This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft File: GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft (raw, json) Hash identifier: srQqzkm1OzqINwVAlKwo440GNhAwXH1EdFhE7q1bX4A= Subject key identifier: 27:09:16:8F:D6:70:15:DF:61:40:4C:0B:EC:D2:38:DA:38:CF:67:D5 Authority key identifier: 1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1 Certificate issuer: /CN=1a341689451e535bf55ccb7d351a570c893458d1 Certificate serial: 019C42466A9387F315384D5FCC8A9C73360D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft Manifest number: 49 Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: GjQWiUUeU1v1XMt9NRpXDIk0WNE.crl (hash: PrRH3Pejte9rBI1rrprW3UuBnMI+jioN+yAUJJMoXuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft rsync://rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:6a:93:87:f3:15:38:4d:5f:cc:8a:9c:73:36:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a341689451e535bf55ccb7d351a570c893458d1 Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=2709168fd67015df61404c0becd238da38cf67d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:a6:f5:e2:3e:a9:33:d0:a8:b6:8f:a6:4e: 6c:4a:c0:44:3a:3b:9d:50:6d:d6:d0:ee:6e:c2:19: 1c:90:30:01:36:80:dd:1e:4f:44:b9:09:61:71:85: bf:c6:87:0e:5d:93:12:54:67:97:6d:e2:d2:93:6f: 5e:de:00:d0:bf:3a:5c:be:0a:bd:aa:59:af:19:cb: ed:6d:20:2c:4c:e8:4e:ab:4b:e1:79:b2:2f:c2:f5: e0:49:9f:52:dd:63:bb:3f:ca:2e:fe:2a:38:66:36: 03:4a:03:b7:06:74:a9:b5:25:50:61:3e:6f:e4:58: 49:bc:bf:a9:a8:04:f6:d9:c3:d9:1e:2e:0a:83:ba: 1e:b4:1f:39:5f:cd:3e:81:6b:4c:16:0f:f4:9e:c8: e9:b8:88:f0:3b:0d:c8:31:d2:8e:6f:1a:7a:53:ae: 05:cb:d1:73:0c:02:55:b7:c6:06:f6:f2:22:11:05: 84:29:9b:e7:7d:b2:76:88:b4:4f:a9:bb:99:a2:7f: c2:56:17:7b:86:b4:ba:69:fd:65:e7:11:96:3f:33: b4:40:29:e9:46:62:75:e3:42:93:90:f9:ee:b2:57: 6d:9d:cb:6f:84:24:44:6d:75:93:4f:18:87:00:9e: 07:3f:b2:7a:0e:0a:04:9b:82:85:aa:41:c3:79:d4: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:09:16:8F:D6:70:15:DF:61:40:4C:0B:EC:D2:38:DA:38:CF:67:D5 X509v3 Authority Key Identifier: keyid:1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:b1:b8:b8:94:18:08:2a:d9:b0:62:3a:90:0d:4f:4b:12: 62:0a:9b:3e:c1:21:4f:ad:19:e5:39:07:c3:26:b4:79:22:ac: 5d:b4:d9:11:6a:47:80:3c:c1:99:87:6a:1a:85:a1:2f:ad:62: fe:c9:87:0d:c2:26:5e:e8:a6:9b:02:54:6f:32:a4:7f:86:01: b7:56:19:66:24:f5:f4:dd:e7:9d:7d:5a:38:21:66:5f:1d:eb: f9:01:74:15:59:ed:02:a8:43:bf:00:b8:37:bc:fd:67:27:25: 60:6e:0d:66:aa:e8:94:a9:23:20:30:90:8a:02:b1:4d:b2:de: b3:28:82:d8:ae:67:8c:01:42:3c:f9:6a:b2:65:e8:06:d5:91: fa:69:b8:86:09:7b:b4:bc:16:94:69:c0:03:a0:31:79:23:cc: 4b:4b:39:96:77:31:64:60:c6:30:4e:68:86:f2:f8:4d:bf:d1: 31:fe:8e:9d:02:4b:14:03:7a:a4:19:0b:59:51:9a:9b:6f:9b: 0e:93:8a:54:65:2e:b1:de:82:81:58:b9:ec:fb:4f:02:48:22: c5:40:2e:93:50:e2:a9:4b:1a:3c:52:9b:8c:3d:e8:52:81:95: dc:10:b6:35:fe:5e:ab:ab:3c:a3:87:82:6a:a5:6a:df:be:bc: 56:ae:50:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmqTh/MVOE1fzIqcczYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzQxNjg5NDUxZTUzNWJmNTVjY2I3ZDM1MWE1NzBjODkz NDU4ZDEwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD EygyNzA5MTY4ZmQ2NzAxNWRmNjE0MDRjMGJlY2QyMzhkYTM4Y2Y2N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mam9eI+qTPQqLaPpk5sSsBEOjud UG3W0O5uwhkckDABNoDdHk9EuQlhcYW/xocOXZMSVGeXbeLSk29e3gDQvzpcvgq9 qlmvGcvtbSAsTOhOq0vhebIvwvXgSZ9S3WO7P8ou/io4ZjYDSgO3BnSptSVQYT5v 5FhJvL+pqAT22cPZHi4Kg7oetB85X80+gWtMFg/0nsjpuIjwOw3IMdKObxp6U64F y9FzDAJVt8YG9vIiEQWEKZvnfbJ2iLRPqbuZon/CVhd7hrS6af1l5xGWPzO0QCnp RmJ140KTkPnusldtnctvhCREbXWTTxiHAJ4HP7J6DgoEm4KFqkHDedTmJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcJFo/WcBXfYUBMC+zSONo4z2fVMB8GA1UdIwQY MBaAFBo0FolFHlNb9VzLfTUaVwyJNFjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pRV2lVVWVVMXYxWE10OU5ScFhESWswV05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85MjYzZWYtMjgwMy00ZTg0LTgyNGEt ZjUxMmQzODc1ODBmLzEvR2pRV2lVVWVVMXYxWE10OU5ScFhESWswV05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85MjYzZWYtMjgwMy00ZTg0LTgyNGEtZjUxMmQzODc1ODBm LzEvR2pRV2lVVWVVMXYxWE10OU5ScFhESWswV05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaexuLiU GAgq2bBiOpANT0sSYgqbPsEhT60Z5TkHwya0eSKsXbTZEWpHgDzBmYdqGoWhL61i /smHDcImXuimmwJUbzKkf4YBt1YZZiT19N3nnX1aOCFmXx3r+QF0FVntAqhDvwC4 N7z9ZyclYG4NZqrolKkjIDCQigKxTbLesyiC2K5njAFCPPlqsmXoBtWR+mm4hgl7 tLwWlGnAA6AxeSPMS0s5lncxZGDGME5ohvL4Tb/RMf6OnQJLFAN6pBkLWVGam2+b DpOKVGUusd6CgVi57PtPAkgixUAuk1DiqUsaPFKbjD3oUoGV3BC2Nf5eq6s8o4eC aqVq3768Vq5Qng== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:13 2026 by rpki-client