This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft File: gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json) Hash identifier: VVditUctTL7fyxkD8uZMhsHIpcTDdGzIO8Jw8Hib1bE= Subject key identifier: 68:1D:67:7E:ED:38:E5:7D:10:41:70:3C:D1:27:88:2B:5C:2F:12:11 Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23 Certificate issuer: /CN=813a42838d2e45ed5dad4114606d9729a6501d23 Certificate serial: 019C438FD78152200EC3A92FB0F2D6741C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft Manifest number: 106F Signing time: Mon 09 Feb 2026 18:00:26 +0000 Manifest this update: Mon 09 Feb 2026 18:00:26 +0000 Manifest next update: Tue 10 Feb 2026 18:00:26 +0000 Files and hashes: 1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: fLoMobyzcJI+FalZ2Bfi3bUOvhhTm0+PA1BOUqQi2lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d7:81:52:20:0e:c3:a9:2f:b0:f2:d6:74:1c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23 Validity Not Before: Feb 9 18:00:26 2026 GMT Not After : Feb 10 18:00:26 2026 GMT Subject: CN=681d677eed38e57d1041703cd127882b5c2f1211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:de:e0:a4:15:d6:0a:69:f3:b3:eb:66:ba: c3:15:6f:55:e8:6f:33:38:0d:26:1b:17:ae:f3:7d: b2:2a:b0:34:b1:48:c0:38:54:ad:b7:1d:2e:07:19: f7:b2:d0:2d:4d:1f:6f:78:c1:9f:c1:bc:53:ab:e0: 66:c6:6a:d3:02:d4:22:a2:b3:59:9b:c1:cd:77:04: 19:79:25:08:db:35:b7:9f:83:c5:f8:8c:f1:22:f3: 51:5d:af:90:aa:fe:66:2a:b2:cb:d3:00:7a:55:6f: 03:26:a2:df:ab:47:da:90:2a:a9:ae:b1:92:53:22: bd:f4:a9:e0:40:c5:1e:dc:8c:f8:39:f0:70:2b:19: 88:77:2e:1b:b4:7a:d4:41:8a:46:10:26:9c:52:0a: 77:cb:40:ab:fc:c1:03:55:ad:2d:25:62:84:83:11: de:15:0c:a8:28:fc:80:2b:d0:a6:ba:28:c2:ed:45: 04:ca:23:51:f5:a3:31:8a:99:34:b0:b1:26:a3:24: c3:be:a4:eb:97:eb:63:4f:14:cf:bd:ea:83:0f:b3: ae:7a:c4:b3:37:02:bd:b3:e4:1b:72:05:36:7c:54: 8e:81:9b:70:0b:10:4f:17:0c:cb:d8:a2:15:fe:0a: ac:6d:0b:45:90:b8:14:30:9c:4b:3c:80:17:45:fd: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:67:7E:ED:38:E5:7D:10:41:70:3C:D1:27:88:2B:5C:2F:12:11 X509v3 Authority Key Identifier: keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2e:14:4f:88:c6:b0:8a:20:bc:ea:9c:48:15:89:79:11:75: c4:98:e9:bb:d0:d2:93:cf:5b:a9:b9:e3:c9:5b:60:3a:e1:0d: dd:57:da:9b:e0:3b:53:6e:92:85:fa:4f:39:78:25:87:85:bd: b1:c2:87:7b:52:60:20:e0:4e:30:5c:ca:b5:6e:89:c4:24:0c: e4:88:36:62:ea:6b:91:5b:7e:46:6e:46:85:85:ca:53:21:dd: ad:0c:0b:45:ec:69:ff:9e:ce:63:74:be:d1:b9:e4:55:e2:27: 9d:1b:5a:1f:16:4b:0e:7e:ea:55:b2:ba:a1:b1:05:67:b6:a0: 2e:06:52:20:3b:e8:1e:b7:d3:ca:d3:6e:fa:8e:c8:b0:8f:3a: b0:bc:ac:4b:61:93:4f:4b:c6:16:a1:fa:d5:c0:c8:43:b8:68: fe:4a:75:65:30:51:1a:0a:d1:04:cd:c9:e7:b0:9d:88:51:ad: 69:8d:1d:c9:6e:9e:f5:f7:9b:59:2c:66:8e:35:6e:ca:70:68: 36:63:eb:7f:89:92:2a:66:7b:c5:36:ab:30:7e:2f:e5:ff:b7: c7:99:77:7f:74:f5:f9:1a:90:0a:c5:38:26:6e:f1:48:22:10: cb:20:cf:0b:9f:bb:be:91:0d:19:d1:dd:56:15:05:8e:a3:21: df:33:8a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9eBUiAOw6kvsPLWdBw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxM2E0MjgzOGQyZTQ1ZWQ1ZGFkNDExNDYwNmQ5NzI5YTY1 MDFkMjMwHhcNMjYwMjA5MTgwMDI2WhcNMjYwMjEwMTgwMDI2WjAzMTEwLwYDVQQD Eyg2ODFkNjc3ZWVkMzhlNTdkMTA0MTcwM2NkMTI3ODgyYjVjMmYxMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmje4KQV1gpp87PrZrrDFW9V6G8z OA0mGxeu832yKrA0sUjAOFSttx0uBxn3stAtTR9veMGfwbxTq+BmxmrTAtQiorNZ m8HNdwQZeSUI2zW3n4PF+IzxIvNRXa+Qqv5mKrLL0wB6VW8DJqLfq0fakCqprrGS UyK99KngQMUe3Iz4OfBwKxmIdy4btHrUQYpGECacUgp3y0Cr/MEDVa0tJWKEgxHe FQyoKPyAK9CmuijC7UUEyiNR9aMxipk0sLEmoyTDvqTrl+tjTxTPveqDD7OuesSz NwK9s+QbcgU2fFSOgZtwCxBPFwzL2KIV/gqsbQtFkLgUMJxLPIAXRf1RJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgdZ37tOOV9EEFwPNEniCtcLxIRMB8GA1UdIwQY MBaAFIE6QoONLkXtXa1BFGBtlymmUB0jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RwQ2c0MHVSZTFkclVFVVlHMlhLYVpRSFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YzM4YTMtYzIwNC00ZGNmLTljNDct NTM0OGZlNzdiYTczLzEvZ1RwQ2c0MHVSZTFkclVFVVlHMlhLYVpRSFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84YzM4YTMtYzIwNC00ZGNmLTljNDctNTM0OGZlNzdiYTcz LzEvZ1RwQ2c0MHVSZTFkclVFVVlHMlhLYVpRSFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACi4UT4jG sIogvOqcSBWJeRF1xJjpu9DSk89bqbnjyVtgOuEN3Vfam+A7U26ShfpPOXglh4W9 scKHe1JgIOBOMFzKtW6JxCQM5Ig2YuprkVt+Rm5GhYXKUyHdrQwLRexp/57OY3S+ 0bnkVeInnRtaHxZLDn7qVbK6obEFZ7agLgZSIDvoHrfTytNu+o7IsI86sLysS2GT T0vGFqH61cDIQ7ho/kp1ZTBRGgrRBM3J57CdiFGtaY0dyW6e9febWSxmjjVuynBo NmPrf4mSKmZ7xTarMH4v5f+3x5l3f3T1+RqQCsU4Jm7xSCIQyyDPC5+7vpENGdHd VhUFjqMh3zOKCg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:12 2026 by rpki-client