This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json) Hash identifier: u2hfpvTVyvI4ZNZXrSABsUH0LBxJIzX122i+LR/STok= Subject key identifier: 5E:0B:03:9F:30:E9:A6:58:9E:C1:80:F8:F9:CC:52:A3:88:2A:A6:F7 Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4 Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4 Certificate serial: 019C41D8C8EB24675A8529051A03E64803B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 10:00:52 +0000 Manifest this update: Mon 09 Feb 2026 10:00:52 +0000 Manifest next update: Tue 10 Feb 2026 10:00:52 +0000 Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: ZxMKeLfs/02ajERLcleV0l9tKdGaBopvcp//ZjdXJWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c8:eb:24:67:5a:85:29:05:1a:03:e6:48:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4 Validity Not Before: Feb 9 10:00:52 2026 GMT Not After : Feb 10 10:00:52 2026 GMT Subject: CN=5e0b039f30e9a6589ec180f8f9cc52a3882aa6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:b4:f0:6f:0b:94:5d:95:fe:9a:ed:f3:02: ae:8a:b4:dd:6d:ab:28:17:cd:98:a6:c4:4c:3b:23: 3b:e2:04:c7:2a:29:9f:e2:e4:f9:de:67:84:a9:cf: e3:cf:42:e3:7f:76:15:b7:73:03:01:92:f4:aa:7c: b9:ee:2b:90:ca:a2:13:a6:21:78:f0:d4:55:94:a5: 1c:e8:f1:0c:b5:52:69:6c:f6:c6:ca:0e:0b:f1:aa: f3:a5:93:43:0d:cd:a9:2a:b4:9c:d4:0d:6a:cd:98: a6:a6:d8:2c:32:43:43:56:27:36:8e:42:0c:92:ea: 57:08:6d:ce:02:5a:df:f3:df:82:1b:7c:40:64:f4: 69:a9:54:88:fa:c1:56:83:8e:46:19:f0:fd:3e:b4: ff:96:d3:56:eb:66:af:f6:53:51:0b:61:a5:79:24: f7:f6:76:38:8a:47:b1:f8:08:5d:ed:28:03:58:07: 55:32:0d:d6:ac:60:3e:86:b7:f7:9c:5f:f2:67:0e: 0d:70:f6:a7:66:9a:98:2d:a7:87:b9:e9:85:67:d3: 55:54:2b:9d:c5:a9:40:d1:f6:d3:ab:59:0c:3c:dd: 5b:5b:2a:15:6d:4c:94:65:59:b1:79:ae:5f:be:60: cd:84:74:b0:e8:3e:d3:be:32:24:64:6d:f7:3a:30: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0B:03:9F:30:E9:A6:58:9E:C1:80:F8:F9:CC:52:A3:88:2A:A6:F7 X509v3 Authority Key Identifier: keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e9:cb:fc:5a:60:f9:8e:62:aa:42:c9:07:79:4b:e6:83:01: 67:6b:ea:55:5a:c1:b9:e9:ca:97:03:dc:89:0b:ab:9e:44:0f: b3:c5:35:0f:97:2e:22:3b:28:10:fd:a8:5c:f4:4b:2c:cc:b2: a6:51:54:05:3d:44:58:a8:25:bb:69:cf:1a:30:6f:9b:cf:e0: 7e:37:f8:8e:0d:16:70:d4:b7:e7:c8:3e:ba:83:db:cc:de:ba: 57:70:0e:0d:1a:51:f9:1a:d3:0f:0b:b1:a6:0a:cb:65:c9:a5: 2a:44:87:2b:84:40:02:94:83:7a:b2:90:c8:8f:86:db:60:f1: 39:4b:52:d3:aa:94:7f:9b:28:2b:c8:a8:9e:4e:bd:11:f5:3a: b4:ed:fc:19:75:b7:91:28:67:5c:e7:5b:73:6d:ce:d3:2a:42: 99:95:41:51:09:4b:bc:b4:7a:6d:c1:1f:a1:61:13:33:6d:ef: f6:88:f6:d0:1d:33:b3:f7:ec:a8:db:cb:d8:68:4f:43:62:b5: e5:4e:32:dd:8f:30:cd:31:b3:4d:c5:7d:f0:46:88:cd:de:72: 28:5d:8b:cb:e8:90:89:8e:73:71:68:29:7f:9e:12:85:ad:45: 33:2c:cd:a4:bd:ff:38:c7:53:05:60:59:38:27:8a:ee:f2:e0: 3d:00:d0:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MjrJGdahSkFGgPmSAOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTlhNDI2MDBmYjY0MGJlYjVlMzNkMGVhYjhmZTRlOTUz MTFjZTQwHhcNMjYwMjA5MTAwMDUyWhcNMjYwMjEwMTAwMDUyWjAzMTEwLwYDVQQD Eyg1ZTBiMDM5ZjMwZTlhNjU4OWVjMTgwZjhmOWNjNTJhMzg4MmFhNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBS08G8LlF2V/prt8wKuirTdbaso F82YpsRMOyM74gTHKimf4uT53meEqc/jz0Ljf3YVt3MDAZL0qny57iuQyqITpiF4 8NRVlKUc6PEMtVJpbPbGyg4L8arzpZNDDc2pKrSc1A1qzZimptgsMkNDVic2jkIM kupXCG3OAlrf89+CG3xAZPRpqVSI+sFWg45GGfD9PrT/ltNW62av9lNRC2GleST3 9nY4ikex+Ahd7SgDWAdVMg3WrGA+hrf3nF/yZw4NcPanZpqYLaeHuemFZ9NVVCud xalA0fbTq1kMPN1bWyoVbUyUZVmxea5fvmDNhHSw6D7TvjIkZG33OjDwbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4LA58w6aZYnsGA+PnMUqOIKqb3MB8GA1UdIwQY MBaAFBmZpCYA+2QL614z0Oq4/k6VMRzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hOTE2MDgtYzMyMi00MWZiLTliMDAt YzU0MDE0ZTFjMjlhLzEvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hOTE2MDgtYzMyMi00MWZiLTliMDAtYzU0MDE0ZTFjMjlh LzEvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArenL/Fpg +Y5iqkLJB3lL5oMBZ2vqVVrBuenKlwPciQurnkQPs8U1D5cuIjsoEP2oXPRLLMyy plFUBT1EWKglu2nPGjBvm8/gfjf4jg0WcNS358g+uoPbzN66V3AODRpR+RrTDwux pgrLZcmlKkSHK4RAApSDerKQyI+G22DxOUtS06qUf5soK8ionk69EfU6tO38GXW3 kShnXOdbc23O0ypCmZVBUQlLvLR6bcEfoWETM23v9oj20B0zs/fsqNvL2GhPQ2K1 5U4y3Y8wzTGzTcV98EaIzd5yKF2Ly+iQiY5zcWgpf54Sha1FMyzNpL3/OMdTBWBZ OCeK7vLgPQDQUA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:05 2026 by rpki-client