This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json) Hash identifier: VMayglTvRmrmfE7qXQwfK8lL+wiJ2PN2Xe74rmlazN8= Subject key identifier: 61:A5:D7:63:24:25:B2:A4:AA:39:A6:23:BA:FB:DF:7C:20:A9:62:96 Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54 Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54 Certificate serial: 019C42B42306BCA5DAD02BED3B77695E5D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft Manifest number: 02C5 Signing time: Mon 09 Feb 2026 14:00:27 +0000 Manifest this update: Mon 09 Feb 2026 14:00:27 +0000 Manifest next update: Tue 10 Feb 2026 14:00:27 +0000 Files and hashes: 1: XNNDjNoOu_LuV45c4vtNYBjjTPg.roa (hash: P6Hg46pm5YZnREJ4HE6uOmX9gYMa63KvRqf51l0pf9U=) 2: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: XvSoGDKVvkga/yeEwfrgpwI69UtDcurfGMrS+6a0TfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:23:06:bc:a5:da:d0:2b:ed:3b:77:69:5e:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819ca93d13ec213591289594c41763ac07046c54 Validity Not Before: Feb 9 14:00:27 2026 GMT Not After : Feb 10 14:00:27 2026 GMT Subject: CN=61a5d7632425b2a4aa39a623bafbdf7c20a96296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:5c:e8:a2:af:4f:44:f2:24:54:94:80:ae: 35:8b:04:a9:c8:fa:f0:eb:48:98:4d:4b:d5:2c:33: 84:95:ac:64:af:94:de:d1:43:aa:ba:61:c7:d6:9f: a1:4e:92:c7:71:e4:58:79:db:92:dc:8d:3f:ea:97: f9:64:fe:13:81:08:14:b0:04:8b:1f:cb:71:e4:4d: 80:9f:b4:26:f7:f3:82:80:56:d8:76:03:e7:17:99: 9a:15:e1:34:97:fe:6b:89:3b:f7:08:99:04:e8:b5: 7c:ba:9c:89:86:7c:41:3a:1d:dc:8f:cb:58:d3:24: 97:b2:5a:1d:2f:ce:53:02:e5:c0:d8:e4:c3:fd:76: 72:3e:49:e6:f1:6b:76:8c:28:17:03:9c:70:ed:1e: 8a:2e:63:17:f9:47:4d:92:6b:92:52:d4:a9:a5:34: e0:18:28:de:64:07:71:fc:1c:1b:e2:ed:19:34:d7: 00:64:f2:b9:4e:09:b5:ee:a7:86:85:33:f7:c6:82: 29:13:27:5d:47:2f:e1:51:58:39:3f:6a:af:39:f6: ce:73:3c:3c:d1:34:39:59:83:f7:25:ca:5c:af:9b: c0:a2:05:cf:e9:bb:0e:64:f4:d9:bb:5c:51:74:5d: 94:00:c5:9a:ab:5e:8f:4c:6b:1b:07:02:2f:2e:c9: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A5:D7:63:24:25:B2:A4:AA:39:A6:23:BA:FB:DF:7C:20:A9:62:96 X509v3 Authority Key Identifier: keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:6c:49:f3:3f:be:09:3f:23:7a:f2:91:b6:7f:4a:88:ab:aa: 75:21:5e:12:48:ad:c4:1f:0e:d5:0e:2e:cb:f2:2e:09:38:c7: 83:85:c8:03:04:e7:6a:46:7c:83:49:86:bd:68:22:9e:85:cd: 64:82:44:d3:93:ad:5c:b6:af:cd:0a:e7:75:1d:60:2b:d3:18: 40:8b:be:59:9f:b1:c8:73:cb:c7:4b:ea:09:14:b7:cb:38:29: 25:3e:c3:c8:1b:53:88:26:18:36:81:71:98:06:c3:ec:90:ee: 2b:ae:5a:fe:5e:34:a1:4c:c1:b8:66:11:6f:28:6d:08:23:c1: 68:f9:9f:41:3d:18:d5:c6:ee:7c:04:78:a7:67:18:dd:12:62: 8f:22:b2:b7:88:86:6b:57:74:88:b8:66:e3:0d:83:48:12:10: 34:91:62:de:cc:28:e5:35:7f:ca:03:ed:5b:d2:9f:ae:1d:19: 09:26:e1:eb:ac:c1:f0:cb:01:d0:63:21:59:2a:fe:96:e8:95: fd:9e:7b:37:0e:1e:91:ad:84:8b:43:3c:58:71:78:b3:6b:2c: ba:84:3e:13:59:b7:bb:b4:81:e8:68:b4:8b:c9:dd:92:d7:8b: 60:59:e2:a5:d1:02:fd:68:44:26:b8:19:7e:96:c0:ef:10:72: 46:0e:b8:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCMGvKXa0CvtO3dpXl1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOWNhOTNkMTNlYzIxMzU5MTI4OTU5NGM0MTc2M2FjMDcw NDZjNTQwHhcNMjYwMjA5MTQwMDI3WhcNMjYwMjEwMTQwMDI3WjAzMTEwLwYDVQQD Eyg2MWE1ZDc2MzI0MjViMmE0YWEzOWE2MjNiYWZiZGY3YzIwYTk2Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrZc6KKvT0TyJFSUgK41iwSpyPrw 60iYTUvVLDOElaxkr5Te0UOqumHH1p+hTpLHceRYeduS3I0/6pf5ZP4TgQgUsASL H8tx5E2An7Qm9/OCgFbYdgPnF5maFeE0l/5riTv3CJkE6LV8upyJhnxBOh3cj8tY 0ySXslodL85TAuXA2OTD/XZyPknm8Wt2jCgXA5xw7R6KLmMX+UdNkmuSUtSppTTg GCjeZAdx/Bwb4u0ZNNcAZPK5Tgm17qeGhTP3xoIpEyddRy/hUVg5P2qvOfbOczw8 0TQ5WYP3Jcpcr5vAogXP6bsOZPTZu1xRdF2UAMWaq16PTGsbBwIvLsn1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGl12MkJbKkqjmmI7r733wgqWKWMB8GA1UdIwQY MBaAFIGcqT0T7CE1kSiVlMQXY6wHBGxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81Zjk1YmUtNjI2Ny00N2JiLTlhMjkt YjAwZDAzZjFiN2E0LzEvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81Zjk1YmUtNjI2Ny00N2JiLTlhMjktYjAwZDAzZjFiN2E0 LzEvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumxJ8z++ CT8jevKRtn9KiKuqdSFeEkitxB8O1Q4uy/IuCTjHg4XIAwTnakZ8g0mGvWginoXN ZIJE05OtXLavzQrndR1gK9MYQIu+WZ+xyHPLx0vqCRS3yzgpJT7DyBtTiCYYNoFx mAbD7JDuK65a/l40oUzBuGYRbyhtCCPBaPmfQT0Y1cbufAR4p2cY3RJijyKyt4iG a1d0iLhm4w2DSBIQNJFi3swo5TV/ygPtW9Kfrh0ZCSbh66zB8MsB0GMhWSr+luiV /Z57Nw4eka2Ei0M8WHF4s2ssuoQ+E1m3u7SB6Gi0i8ndkteLYFnipdEC/WhEJrgZ fpbA7xByRg648A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:14 2026 by rpki-client