This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json) Hash identifier: 8io5zOELb9v3Y0Wi7h+nFP8K8zgGUVqF7rZBGsVN7B8= Subject key identifier: 41:3D:7C:DC:49:12:92:DC:B7:82:5D:23:A9:DC:A2:C6:E2:8C:85:9D Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70 Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70 Certificate serial: 019C424658FEF9D74E4BFC8D62B36A5CC641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 12:00:32 +0000 Manifest this update: Mon 09 Feb 2026 12:00:32 +0000 Manifest next update: Tue 10 Feb 2026 12:00:32 +0000 Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: +yNNKBgkLRYjJ3iS2AXfpzHikwrkUZV3aqknuqQdhx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:58:fe:f9:d7:4e:4b:fc:8d:62:b3:6a:5c:c6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70 Validity Not Before: Feb 9 12:00:32 2026 GMT Not After : Feb 10 12:00:32 2026 GMT Subject: CN=413d7cdc491292dcb7825d23a9dca2c6e28c859d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:d2:4d:40:4a:9e:0d:43:50:b2:86:ef:24: 31:80:7b:84:ea:fe:42:4c:1c:a7:cd:61:b5:93:00: 30:1b:85:64:79:de:cf:83:15:ea:b0:1c:3d:9d:18: 6b:89:a6:00:c5:7e:39:18:00:8d:62:c0:bc:66:b5: a3:ed:0a:ee:0b:e5:df:19:b8:ef:46:6e:bf:d7:3c: 5f:f7:16:75:37:d9:6f:eb:c1:90:19:f3:35:24:f0: 9f:47:f1:a3:e4:aa:04:2b:29:34:e9:13:b8:b3:31: d3:11:9b:3a:c0:f6:53:65:d3:f5:27:be:66:84:1c: 0d:d7:56:69:fe:db:03:0b:4b:c5:bf:2e:f1:d5:00: dd:c6:19:2d:1f:89:92:bd:b4:49:48:23:d9:0d:80: 45:65:6f:f5:fe:c5:df:27:d7:7c:71:6a:f4:c1:e5: 55:db:a9:ea:31:9a:78:cf:47:61:b4:f5:4b:f9:db: d9:a5:94:90:a9:4f:47:81:69:51:45:a2:3d:cd:68: 01:92:ef:2f:31:fb:06:51:cd:5c:75:04:e8:5e:1f: b4:72:22:35:74:f9:d8:b7:f6:ec:be:53:01:1d:2a: cc:bb:9b:38:8d:2e:7d:67:61:5b:e4:28:79:c9:a8: 5a:0b:4b:53:4a:b7:e3:9e:ec:58:f9:a1:c6:b4:78: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:7C:DC:49:12:92:DC:B7:82:5D:23:A9:DC:A2:C6:E2:8C:85:9D X509v3 Authority Key Identifier: keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1a:18:0b:80:37:45:d2:b8:80:27:4d:3a:8b:3c:b2:99:c3: f8:43:c6:c9:0d:a4:4b:34:6f:cb:9b:c1:8d:85:17:f6:e2:d6: 71:17:4a:ad:cb:49:99:29:f7:1b:76:df:8d:92:fd:ac:52:53: d6:b1:20:0e:8e:ed:fa:46:9e:cf:86:20:24:a5:84:ea:85:9a: 36:e8:ba:6c:3a:fd:33:ca:dc:8e:4e:9c:12:32:08:8d:40:d9: 3b:d5:b5:8c:5e:46:75:0f:b4:8f:e9:d0:03:9f:31:03:99:1f: fb:e9:15:4c:0d:d3:eb:16:68:8c:85:64:d8:b9:6d:e5:3a:f2: 58:99:a3:aa:83:99:4e:f5:0d:b6:75:dc:8f:35:17:88:92:57: da:53:8e:1d:d3:ac:bd:15:53:7d:25:a9:ad:fd:6e:09:36:ed: c7:be:79:b3:1f:b0:d5:f1:80:af:dd:9c:1a:61:da:17:06:9e: ac:5c:6c:91:71:8a:1c:8e:f6:8c:22:2e:42:1c:03:28:ac:35: fe:36:90:e8:f3:be:f5:66:57:89:7a:8c:e4:6a:35:71:1f:ed: e4:42:0f:41:e2:64:eb:b5:2c:85:00:2a:c2:75:eb:c4:78:05: d7:87:69:8f:19:9a:81:9c:3b:bd:36:d8:2d:36:e4:30:b8:d5: ed:7e:3c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlj++ddOS/yNYrNqXMZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjdiY2IwNTA1ZDQ5Njk3ZDZjNTE3MzI0MTU4NjczNmU3 YjBkNzAwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD Eyg0MTNkN2NkYzQ5MTI5MmRjYjc4MjVkMjNhOWRjYTJjNmUyOGM4NTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwXSTUBKng1DULKG7yQxgHuE6v5C TBynzWG1kwAwG4Vked7PgxXqsBw9nRhriaYAxX45GACNYsC8ZrWj7QruC+XfGbjv Rm6/1zxf9xZ1N9lv68GQGfM1JPCfR/Gj5KoEKyk06RO4szHTEZs6wPZTZdP1J75m hBwN11Zp/tsDC0vFvy7x1QDdxhktH4mSvbRJSCPZDYBFZW/1/sXfJ9d8cWr0weVV 26nqMZp4z0dhtPVL+dvZpZSQqU9HgWlRRaI9zWgBku8vMfsGUc1cdQToXh+0ciI1 dPnYt/bsvlMBHSrMu5s4jS59Z2Fb5Ch5yahaC0tTSrfjnuxY+aHGtHgR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE9fNxJEpLct4JdI6ncosbijIWdMB8GA1UdIwQY MBaAFBj3vLBQXUlpfWxRcyQVhnNuew1wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzct ZTU4NGQ5ZTQ4MDIyLzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzctZTU4NGQ5ZTQ4MDIy LzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxoYC4A3 RdK4gCdNOos8spnD+EPGyQ2kSzRvy5vBjYUX9uLWcRdKrctJmSn3G3bfjZL9rFJT 1rEgDo7t+kaez4YgJKWE6oWaNui6bDr9M8rcjk6cEjIIjUDZO9W1jF5GdQ+0j+nQ A58xA5kf++kVTA3T6xZojIVk2Llt5TryWJmjqoOZTvUNtnXcjzUXiJJX2lOOHdOs vRVTfSWprf1uCTbtx755sx+w1fGAr92cGmHaFwaerFxskXGKHI72jCIuQhwDKKw1 /jaQ6PO+9WZXiXqM5Go1cR/t5EIPQeJk67UshQAqwnXrxHgF14dpjxmagZw7vTbY LTbkMLjV7X48wg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:06 2026 by rpki-client