This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft File: GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft (raw, json) Hash identifier: EyLTiNhcwKKRjDhBt+DBWt25cFIyxrng2YGaCRkCLDA= Subject key identifier: AD:45:2A:92:4B:67:8B:28:72:98:9E:40:ED:DA:69:C1:E0:A2:66:A8 Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10 Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010 Certificate serial: 019C43227CE04263A18F26A6238E8778DA20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft Manifest number: 011F Signing time: Mon 09 Feb 2026 16:00:59 +0000 Manifest this update: Mon 09 Feb 2026 16:00:59 +0000 Manifest next update: Tue 10 Feb 2026 16:00:59 +0000 Files and hashes: 1: GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl (hash: 3QsaZfxIvnJo9iYWX5pSt9NVhx/J9AM24tJ3llsG75c=) 2: iYUev_wikt3902TuQUS_qA3tCJ8.roa (hash: VqRpsKYPKrdIKnSJSQ7Ajn2eZlKMNhnr5TrpIZme+3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7c:e0:42:63:a1:8f:26:a6:23:8e:87:78:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010 Validity Not Before: Feb 9 16:00:59 2026 GMT Not After : Feb 10 16:00:59 2026 GMT Subject: CN=ad452a924b678b2872989e40edda69c1e0a266a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:47:76:2f:33:99:7c:69:43:0f:f8:9e:d7: 72:b8:4b:82:d8:ea:71:3f:21:13:9c:4c:e8:f5:0f: 3e:ae:78:bc:b9:aa:d5:09:da:32:d2:80:d2:0a:7a: 44:fc:f7:6f:31:82:cd:af:ce:37:62:fd:c8:2e:b3: 81:3d:95:cb:06:57:ea:89:9e:38:ef:6b:7d:de:37: ec:9a:69:64:d9:78:04:3d:1c:ac:a5:a3:dc:9d:56: da:6f:3e:79:81:36:19:2b:2e:50:07:97:1f:aa:8d: 6c:43:c6:58:73:0d:b8:06:a5:80:a6:71:78:4a:14: 88:f6:85:0f:9f:e4:90:26:e6:87:c6:be:78:ca:51: cf:f6:da:fc:77:b6:39:eb:b8:44:e1:be:71:29:67: 9a:75:78:0f:9c:f9:31:49:a0:93:f0:b9:c9:1c:52: 9f:29:fa:41:63:c3:5f:a6:ba:67:b3:cb:94:9e:bd: 33:4d:e4:9b:ff:10:68:da:e8:be:a8:b8:0f:ab:a5: 6e:c4:0a:00:b8:10:ab:72:40:6f:71:ba:39:8e:0d: 29:90:58:f8:c3:b6:d1:64:67:c1:13:dc:f8:81:5d: ac:7a:9e:e7:59:7d:57:5e:f9:f7:c9:49:07:78:ca: 74:6e:73:cd:0a:64:16:e0:1c:b4:f3:ae:53:60:31: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:2A:92:4B:67:8B:28:72:98:9E:40:ED:DA:69:C1:E0:A2:66:A8 X509v3 Authority Key Identifier: keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:f4:f4:cc:76:28:37:aa:4f:7d:21:29:03:17:75:a1:bd: 74:1a:33:4b:07:ac:16:a2:05:a7:08:14:77:5f:04:0c:4d:31: a2:56:a6:e4:5f:82:3a:e5:47:25:12:bf:fb:cc:b6:2a:ea:90: 1b:8c:8f:ac:0a:03:71:bc:76:b7:c6:b8:89:f5:42:97:58:5b: e4:1d:1b:8f:d3:0f:9f:0a:9a:5c:63:7e:c8:81:59:c4:fa:17: 82:95:1e:2a:95:12:36:29:14:f1:ac:ea:20:da:57:d3:18:1d: fd:63:eb:f9:8b:5a:3d:0c:46:de:16:0b:9e:c7:f0:b8:4e:b2: c6:10:18:f5:09:a7:9b:85:02:b8:c5:f1:f1:91:c4:d2:64:10: dc:ed:a3:4e:e1:8a:98:78:11:90:84:d9:a0:f4:f7:9b:d3:20: 90:9e:19:e7:7e:62:92:ce:7d:3e:21:11:bd:bc:83:03:98:5e: 20:9e:4e:cc:98:81:43:8a:74:13:c3:bc:da:4a:40:ba:84:ff: 08:ba:7e:9e:21:df:ae:27:a5:b7:f5:63:f6:77:10:1a:b8:b9: 57:08:76:41:eb:4b:1a:ac:29:86:dd:c2:b7:84:6e:2c:bd:40: f0:9f:91:f4:3e:cb:86:03:2f:3f:5f:f4:a1:0a:0b:fb:87:a6: 44:f2:e8:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInzgQmOhjyamI46HeNogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZjE0ODdlNGQwZTI2YzUzZDU5M2VjZTZlMTQ3MTIyMjFl MjQwMTAwHhcNMjYwMjA5MTYwMDU5WhcNMjYwMjEwMTYwMDU5WjAzMTEwLwYDVQQD EyhhZDQ1MmE5MjRiNjc4YjI4NzI5ODllNDBlZGRhNjljMWUwYTI2NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkdHdi8zmXxpQw/4ntdyuEuC2Opx PyETnEzo9Q8+rni8uarVCdoy0oDSCnpE/PdvMYLNr843Yv3ILrOBPZXLBlfqiZ44 72t93jfsmmlk2XgEPRyspaPcnVbabz55gTYZKy5QB5cfqo1sQ8ZYcw24BqWApnF4 ShSI9oUPn+SQJuaHxr54ylHP9tr8d7Y567hE4b5xKWeadXgPnPkxSaCT8LnJHFKf KfpBY8Nfprpns8uUnr0zTeSb/xBo2ui+qLgPq6VuxAoAuBCrckBvcbo5jg0pkFj4 w7bRZGfBE9z4gV2sep7nWX1XXvn3yUkHeMp0bnPNCmQW4By0865TYDGwbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1FKpJLZ4socpieQO3aacHgomaoMB8GA1UdIwQY MBaAFBrxSH5NDibFPVk+zm4UcSIh4kAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEt NTk2OWQ2ZWI5YjBkLzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEtNTk2OWQ2ZWI5YjBk LzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/r09Mx2 KDeqT30hKQMXdaG9dBozSwesFqIFpwgUd18EDE0xolam5F+COuVHJRK/+8y2KuqQ G4yPrAoDcbx2t8a4ifVCl1hb5B0bj9MPnwqaXGN+yIFZxPoXgpUeKpUSNikU8azq INpX0xgd/WPr+YtaPQxG3hYLnsfwuE6yxhAY9Qmnm4UCuMXx8ZHE0mQQ3O2jTuGK mHgRkITZoPT3m9MgkJ4Z535iks59PiERvbyDA5heIJ5OzJiBQ4p0E8O82kpAuoT/ CLp+niHfrielt/Vj9ncQGri5Vwh2QetLGqwpht3Ct4RuLL1A8J+R9D7LhgMvP1/0 oQoL+4emRPLo1w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:23 2026 by rpki-client