This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json) Hash identifier: IkIb5yixn7OuToncZtu375FcbTkiONpKct+AurJVS3Q= Subject key identifier: DE:68:46:AC:76:BF:5A:AE:8A:56:91:9E:AB:0C:39:C5:10:AF:1C:1E Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c Certificate serial: 019C41A1AC7F24F13E9F5DA678B9ECCB99D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft Manifest number: 078C Signing time: Mon 09 Feb 2026 09:00:40 +0000 Manifest this update: Mon 09 Feb 2026 09:00:40 +0000 Manifest next update: Tue 10 Feb 2026 09:00:40 +0000 Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: GRyYmQxEND0CeDmrmtGkhc7c4BgfAsVmi/8+sxLrMgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ac:7f:24:f1:3e:9f:5d:a6:78:b9:ec:cb:99:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c Validity Not Before: Feb 9 09:00:40 2026 GMT Not After : Feb 10 09:00:40 2026 GMT Subject: CN=de6846ac76bf5aae8a56919eab0c39c510af1c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:c9:55:a4:73:3b:d0:90:3f:cf:d2:34:34: 4c:a2:9a:8a:51:86:58:66:aa:b2:78:39:01:ea:ed: 53:59:f7:e5:a7:88:a7:fa:db:c5:6b:f7:69:10:80: 5e:75:89:40:24:7e:ee:97:c5:67:e0:81:9e:10:75: a9:bb:3a:c3:f4:87:0a:49:aa:92:68:03:2f:aa:14: ef:01:c3:cd:c1:dd:39:28:91:44:79:9e:af:a3:ff: 6d:81:7d:8f:d0:30:02:98:a7:94:78:f4:6f:d7:ca: 2d:da:dc:4d:b0:bf:62:d7:2f:1e:6f:7a:51:85:9d: 1d:8c:5f:91:9d:5a:44:15:dc:43:34:10:0e:8e:62: 22:5a:2c:3d:77:ee:16:96:ec:d3:88:46:a1:04:1f: ba:aa:bd:7c:d3:1d:34:f4:93:c5:3d:3d:44:6c:5a: e9:66:1f:78:6a:7c:80:95:65:b7:85:5f:0f:5c:f1: 7f:ec:75:e3:4c:07:98:e4:db:99:4d:f2:13:ba:26: 67:58:c4:bf:6c:92:02:8f:89:92:fe:12:26:e3:ef: e3:80:05:fd:e2:21:41:d8:d1:f4:d3:c5:10:f8:f2: 1d:a6:87:34:ec:75:8e:ac:ae:8d:1b:71:ab:2e:43: ad:a3:f5:12:4b:29:10:f4:74:f7:98:c3:31:ec:5e: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:46:AC:76:BF:5A:AE:8A:56:91:9E:AB:0C:39:C5:10:AF:1C:1E X509v3 Authority Key Identifier: keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:22:08:91:5c:81:aa:9c:70:e6:69:9b:34:fb:7d:aa:60:22: 4d:c7:a2:c7:e3:9f:40:5b:5c:a3:08:44:12:d3:be:49:4d:d2: eb:bc:dd:7e:a8:41:0e:7a:55:cb:90:3e:7a:fc:f8:03:1e:8e: 38:17:3d:76:b8:19:20:a1:95:96:f6:bf:6c:4f:73:57:1e:04: 83:a2:08:8b:c8:90:51:7c:eb:a4:e8:17:c9:2f:cb:95:f8:32: 48:e0:ab:a8:44:42:ab:43:23:85:0e:e7:fe:dd:63:69:63:97: 0f:08:5a:8a:dd:63:74:fd:8e:71:4e:ad:b0:a9:a2:3f:3f:a3: 70:f6:82:48:b1:b5:15:0b:63:06:25:09:57:61:f3:23:cf:98: a7:ec:ac:80:52:8a:cc:eb:ce:3d:7b:1c:32:7a:83:62:80:a7: b8:18:68:dc:60:84:6d:18:6d:df:2e:75:a2:2c:03:48:09:8f: d9:cd:0d:9d:62:45:69:b2:cf:fb:03:29:ac:0d:3f:d6:de:82: d0:eb:b1:30:75:96:ac:19:e8:ec:31:7d:82:c1:15:8a:fd:4a: cb:bd:1c:48:54:ce:9e:ab:00:17:56:95:8f:a5:7a:0c:c7:d7: 17:fd:d3:94:83:5e:22:5e:4c:c2:c1:aa:93:9f:a2:af:9d:0b: 2b:95:7f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoax/JPE+n12meLnsy5nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjg4ODc5MWU0N2YxN2JiZWExZjUxYjljOTc2OTc3NjI0 ZjA0MWMwHhcNMjYwMjA5MDkwMDQwWhcNMjYwMjEwMDkwMDQwWjAzMTEwLwYDVQQD EyhkZTY4NDZhYzc2YmY1YWFlOGE1NjkxOWVhYjBjMzljNTEwYWYxYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu3JVaRzO9CQP8/SNDRMopqKUYZY ZqqyeDkB6u1TWfflp4in+tvFa/dpEIBedYlAJH7ul8Vn4IGeEHWpuzrD9IcKSaqS aAMvqhTvAcPNwd05KJFEeZ6vo/9tgX2P0DACmKeUePRv18ot2txNsL9i1y8eb3pR hZ0djF+RnVpEFdxDNBAOjmIiWiw9d+4WluzTiEahBB+6qr180x009JPFPT1EbFrp Zh94anyAlWW3hV8PXPF/7HXjTAeY5NuZTfITuiZnWMS/bJICj4mS/hIm4+/jgAX9 4iFB2NH008UQ+PIdpoc07HWOrK6NG3GrLkOto/USSykQ9HT3mMMx7F5ekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5oRqx2v1quilaRnqsMOcUQrxweMB8GA1UdIwQY MBaAFIK4iHkeR/F7vqH1G5yXaXdiTwQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDct NGU5MWQ3YTdkOWNlLzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDctNGU5MWQ3YTdkOWNl LzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSIIkVyB qpxw5mmbNPt9qmAiTceix+OfQFtcowhEEtO+SU3S67zdfqhBDnpVy5A+evz4Ax6O OBc9drgZIKGVlva/bE9zVx4Eg6IIi8iQUXzrpOgXyS/LlfgySOCrqERCq0MjhQ7n /t1jaWOXDwhait1jdP2OcU6tsKmiPz+jcPaCSLG1FQtjBiUJV2HzI8+Yp+ysgFKK zOvOPXscMnqDYoCnuBho3GCEbRht3y51oiwDSAmP2c0NnWJFabLP+wMprA0/1t6C 0OuxMHWWrBno7DF9gsEViv1Ky70cSFTOnqsAF1aVj6V6DMfXF/3TlINeIl5MwsGq k5+ir50LK5V/5g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:37 2026 by rpki-client