This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json) Hash identifier: OZGmAq/KfbVmBWtg3rWlh4QHA3FWO1MZv11YxHPCGjE= Subject key identifier: 33:DE:38:E1:F5:BB:CE:6B:08:08:A3:A5:9E:F1:11:56:65:62:71:D2 Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6 Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6 Certificate serial: 019C43227116D54C2A0D377366546CEE43D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft Manifest number: 1354 Signing time: Mon 09 Feb 2026 16:00:56 +0000 Manifest this update: Mon 09 Feb 2026 16:00:56 +0000 Manifest next update: Tue 10 Feb 2026 16:00:56 +0000 Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: bx5gtpodDmmPBmS+5ckpz4wqHRXvsmOZ1WGRm1ccjbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:71:16:d5:4c:2a:0d:37:73:66:54:6c:ee:43:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6 Validity Not Before: Feb 9 16:00:56 2026 GMT Not After : Feb 10 16:00:56 2026 GMT Subject: CN=33de38e1f5bbce6b0808a3a59ef11156656271d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:83:87:19:41:61:0f:a1:23:a4:cb:35:f7: 21:a7:15:ba:ad:c7:a5:ec:dd:5a:6e:18:e5:0c:37: fc:2a:5e:a4:fb:77:22:92:69:3e:a6:60:13:0f:31: 95:d3:6a:57:8b:c2:81:12:66:a5:ec:e9:8e:bd:9e: 4c:b6:59:aa:c2:7a:e2:ff:f2:88:b6:e6:98:ae:20: 8d:b0:3a:20:f5:71:a1:5d:15:8f:e5:e7:8b:f9:75: 21:cf:43:49:3c:86:2f:1a:11:59:50:a8:85:64:9c: f9:46:82:94:4a:78:da:28:fa:5a:5a:45:4a:89:40: 24:94:83:c7:48:db:0a:80:49:03:fd:60:37:71:75: 50:83:35:54:98:d4:29:c3:6c:e6:28:a7:45:ad:bb: c4:8e:08:db:9c:67:40:f9:bc:4d:a2:76:c1:51:8d: 30:92:ae:86:a4:bb:a8:54:a4:27:5a:77:6c:f9:0e: af:22:65:f3:cb:d6:0b:b8:e2:1b:19:bf:f6:00:87: ad:ee:24:b1:44:99:e1:6b:42:78:22:e0:e0:47:48: 06:86:37:88:7e:a1:bb:0c:e6:4e:86:3e:b8:57:2f: 01:3b:17:f0:23:18:0e:7d:d3:39:3d:b5:4b:af:23: 46:55:ef:f4:c3:c3:76:c0:11:a9:83:39:fd:6f:47: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:38:E1:F5:BB:CE:6B:08:08:A3:A5:9E:F1:11:56:65:62:71:D2 X509v3 Authority Key Identifier: keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:2a:6a:de:13:73:0a:48:ad:80:28:69:68:f4:19:98:76: 83:01:e0:b1:96:26:d4:f8:2f:4f:73:7b:9c:10:c2:a3:27:9b: 1e:ef:90:ca:83:05:91:e0:80:87:f6:ae:12:f6:a2:95:51:7d: 87:63:0f:c2:33:35:79:0b:29:7e:0c:e7:0e:9f:80:c9:4a:26: 8e:a0:45:c5:19:20:60:99:49:fb:f0:b0:11:59:83:8b:37:45: ee:02:d1:aa:05:7f:25:56:ab:df:a6:f0:63:56:c1:44:da:4d: f1:77:8d:1b:69:13:5e:46:4f:41:a5:77:a3:ca:82:1a:3e:87: ec:ee:9a:88:7e:ca:6e:ec:4f:34:17:e1:ca:5e:38:0c:cc:f7: 21:56:0a:8e:4d:e0:31:ae:62:0c:1c:f3:95:fa:a6:e8:b7:8c: 32:e1:a8:e2:dd:71:4c:d2:8a:13:fb:4b:42:7c:5b:46:ac:e9: 3f:5b:d4:75:03:db:38:85:c7:d1:7a:42:4d:20:27:e1:69:34: 9b:6e:72:f1:14:3c:68:ba:29:a6:fb:37:2a:67:5d:40:5c:03: 9e:9e:77:c4:0e:a2:e0:ae:62:27:ba:ad:67:71:a5:f2:a7:92: 58:4b:60:b5:4c:3e:9d:4c:fe:15:c7:9e:47:06:3e:3d:4e:38: b0:38:74:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInEW1UwqDTdzZlRs7kPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTViYWI0MjVlYWM0YjZhODI0YzY1MTYzZmE5ZWY1MDBl OWY4YzYwHhcNMjYwMjA5MTYwMDU2WhcNMjYwMjEwMTYwMDU2WjAzMTEwLwYDVQQD EygzM2RlMzhlMWY1YmJjZTZiMDgwOGEzYTU5ZWYxMTE1NjY1NjI3MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79+DhxlBYQ+hI6TLNfchpxW6rcel 7N1abhjlDDf8Kl6k+3cikmk+pmATDzGV02pXi8KBEmal7OmOvZ5Mtlmqwnri//KI tuaYriCNsDog9XGhXRWP5eeL+XUhz0NJPIYvGhFZUKiFZJz5RoKUSnjaKPpaWkVK iUAklIPHSNsKgEkD/WA3cXVQgzVUmNQpw2zmKKdFrbvEjgjbnGdA+bxNonbBUY0w kq6GpLuoVKQnWnds+Q6vImXzy9YLuOIbGb/2AIet7iSxRJnha0J4IuDgR0gGhjeI fqG7DOZOhj64Vy8BOxfwIxgOfdM5PbVLryNGVe/0w8N2wBGpgzn9b0danQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPeOOH1u85rCAijpZ7xEVZlYnHSMB8GA1UdIwQY MBaAFBpVurQl6sS2qCTGUWP6nvUA6fjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUt M2Q0MTllZDQzMTJkLzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUtM2Q0MTllZDQzMTJk LzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREIqat4T cwpIrYAoaWj0GZh2gwHgsZYm1PgvT3N7nBDCoyebHu+QyoMFkeCAh/auEvailVF9 h2MPwjM1eQspfgznDp+AyUomjqBFxRkgYJlJ+/CwEVmDizdF7gLRqgV/JVar36bw Y1bBRNpN8XeNG2kTXkZPQaV3o8qCGj6H7O6aiH7KbuxPNBfhyl44DMz3IVYKjk3g Ma5iDBzzlfqm6LeMMuGo4t1xTNKKE/tLQnxbRqzpP1vUdQPbOIXH0XpCTSAn4Wk0 m25y8RQ8aLoppvs3KmddQFwDnp53xA6i4K5iJ7qtZ3Gl8qeSWEtgtUw+nUz+Fcee RwY+PU44sDh02g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:45 2026 by rpki-client