This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json) Hash identifier: qE5hVtyn7PMc/rOOovWhLowFjbqtb7F8ibwmmu8hcO8= Subject key identifier: 1C:C8:3D:A4:9B:54:EC:B9:1D:25:B8:B9:D2:70:F6:72:20:4F:52:6B Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff Certificate serial: 019BAEDCCAE40F68F216E9E665A7D912D929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft Manifest number: 09E7 Signing time: Sun 11 Jan 2026 21:01:03 +0000 Manifest this update: Sun 11 Jan 2026 21:01:03 +0000 Manifest next update: Mon 12 Jan 2026 21:01:03 +0000 Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=) 2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: hiuFoF6DdhsAOxN01+WjxbMjbNvijhUGsKZVppl58Wc=) 3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dc:ca:e4:0f:68:f2:16:e9:e6:65:a7:d9:12:d9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff Validity Not Before: Jan 11 21:01:03 2026 GMT Not After : Jan 12 21:01:03 2026 GMT Subject: CN=1cc83da49b54ecb91d25b8b9d270f672204f526b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ab:6e:1c:85:a2:4c:c4:35:3f:65:88:6e:d2: 9a:b2:cb:b1:86:54:c0:ae:ce:7e:e9:2e:53:db:cc: e1:27:62:79:52:a2:d1:c3:0b:f5:89:a6:b8:54:d4: 83:aa:a8:47:96:e9:7d:2b:f5:a0:c7:28:a4:14:b9: a6:a8:58:0c:4a:d8:3a:c4:b3:4d:69:d0:80:e3:ad: 11:f7:db:18:89:48:77:a2:52:7a:2e:04:26:6d:3d: d8:f2:b4:6b:2e:86:40:9f:78:f6:db:9b:fc:c7:53: 89:cf:67:a2:aa:05:69:10:e5:58:eb:29:5b:cb:4d: de:dd:28:c3:b6:f6:30:7c:10:d1:8a:73:8e:99:a0: d4:26:0a:16:7e:4d:76:bb:4f:2c:dd:98:4d:6b:cd: f0:f0:2b:f1:75:94:a2:a1:26:55:0b:db:2b:d9:5a: 89:a9:46:40:d0:19:33:4c:a6:5e:da:85:95:b2:dc: 44:11:4c:73:ed:7e:c8:57:a1:0f:ee:5f:fb:d5:e9: 9d:64:e8:14:fc:20:65:52:ef:3a:44:fe:63:7c:b3: 22:3e:c7:6f:0f:c9:11:dd:12:ef:13:da:97:ff:e1: dd:f2:ee:bf:88:fb:ab:8a:0e:71:8a:f2:7d:c2:17: 57:bf:97:49:6e:ba:ff:50:63:dc:74:13:3c:85:da: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:3D:A4:9B:54:EC:B9:1D:25:B8:B9:D2:70:F6:72:20:4F:52:6B X509v3 Authority Key Identifier: keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:bc:3f:ce:38:86:ce:65:fe:be:16:be:58:00:e5:9e:2b:27: 06:c3:ab:93:23:73:ea:2d:a1:01:fd:dd:eb:23:c3:e9:ba:11: 2f:ca:55:8c:d4:b7:2e:e0:34:7f:fc:8c:85:c9:30:42:ae:f8: 9b:62:f4:0f:c4:69:aa:c6:e0:6f:af:52:6f:01:74:ac:0a:ce: ba:d5:3b:82:ea:ae:b7:25:6a:f1:eb:8c:5a:81:e0:d1:e9:2d: 5f:a9:f7:58:78:8e:ae:0c:b7:95:6c:4a:c5:a1:e0:2d:18:c0: 0f:d0:49:2c:fe:ad:ce:8c:27:6c:e1:fa:ad:d3:db:43:d7:a3: 86:68:ab:ab:e8:25:34:4a:ea:27:3b:a6:fb:1f:3f:68:98:3b: 1b:5e:16:8f:75:b5:40:90:00:20:e5:2d:5a:d7:40:11:af:c4: 7a:cc:cd:b5:d2:a8:ce:d3:52:71:4a:9d:8f:1b:6c:b0:2a:e4: 45:42:ff:6e:3b:5b:5d:d0:7d:fe:16:00:fe:80:d4:0b:1a:64: f8:c2:ba:58:4a:6e:dc:69:20:17:1a:7f:1e:05:60:2a:a9:3a: 6d:72:3b:b5:db:e2:92:47:9a:67:35:26:38:c3:26:e4:27:4d: 09:79:9e:db:36:42:a7:51:35:cb:c6:d3:39:6f:17:82:72:fb: 6e:47:ef:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3MrkD2jyFunmZafZEtkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3 OWU3ZmYwHhcNMjYwMTExMjEwMTAzWhcNMjYwMTEyMjEwMTAzWjAzMTEwLwYDVQQD EygxY2M4M2RhNDliNTRlY2I5MWQyNWI4YjlkMjcwZjY3MjIwNGY1MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qtuHIWiTMQ1P2WIbtKassuxhlTA rs5+6S5T28zhJ2J5UqLRwwv1iaa4VNSDqqhHlul9K/WgxyikFLmmqFgMStg6xLNN adCA460R99sYiUh3olJ6LgQmbT3Y8rRrLoZAn3j225v8x1OJz2eiqgVpEOVY6ylb y03e3SjDtvYwfBDRinOOmaDUJgoWfk12u08s3ZhNa83w8CvxdZSioSZVC9sr2VqJ qUZA0BkzTKZe2oWVstxEEUxz7X7IV6EP7l/71emdZOgU/CBlUu86RP5jfLMiPsdv D8kR3RLvE9qX/+Hd8u6/iPurig5xivJ9whdXv5dJbrr/UGPcdBM8hdq4uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzIPaSbVOy5HSW4udJw9nIgT1JrMB8GA1UdIwQY MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebw/zjiG zmX+vha+WADlnisnBsOrkyNz6i2hAf3d6yPD6boRL8pVjNS3LuA0f/yMhckwQq74 m2L0D8Rpqsbgb69SbwF0rArOutU7guqutyVq8euMWoHg0ektX6n3WHiOrgy3lWxK xaHgLRjAD9BJLP6tzownbOH6rdPbQ9ejhmirq+glNErqJzum+x8/aJg7G14Wj3W1 QJAAIOUtWtdAEa/EeszNtdKoztNScUqdjxtssCrkRUL/bjtbXdB9/hYA/oDUCxpk +MK6WEpu3GkgFxp/HgVgKqk6bXI7tdvikkeaZzUmOMMm5CdNCXme2zZCp1E1y8bT OW8XgnL7bkfvaQ== -----END CERTIFICATE-----Generated at Mon Jan 12 02:00:42 2026 by rpki-client