This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json) Hash identifier: MYyN84XC2EVFLCJf3dzpoDX0+FIjz+CjZZlUvhNttTQ= Subject key identifier: C1:4F:B1:C8:25:8D:D4:F8:BC:7C:16:B1:25:8C:C6:8F:06:F4:A7:47 Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee Certificate serial: 019BB0944024E97C2CB355494CA94915317F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 05:01:04 +0000 Manifest this update: Mon 12 Jan 2026 05:01:04 +0000 Manifest next update: Tue 13 Jan 2026 05:01:04 +0000 Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: eRzfC2yvqpl20TP4+dgkbXmTXUDKp4owt2WhkzrAmSk=) 2: yKhioiAI6-4jdwcerEQCLkvTbbQ.roa (hash: AKG0EdZvwdWd5/g3X8141KYxu5/oFF9spVOegmiaXd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:94:40:24:e9:7c:2c:b3:55:49:4c:a9:49:15:31:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee Validity Not Before: Jan 12 05:01:04 2026 GMT Not After : Jan 13 05:01:04 2026 GMT Subject: CN=c14fb1c8258dd4f8bc7c16b1258cc68f06f4a747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:35:68:96:36:d5:93:30:45:c5:dd:55:b0: 5e:8b:44:5e:43:ce:9d:22:e4:7b:8f:55:99:1d:58: 31:8a:43:04:d2:ea:d4:2a:b6:0c:3d:9b:44:38:50: dc:49:eb:2a:db:60:7b:4c:8b:a1:b3:79:8b:4a:36: 96:fe:d3:14:e1:ba:ee:6a:8b:1b:48:d4:4f:b0:95: 12:ac:f9:cb:0b:de:3a:90:82:07:c6:76:47:2c:12: 8d:84:09:9a:78:b7:0b:c1:14:ed:54:1f:05:5f:5d: b3:30:46:aa:c8:56:2a:02:f6:7b:75:63:ee:5b:cc: ee:16:98:ce:42:13:ed:eb:c9:86:68:29:cd:10:40: cc:95:bb:db:8e:35:82:20:18:96:79:ac:ff:86:20: 4f:d9:07:30:77:5f:5d:55:b8:6e:46:54:5c:4b:c6: fd:b6:36:8a:d0:ce:1f:2c:96:3e:87:f3:32:96:a4: f3:62:21:be:ed:5f:f2:39:8a:a5:cd:7b:b8:ca:4d: 99:aa:dc:8a:60:5a:76:12:7a:d1:bf:f9:c9:69:fe: db:74:f9:d2:14:e5:4f:80:9e:94:7c:bd:d3:e4:aa: 33:12:35:3a:04:fa:c8:6c:b7:30:d0:b0:49:cb:4f: 48:96:9e:c6:85:7a:be:18:a7:cb:8d:cb:64:67:f6: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:B1:C8:25:8D:D4:F8:BC:7C:16:B1:25:8C:C6:8F:06:F4:A7:47 X509v3 Authority Key Identifier: keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d3:d1:20:64:1d:c9:df:a2:68:b0:d2:37:7f:57:bc:d3:b2: ba:b3:f8:e1:f6:23:63:bc:ee:42:20:d0:7d:cf:fd:ae:f7:e8: db:0d:e5:75:90:e1:8d:6e:c4:64:ee:19:c0:54:52:e5:03:2f: 4d:38:b6:c7:24:90:bd:06:77:83:d8:1a:f3:bf:73:83:f6:37: b7:a2:46:59:50:c9:39:1c:a5:69:6a:3d:6d:11:0a:46:9b:6f: 04:94:de:a5:e8:3b:a3:38:8d:84:72:07:c4:4d:cf:9d:a4:32: 9c:79:7f:65:77:b6:b3:40:e8:41:f3:2b:a7:01:96:dc:c5:e5: 91:05:82:a0:b5:8c:78:3e:e0:20:d2:57:c5:f1:7d:a7:ca:6f: bc:23:3e:22:4a:a7:12:73:ed:91:3b:9e:ab:8a:4b:67:86:94: bc:03:1e:64:76:86:16:62:0a:9a:ae:43:4a:57:0f:9d:75:8b: ce:78:46:ef:f7:a6:c6:4f:29:97:66:bf:3e:f1:37:91:f0:54: a7:d4:67:5f:b9:f0:cc:07:9a:f2:55:01:36:6a:e0:e2:1e:b3: bd:2d:b7:47:0d:c7:34:c8:ef:84:d9:29:c4:7e:0d:f0:35:bf: a9:de:40:4a:93:2f:7d:e2:52:26:d7:4d:ad:2a:b5:2e:e2:5c: dd:8a:45:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwlEAk6Xwss1VJTKlJFTF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNDIxYWNlNDZjNWRkNThhMjlkNDZjZDkxZmIyOGZjMzlj NTZmZWUwHhcNMjYwMTEyMDUwMTA0WhcNMjYwMTEzMDUwMTA0WjAzMTEwLwYDVQQD EyhjMTRmYjFjODI1OGRkNGY4YmM3YzE2YjEyNThjYzY4ZjA2ZjRhNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfo1aJY21ZMwRcXdVbBei0ReQ86d IuR7j1WZHVgxikME0urUKrYMPZtEOFDcSesq22B7TIuhs3mLSjaW/tMU4bruaosb SNRPsJUSrPnLC946kIIHxnZHLBKNhAmaeLcLwRTtVB8FX12zMEaqyFYqAvZ7dWPu W8zuFpjOQhPt68mGaCnNEEDMlbvbjjWCIBiWeaz/hiBP2Qcwd19dVbhuRlRcS8b9 tjaK0M4fLJY+h/MylqTzYiG+7V/yOYqlzXu4yk2ZqtyKYFp2EnrRv/nJaf7bdPnS FOVPgJ6UfL3T5KozEjU6BPrIbLcw0LBJy09Ilp7GhXq+GKfLjctkZ/YY/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFPscgljdT4vHwWsSWMxo8G9KdHMB8GA1UdIwQY MBaAFBpCGs5Gxd1Yop1GzZH7KPw5xW/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYt N2RmZmNlMWQ2ZTJkLzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYtN2RmZmNlMWQ2ZTJk LzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNPRIGQd yd+iaLDSN39XvNOyurP44fYjY7zuQiDQfc/9rvfo2w3ldZDhjW7EZO4ZwFRS5QMv TTi2xySQvQZ3g9ga879zg/Y3t6JGWVDJORylaWo9bREKRptvBJTepeg7oziNhHIH xE3PnaQynHl/ZXe2s0DoQfMrpwGW3MXlkQWCoLWMeD7gINJXxfF9p8pvvCM+Ikqn EnPtkTueq4pLZ4aUvAMeZHaGFmIKmq5DSlcPnXWLznhG7/emxk8pl2a/PvE3kfBU p9RnX7nwzAea8lUBNmrg4h6zvS23Rw3HNMjvhNkpxH4N8DW/qd5ASpMvfeJSJtdN rSq1LuJc3YpFSQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:30:36 2026 by rpki-client