This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json) Hash identifier: 0G4luMmw4khh+sJagrd8pAENqasdA7bzyuKcyFeaxhE= Subject key identifier: A8:94:15:45:25:56:D3:73:81:49:72:AD:AD:B6:DD:CE:5F:83:CD:C1 Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de Certificate serial: 019B78C9B30C3CCEE1D12F7BAA35CE79F7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft Manifest number: 1696 Signing time: Thu 01 Jan 2026 09:00:43 +0000 Manifest this update: Thu 01 Jan 2026 09:00:43 +0000 Manifest next update: Fri 02 Jan 2026 09:00:43 +0000 Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: OYwAoxRhzwhCQY+yqLWzXARsl2M59/oe2cv92PLG7ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:c9:b3:0c:3c:ce:e1:d1:2f:7b:aa:35:ce:79:f7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de Validity Not Before: Jan 1 09:00:43 2026 GMT Not After : Jan 2 09:00:43 2026 GMT Subject: CN=a89415452556d373814972adadb6ddce5f83cdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ad:a1:65:71:cf:94:26:8e:9b:ca:88:14:61: d7:4d:0d:2d:44:ae:a7:f7:ba:a9:ae:4d:a8:ce:75: e2:2a:f0:e0:28:29:6b:e8:a1:a3:b6:75:40:f4:5b: c6:12:d2:1d:15:27:3e:ee:41:39:ff:ab:ee:e9:36: 57:f7:4c:ec:a4:9f:c8:d1:8e:6e:87:d3:b4:79:89: 0f:0c:9d:a2:62:14:a1:11:40:fd:cd:f1:3a:07:67: 39:c1:95:0f:30:55:4c:b0:1c:f2:61:0e:e1:d7:a4: b5:08:31:79:4c:dd:34:1c:44:8c:2a:c5:f7:22:3d: 56:45:d7:2d:2b:db:58:fe:e7:e6:c9:c8:6a:eb:aa: 96:c3:53:43:43:a4:91:b9:8b:33:07:52:3c:e8:7e: 46:47:de:a2:81:b4:cd:25:ad:cf:a1:be:81:6e:cd: 8a:7d:9e:c7:7f:24:bc:c4:2d:87:83:3b:ba:a6:b0: de:20:9b:4a:17:d0:1f:55:3f:46:c9:1e:e5:32:b5: e8:e1:a4:07:96:8a:af:0b:ee:61:2b:35:8d:63:80: 7c:0f:b7:42:ee:39:7e:01:d5:a8:94:21:8e:0f:53: 90:8c:e9:cb:06:ba:27:30:41:97:54:30:86:db:2d: 47:b0:92:36:4c:22:d5:be:b6:44:85:32:dc:81:f4: 07:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:15:45:25:56:D3:73:81:49:72:AD:AD:B6:DD:CE:5F:83:CD:C1 X509v3 Authority Key Identifier: keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:dc:a1:b9:63:84:93:6b:2b:b4:76:ff:c7:22:aa:af:39:9a: b5:93:69:95:c1:e3:6a:9d:6e:71:63:11:a5:a7:fd:33:d2:f6: 74:df:92:ef:1c:20:e2:17:39:2e:9f:e8:15:dd:a4:ff:d5:38: b2:ef:2b:20:e9:0e:24:e0:9a:97:dc:b8:b9:be:3d:77:57:ee: 06:1d:c3:3f:a4:9f:7e:33:58:9c:0d:be:30:92:fd:b1:34:88: e4:be:5f:b5:04:68:a9:07:ee:4e:ae:f8:0f:a9:81:2a:c1:0a: ec:ec:d1:0d:08:1a:9d:dd:1b:d0:9a:7b:c0:92:57:27:42:6b: ba:6a:6e:97:60:3b:3a:15:9d:e3:f9:d4:95:84:cb:b7:de:5b: 1e:3c:b5:90:71:d1:f4:06:f1:0f:94:92:a2:8a:38:33:8b:23: b8:ce:2a:82:b3:fe:66:62:75:56:d0:44:b0:8e:f3:76:d2:21: 05:3b:5d:48:19:19:76:20:2a:26:6b:a3:bb:c8:40:a8:67:d2: dc:9e:ae:3c:fa:d0:f2:71:6a:f3:7e:38:d9:c4:23:05:b7:10: 7f:a7:ec:1d:67:f3:17:81:99:6b:9d:e0:42:0c:6b:c0:dd:9f: ab:49:e8:24:03:e0:fc:d1:63:9e:c1:be:e6:9a:1b:74:fc:81: 74:25:0e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ybMMPM7h0S97qjXOeff3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2FjNmFkNjVlNWEwOTkyMDliODhiODc5Y2Y0YTA4YWYw ODY4ZGUwHhcNMjYwMTAxMDkwMDQzWhcNMjYwMTAyMDkwMDQzWjAzMTEwLwYDVQQD EyhhODk0MTU0NTI1NTZkMzczODE0OTcyYWRhZGI2ZGRjZTVmODNjZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA462hZXHPlCaOm8qIFGHXTQ0tRK6n 97qprk2oznXiKvDgKClr6KGjtnVA9FvGEtIdFSc+7kE5/6vu6TZX90zspJ/I0Y5u h9O0eYkPDJ2iYhShEUD9zfE6B2c5wZUPMFVMsBzyYQ7h16S1CDF5TN00HESMKsX3 Ij1WRdctK9tY/ufmychq66qWw1NDQ6SRuYszB1I86H5GR96igbTNJa3Pob6Bbs2K fZ7HfyS8xC2Hgzu6prDeIJtKF9AfVT9GyR7lMrXo4aQHloqvC+5hKzWNY4B8D7dC 7jl+AdWolCGOD1OQjOnLBronMEGXVDCG2y1HsJI2TCLVvrZEhTLcgfQHdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiUFUUlVtNzgUlyra223c5fg83BMB8GA1UdIwQY MBaAFBo6xq1l5aCZIJuIuHnPSgivCGjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUt NzBjYmU5NjI0MWY1LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUtNzBjYmU5NjI0MWY1 LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdyhuWOE k2srtHb/xyKqrzmatZNplcHjap1ucWMRpaf9M9L2dN+S7xwg4hc5Lp/oFd2k/9U4 su8rIOkOJOCal9y4ub49d1fuBh3DP6SffjNYnA2+MJL9sTSI5L5ftQRoqQfuTq74 D6mBKsEK7OzRDQgand0b0Jp7wJJXJ0Jrumpul2A7OhWd4/nUlYTLt95bHjy1kHHR 9AbxD5SSooo4M4sjuM4qgrP+ZmJ1VtBEsI7zdtIhBTtdSBkZdiAqJmuju8hAqGfS 3J6uPPrQ8nFq83442cQjBbcQf6fsHWfzF4GZa53gQgxrwN2fq0noJAPg/NFjnsG+ 5pobdPyBdCUOfQ== -----END CERTIFICATE-----Generated at Thu Jan 1 17:31:18 2026 by rpki-client