This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json) Hash identifier: jfVPnB+IhJLTEXMGYgTK9e/04UAmENtEPgpL8MVtDLI= Subject key identifier: EA:9D:B3:6D:DC:64:F1:8D:90:CA:6E:C4:93:B9:A1:CA:67:A6:12:48 Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8 Certificate serial: 019B7749424898957101A66BCF3551E99F79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft Manifest number: 17AB Signing time: Thu 01 Jan 2026 02:00:48 +0000 Manifest this update: Thu 01 Jan 2026 02:00:48 +0000 Manifest next update: Fri 02 Jan 2026 02:00:48 +0000 Files and hashes: 1: Qji-FTCQgnzWlGVff_f5I6ony7M.roa (hash: UnWSs70LgZcBG1uCBITka2HO4cPr5lx7seKqttKm19E=) 2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=) 3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: vcGxsci/QNKW+NnCrolW0JUAdWScJYgiyAG48jh9XMU=) 4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=) 5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:42:48:98:95:71:01:a6:6b:cf:35:51:e9:9f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8 Validity Not Before: Jan 1 02:00:48 2026 GMT Not After : Jan 2 02:00:48 2026 GMT Subject: CN=ea9db36ddc64f18d90ca6ec493b9a1ca67a61248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:c8:5c:77:ae:af:ba:ae:41:5c:09:df:7d: 4b:1b:83:f3:56:70:f1:64:f5:01:80:7a:d7:e5:13: c0:27:ee:62:09:00:df:78:f1:41:6f:e7:85:15:3a: fb:50:c5:0f:b4:e5:29:92:ee:60:17:cb:30:be:7b: a8:7c:c8:0f:09:dc:d6:df:e1:50:86:66:36:b3:5a: 29:de:14:d4:7a:57:4b:df:4e:17:c3:e6:e7:4f:9d: 42:52:8e:3a:e3:9c:b9:6c:26:be:4a:7a:b4:de:01: 38:1e:c1:23:db:c3:a3:c2:c1:25:dd:6b:79:82:f9: 49:ef:91:8a:85:14:69:7a:55:ed:e1:42:3b:b3:be: 91:12:6b:06:33:f0:ee:71:d3:7b:d2:97:f0:bf:7e: 30:1a:41:9a:47:c4:58:a4:99:4f:09:38:51:68:83: 9e:f5:71:ef:31:03:68:2e:4e:93:65:07:36:e4:1b: 7f:13:ae:2a:fe:df:6a:a0:5e:e5:1b:ce:3a:ea:ed: 2c:32:3a:f2:a6:16:e7:ef:6a:f6:82:ac:27:d3:9a: 62:e4:88:cb:33:d1:6b:09:3e:61:44:51:4d:c8:93: 8a:86:6e:a4:41:aa:a4:15:ff:a4:3a:24:62:f2:06: 87:c8:29:a3:20:6e:e3:5c:44:33:83:fd:14:5f:d4: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:B3:6D:DC:64:F1:8D:90:CA:6E:C4:93:B9:A1:CA:67:A6:12:48 X509v3 Authority Key Identifier: keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7f:62:ce:ff:fb:7b:d4:be:e6:58:69:6d:d2:c5:f0:1e:7c: 0c:8d:00:4d:02:f6:5c:b5:db:d2:51:a6:ec:b5:33:e7:83:3f: 23:c6:8e:18:ac:b3:20:cb:24:b7:37:35:ae:9c:d0:8a:e0:4f: 6b:89:8e:87:bc:ba:48:c9:95:bc:1e:77:33:28:c4:83:39:8c: a3:bb:30:f7:ca:17:0c:86:43:f3:43:c3:0e:54:27:ab:7f:1f: 5f:47:1e:72:ce:f0:d0:3e:79:8c:f2:d0:ad:fa:f8:cc:c4:80: 7f:79:e6:ea:ee:87:4d:9c:1f:d7:ce:2c:f9:e2:99:e5:d8:28: c4:f0:73:8d:e8:90:da:0c:17:2b:05:4c:bc:0a:a5:88:65:5d: c2:44:74:df:c1:7c:d6:b9:ca:49:a3:63:69:cd:12:62:5d:b0: 5a:a3:2d:79:a1:31:a6:6a:48:9c:bd:53:f9:b6:dd:9a:dc:15: ec:88:d8:4c:82:db:fd:0b:be:72:84:a1:33:11:62:17:5b:d3: fb:19:3a:57:54:5d:08:64:1b:bb:fe:fb:ae:f2:06:9f:59:37: 73:f8:d6:1c:66:87:3f:82:18:40:a0:69:8e:5c:e6:2b:ee:66: bc:87:5e:76:ef:f8:1a:0c:29:de:7f:9e:f9:56:ab:ba:fa:54: a2:3e:31:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SUJImJVxAaZrzzVR6Z95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj ZWU0ZDgwHhcNMjYwMTAxMDIwMDQ4WhcNMjYwMTAyMDIwMDQ4WjAzMTEwLwYDVQQD EyhlYTlkYjM2ZGRjNjRmMThkOTBjYTZlYzQ5M2I5YTFjYTY3YTYxMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfvIXHeur7quQVwJ331LG4PzVnDx ZPUBgHrX5RPAJ+5iCQDfePFBb+eFFTr7UMUPtOUpku5gF8swvnuofMgPCdzW3+FQ hmY2s1op3hTUeldL304Xw+bnT51CUo4645y5bCa+Snq03gE4HsEj28OjwsEl3Wt5 gvlJ75GKhRRpelXt4UI7s76REmsGM/DucdN70pfwv34wGkGaR8RYpJlPCThRaIOe 9XHvMQNoLk6TZQc25Bt/E64q/t9qoF7lG8466u0sMjryphbn72r2gqwn05pi5IjL M9FrCT5hRFFNyJOKhm6kQaqkFf+kOiRi8gaHyCmjIG7jXEQzg/0UX9QkiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqds23cZPGNkMpuxJO5ocpnphJIMB8GA1UdIwQY MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5 LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH9izv/7 e9S+5lhpbdLF8B58DI0ATQL2XLXb0lGm7LUz54M/I8aOGKyzIMsktzc1rpzQiuBP a4mOh7y6SMmVvB53MyjEgzmMo7sw98oXDIZD80PDDlQnq38fX0cecs7w0D55jPLQ rfr4zMSAf3nm6u6HTZwf184s+eKZ5dgoxPBzjeiQ2gwXKwVMvAqliGVdwkR038F8 1rnKSaNjac0SYl2wWqMteaExpmpInL1T+bbdmtwV7IjYTILb/Qu+coShMxFiF1vT +xk6V1RdCGQbu/77rvIGn1k3c/jWHGaHP4IYQKBpjlzmK+5mvIdedu/4Ggwp3n+e +VaruvpUoj4xDw== -----END CERTIFICATE-----Generated at Thu Jan 1 03:57:17 2026 by rpki-client