ae:01:e9:3f:37: 48:5e:07:68:6a:59:cf:8f:fb:4e:3b:27:26:b3:af: d2:cc:4e:71:23:6f:42:8d:48:24:cf:b8:d0:3d:af: a9:6c:ec:02:45:ec:a2:ba:e0:f1:93:4b:66:9d:5f: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9B:9B:82:49:47:B9:F1:04:F4:91:E9:77:AE:8C:25:BC:F9:65:A9 X509v3 Authority Key Identifier: keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:8d:04:7e:22:a8:0e:8b:c4:87:d0:10:e3:46:0a:fd:c5: 95:7e:a8:5b:2b:f3:e0:be:b4:4c:93:48:13:78:98:e7:5f:ce: bc:31:60:78:90:24:eb:fd:4a:b0:46:7b:24:e4:3b:2d:2f:f3: dc:f9:5c:ce:f2:9c:ba:92:70:81:0e:d2:05:67:b1:25:5d:b1: 1b:74:2c:06:43:ea:06:74:35:70:cc:27:52:34:03:fd:96:39: 7d:c1:ff:b4:6f:43:0a:c2:61:61:60:d4:e3:6a:93:7d:ec:2b: 60:23:7b:01:2e:02:eb:21:2b:24:5d:fa:3f:3e:b0:92:9d:cc: 20:4b:c4:59:7b:d0:09:1a:b4:93:65:35:c8:38:c9:a9:98:5e: 03:00:04:98:d3:a3:8b:df:e0:ec:fb:0d:ed:5e:72:db:13:e2: dd:5c:f1:b6:33:d0:a3:75:0a:c0:d8:c8:df:1c:13:1b:82:28: 62:f5:3c:4e:18:ff:7e:56:07:47:a5:52:39:da:18:89:a0:9b: a6:ce:9d:61:23:7e:86:9e:c5:6a:c6:59:ce:ed:20:2b:ab:8f: 03:ca:30:7d:d7:01:1f:af:29:48:af:12:1f:d7:72:80:93:b2: da:f1:a1:b2:ae:0d:a7:6e:79:3a:3a:44:51:dc:77:06:df:20: 9c:30:59:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupmVY7c+KZRjlk2LSxW7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWJkMzNkNGNkNDU0NjVlZmE1MGZhYTgyNGZiODEyYzQx NzNhMjcwHhcNMjYwMTExMjAwMTM4WhcNMjYwMTEyMjAwMTM4WjAzMTEwLwYDVQQD EygzMDliOWI4MjQ5NDdiOWYxMDRmNDkxZTk3N2FlOGMyNWJjZjk2NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu08CRoTDHHSJeVt0gXLRQfAzsCLF xKdoJ7uj/J5A2Fa2hgd9QyCq6GkJHy7CE4+dpOuGfgpKxVkKu0Df2l+yqSeCCGZ3 6vfOkMCaanpNhsp/suAUnQTafbbJ8fR5rMjM6m3X7bB3WeXICZIp8+T8GwXNShPk KicJfXDAowhDVGdj+JFE9F7BcNSg5JwSHXg5+D/60pKv/o6rIzSpxuwwBYXas/Gx 6CvEoIEGFoxah7W4nWWG6P4fqlB13ICfBLSUqTzYgDc53opNuUitrgHpPzdIXgdo alnPj/tOOycms6/SzE5xI29CjUgkz7jQPa+pbOwCReyiuuDxk0tmnV+zOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCbm4JJR7nxBPSR6XeujCW8+WWpMB8GA1UdIwQY MBaAFBvr0z1M1FRl76UPqoJPuBLEFzonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDkt OGFiNWViNTU4NDczLzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xZTdiMDItODg5Yi00YTUzLWE1MDktOGFiNWViNTU4NDcz LzEvRy12VFBVelVWR1h2cFEtcWdrLTRFc1FYT2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQmNBH4i qA6LxIfQEONGCv3FlX6oWyvz4L60TJNIE3iY51/OvDFgeJAk6/1KsEZ7JOQ7LS/z 3PlczvKcupJwgQ7SBWexJV2xG3QsBkPqBnQ1cMwnUjQD/ZY5fcH/tG9DCsJhYWDU 42qTfewrYCN7AS4C6yErJF36Pz6wkp3MIEvEWXvQCRq0k2U1yDjJqZheAwAEmNOj i9/g7PsN7V5y2xPi3VzxtjPQo3UKwNjI3xwTG4IoYvU8Thj/flYHR6VSOdoYiaCb ps6dYSN+hp7FasZZzu0gK6uPA8owfdcBH68pSK8SH9dygJOy2vGhsq4Np255OjpE Udx3Bt8gnDBZRA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:58:32 2026 by rpki-client