This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json) Hash identifier: DgtoZWuuCp+xff1nabiBwLZaksTywIHntzYBeFuv4Uw= Subject key identifier: 1D:19:B3:D5:1F:70:70:DA:13:FD:43:1B:0F:C2:0B:C5:28:5B:B8:EA Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4 Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4 Certificate serial: 019B96302FB422DDF37B0BF4FB626A1E9B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft Manifest number: 132D Signing time: Wed 07 Jan 2026 02:01:38 +0000 Manifest this update: Wed 07 Jan 2026 02:01:38 +0000 Manifest next update: Thu 08 Jan 2026 02:01:38 +0000 Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: rbLTkNhTLB7Wo+siiZW4ECyF0GUajpI+61hJCB7xA7s=) 2: WssjpVtFq9SbbTrTZ-iHVvx9vP0.roa (hash: 8JmzB8yBULopBubbEFm3Pf3YeySRdQmevymiDMry08o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:30:2f:b4:22:dd:f3:7b:0b:f4:fb:62:6a:1e:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4 Validity Not Before: Jan 7 02:01:38 2026 GMT Not After : Jan 8 02:01:38 2026 GMT Subject: CN=1d19b3d51f7070da13fd431b0fc20bc5285bb8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:28:49:da:86:4b:0c:0e:4c:1b:a4:92:d0: 66:58:48:de:66:a8:f2:b4:7d:66:90:6a:57:36:27: 1c:c5:9a:85:10:0f:12:8b:ba:84:a6:ec:04:b4:88: c0:a7:89:dd:f3:34:33:e1:39:3b:45:a3:89:8d:b4: d8:3b:5d:a2:db:57:db:05:50:dc:f1:97:a4:1e:98: 5d:b2:d0:ef:3e:df:2e:50:f2:37:ab:b4:4c:ce:bb: c5:3f:72:f3:c7:b1:c1:2e:09:9f:17:c9:1b:84:dc: 85:f3:c3:65:26:ba:70:6b:bd:fd:26:12:c2:a8:de: 1d:a4:a8:ec:15:69:99:1d:0d:0e:bc:03:42:cb:23: 86:c4:06:f2:be:89:99:6d:43:9a:2a:b8:6c:29:33: 75:43:61:9e:d6:1c:fd:24:0b:69:57:a0:60:05:13: 6c:ab:71:59:ea:77:6a:42:fa:90:9a:5e:df:f0:f6: e1:07:df:ca:2b:5b:be:61:07:2c:dd:0b:31:97:0e: 2a:b6:d5:9d:7a:6a:c9:02:e9:ac:78:27:1e:12:aa: db:5f:b1:9c:80:ee:9a:f0:37:10:19:de:ed:23:17: 4b:5d:44:56:68:33:44:80:88:5e:d9:4a:c6:a0:61: f9:07:f9:e4:f1:93:5d:17:33:5e:0c:e0:73:ea:da: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:19:B3:D5:1F:70:70:DA:13:FD:43:1B:0F:C2:0B:C5:28:5B:B8:EA X509v3 Authority Key Identifier: keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d6:3a:b9:6f:9b:2c:c8:a4:5d:40:b3:26:ef:06:a9:16:84: a5:ef:05:f7:45:74:80:85:fd:8e:a4:cf:3d:8c:1c:79:ae:66: 43:8f:8f:87:c8:fe:4e:b1:75:2f:bf:ca:dc:f8:04:7d:87:e0: c8:06:17:02:ad:15:ab:7b:bd:ae:9d:79:58:01:ca:e4:c1:96: 43:8a:37:71:c3:4d:72:d1:27:a2:96:54:71:d3:fd:06:55:37: 2a:b9:d2:bb:d9:fd:43:40:d9:53:aa:d4:c8:d2:c8:14:5c:a3: c2:a7:79:e1:af:1f:67:71:8a:73:79:e5:8b:93:be:51:34:d3: 9b:70:8e:90:d8:ca:35:3a:79:6a:50:34:24:1d:7d:b7:51:52: 42:1f:7d:b9:54:ac:c5:14:cc:be:ae:c3:6c:02:9d:4d:71:d8: f7:19:97:d4:47:0d:50:e9:f2:4b:09:2d:6e:d2:28:32:3a:52: e8:1c:5a:ba:6a:76:e3:a5:99:18:c8:41:67:78:c2:32:29:95: 60:25:56:55:1f:79:99:f8:94:a4:d3:27:13:1c:c6:6d:06:e3: 78:a1:2b:ae:30:3a:a5:8a:af:d1:71:87:04:9c:d8:60:20:c3: 43:14:d4:8c:da:68:b0:e8:25:19:31:88:80:bb:f4:ad:b2:a2: 1b:52:56:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWMC+0It3zewv0+2JqHptYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx MzgzYjQwHhcNMjYwMTA3MDIwMTM4WhcNMjYwMTA4MDIwMTM4WjAzMTEwLwYDVQQD EygxZDE5YjNkNTFmNzA3MGRhMTNmZDQzMWIwZmMyMGJjNTI4NWJiOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU0oSdqGSwwOTBukktBmWEjeZqjy tH1mkGpXNiccxZqFEA8Si7qEpuwEtIjAp4nd8zQz4Tk7RaOJjbTYO12i21fbBVDc 8ZekHphdstDvPt8uUPI3q7RMzrvFP3Lzx7HBLgmfF8kbhNyF88NlJrpwa739JhLC qN4dpKjsFWmZHQ0OvANCyyOGxAbyvomZbUOaKrhsKTN1Q2Ge1hz9JAtpV6BgBRNs q3FZ6ndqQvqQml7f8PbhB9/KK1u+YQcs3Qsxlw4qttWdemrJAumseCceEqrbX7Gc gO6a8DcQGd7tIxdLXURWaDNEgIhe2UrGoGH5B/nk8ZNdFzNeDOBz6to+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0Zs9UfcHDaE/1DGw/CC8UoW7jqMB8GA1UdIwQY MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4 LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstY6uW+b LMikXUCzJu8GqRaEpe8F90V0gIX9jqTPPYwcea5mQ4+Ph8j+TrF1L7/K3PgEfYfg yAYXAq0Vq3u9rp15WAHK5MGWQ4o3ccNNctEnopZUcdP9BlU3KrnSu9n9Q0DZU6rU yNLIFFyjwqd54a8fZ3GKc3nli5O+UTTTm3COkNjKNTp5alA0JB19t1FSQh99uVSs xRTMvq7DbAKdTXHY9xmX1EcNUOnySwktbtIoMjpS6Bxaump246WZGMhBZ3jCMimV YCVWVR95mfiUpNMnExzGbQbjeKErrjA6pYqv0XGHBJzYYCDDQxTUjNposOglGTGI gLv0rbKiG1JW3Q== -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:16 2026 by rpki-client