This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json) Hash identifier: 1JfxTrhTLUrb3OlEdwnXjTeMXs/R8Q+KkthjTC/BS74= Subject key identifier: F1:BB:1F:10:E2:20:DF:5F:4F:A3:E6:FF:53:7D:FB:73:6B:59:5B:7C Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Certificate serial: 019B94E5DED77D5C797DFDAEF721789102D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft Manifest number: 17B6 Signing time: Tue 06 Jan 2026 20:00:51 +0000 Manifest this update: Tue 06 Jan 2026 20:00:51 +0000 Manifest next update: Wed 07 Jan 2026 20:00:51 +0000 Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=) 2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: vWJZgke6QOXVp2iTZs3ioDbSGwU5oG/FAkbOtpsYZq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:e5:de:d7:7d:5c:79:7d:fd:ae:f7:21:78:91:02:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Validity Not Before: Jan 6 20:00:51 2026 GMT Not After : Jan 7 20:00:51 2026 GMT Subject: CN=f1bb1f10e220df5f4fa3e6ff537dfb736b595b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:f8:be:2a:9d:11:e3:73:32:0e:c9:3e:67: 5d:83:46:f2:a8:70:e7:95:4e:6f:5d:38:62:73:55: c2:4d:52:89:b8:fe:ac:c5:29:e4:4e:00:ec:76:7e: 0b:a6:cd:ae:c3:98:3e:bb:7c:c0:26:82:27:d6:d3: df:64:98:d9:17:71:b7:72:6b:8b:da:cb:a5:04:07: ad:b8:48:44:e6:1e:bb:57:9f:1b:98:64:3f:12:67: 8e:78:70:d7:35:99:0c:c3:36:df:dd:af:a8:3e:17: f2:80:82:c7:2a:40:2a:d1:25:61:a2:a1:2a:40:9f: 7d:78:12:1a:5e:fd:6b:67:37:0e:9c:bd:b8:33:c8: c7:88:00:1f:a3:2c:db:82:d3:9a:0b:1b:80:6a:4d: fc:db:04:84:cc:8f:de:ad:5b:a3:18:ca:7b:c4:c2: 7b:b7:4f:92:a0:b6:3a:1e:2e:8e:e4:1f:74:cf:61: c9:d5:c4:5f:67:44:29:8d:f6:59:0d:ae:f6:61:34: a6:2d:9d:b1:10:02:e6:78:f8:39:3e:67:ac:ba:3f: 59:0d:06:fe:ae:19:2c:3c:3c:e9:1b:3d:0b:13:55: b2:21:53:92:0d:59:20:f0:a9:78:af:84:bc:f2:60: ce:31:13:c4:70:3d:af:0e:5e:ed:62:4d:84:ac:ff: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BB:1F:10:E2:20:DF:5F:4F:A3:E6:FF:53:7D:FB:73:6B:59:5B:7C X509v3 Authority Key Identifier: keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:95:be:e3:84:d8:bb:5e:72:26:1f:69:f2:a2:a4:0d:1b:07: 2a:db:2f:60:93:bb:5d:1f:67:92:0a:b9:34:c0:d6:e3:4e:3f: 5f:71:c6:34:23:c1:41:ce:ff:ff:ee:51:32:d4:aa:85:42:7f: 2f:19:cc:8c:18:17:61:a0:4b:49:28:9a:1d:be:b2:69:39:3a: 76:f3:35:3c:19:e1:24:7a:63:48:f3:bd:2f:8d:9f:ae:c7:32: 0b:e8:a3:e6:82:4d:7e:f0:cc:1d:4d:15:78:43:97:92:80:51: 5c:da:52:dc:8d:cf:b0:c2:78:27:1b:97:4f:93:19:52:b7:fa: be:c5:37:64:35:28:8e:4f:0f:86:c3:5d:8f:56:03:23:37:ea: 90:fa:39:75:52:4d:52:44:ba:a4:2b:5c:8d:4d:2b:37:6b:17: 47:79:41:2e:69:57:60:df:6d:dc:f3:36:46:6f:0f:3a:b2:5b: 13:c5:ff:09:c8:a6:93:1c:36:23:90:28:03:11:26:5c:e9:03: 5b:8f:4b:f1:2f:cd:22:8a:4c:bc:22:ce:b3:cd:98:62:d2:a9: 77:20:28:a4:2c:ae:5b:c6:f0:f1:74:cc:a1:40:cb:36:2b:2a: 37:1a:ab:ae:95:d3:d9:d3:cd:42:b5:d2:4b:db:e8:0e:7e:b3: 56:69:56:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuU5d7XfVx5ff2u9yF4kQLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm ZDMxZDYwHhcNMjYwMTA2MjAwMDUxWhcNMjYwMTA3MjAwMDUxWjAzMTEwLwYDVQQD EyhmMWJiMWYxMGUyMjBkZjVmNGZhM2U2ZmY1MzdkZmI3MzZiNTk1YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7/4viqdEeNzMg7JPmddg0byqHDn lU5vXThic1XCTVKJuP6sxSnkTgDsdn4Lps2uw5g+u3zAJoIn1tPfZJjZF3G3cmuL 2sulBAetuEhE5h67V58bmGQ/EmeOeHDXNZkMwzbf3a+oPhfygILHKkAq0SVhoqEq QJ99eBIaXv1rZzcOnL24M8jHiAAfoyzbgtOaCxuAak382wSEzI/erVujGMp7xMJ7 t0+SoLY6Hi6O5B90z2HJ1cRfZ0QpjfZZDa72YTSmLZ2xEALmePg5Pmesuj9ZDQb+ rhksPDzpGz0LE1WyIVOSDVkg8Kl4r4S88mDOMRPEcD2vDl7tYk2ErP/95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG7HxDiIN9fT6Pm/1N9+3NrWVt8MB8GA1UdIwQY MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZW+44TY u15yJh9p8qKkDRsHKtsvYJO7XR9nkgq5NMDW404/X3HGNCPBQc7//+5RMtSqhUJ/ LxnMjBgXYaBLSSiaHb6yaTk6dvM1PBnhJHpjSPO9L42frscyC+ij5oJNfvDMHU0V eEOXkoBRXNpS3I3PsMJ4JxuXT5MZUrf6vsU3ZDUojk8PhsNdj1YDIzfqkPo5dVJN UkS6pCtcjU0rN2sXR3lBLmlXYN9t3PM2Rm8POrJbE8X/Ccimkxw2I5AoAxEmXOkD W49L8S/NIopMvCLOs82YYtKpdyAopCyuW8bw8XTMoUDLNisqNxqrrpXT2dPNQrXS S9voDn6zVmlWwQ== -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:17 2026 by rpki-client