This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json) Hash identifier: 2opeIs+Yyvw8FsbDW44B0XFrjlG9Bi6zyhUmaPtkzV0= Subject key identifier: 08:52:22:D3:71:DC:F8:93:8E:CC:05:B9:DE:E8:42:4D:9E:93:DA:8C Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Certificate serial: 019B8A6246590BD015435E7960321328CE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft Manifest number: 17B7 Signing time: Sun 04 Jan 2026 19:00:54 +0000 Manifest this update: Sun 04 Jan 2026 19:00:54 +0000 Manifest next update: Mon 05 Jan 2026 19:00:54 +0000 Files and hashes: 1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=) 2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=) 3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: FeWyRVI2ZB34qOHfcZkYLb4Vqlk6BdyPSGvbbe+JJUQ=) 4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:62:46:59:0b:d0:15:43:5e:79:60:32:13:28:ce:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Validity Not Before: Jan 4 19:00:54 2026 GMT Not After : Jan 5 19:00:54 2026 GMT Subject: CN=085222d371dcf8938ecc05b9dee8424d9e93da8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:91:1a:20:e3:72:cd:11:a7:b3:a5:58:0f: 7f:aa:33:9e:ae:e5:a8:7d:b6:d1:0a:dd:b9:7a:7b: 49:c2:28:4d:85:9d:b1:be:7c:b8:5f:f3:b8:29:f6: 49:74:44:54:36:74:68:b3:bf:1f:c2:45:86:19:c0: e0:1c:c7:9b:0a:5c:ba:5d:83:6b:2f:d6:42:6d:b8: d8:f1:2d:07:08:6f:ff:06:88:20:87:02:fc:a4:a4: 38:ee:28:99:57:74:12:5e:a0:dd:98:3c:9c:ee:fd: aa:d4:6e:95:d7:1d:f3:f8:d8:08:23:74:08:9f:ac: a1:3d:09:11:f8:9b:73:4e:20:a4:5f:0d:8a:d2:64: f9:3e:bf:f9:b5:bb:94:f8:f3:83:6f:0b:36:74:ef: f7:32:c0:2e:5f:89:3c:d6:52:b6:7c:a1:48:86:de: 27:30:ee:4c:b1:68:cc:e5:d5:df:ce:a1:ab:08:55: f4:86:18:f0:7e:d3:13:4e:ed:5b:0e:d8:eb:2f:b5: 32:f3:46:68:73:93:b2:5c:c3:08:d9:78:b6:71:a6: 98:b6:59:93:25:53:37:8c:b8:f3:44:00:83:7e:62: 59:0d:43:cd:e6:33:a2:28:d5:c1:c9:c6:d2:39:0d: ad:07:7f:75:87:a8:e2:b9:33:14:fa:d7:f2:91:55: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:52:22:D3:71:DC:F8:93:8E:CC:05:B9:DE:E8:42:4D:9E:93:DA:8C X509v3 Authority Key Identifier: keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b2:7d:4b:45:9f:f4:87:6e:63:80:e4:8f:56:de:e9:e3:59: 67:cb:9f:0a:93:24:a5:7f:7e:8b:69:b8:15:1f:df:41:5d:df: 85:c2:43:7a:4e:41:b4:75:28:a3:bf:8a:39:83:01:85:e7:ec: 16:fe:f0:ad:b3:7f:8d:00:df:41:08:04:8f:e4:02:51:91:19: 0d:a1:5d:05:ed:e9:ed:40:a6:68:18:f6:5b:a1:22:c7:c1:66: c7:9b:cd:2c:16:56:cc:b1:6c:68:d0:84:1c:65:2c:03:09:28: 90:59:ff:57:ac:3f:23:3a:09:93:b9:14:04:2f:cc:4e:6b:c6: e7:84:4a:b6:ff:83:bb:1a:08:7d:78:3a:a9:e7:c5:e9:ca:d0: 5a:7e:36:11:ac:a0:89:12:f8:51:4d:b0:6b:17:48:c8:35:38: 39:f9:d9:44:1b:ed:37:97:ba:c0:c6:04:5b:d0:9f:15:7e:8a: c8:ad:4b:06:fe:d4:e1:4b:03:da:f7:f2:3b:26:26:b7:67:3b: c7:d9:89:98:bc:ab:bd:17:0a:0f:7f:16:a8:53:3f:dc:74:78: f8:e5:20:dc:82:63:f2:cc:26:13:bd:59:63:4b:ee:af:fd:ae: 17:15:99:da:75:65:11:74:1a:2f:32:38:49:be:ac:7c:76:c1: 6d:af:b9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKYkZZC9AVQ155YDITKM5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx NGM1NzEwHhcNMjYwMTA0MTkwMDU0WhcNMjYwMTA1MTkwMDU0WjAzMTEwLwYDVQQD EygwODUyMjJkMzcxZGNmODkzOGVjYzA1YjlkZWU4NDI0ZDllOTNkYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHaRGiDjcs0Rp7OlWA9/qjOeruWo fbbRCt25entJwihNhZ2xvny4X/O4KfZJdERUNnRos78fwkWGGcDgHMebCly6XYNr L9ZCbbjY8S0HCG//BogghwL8pKQ47iiZV3QSXqDdmDyc7v2q1G6V1x3z+NgII3QI n6yhPQkR+JtzTiCkXw2K0mT5Pr/5tbuU+PODbws2dO/3MsAuX4k81lK2fKFIht4n MO5MsWjM5dXfzqGrCFX0hhjwftMTTu1bDtjrL7Uy80Zoc5OyXMMI2Xi2caaYtlmT JVM3jLjzRACDfmJZDUPN5jOiKNXBycbSOQ2tB391h6jiuTMU+tfykVVZZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhSItNx3PiTjswFud7oQk2ek9qMMB8GA1UdIwQY MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2 LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7J9S0Wf 9IduY4Dkj1be6eNZZ8ufCpMkpX9+i2m4FR/fQV3fhcJDek5BtHUoo7+KOYMBhefs Fv7wrbN/jQDfQQgEj+QCUZEZDaFdBe3p7UCmaBj2W6Eix8Fmx5vNLBZWzLFsaNCE HGUsAwkokFn/V6w/IzoJk7kUBC/MTmvG54RKtv+DuxoIfXg6qefF6crQWn42Eayg iRL4UU2waxdIyDU4OfnZRBvtN5e6wMYEW9CfFX6KyK1LBv7U4UsD2vfyOyYmt2c7 x9mJmLyrvRcKD38WqFM/3HR4+OUg3IJj8swmE71ZY0vur/2uFxWZ2nVlEXQaLzI4 Sb6sfHbBba+5nA== -----END CERTIFICATE-----Generated at Mon Jan 5 03:06:59 2026 by rpki-client