This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json) Hash identifier: FHAjLojY2ojt+LnHWObqOSJXZkTM3PcWk9iTbYg3qZg= Subject key identifier: 36:08:60:8A:95:26:05:A3:76:08:C7:10:F7:AD:1C:DD:26:0C:DC:47 Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4 Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4 Certificate serial: 019C427DBD49F05ED0C16D244C7B96C87270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft Manifest number: 1297 Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: UQRx/m8FLUhnv3vnlMoV/5JNV69e/TRNIIzO8HoNNug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bd:49:f0:5e:d0:c1:6d:24:4c:7b:96:c8:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4 Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=3608608a952605a37608c710f7ad1cdd260cdc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:58:07:0a:5d:e9:f7:e9:94:2f:bd:1d:a1: a7:9d:0e:f2:c5:de:7d:fd:10:33:27:27:ff:dd:a6: 33:a2:59:31:06:fb:d2:a1:aa:01:57:b2:52:07:b3: a9:3c:17:55:c6:f6:99:c6:dc:e1:05:fb:04:23:2f: 2d:65:3e:55:9a:3e:6d:73:e9:f3:e2:e2:35:35:c6: 98:1c:de:33:bf:50:29:f8:8a:7a:40:bf:4c:aa:33: 86:3b:ae:8f:30:ab:14:da:fb:18:ed:84:a8:b3:2f: 32:31:c3:9a:cd:6d:08:d5:39:cd:e2:31:cc:7d:d6: 3a:b8:d9:ec:c4:8d:e6:86:87:e3:7f:7e:5c:33:2f: 37:33:bc:d4:87:e9:e7:5d:71:ab:3a:af:67:9c:9c: b3:4b:1c:f5:c8:ed:3c:4b:dc:8e:26:3d:8f:24:db: ed:bc:8e:68:27:c3:5b:70:3d:15:96:8b:2f:0d:c8: 9a:ce:a9:a7:a9:6a:87:6d:a5:7c:b7:9e:5a:cb:0a: 40:64:25:fe:a5:44:7b:f4:d6:23:f0:20:5c:80:4d: c3:28:62:ff:91:d8:1a:74:7d:f1:3e:ea:8f:82:06: 05:2a:19:50:76:e9:ba:c3:9b:5a:8c:77:b3:b5:2a: c2:af:62:0a:95:3f:b5:95:76:7f:89:77:02:26:1a: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:60:8A:95:26:05:A3:76:08:C7:10:F7:AD:1C:DD:26:0C:DC:47 X509v3 Authority Key Identifier: keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7a:16:4b:25:10:ca:56:99:f6:80:b2:02:33:7b:5a:34:76: c4:34:ea:9d:bf:ec:9b:84:10:08:54:ce:d6:eb:2e:84:ce:28: de:c3:7d:7f:d5:6d:ac:6a:2c:bf:8e:4e:46:5f:d5:93:a9:f6: 16:e6:e8:db:b4:46:88:2e:34:08:6b:00:11:a8:3d:67:b2:10: 6a:ab:05:e6:51:01:30:03:c5:57:ee:1d:98:7c:d5:50:81:d8: 43:b7:26:df:de:79:74:fc:77:4c:a0:20:ff:36:0e:09:00:ba: fc:c6:06:65:4c:82:4f:6b:48:17:47:4c:59:17:89:9b:24:c6: 39:c7:da:65:a7:5e:75:e8:01:9c:5d:79:bd:c0:fb:6d:a1:f3: 79:fe:e4:19:12:84:2e:ab:84:87:40:b6:1c:eb:66:64:a5:24: 62:98:f4:22:d1:5b:8a:00:10:63:af:91:38:6e:80:e6:fa:7a: c4:4c:81:18:7a:ac:cc:56:3e:4b:6c:f0:85:b0:a4:69:74:9f: 83:6e:44:cb:3f:33:f1:14:0d:2d:26:8d:21:f0:38:e3:20:db: 90:19:22:43:4d:0f:a6:6a:f5:0f:d1:d0:39:37:d3:e8:fb:c4: 38:a9:c0:f4:60:16:be:46:ef:29:23:b0:fa:90:bd:80:17:59: d2:bf:15:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfb1J8F7QwW0kTHuWyHJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNDhjNzUzZDQ2Y2RjOWU5ODAwOWVlNGRiODEwNzIzMmMw MmVhZjQwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD EygzNjA4NjA4YTk1MjYwNWEzNzYwOGM3MTBmN2FkMWNkZDI2MGNkYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7hYBwpd6ffplC+9HaGnnQ7yxd59 /RAzJyf/3aYzolkxBvvSoaoBV7JSB7OpPBdVxvaZxtzhBfsEIy8tZT5Vmj5tc+nz 4uI1NcaYHN4zv1Ap+Ip6QL9MqjOGO66PMKsU2vsY7YSosy8yMcOazW0I1TnN4jHM fdY6uNnsxI3mhofjf35cMy83M7zUh+nnXXGrOq9nnJyzSxz1yO08S9yOJj2PJNvt vI5oJ8NbcD0VlosvDciazqmnqWqHbaV8t55aywpAZCX+pUR79NYj8CBcgE3DKGL/ kdgadH3xPuqPggYFKhlQdum6w5tajHeztSrCr2IKlT+1lXZ/iXcCJhq90QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYIYIqVJgWjdgjHEPetHN0mDNxHMB8GA1UdIwQY MBaAFIJIx1PUbNyemACe5NuBByMsAur0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2tqSFU5UnMzSjZZQUo3azI0RUhJeXdDNnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xZmE0MjYtNDBkNi00ZWVhLWJiYWMt OTEzMzIyNWM5NDI1LzEvZ2tqSFU5UnMzSjZZQUo3azI0RUhJeXdDNnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xZmE0MjYtNDBkNi00ZWVhLWJiYWMtOTEzMzIyNWM5NDI1 LzEvZ2tqSFU5UnMzSjZZQUo3azI0RUhJeXdDNnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanoWSyUQ ylaZ9oCyAjN7WjR2xDTqnb/sm4QQCFTO1usuhM4o3sN9f9VtrGosv45ORl/Vk6n2 Fubo27RGiC40CGsAEag9Z7IQaqsF5lEBMAPFV+4dmHzVUIHYQ7cm3955dPx3TKAg /zYOCQC6/MYGZUyCT2tIF0dMWReJmyTGOcfaZadedegBnF15vcD7baHzef7kGRKE LquEh0C2HOtmZKUkYpj0ItFbigAQY6+ROG6A5vp6xEyBGHqszFY+S2zwhbCkaXSf g25Eyz8z8RQNLSaNIfA44yDbkBkiQ00Ppmr1D9HQOTfT6PvEOKnA9GAWvkbvKSOw +pC9gBdZ0r8Vhw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:58 2026 by rpki-client