This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json) Hash identifier: WeZVMdjRwrv2bnObySGdV76801SbgqQ1DJM/QG+sPRo= Subject key identifier: DF:CF:CD:A9:4E:43:1F:55:CC:7F:8A:F2:C8:9D:5D:7C:D8:69:B4:AE Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Certificate serial: 019C420F967CFD69BC9DA58DD4A746FE3354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft Manifest number: 150D Signing time: Mon 09 Feb 2026 11:00:43 +0000 Manifest this update: Mon 09 Feb 2026 11:00:43 +0000 Manifest next update: Tue 10 Feb 2026 11:00:43 +0000 Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: i0+WeGUU5IAnGJIc5MlwWnS4HyKFs4YYe5Kyqp4iE2A=) 2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:96:7c:fd:69:bc:9d:a5:8d:d4:a7:46:fe:33:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Validity Not Before: Feb 9 11:00:43 2026 GMT Not After : Feb 10 11:00:43 2026 GMT Subject: CN=dfcfcda94e431f55cc7f8af2c89d5d7cd869b4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:95:97:92:2a:05:c0:68:93:86:4f:b4:49: bc:7f:8a:f5:3a:85:fe:55:c7:7e:a9:85:58:c5:aa: 27:2f:fa:d7:7e:49:24:38:74:b0:b7:ef:d9:8d:cd: eb:cb:bd:58:87:d3:17:15:a4:96:46:16:23:c6:d3: 02:6b:09:de:76:b8:74:f1:7a:98:93:f6:f2:c9:08: df:39:51:08:2f:ea:8b:5b:91:7f:ec:b5:d2:cd:6b: 00:be:90:15:37:02:6c:b8:fc:b8:ba:8a:83:3d:f9: 5c:a4:ae:17:23:9b:d1:47:2f:df:7c:3d:96:ad:f1: 7a:55:65:08:35:22:dc:77:52:c7:d7:11:40:0d:2d: 3d:99:8e:c1:b0:3e:fa:ca:8c:98:b5:28:51:ec:75: fd:81:35:0e:e9:54:1a:06:77:5c:70:60:f8:a8:c2: dc:27:f5:54:70:a5:29:1d:10:50:29:cd:38:ed:7e: 47:cb:5d:58:b9:0f:d4:e3:36:46:e4:4b:02:87:e6: df:ab:33:2a:6f:ef:f1:1a:12:da:41:f7:7b:c4:34: 0e:85:fb:84:9a:c6:2a:ec:20:85:5a:cc:3a:03:76: 40:f3:5b:b2:8d:6c:6b:28:c8:48:71:55:75:e8:fa: 78:4b:78:2c:3e:2f:73:61:8c:21:af:72:18:28:08: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CF:CD:A9:4E:43:1F:55:CC:7F:8A:F2:C8:9D:5D:7C:D8:69:B4:AE X509v3 Authority Key Identifier: keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:83:2c:76:f7:8b:32:3d:7c:03:60:52:37:3a:f8:40:10:61: 60:29:b3:05:2a:6b:b8:90:06:05:db:a5:89:9a:7f:6d:3c:4a: cc:9b:47:6c:b5:06:32:4c:dc:c4:a8:7f:28:f1:41:70:41:c1: ca:15:f7:d1:89:fa:9e:00:97:11:c5:ef:f5:ab:82:4f:58:4b: 43:c7:12:17:ff:7f:d1:2a:83:82:51:cc:b6:5a:a4:3d:22:44: f1:03:09:79:18:be:c0:1e:ee:46:c9:51:33:fc:d6:a4:cb:c2: 10:01:32:96:25:49:e8:0f:69:1e:37:35:f9:88:3c:67:de:2c: 55:3e:ca:ed:9e:28:50:49:af:66:10:ba:40:b4:9d:fe:f5:38: d9:d0:60:db:8e:f6:48:aa:2a:8d:40:aa:e3:4f:f1:1b:1a:05: aa:15:b0:a0:c3:e8:04:70:a8:fb:d4:a5:61:39:05:13:ab:6d: 41:f9:91:52:f1:d9:6d:fd:6c:ef:d9:41:49:6a:9e:67:ca:7d: aa:25:cc:0f:55:8b:14:ba:17:b5:23:2b:89:31:8c:1b:f0:0a: b3:02:8d:ec:bb:a4:18:9c:68:a6:ab:50:45:e5:21:ae:1e:8e: ac:ae:c9:5c:a3:d3:c4:06:4c:c9:3f:67:cc:94:b0:57:cd:b8: cf:49:5e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5Z8/Wm8naWN1KdG/jNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2 YTIwM2QwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD EyhkZmNmY2RhOTRlNDMxZjU1Y2M3ZjhhZjJjODlkNWQ3Y2Q4NjliNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCVl5IqBcBok4ZPtEm8f4r1OoX+ Vcd+qYVYxaonL/rXfkkkOHSwt+/Zjc3ry71Yh9MXFaSWRhYjxtMCawnedrh08XqY k/byyQjfOVEIL+qLW5F/7LXSzWsAvpAVNwJsuPy4uoqDPflcpK4XI5vRRy/ffD2W rfF6VWUINSLcd1LH1xFADS09mY7BsD76yoyYtShR7HX9gTUO6VQaBndccGD4qMLc J/VUcKUpHRBQKc047X5Hy11YuQ/U4zZG5EsCh+bfqzMqb+/xGhLaQfd7xDQOhfuE msYq7CCFWsw6A3ZA81uyjWxrKMhIcVV16Pp4S3gsPi9zYYwhr3IYKAiSqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/PzalOQx9VzH+K8sidXXzYabSuMB8GA1UdIwQY MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt NmE2MTM5NGY2MjY5LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5 LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIMsdveL Mj18A2BSNzr4QBBhYCmzBSpruJAGBduliZp/bTxKzJtHbLUGMkzcxKh/KPFBcEHB yhX30Yn6ngCXEcXv9auCT1hLQ8cSF/9/0SqDglHMtlqkPSJE8QMJeRi+wB7uRslR M/zWpMvCEAEyliVJ6A9pHjc1+Yg8Z94sVT7K7Z4oUEmvZhC6QLSd/vU42dBg2472 SKoqjUCq40/xGxoFqhWwoMPoBHCo+9SlYTkFE6ttQfmRUvHZbf1s79lBSWqeZ8p9 qiXMD1WLFLoXtSMriTGMG/AKswKN7LukGJxopqtQReUhrh6OrK7JXKPTxAZMyT9n zJSwV824z0leIw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:42 2026 by rpki-client