This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json) Hash identifier: rThhAMAVB9cAv14O05bD/A4dP+2e2m6L3F4YVAzWqmI= Subject key identifier: F1:67:A5:9D:00:A2:DD:A1:86:D0:98:88:16:5F:70:15:16:F4:B0:CB Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019BAF13F3004B02BA3C7EDE77AE4697F3A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft Manifest number: 17DE Signing time: Sun 11 Jan 2026 22:01:18 +0000 Manifest this update: Sun 11 Jan 2026 22:01:18 +0000 Manifest next update: Mon 12 Jan 2026 22:01:18 +0000 Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=) 2: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=) 3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: H9FdPlY3BlAhIhaI0w2vvOuf0z/ds9ZwiQrssNZ7qUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:f3:00:4b:02:ba:3c:7e:de:77:ae:46:97:f3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Jan 11 22:01:18 2026 GMT Not After : Jan 12 22:01:18 2026 GMT Subject: CN=f167a59d00a2dda186d09888165f701516f4b0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:d9:f4:c3:6b:fc:df:ee:3f:d7:cf:af:97: 43:70:59:ef:33:67:8b:82:76:a3:79:39:63:d7:41: a8:42:79:e7:af:f4:e0:1d:6e:f6:2f:d3:64:ee:dc: 41:5c:a0:68:16:20:49:0e:f3:04:cf:ce:43:15:2a: 2e:fe:65:14:99:eb:89:bb:aa:15:16:27:07:c3:32: d1:a7:2e:3b:0e:6f:8d:99:3b:d8:42:a0:58:56:a8: f5:72:05:9b:fc:1b:37:a3:9f:94:12:2d:d3:40:2a: da:e6:0b:cb:27:21:04:1b:2f:7d:35:14:e1:74:2a: a0:10:b1:3f:e1:6c:91:40:c8:5d:50:67:74:72:94: 6e:cf:a8:17:49:b7:c8:55:a0:70:6a:d8:f5:ab:e6: 63:ef:56:55:df:72:a9:66:47:f8:24:e7:1d:e2:5c: 81:98:4e:83:f5:cf:53:d5:68:96:51:c0:51:22:0c: 8e:63:93:e8:73:1d:fd:e5:5d:2b:83:7c:8e:dc:1b: bf:66:3a:39:21:05:41:5d:31:e4:59:15:89:4f:ac: 0d:cd:f2:c9:50:40:5b:8c:9f:6d:08:d1:7c:02:24: 31:52:d7:b2:9c:c8:aa:89:c2:48:68:5a:58:3c:77: 2a:ba:f0:97:c7:35:ef:ee:64:75:39:32:39:c7:40: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:67:A5:9D:00:A2:DD:A1:86:D0:98:88:16:5F:70:15:16:F4:B0:CB X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:60:50:fc:be:ba:96:7a:ea:e3:e9:14:14:ab:a7:8f:f5: e6:6f:6c:a3:ef:14:ec:c2:25:af:52:b1:94:3f:b8:c6:05:52: 86:08:aa:2b:70:78:c5:a7:4f:96:11:a8:b6:ab:32:63:69:72: 18:8d:1f:e3:f9:45:67:1d:49:c6:09:f9:18:ab:b2:53:54:20: f1:9f:08:42:fa:e2:44:ac:2c:ce:38:64:97:90:3e:88:ba:f5: ef:b7:ea:af:df:5b:0d:0a:97:c1:86:ea:21:ad:d3:62:fa:0d: d3:18:b0:a8:42:f2:f6:74:cd:0c:8f:06:f2:6e:32:c7:10:dd: 9b:78:06:8e:ae:d6:82:98:b8:d9:53:7f:16:0b:98:2d:06:89: a1:b3:50:b6:5a:cc:1d:df:7a:e1:54:33:8d:5a:bf:7a:eb:0e: ed:48:07:0b:d5:b0:d2:1f:ce:fe:be:fb:61:c0:e0:68:de:2d: 6e:ad:c2:e7:a4:b9:db:d3:ce:d9:ee:1f:19:dd:8b:b7:bf:5e: e8:be:e6:0d:bc:23:c1:57:44:f9:bf:60:08:95:70:0b:a0:98: 2a:98:92:a9:31:d9:fa:e1:60:0c:a4:5a:c2:59:b9:9c:b2:ae: 8b:26:4a:d8:93:ed:fa:ee:f1:71:86:49:ee:e2:ad:fb:87:43: c2:a5:5d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE/MASwK6PH7ed65Gl/OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjYwMTExMjIwMTE4WhcNMjYwMTEyMjIwMTE4WjAzMTEwLwYDVQQD EyhmMTY3YTU5ZDAwYTJkZGExODZkMDk4ODgxNjVmNzAxNTE2ZjRiMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnufZ9MNr/N/uP9fPr5dDcFnvM2eL gnajeTlj10GoQnnnr/TgHW72L9Nk7txBXKBoFiBJDvMEz85DFSou/mUUmeuJu6oV FicHwzLRpy47Dm+NmTvYQqBYVqj1cgWb/Bs3o5+UEi3TQCra5gvLJyEEGy99NRTh dCqgELE/4WyRQMhdUGd0cpRuz6gXSbfIVaBwatj1q+Zj71ZV33KpZkf4JOcd4lyB mE6D9c9T1WiWUcBRIgyOY5Pocx395V0rg3yO3Bu/Zjo5IQVBXTHkWRWJT6wNzfLJ UEBbjJ9tCNF8AiQxUteynMiqicJIaFpYPHcquvCXxzXv7mR1OTI5x0DXuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFnpZ0Aot2hhtCYiBZfcBUW9LDLMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG5gUPy+ upZ66uPpFBSrp4/15m9so+8U7MIlr1KxlD+4xgVShgiqK3B4xadPlhGotqsyY2ly GI0f4/lFZx1Jxgn5GKuyU1Qg8Z8IQvriRKwszjhkl5A+iLr177fqr99bDQqXwYbq Ia3TYvoN0xiwqELy9nTNDI8G8m4yxxDdm3gGjq7Wgpi42VN/FguYLQaJobNQtlrM Hd964VQzjVq/eusO7UgHC9Ww0h/O/r77YcDgaN4tbq3C56S529PO2e4fGd2Lt79e 6L7mDbwjwVdE+b9gCJVwC6CYKpiSqTHZ+uFgDKRawlm5nLKuiyZK2JPt+u7xcYZJ 7uKt+4dDwqVdPA== -----END CERTIFICATE-----Generated at Mon Jan 12 02:01:10 2026 by rpki-client