This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json) Hash identifier: CF9GMg3TKdswxxUbnXjZYfcR2EnztmviDPkYIWG6nbY= Subject key identifier: 24:C5:AC:1C:D5:F7:62:CD:8B:EB:F1:83:B6:09:EB:46:0E:B4:4A:CD Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c Certificate serial: 019C41D86ED9DC282C88FEA084EBC5CF5A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft Manifest number: 154E Signing time: Mon 09 Feb 2026 10:00:29 +0000 Manifest this update: Mon 09 Feb 2026 10:00:29 +0000 Manifest next update: Tue 10 Feb 2026 10:00:29 +0000 Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: beOh/LX50N8DiOnG6IXXfIWseFVcVjXpWtOxERMwNgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:6e:d9:dc:28:2c:88:fe:a0:84:eb:c5:cf:5a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c Validity Not Before: Feb 9 10:00:29 2026 GMT Not After : Feb 10 10:00:29 2026 GMT Subject: CN=24c5ac1cd5f762cd8bebf183b609eb460eb44acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:f2:bf:a9:b8:a4:eb:5b:09:3d:4c:2e:28: 3f:12:4c:be:f4:ca:f0:fe:41:fd:68:21:c7:39:a1: e0:19:16:72:71:3a:20:e7:11:bb:25:d8:d0:65:f7: 8d:c8:f8:78:02:19:0e:b1:04:c4:27:74:1b:ac:ff: 23:91:c0:f8:7d:b5:16:f6:1f:ff:df:ff:77:dc:e4: 7f:dd:b6:9b:94:c8:a8:ba:92:50:cf:3e:39:47:7d: f5:f3:93:db:8d:16:72:7b:0f:bc:1e:49:6c:d2:eb: d1:90:78:f1:ea:f8:5a:ef:ac:c5:0c:05:fb:a1:67: f7:ca:c8:74:9c:ce:82:74:5b:9a:15:d8:1d:36:b8: c6:27:b8:e1:e5:bf:74:2b:96:c5:15:a0:28:0e:fb: 7a:0b:65:a5:b7:24:92:13:f7:ff:e5:fb:25:d5:d1: ff:08:d2:e3:94:17:f3:0e:86:14:25:e9:5a:73:ee: 9a:e1:71:99:7f:ad:00:3b:86:e7:96:62:6b:ea:65: 6a:86:ea:89:87:80:16:14:3b:08:ab:03:f1:01:93: 64:ab:95:23:69:fe:8f:0f:32:a2:29:51:4c:b2:ec: 55:be:31:9e:5b:ce:da:a5:d1:eb:d3:69:06:88:5b: 01:1f:ee:92:ca:b6:d2:28:20:c4:72:9e:5c:f5:44: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:AC:1C:D5:F7:62:CD:8B:EB:F1:83:B6:09:EB:46:0E:B4:4A:CD X509v3 Authority Key Identifier: keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:58:f1:52:17:80:84:ce:71:85:7e:35:d2:d2:ca:b9:56:17: 01:d4:b8:82:b7:10:e8:9a:87:d1:fa:7a:d4:2b:85:9a:f2:b1: 2f:92:01:70:8a:57:13:3d:39:17:b9:a3:5f:8c:f5:bd:97:f9: c5:e0:ee:20:e9:7c:a3:5c:83:20:b3:2c:40:c7:32:89:a0:66: f9:ae:7b:f5:55:8c:2f:ad:37:3f:fa:cf:20:e4:9d:ef:63:78: 04:e1:37:1d:da:38:a7:f8:36:c8:14:5e:23:42:77:5c:8d:db: e3:ab:81:4e:82:31:ed:3a:e6:c8:90:9b:6e:ab:88:80:fe:ed: a8:bb:c9:62:71:8a:ba:6b:a1:db:0e:d1:35:01:a3:19:a8:07: 7e:24:ad:ef:97:d1:02:dd:0f:c4:88:f6:a4:42:26:e5:a6:13: 74:42:dd:9e:a0:37:e2:e4:b9:59:4b:87:7e:0e:9c:26:ce:3c: 4f:4f:bb:f3:c6:b9:4c:1c:32:3b:d7:4d:b7:42:25:e4:4a:d4: a6:b7:96:49:b3:e6:9b:ed:a5:26:c0:76:c2:c9:2d:e0:31:1a: 7b:5e:96:11:7d:14:78:8e:f1:8b:ca:25:2c:5b:7f:02:93:f4: 54:d2:d7:19:80:56:a6:87:0a:11:0a:77:24:51:45:e6:f9:cf: 9d:6a:41:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2G7Z3CgsiP6ghOvFz1pUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTczYjIwODRjZGY0NmVlMWNjZDI4MmRmYTNiOGY2Yjdl YTcyNmMwHhcNMjYwMjA5MTAwMDI5WhcNMjYwMjEwMTAwMDI5WjAzMTEwLwYDVQQD EygyNGM1YWMxY2Q1Zjc2MmNkOGJlYmYxODNiNjA5ZWI0NjBlYjQ0YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucLyv6m4pOtbCT1MLig/Eky+9Mrw /kH9aCHHOaHgGRZycTog5xG7JdjQZfeNyPh4AhkOsQTEJ3QbrP8jkcD4fbUW9h// 3/933OR/3bablMioupJQzz45R33185PbjRZyew+8Hkls0uvRkHjx6vha76zFDAX7 oWf3ysh0nM6CdFuaFdgdNrjGJ7jh5b90K5bFFaAoDvt6C2WltySSE/f/5fsl1dH/ CNLjlBfzDoYUJelac+6a4XGZf60AO4bnlmJr6mVqhuqJh4AWFDsIqwPxAZNkq5Uj af6PDzKiKVFMsuxVvjGeW87apdHr02kGiFsBH+6SyrbSKCDEcp5c9UTAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTFrBzV92LNi+vxg7YJ60YOtErNMB8GA1UdIwQY MBaAFBlXOyCEzfRu4czSgt+juPa36nJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZjN0lJVE45Rzdoek5LQzM2TzQ5cmZxY213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84Yjg1NDItMWNhMS00ZjhkLThlZTct ZTVkMGUxODBkOGU4LzEvR1ZjN0lJVE45Rzdoek5LQzM2TzQ5cmZxY213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84Yjg1NDItMWNhMS00ZjhkLThlZTctZTVkMGUxODBkOGU4 LzEvR1ZjN0lJVE45Rzdoek5LQzM2TzQ5cmZxY213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1jxUheA hM5xhX410tLKuVYXAdS4grcQ6JqH0fp61CuFmvKxL5IBcIpXEz05F7mjX4z1vZf5 xeDuIOl8o1yDILMsQMcyiaBm+a579VWML603P/rPIOSd72N4BOE3Hdo4p/g2yBRe I0J3XI3b46uBToIx7TrmyJCbbquIgP7tqLvJYnGKumuh2w7RNQGjGagHfiSt75fR At0PxIj2pEIm5aYTdELdnqA34uS5WUuHfg6cJs48T0+788a5TBwyO9dNt0Il5ErU preWSbPmm+2lJsB2wskt4DEae16WEX0UeI7xi8olLFt/ApP0VNLXGYBWpocKEQp3 JFFF5vnPnWpBgw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:28 2026 by rpki-client