This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json) Hash identifier: XHD7Dmp3opBtyuk+98Ix9PWLHySsgENIM5VPFGSLSSs= Subject key identifier: E5:93:4A:81:2F:54:B4:E1:A1:6C:81:BD:F5:7E:3E:86:97:FA:D8:B1 Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Certificate serial: 019BA0B365C081305E4773800DAD3D181D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft Manifest number: 111E Signing time: Fri 09 Jan 2026 03:01:10 +0000 Manifest this update: Fri 09 Jan 2026 03:01:10 +0000 Manifest next update: Sat 10 Jan 2026 03:01:10 +0000 Files and hashes: 1: VlW6EtyMaH795hvnaMozw2BfYQQ.roa (hash: my2rC1+ycBVaR38Z3DLdakYhoWnomEP/kZgHcgk7zUE=) 2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: 1gvXZ3OiK/6IS8yWSsBYyPXdTF5ub0Z1Uts4UbrIe7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a0:b3:65:c0:81:30:5e:47:73:80:0d:ad:3d:18:1d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Validity Not Before: Jan 9 03:01:10 2026 GMT Not After : Jan 10 03:01:10 2026 GMT Subject: CN=e5934a812f54b4e1a16c81bdf57e3e8697fad8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:92:93:3f:e2:7f:f8:51:8f:76:24:3c:cc: be:e5:ba:34:4a:b5:2a:92:fc:a3:a5:4e:a8:2d:07: b9:cb:d7:b7:6b:dc:ea:c2:5a:3d:f4:8f:c7:63:01: d5:64:0d:1c:1d:07:90:40:09:63:e9:d8:4d:06:e5: 08:22:16:3a:b0:c9:60:2b:6a:f1:fb:78:e9:ee:86: 6b:2c:d7:60:ea:cb:43:b2:2e:6f:88:0a:32:db:33: 09:40:14:13:e1:2f:35:7e:db:ce:cc:7e:30:c2:3e: c1:55:12:eb:5e:d1:7c:a6:8c:3d:9a:48:99:8a:f9: 17:85:22:77:fe:1f:13:f1:25:86:b4:ec:75:ac:bd: 81:b7:ca:ad:62:34:c7:b4:ba:d8:e3:58:94:d0:98: 28:c2:a5:80:12:60:c8:bf:de:fa:e9:5d:c1:66:ea: ae:95:ce:83:98:29:a8:c6:ac:03:8f:cf:69:18:58: 2c:6f:ad:92:1f:98:66:7d:a7:23:1b:09:ed:72:e9: a4:43:7f:60:4f:f0:b7:16:72:1b:95:19:e1:5d:17: bd:38:65:db:b7:41:17:a8:50:85:47:01:c4:ff:0d: b5:51:71:6c:b3:76:db:85:d0:66:57:15:23:8a:c0: 12:65:db:14:e0:d7:a8:a3:32:b6:d8:c0:6c:0e:97: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:93:4A:81:2F:54:B4:E1:A1:6C:81:BD:F5:7E:3E:86:97:FA:D8:B1 X509v3 Authority Key Identifier: keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:52:9c:85:f6:86:73:b5:1e:62:47:90:9b:c2:32:8b:ad:2c: db:b2:0c:43:73:3f:df:bc:7a:74:3d:10:4c:7a:1d:3e:f0:0b: 11:2c:54:dd:ca:69:a9:b3:0e:47:81:63:48:5d:7b:53:85:8c: 57:51:be:36:b9:e2:90:04:02:1a:9c:19:93:f6:33:54:17:57: 28:e8:bd:63:64:e4:d5:53:46:c1:9c:6e:4e:47:33:f1:55:30: 6e:3e:86:81:83:4e:c5:34:64:ff:18:67:41:50:4b:5a:aa:b1: 79:7a:54:43:14:97:47:87:ca:33:43:38:cc:54:e7:f5:05:6c: 6c:9f:ed:66:7e:a3:5d:ba:90:45:89:1d:7a:24:c4:c4:29:8b: 7c:6b:99:28:23:55:0f:64:95:b1:ca:a6:15:0a:8b:22:55:2c: 46:cc:12:87:66:90:2d:ae:85:bb:95:da:c9:72:91:8e:f3:a1: 7f:56:0b:ba:17:38:5d:fc:d6:ed:25:a7:15:69:d2:9e:ff:86: 28:43:64:97:78:67:81:3b:56:91:df:3b:29:b8:95:23:c8:f7: af:72:85:ee:7a:93:4f:ab:85:92:79:fe:24:6d:64:7a:48:cf: 94:63:35:75:e6:49:fe:33:c8:cb:c7:c0:fc:14:a4:9a:91:7c: 80:30:9b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZugs2XAgTBeR3OADa09GB1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzZjYTE1MWVkNGMzMjNkNDk4ZjA2ZGQ3YzVhZTM5NGNl YWM1OWYwHhcNMjYwMTA5MDMwMTEwWhcNMjYwMTEwMDMwMTEwWjAzMTEwLwYDVQQD EyhlNTkzNGE4MTJmNTRiNGUxYTE2YzgxYmRmNTdlM2U4Njk3ZmFkOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3GSkz/if/hRj3YkPMy+5bo0SrUq kvyjpU6oLQe5y9e3a9zqwlo99I/HYwHVZA0cHQeQQAlj6dhNBuUIIhY6sMlgK2rx +3jp7oZrLNdg6stDsi5viAoy2zMJQBQT4S81ftvOzH4wwj7BVRLrXtF8pow9mkiZ ivkXhSJ3/h8T8SWGtOx1rL2Bt8qtYjTHtLrY41iU0JgowqWAEmDIv9766V3BZuqu lc6DmCmoxqwDj89pGFgsb62SH5hmfacjGwntcumkQ39gT/C3FnIblRnhXRe9OGXb t0EXqFCFRwHE/w21UXFss3bbhdBmVxUjisASZdsU4NeoozK22MBsDpfbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWTSoEvVLThoWyBvfV+PoaX+tixMB8GA1UdIwQY MBaAFIM2yhUe1MMj1JjwbdfFrjlM6sWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTIt OTE3OTUzMTk4NDVjLzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTItOTE3OTUzMTk4NDVj LzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlKchfaG c7UeYkeQm8Iyi60s27IMQ3M/37x6dD0QTHodPvALESxU3cppqbMOR4FjSF17U4WM V1G+NrnikAQCGpwZk/YzVBdXKOi9Y2Tk1VNGwZxuTkcz8VUwbj6GgYNOxTRk/xhn QVBLWqqxeXpUQxSXR4fKM0M4zFTn9QVsbJ/tZn6jXbqQRYkdeiTExCmLfGuZKCNV D2SVscqmFQqLIlUsRswSh2aQLa6Fu5XayXKRjvOhf1YLuhc4XfzW7SWnFWnSnv+G KENkl3hngTtWkd87KbiVI8j3r3KF7nqTT6uFknn+JG1kekjPlGM1deZJ/jPIy8fA /BSkmpF8gDCbNw== -----END CERTIFICATE-----Generated at Fri Jan 9 08:24:07 2026 by rpki-client