This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json) Hash identifier: UpKWRxyXSVgNxHWtJKO1SG3rCw0u7TISpnsdKf91jNA= Subject key identifier: 08:7F:87:72:5B:6B:B7:96:1B:C1:1B:3A:15:7D:F6:EF:09:F5:E0:F3 Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Certificate serial: 019C432234B3D49DFE8DC5BFD7F9FA305F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 16:00:40 +0000 Manifest this update: Mon 09 Feb 2026 16:00:40 +0000 Manifest next update: Tue 10 Feb 2026 16:00:40 +0000 Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: W0tW9iHj1N2yKefLiWOpcCq7cStxwAwXCp2JeQuP3ds=) 2: WwK0wQVJ37gM0FPBexlboGpvdWY.roa (hash: 8GMUVCoh7go5d/bcS0qlu+v+yNBlwVof7wqc0z0ILNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:34:b3:d4:9d:fe:8d:c5:bf:d7:f9:fa:30:5f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Validity Not Before: Feb 9 16:00:40 2026 GMT Not After : Feb 10 16:00:40 2026 GMT Subject: CN=087f87725b6bb7961bc11b3a157df6ef09f5e0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7b:dc:2c:45:20:fe:01:60:7d:e4:6e:01:1b: 72:92:de:44:66:67:48:6a:de:b4:dd:2d:10:e1:7b: 93:b0:c6:ba:60:ef:8b:85:1f:69:d7:d9:5d:bb:98: 08:8d:38:bd:23:8f:17:1b:0b:c9:29:5d:0c:33:c5: fe:6b:5c:cd:9f:59:b8:0f:64:ed:43:8c:2d:b3:fb: 23:27:63:c7:ad:d4:49:db:15:11:fa:8b:bb:52:d7: 35:2f:e4:b7:22:08:6f:a2:af:f7:7e:37:dc:66:83: b6:66:f9:be:9d:01:e6:37:b7:79:9f:3c:1e:e3:82: b5:c1:3a:29:7c:b4:5d:7b:bf:c7:83:f3:bc:2f:0d: c4:f8:6a:b2:c4:b4:72:55:f1:dd:ea:45:bb:c4:27: f9:66:57:4b:c3:86:aa:e0:2f:ef:f7:ef:a5:e2:57: 3e:6c:f4:a7:3c:d8:04:13:f9:21:d7:cf:88:0f:ef: 15:66:4e:44:2a:52:e7:65:b3:64:7e:59:c5:9d:85: 19:06:7e:d4:b1:18:00:ba:cc:1f:ad:5f:a1:63:a6: 72:f6:7d:42:6f:6c:6f:b6:ea:8e:ce:65:62:55:95: 49:7f:ee:31:ed:04:9d:9a:c4:54:e4:87:ec:73:7d: c8:5a:57:e3:86:06:9f:4c:fa:f5:15:01:6d:e8:a9: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7F:87:72:5B:6B:B7:96:1B:C1:1B:3A:15:7D:F6:EF:09:F5:E0:F3 X509v3 Authority Key Identifier: keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:64:a9:21:93:e7:e1:d3:78:81:b1:58:18:b0:0e:23:58: e1:1b:17:30:03:74:83:0a:72:59:c9:69:a5:93:a2:73:ce:88: d0:f2:4a:8d:12:34:55:27:6a:43:b8:70:ed:14:f2:ee:dd:4a: 46:d2:9e:b3:49:4b:2b:49:ba:20:c1:50:d9:00:eb:2c:38:87: af:c3:77:91:a2:6a:11:58:79:77:55:44:20:25:8f:38:92:cf: 42:56:3b:89:a3:6e:4a:f5:77:a6:16:96:92:be:21:d1:5a:37: 56:5b:c4:0b:a0:5f:7b:1c:3b:97:d6:04:61:27:b4:d5:a0:7b: 8b:40:13:c7:48:e7:f9:86:be:3d:27:7d:ac:f6:8b:5c:42:eb: 3d:04:02:98:00:19:40:22:61:43:37:09:bb:e2:7a:b9:aa:35: 02:f4:46:3c:40:5b:92:a0:68:78:10:39:92:17:ac:c6:3a:68: ed:35:02:04:3f:0b:ec:24:67:21:10:e7:b0:68:47:b9:b5:76: de:80:2c:28:65:07:b5:d5:c3:44:d3:37:9a:7b:68:83:de:12: 20:cc:2a:d2:32:a0:32:41:cd:b8:b0:7d:7e:03:d1:1f:f0:b5: 03:9d:9b:71:d8:b0:78:48:9d:3b:10:04:31:b2:5d:b7:7b:98: f8:ee:4e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjSz1J3+jcW/1/n6MF9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjczNzdjZTVlZmEzY2EwMzBlYmI0ZGQ3NzU2N2ZjMDMy ZmNkMDEwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD EygwODdmODc3MjViNmJiNzk2MWJjMTFiM2ExNTdkZjZlZjA5ZjVlMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HvcLEUg/gFgfeRuARtykt5EZmdI at603S0Q4XuTsMa6YO+LhR9p19ldu5gIjTi9I48XGwvJKV0MM8X+a1zNn1m4D2Tt Q4wts/sjJ2PHrdRJ2xUR+ou7Utc1L+S3Ighvoq/3fjfcZoO2Zvm+nQHmN7d5nzwe 44K1wTopfLRde7/Hg/O8Lw3E+GqyxLRyVfHd6kW7xCf5ZldLw4aq4C/v9++l4lc+ bPSnPNgEE/kh18+ID+8VZk5EKlLnZbNkflnFnYUZBn7UsRgAuswfrV+hY6Zy9n1C b2xvtuqOzmViVZVJf+4x7QSdmsRU5Ifsc33IWlfjhgafTPr1FQFt6KmnSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh/h3Jba7eWG8EbOhV99u8J9eDzMB8GA1UdIwQY MBaAFBi3N3zl76PKAw67Tdd1Z/wDL80BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMt YjViOGY1Nzg0ZGZlLzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMtYjViOGY1Nzg0ZGZl LzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGRkqSGT 5+HTeIGxWBiwDiNY4RsXMAN0gwpyWclppZOic86I0PJKjRI0VSdqQ7hw7RTy7t1K RtKes0lLK0m6IMFQ2QDrLDiHr8N3kaJqEVh5d1VEICWPOJLPQlY7iaNuSvV3phaW kr4h0Vo3VlvEC6Bfexw7l9YEYSe01aB7i0ATx0jn+Ya+PSd9rPaLXELrPQQCmAAZ QCJhQzcJu+J6uao1AvRGPEBbkqBoeBA5khesxjpo7TUCBD8L7CRnIRDnsGhHubV2 3oAsKGUHtdXDRNM3mntog94SIMwq0jKgMkHNuLB9fgPRH/C1A52bcdiweEidOxAE MbJdt3uY+O5OHQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:49 2026 by rpki-client