This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json) Hash identifier: JkiyABjfohRBO7i+OedUOh94DFH4XCa6jEugunT93Xs= Subject key identifier: 05:E6:4F:46:67:9A:B7:52:6D:AD:23:0C:BB:0D:4B:35:88:F7:C6:6A Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Certificate serial: 019B7F7051E823BC1540A0EA48999668382B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft Manifest number: 17AF Signing time: Fri 02 Jan 2026 16:00:25 +0000 Manifest this update: Fri 02 Jan 2026 16:00:25 +0000 Manifest next update: Sat 03 Jan 2026 16:00:25 +0000 Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=) 2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: pQmp87psH4sW4TpIQtBKUZJu+974nLCXK8EjOAEBrxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:51:e8:23:bc:15:40:a0:ea:48:99:96:68:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Validity Not Before: Jan 2 16:00:25 2026 GMT Not After : Jan 3 16:00:25 2026 GMT Subject: CN=05e64f46679ab7526dad230cbb0d4b3588f7c66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:d0:f1:a6:44:e2:84:71:9d:94:ac:a1:bb: 71:d8:cb:cc:c7:d8:be:7f:25:bf:92:4d:f5:cb:52: 7d:f4:78:fc:fb:44:41:c9:9d:b8:c3:61:bc:05:7e: bc:26:47:38:26:73:0d:63:cc:31:d4:96:02:1b:a9: e5:11:9c:8f:a3:dc:cc:d8:e9:82:95:e5:c4:b1:af: ec:b8:ad:86:c7:5a:b7:1f:ae:bc:59:cb:aa:23:d0: 82:67:84:03:0e:bb:69:af:24:0e:94:f5:7a:d6:17: 87:d6:28:1e:09:7d:5c:0c:45:e0:90:4e:70:92:2d: de:aa:cb:dd:40:57:a5:94:94:16:0b:52:bf:5c:7c: a3:ec:77:a9:44:6d:2c:39:c5:92:03:3c:91:cb:88: 9f:42:a8:00:1b:88:14:28:99:b8:f0:07:49:d4:00: ad:1f:26:35:6d:50:12:eb:a5:00:b4:6a:f4:84:f5: ec:46:14:b6:a5:28:cd:cb:b5:06:ff:d4:78:ca:e5: a4:60:ab:f8:35:ee:4f:f7:c9:8b:ff:2d:5d:94:07: 53:5e:19:ef:b9:c7:8e:f0:f1:b0:0d:b8:be:64:0e: 1f:8b:0f:ba:cf:ca:56:a5:e8:92:8f:2b:03:6a:38: ad:34:c5:1a:50:6c:e7:6a:76:fe:f0:77:59:aa:b7: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E6:4F:46:67:9A:B7:52:6D:AD:23:0C:BB:0D:4B:35:88:F7:C6:6A X509v3 Authority Key Identifier: keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3b:35:a7:83:ac:41:77:20:a6:92:53:da:27:86:0d:47:95: c0:81:c5:b3:44:95:51:7e:7f:9c:3c:c8:71:53:1c:02:44:3a: 57:0e:05:48:44:b1:8e:ba:e7:86:dd:59:87:9d:71:23:89:f6: e1:a1:f7:5e:e1:a5:70:1e:9e:f5:bf:de:c3:0a:28:30:87:77: a6:1e:6b:f7:2e:54:75:ca:65:02:6a:8f:0a:3e:cf:d7:e6:ac: 80:f2:2f:ff:dd:ca:cf:99:a2:70:68:38:75:74:34:06:25:f8: 9e:d5:81:6e:03:80:ff:75:8c:bd:a2:c6:9f:d0:cb:2d:ab:68: c8:f6:55:04:b5:22:ae:75:87:bd:4d:aa:88:29:c3:d1:a1:c1: 2d:1d:dc:93:f5:d9:ea:5f:10:6f:1e:c2:8f:dd:43:4e:66:53: 1c:0a:bb:fc:af:89:b0:a2:3c:dc:70:2d:d5:3f:0c:ed:54:ca: a5:06:b1:55:88:b2:71:67:72:61:45:e0:cc:ef:ea:aa:f6:d7: 6d:67:73:45:80:7d:ee:6b:9b:5f:d6:14:be:b0:88:94:44:f8: 13:6e:a8:af:72:9b:79:43:c4:87:ae:e4:0a:70:48:22:b4:fd: 58:f6:f9:84:90:82:62:7e:5a:b4:cf:b9:ee:a7:71:6d:2d:d5: 5d:a3:2e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cFHoI7wVQKDqSJmWaDgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk OTNiMGIwHhcNMjYwMTAyMTYwMDI1WhcNMjYwMTAzMTYwMDI1WjAzMTEwLwYDVQQD EygwNWU2NGY0NjY3OWFiNzUyNmRhZDIzMGNiYjBkNGIzNTg4ZjdjNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z3Q8aZE4oRxnZSsobtx2MvMx9i+ fyW/kk31y1J99Hj8+0RByZ24w2G8BX68Jkc4JnMNY8wx1JYCG6nlEZyPo9zM2OmC leXEsa/suK2Gx1q3H668WcuqI9CCZ4QDDrtpryQOlPV61heH1igeCX1cDEXgkE5w ki3eqsvdQFellJQWC1K/XHyj7HepRG0sOcWSAzyRy4ifQqgAG4gUKJm48AdJ1ACt HyY1bVAS66UAtGr0hPXsRhS2pSjNy7UG/9R4yuWkYKv4Ne5P98mL/y1dlAdTXhnv uceO8PGwDbi+ZA4fiw+6z8pWpeiSjysDajitNMUaUGznanb+8HdZqrdbwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXmT0ZnmrdSba0jDLsNSzWI98ZqMB8GA1UdIwQY MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5 LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzs1p4Os QXcgppJT2ieGDUeVwIHFs0SVUX5/nDzIcVMcAkQ6Vw4FSESxjrrnht1Zh51xI4n2 4aH3XuGlcB6e9b/ewwooMId3ph5r9y5UdcplAmqPCj7P1+asgPIv/93Kz5micGg4 dXQ0BiX4ntWBbgOA/3WMvaLGn9DLLatoyPZVBLUirnWHvU2qiCnD0aHBLR3ck/XZ 6l8Qbx7Cj91DTmZTHAq7/K+JsKI83HAt1T8M7VTKpQaxVYiycWdyYUXgzO/qqvbX bWdzRYB97mubX9YUvrCIlET4E26or3KbeUPEh67kCnBIIrT9WPb5hJCCYn5atM+5 7qdxbS3VXaMucw== -----END CERTIFICATE-----Generated at Sat Jan 3 02:21:38 2026 by rpki-client