This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json) Hash identifier: v3pI/yHfoHvzMq3/rPRLPCy+JrHpyXOVeGA9L8hq8oo= Subject key identifier: 24:15:BB:BB:52:50:C5:DA:EA:58:8C:CB:B6:57:89:87:DF:2C:66:D6 Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Certificate serial: 019BB21509593E904AAF350C30963D0A1B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft Manifest number: 0B25 Signing time: Mon 12 Jan 2026 12:01:21 +0000 Manifest this update: Mon 12 Jan 2026 12:01:21 +0000 Manifest next update: Tue 13 Jan 2026 12:01:21 +0000 Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: ao6nzyOw27daxQj56AxtiFV+5coNI5N91EcuyJ4lB48=) 2: xyNMPOjdSXVrOkDnqACX6hpPikY.roa (hash: GWpndT2t/1Gpwi+SLRm0phgKLCkd6P4JAMgA+uJmCIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:09:59:3e:90:4a:af:35:0c:30:96:3d:0a:1b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Validity Not Before: Jan 12 12:01:21 2026 GMT Not After : Jan 13 12:01:21 2026 GMT Subject: CN=2415bbbb5250c5daea588ccbb6578987df2c66d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:06:ff:90:8c:ab:fc:c7:22:2c:5f:6d:63: e8:c6:12:fa:1f:2c:8e:96:ea:83:87:9e:8f:d0:55: ec:02:42:b8:73:a6:89:b2:99:87:c7:6d:02:0a:d9: 48:05:ac:54:ed:52:20:3e:83:be:7f:73:09:50:87: f3:49:75:b3:42:e6:40:58:14:08:16:99:5a:61:46: c0:ae:ab:77:85:55:87:7b:30:1f:dd:2c:a0:30:5a: d2:b7:f8:a7:4b:b8:47:5b:8d:65:0e:27:c7:18:c2: cd:7d:98:03:e0:c8:e6:0b:6e:b8:d7:34:7b:c7:86: 96:a8:22:56:8d:42:a5:34:41:c9:d8:e0:52:fd:02: e5:05:cd:0f:05:63:d4:a0:f3:d6:19:be:a8:bd:64: 08:99:15:b0:61:2c:74:3b:f9:1b:c5:27:2f:13:8c: dd:3d:37:63:14:be:e6:0c:91:76:fc:ed:51:51:c7: 52:3e:6e:67:c1:14:24:fe:c5:e4:52:2f:0a:8a:af: bd:2b:a8:68:1e:08:d6:78:23:a8:90:64:0c:d5:8a: 26:4a:75:45:21:a9:c0:47:28:1f:e8:71:ae:06:2c: f6:3e:e9:d9:93:b3:04:c6:9f:cf:5b:a6:dd:96:95: 0c:5f:84:2d:89:f4:01:e0:5c:64:73:e4:e4:d0:af: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:15:BB:BB:52:50:C5:DA:EA:58:8C:CB:B6:57:89:87:DF:2C:66:D6 X509v3 Authority Key Identifier: keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:95:84:62:34:c7:58:f5:35:e9:26:ea:ad:5b:7c:40:e0:ab: ec:72:13:64:25:39:55:6b:86:29:a7:37:f9:c0:e4:72:56:9a: 59:2e:d8:27:63:e5:bb:fa:81:02:30:fb:c6:96:c8:b0:97:45: b4:65:20:2c:56:3e:af:0e:55:cb:78:2b:35:9e:fc:c6:36:67: 6a:c8:89:cd:d1:a1:b0:cd:46:29:2d:cc:ff:14:cc:d5:39:40: 3f:e5:4a:2f:1e:fd:99:f6:26:68:68:01:5b:96:bd:49:dd:ae: f9:69:c9:99:36:49:92:c3:a0:6c:55:52:51:28:86:ce:f5:23: e9:92:7b:2a:77:e9:34:92:9d:37:b3:69:9b:7d:22:fc:94:5f: 80:6b:3f:73:9c:61:ee:48:41:90:e0:94:b9:f0:2f:48:16:30: 58:34:56:ce:54:c5:a0:21:9c:4b:2f:4c:b1:2f:1a:e7:b2:e9: cc:03:45:c0:9b:a2:df:70:80:96:44:32:a9:0c:23:db:73:5f: bb:2c:d6:b1:ca:76:f4:ae:5a:98:af:be:76:81:57:1a:49:bd: d4:53:b1:90:6d:be:3a:ae:b9:96:d4:41:d1:9b:71:d2:51:3c: 31:c3:09:da:ed:34:1e:9b:b7:f3:bb:0e:4d:f7:28:1d:c5:de: 2e:de:c1:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFQlZPpBKrzUMMJY9ChsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3 MGU3NDgwHhcNMjYwMTEyMTIwMTIxWhcNMjYwMTEzMTIwMTIxWjAzMTEwLwYDVQQD EygyNDE1YmJiYjUyNTBjNWRhZWE1ODhjY2JiNjU3ODk4N2RmMmM2NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP8G/5CMq/zHIixfbWPoxhL6HyyO luqDh56P0FXsAkK4c6aJspmHx20CCtlIBaxU7VIgPoO+f3MJUIfzSXWzQuZAWBQI FplaYUbArqt3hVWHezAf3SygMFrSt/inS7hHW41lDifHGMLNfZgD4MjmC2641zR7 x4aWqCJWjUKlNEHJ2OBS/QLlBc0PBWPUoPPWGb6ovWQImRWwYSx0O/kbxScvE4zd PTdjFL7mDJF2/O1RUcdSPm5nwRQk/sXkUi8Kiq+9K6hoHgjWeCOokGQM1YomSnVF IanARygf6HGuBiz2PunZk7MExp/PW6bdlpUMX4QtifQB4Fxkc+Tk0K8AmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQVu7tSUMXa6liMy7ZXiYffLGbWMB8GA1UdIwQY MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct NWExZDU1ODQzNzhkLzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJWEYjTH WPU16SbqrVt8QOCr7HITZCU5VWuGKac3+cDkclaaWS7YJ2Plu/qBAjD7xpbIsJdF tGUgLFY+rw5Vy3grNZ78xjZnasiJzdGhsM1GKS3M/xTM1TlAP+VKLx79mfYmaGgB W5a9Sd2u+WnJmTZJksOgbFVSUSiGzvUj6ZJ7KnfpNJKdN7Npm30i/JRfgGs/c5xh 7khBkOCUufAvSBYwWDRWzlTFoCGcSy9MsS8a57LpzANFwJui33CAlkQyqQwj23Nf uyzWscp29K5amK++doFXGkm91FOxkG2+Oq65ltRB0Ztx0lE8McMJ2u00Hpu387sO TfcoHcXeLt7BVg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:28:44 2026 by rpki-client