This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json) Hash identifier: A283U+js6FI0npLLw6EXnqmjY83+DY1cH3zMGPXTAMM= Subject key identifier: 96:6A:23:01:F1:B4:1D:B1:05:3C:24:8C:8C:5C:FF:36:59:7A:A7:D2 Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8 Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8 Certificate serial: 019B958B480196DF77B6E0F40F7430F2FB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft Manifest number: 145B Signing time: Tue 06 Jan 2026 23:01:31 +0000 Manifest this update: Tue 06 Jan 2026 23:01:31 +0000 Manifest next update: Wed 07 Jan 2026 23:01:31 +0000 Files and hashes: 1: CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa (hash: 811rgV28E1K97XcQlVBf+c8AkF0NnU7urjPyYJW2uoM=) 2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: ZoiOembe3kitCWa9mLqG//bWpNnD33U5toP+9GQyEOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:8b:48:01:96:df:77:b6:e0:f4:0f:74:30:f2:fb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8 Validity Not Before: Jan 6 23:01:31 2026 GMT Not After : Jan 7 23:01:31 2026 GMT Subject: CN=966a2301f1b41db1053c248c8c5cff36597aa7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:aa:54:d4:55:39:f2:59:6b:9a:af:87:da: 27:20:49:d1:33:1b:69:7f:6b:41:c8:94:81:72:1a: 92:28:15:63:4a:1b:62:e5:43:67:5d:ed:31:28:c3: 79:1a:71:bf:ad:33:b6:51:4b:7c:e7:17:e4:13:f0: 18:99:54:7a:d7:62:e2:73:c5:2a:69:5f:de:c8:ed: 57:11:3c:f2:15:89:a1:ce:07:2d:bf:d2:aa:cf:62: b5:06:42:9d:17:48:f2:cb:1a:9d:b4:e5:df:e0:0d: 20:b9:98:cb:89:71:ff:7f:e6:b9:f0:b5:ae:dd:d4: 87:f6:9f:5f:04:5e:4d:4f:e9:e2:ba:e1:b6:64:4a: 33:bd:99:90:ce:28:67:2c:10:72:31:b4:8b:46:5c: 32:f2:47:41:bc:df:d8:d4:2d:cf:14:ea:91:fb:ad: 69:42:9d:d7:12:78:e9:cb:65:98:34:0f:02:36:69: 51:ed:e3:76:a9:2e:c3:6a:67:44:3a:0a:70:fd:97: 54:d2:7d:60:63:f9:d5:cf:21:e5:4a:cf:ea:2b:7b: 69:c2:59:46:c8:88:c0:5c:6b:a5:83:13:c4:3c:26: 80:bd:25:5d:ae:23:9c:54:fa:18:b5:06:c3:8a:84: 0c:d4:f6:3f:be:07:39:9f:93:f6:a3:09:85:06:6a: e6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:23:01:F1:B4:1D:B1:05:3C:24:8C:8C:5C:FF:36:59:7A:A7:D2 X509v3 Authority Key Identifier: keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b5:2c:34:2a:16:a1:67:99:0c:96:30:f9:94:7a:67:c2:d6: 06:4a:33:07:12:ff:43:e8:ff:6b:46:a0:fe:ac:4d:36:d1:93: b5:7e:3e:6a:d6:eb:90:80:0c:c6:e3:86:56:99:18:c4:ae:60: b9:b5:11:99:16:ad:45:bf:8d:18:4a:8f:2a:2e:01:b0:10:0b: 95:96:80:72:b5:5e:53:96:cd:fc:89:f8:ef:2e:a8:2c:6f:95: 86:15:3d:7b:81:c0:35:b0:ae:92:36:d7:72:84:c3:ee:13:09: a9:d1:9f:7a:30:4a:a3:a8:b6:d9:d1:91:85:29:5d:74:c8:7e: 66:d9:41:64:7f:d3:fc:10:e6:d0:bd:b4:f3:f9:87:a3:00:83: 1d:fa:ed:9e:81:b3:ff:11:2f:09:ea:ee:a9:19:4c:b6:79:43: e6:44:e5:af:b1:5c:84:2e:c3:c0:53:81:ff:e2:38:01:36:b6: 5c:ba:5b:d2:c5:3f:ce:94:4e:f0:63:7b:57:ee:9a:d0:36:f7: 72:6f:f5:3b:03:cb:80:27:68:71:09:d0:78:4b:0a:df:6e:e5: 72:50:a2:88:83:99:db:9a:d4:1c:af:ae:5b:93:09:5d:5c:de: e8:48:ed:80:89:87:83:0e:65:6b:c9:41:87:09:fe:46:0d:33: 00:7f:79:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVi0gBlt93tuD0D3Qw8vsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmI5NDNiOWEzZGZmNjk2ODAxNTE2YmU4NDcxYmM0NTg4 NTY2ZTgwHhcNMjYwMTA2MjMwMTMxWhcNMjYwMTA3MjMwMTMxWjAzMTEwLwYDVQQD Eyg5NjZhMjMwMWYxYjQxZGIxMDUzYzI0OGM4YzVjZmYzNjU5N2FhN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D2qVNRVOfJZa5qvh9onIEnRMxtp f2tByJSBchqSKBVjShti5UNnXe0xKMN5GnG/rTO2UUt85xfkE/AYmVR612Lic8Uq aV/eyO1XETzyFYmhzgctv9Kqz2K1BkKdF0jyyxqdtOXf4A0guZjLiXH/f+a58LWu 3dSH9p9fBF5NT+niuuG2ZEozvZmQzihnLBByMbSLRlwy8kdBvN/Y1C3PFOqR+61p Qp3XEnjpy2WYNA8CNmlR7eN2qS7DamdEOgpw/ZdU0n1gY/nVzyHlSs/qK3tpwllG yIjAXGulgxPEPCaAvSVdriOcVPoYtQbDioQM1PY/vgc5n5P2owmFBmrmwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZqIwHxtB2xBTwkjIxc/zZZeqfSMB8GA1UdIwQY MBaAFBtrlDuaPf9paAFRa+hHG8RYhWboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAt MjJkMzcxZDZjZGVlLzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAtMjJkMzcxZDZjZGVl LzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7UsNCoW oWeZDJYw+ZR6Z8LWBkozBxL/Q+j/a0ag/qxNNtGTtX4+atbrkIAMxuOGVpkYxK5g ubURmRatRb+NGEqPKi4BsBALlZaAcrVeU5bN/In47y6oLG+VhhU9e4HANbCukjbX coTD7hMJqdGfejBKo6i22dGRhSlddMh+ZtlBZH/T/BDm0L208/mHowCDHfrtnoGz /xEvCeruqRlMtnlD5kTlr7FchC7DwFOB/+I4ATa2XLpb0sU/zpRO8GN7V+6a0Db3 cm/1OwPLgCdocQnQeEsK327lclCiiIOZ25rUHK+uW5MJXVze6EjtgImHgw5la8lB hwn+Rg0zAH95ag== -----END CERTIFICATE-----Generated at Wed Jan 7 06:58:29 2026 by rpki-client