This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json) Hash identifier: vLKh7CtIINrZuMvd/MrE3yTNcfFnEZV8SZPxycLQOjw= Subject key identifier: 46:1B:7C:A8:B1:93:B5:95:1A:64:96:C7:B3:14:1C:61:D6:3B:4F:C6 Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94 Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94 Certificate serial: 019C432216D59D7D2A1E9C21FA2C900A53AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 16:00:33 +0000 Manifest this update: Mon 09 Feb 2026 16:00:33 +0000 Manifest next update: Tue 10 Feb 2026 16:00:33 +0000 Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: hkoKdb99aNQGZsVv5tALqNtXgx7KKGkMNxl9zZsTPIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:16:d5:9d:7d:2a:1e:9c:21:fa:2c:90:0a:53:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94 Validity Not Before: Feb 9 16:00:33 2026 GMT Not After : Feb 10 16:00:33 2026 GMT Subject: CN=461b7ca8b193b5951a6496c7b3141c61d63b4fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:48:39:31:4c:45:c9:be:da:8a:32:e0:a9: 52:65:69:a4:c9:a5:3d:46:4f:8a:94:87:1a:fb:bd: 59:ab:49:26:a7:4d:10:44:63:b2:2b:6d:85:1e:f3: 93:37:a3:ef:42:fb:3c:53:73:be:39:77:d2:8f:41: 65:17:f5:1b:82:07:34:a4:22:bb:ed:2e:82:71:da: 15:2a:b2:58:cd:ce:3b:65:16:21:45:9f:47:27:b8: 3c:fd:94:f4:9b:53:17:56:37:c9:dd:58:76:ec:21: ed:34:27:b2:95:b2:df:de:a3:e6:fc:ae:64:14:d8: cb:ee:0e:f4:15:66:6e:4a:d8:7d:c0:a0:bb:46:49: cd:da:76:26:ba:a3:4d:74:ff:f4:0a:14:31:4c:cb: c1:2d:5d:66:ef:8f:4f:f7:b9:15:dd:10:d3:2b:e5: 1d:ff:9b:66:82:88:f9:c6:2f:cd:7c:78:68:df:a3: 3e:fa:fe:6e:5e:2c:92:a1:dc:96:c9:25:b3:b0:73: 32:43:cd:54:5c:be:af:23:2a:f0:a6:0c:ac:85:be: 6f:52:56:21:f8:56:8d:02:ce:ba:8b:5e:2b:96:de: 0a:08:49:2b:53:14:87:47:a7:61:0c:fd:77:e7:3e: 94:b1:d7:ef:a9:97:a6:d5:d9:f3:0a:a9:10:b1:82: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1B:7C:A8:B1:93:B5:95:1A:64:96:C7:B3:14:1C:61:D6:3B:4F:C6 X509v3 Authority Key Identifier: keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a9:30:73:59:19:37:39:83:e2:4c:8f:17:cc:d7:12:c3:b4: 62:63:ed:55:b7:68:74:3f:30:e6:e7:b4:a3:86:6a:a5:40:b5: 7f:d9:7a:51:b1:09:7c:ef:ff:24:31:d3:0c:a9:34:e9:63:c4: fc:5c:2c:bc:c1:10:40:09:3e:9a:e1:3e:f7:b8:21:ee:71:1a: b5:df:03:b8:65:de:8e:43:b3:bb:83:cb:43:e4:c4:3f:3b:68: b9:8a:67:43:27:04:21:d7:95:5e:37:3e:c8:74:f4:c4:38:8f: 79:2f:62:1f:67:c0:13:8f:4f:7d:04:31:fa:35:c4:d8:f8:de: 76:f6:4f:ce:d3:a7:99:fc:6d:e6:6c:d8:79:dc:af:98:2d:92: 33:f1:04:4a:83:53:14:2b:8c:da:b8:67:af:dc:a2:ea:68:7b: 69:77:b3:19:b2:b5:a2:5a:6e:64:e0:87:44:d5:2e:b6:e8:01: 53:19:25:53:83:6a:80:ee:30:52:9d:d6:5b:14:64:65:65:d5: 15:7e:46:25:2f:0b:13:08:b1:de:cb:8b:2e:0c:a8:a2:6b:44: 74:cd:e6:de:9c:bd:ee:13:50:85:c3:bd:81:5f:ec:49:76:8c: 21:b4:b9:2c:25:c8:0e:67:64:8b:47:19:a9:cc:b4:23:c3:4b: 1b:b4:e5:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhbVnX0qHpwh+iyQClOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjM0NWE4MmNlNzE2ZGQzZTc2MzMxNzJmODcwMzA0N2Y2 YjdkOTQwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD Eyg0NjFiN2NhOGIxOTNiNTk1MWE2NDk2YzdiMzE0MWM2MWQ2M2I0ZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcRIOTFMRcm+2ooy4KlSZWmkyaU9 Rk+KlIca+71Zq0kmp00QRGOyK22FHvOTN6PvQvs8U3O+OXfSj0FlF/Ubggc0pCK7 7S6CcdoVKrJYzc47ZRYhRZ9HJ7g8/ZT0m1MXVjfJ3Vh27CHtNCeylbLf3qPm/K5k FNjL7g70FWZuSth9wKC7RknN2nYmuqNNdP/0ChQxTMvBLV1m749P97kV3RDTK+Ud /5tmgoj5xi/NfHho36M++v5uXiySodyWySWzsHMyQ81UXL6vIyrwpgyshb5vUlYh +FaNAs66i14rlt4KCEkrUxSHR6dhDP135z6UsdfvqZem1dnzCqkQsYIgLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYbfKixk7WVGmSWx7MUHGHWO0/GMB8GA1UdIwQY MBaAFIDzRags5xbdPnYzFy+HAwR/a32UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAt NzRjNWRiN2MwOTNhLzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAtNzRjNWRiN2MwOTNh LzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKkwc1kZ NzmD4kyPF8zXEsO0YmPtVbdodD8w5ue0o4ZqpUC1f9l6UbEJfO//JDHTDKk06WPE /FwsvMEQQAk+muE+97gh7nEatd8DuGXejkOzu4PLQ+TEPztouYpnQycEIdeVXjc+ yHT0xDiPeS9iH2fAE49PfQQx+jXE2PjedvZPztOnmfxt5mzYedyvmC2SM/EESoNT FCuM2rhnr9yi6mh7aXezGbK1olpuZOCHRNUutugBUxklU4NqgO4wUp3WWxRkZWXV FX5GJS8LEwix3suLLgyoomtEdM3m3py97hNQhcO9gV/sSXaMIbS5LCXIDmdki0cZ qcy0I8NLG7Tlpg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:36 2026 by rpki-client