This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft File: gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json) Hash identifier: ioJMP4LVJBvJ7/1AevAgatuCUk+YfcZr98DNkRu4PrM= Subject key identifier: F5:43:AC:98:63:8F:64:F4:C7:00:0E:CF:43:3A:34:A9:07:C7:08:99 Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25 Certificate issuer: /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225 Certificate serial: 019C427DCF065F976EC079BFBB7D0082F6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 13:01:07 +0000 Manifest this update: Mon 09 Feb 2026 13:01:07 +0000 Manifest next update: Tue 10 Feb 2026 13:01:07 +0000 Files and hashes: 1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: b3bBvku65u6k3J0+8AQtx+nirlcOCwv76O+uxKK7q3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cf:06:5f:97:6e:c0:79:bf:bb:7d:00:82:f6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225 Validity Not Before: Feb 9 13:01:07 2026 GMT Not After : Feb 10 13:01:07 2026 GMT Subject: CN=f543ac98638f64f4c7000ecf433a34a907c70899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:50:ec:9d:72:ca:27:e6:e0:1a:bb:fa:35:b5: 9c:a5:de:6a:3b:76:9b:cf:52:2e:c7:08:a5:6f:76: 49:f2:02:17:f7:39:ce:16:f4:a9:ed:df:58:33:32: 3a:b1:81:cd:fe:c2:4c:db:dc:60:c3:a0:43:12:de: b4:6a:15:19:9a:6b:c6:f5:0a:5d:75:62:86:a1:d5: 19:e7:f2:51:3a:17:24:5d:b4:97:1b:a2:8d:6f:10: a3:9e:98:06:54:5a:0a:50:b9:66:68:89:81:2d:4c: b6:e1:2b:c0:48:80:fe:cb:63:a8:ee:d3:7c:07:27: eb:66:9b:ee:5b:c2:20:fa:fb:70:23:b4:ee:af:33: 10:af:bb:c9:11:d0:6d:de:6f:41:42:28:af:44:e1: 67:40:56:63:85:29:8a:cd:bb:7d:f1:e2:59:33:91: 1a:4b:74:54:ec:e9:d4:f0:aa:e6:7a:ed:b9:96:a3: 9f:b1:96:2e:0e:81:16:5d:bb:b0:41:94:8d:54:19: 8e:55:4c:6d:e4:89:5b:ad:c6:91:c4:4c:8c:b8:70: 01:79:04:1a:96:d1:9f:5a:17:2f:a0:4a:0b:cf:3c: b9:50:da:8b:0b:19:c5:72:e7:db:a7:65:72:08:ef: 24:db:ed:d5:b8:61:1b:1e:05:ca:cc:ea:27:b3:cb: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:AC:98:63:8F:64:F4:C7:00:0E:CF:43:3A:34:A9:07:C7:08:99 X509v3 Authority Key Identifier: keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cb:21:10:05:d3:a0:4c:11:f2:85:12:f7:13:a8:7d:28:a1: a4:b6:f0:55:8f:6e:53:2e:8e:02:57:18:68:41:03:76:8c:1f: 50:52:1b:9f:43:98:5e:e4:cf:27:74:7d:26:97:6f:3c:e3:8b: cc:06:ac:e2:d7:20:e7:01:d7:93:08:40:37:d0:89:5c:73:4f: fb:63:dd:08:99:0a:67:7f:ce:03:78:13:9c:73:4c:5a:c5:0f: 7e:98:23:76:a1:0e:91:eb:bc:62:93:5f:6b:91:21:b9:df:83: 52:86:0d:95:40:f7:f4:53:28:ee:c5:08:0b:99:52:20:1d:95: 41:64:aa:79:8e:10:1a:dd:3a:98:e4:f7:82:c4:a0:3c:17:41: 4a:77:7e:9a:28:b4:68:a5:b5:05:10:b9:dd:2e:13:f9:5f:43: ee:94:86:5a:8c:1d:c1:94:10:86:75:21:54:1c:48:85:72:89: a6:c7:51:b9:21:12:9b:60:dd:71:e8:b2:86:43:d3:79:1f:d2: 48:a3:43:17:57:bc:54:60:6c:e0:33:20:98:49:c4:20:8e:eb: 2d:e3:20:92:51:27:11:b7:b0:b7:6b:f8:06:77:53:ad:62:b9: 28:3c:48:e8:3e:91:40:a4:bb:e2:39:fc:06:a7:fb:87:37:42: 27:6c:94:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfc8GX5duwHm/u30AgvbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYmEyN2JmZDg2YTgxMGExNzk1N2QxZjcyNmZlMTYwZDRl YjMyMjUwHhcNMjYwMjA5MTMwMTA3WhcNMjYwMjEwMTMwMTA3WjAzMTEwLwYDVQQD EyhmNTQzYWM5ODYzOGY2NGY0YzcwMDBlY2Y0MzNhMzRhOTA3YzcwODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FDsnXLKJ+bgGrv6NbWcpd5qO3ab z1Iuxwilb3ZJ8gIX9znOFvSp7d9YMzI6sYHN/sJM29xgw6BDEt60ahUZmmvG9Qpd dWKGodUZ5/JROhckXbSXG6KNbxCjnpgGVFoKULlmaImBLUy24SvASID+y2Oo7tN8 ByfrZpvuW8Ig+vtwI7TurzMQr7vJEdBt3m9BQiivROFnQFZjhSmKzbt98eJZM5Ea S3RU7OnU8Krmeu25lqOfsZYuDoEWXbuwQZSNVBmOVUxt5IlbrcaRxEyMuHABeQQa ltGfWhcvoEoLzzy5UNqLCxnFcufbp2VyCO8k2+3VuGEbHgXKzOons8tz/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVDrJhjj2T0xwAOz0M6NKkHxwiZMB8GA1UdIwQY MBaAFIC6J7/YaoEKF5V9H3Jv4WDU6zIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQt MDM2ZTdlZmM5YWNhLzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQtMDM2ZTdlZmM5YWNh LzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8shEAXT oEwR8oUS9xOofSihpLbwVY9uUy6OAlcYaEEDdowfUFIbn0OYXuTPJ3R9JpdvPOOL zAas4tcg5wHXkwhAN9CJXHNP+2PdCJkKZ3/OA3gTnHNMWsUPfpgjdqEOkeu8YpNf a5Ehud+DUoYNlUD39FMo7sUIC5lSIB2VQWSqeY4QGt06mOT3gsSgPBdBSnd+mii0 aKW1BRC53S4T+V9D7pSGWowdwZQQhnUhVBxIhXKJpsdRuSESm2DdceiyhkPTeR/S SKNDF1e8VGBs4DMgmEnEII7rLeMgklEnEbewt2v4BndTrWK5KDxI6D6RQKS74jn8 Bqf7hzdCJ2yUJA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:08 2026 by rpki-client