This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft File: GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json) Hash identifier: HXi+ixxZALwZODzOykXboFF6qNkYSc/zzIzQMrZhjeI= Subject key identifier: 84:60:3D:F2:EA:68:D5:9D:38:04:41:59:E4:B0:CB:04:D3:E9:8B:11 Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12 Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612 Certificate serial: 019C4358FE4CDEDFD76664F0CF58F2B91CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:31 +0000 Manifest this update: Mon 09 Feb 2026 17:00:31 +0000 Manifest next update: Tue 10 Feb 2026 17:00:31 +0000 Files and hashes: 1: 2gMkKbJA554Yq2voG-iU3zjpglc.roa (hash: wMFCnORiTnuilB2AGLAPYKYN/hd+vlQrA8D8lSugV4Y=) 2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: 65Ga5lxficzfYyf1+7jVfADxK8eVKh1wrovMRJuOwtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:fe:4c:de:df:d7:66:64:f0:cf:58:f2:b9:1c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612 Validity Not Before: Feb 9 17:00:31 2026 GMT Not After : Feb 10 17:00:31 2026 GMT Subject: CN=84603df2ea68d59d38044159e4b0cb04d3e98b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:19:ce:bf:e9:05:34:25:80:28:e2:81:78: 0d:41:66:55:52:38:1b:16:d2:40:60:fb:8c:d5:3c: c8:5d:2e:fa:a6:ee:f0:17:a0:9a:e3:b0:83:f6:b5: cf:95:05:24:fc:2f:67:e0:ea:f5:f2:2f:40:08:1d: 20:21:be:d8:44:a4:40:d5:f7:93:f5:89:9b:8a:e1: d6:eb:07:e4:67:5f:89:f8:94:5a:aa:eb:e4:ca:bd: 66:a5:4a:50:7d:c2:2c:cb:15:3f:54:55:22:f5:b8: 4a:34:65:89:fa:86:a8:f9:91:68:da:dc:32:3f:07: 6c:83:d9:4a:00:65:dd:34:6c:da:97:9a:17:fb:42: cf:7c:6a:b0:80:93:a5:1f:67:e9:06:3e:36:a3:cc: bf:2d:22:e2:43:2b:13:67:bf:49:bf:44:d9:aa:35: 31:96:56:29:9b:08:ba:ee:6f:38:4b:fc:22:58:11: c6:cb:c4:6b:2b:11:5e:b5:75:be:33:2c:6c:0c:3e: af:d0:2b:78:6b:17:f8:86:32:e2:0d:73:01:b0:79: a7:49:77:ef:74:de:14:4a:dc:41:37:b0:1f:c8:5b: 03:73:70:69:ac:2d:e3:7e:79:b7:b7:81:dd:d8:c2: af:96:16:c7:c4:32:5c:92:c1:3c:fc:6d:33:8e:ac: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:60:3D:F2:EA:68:D5:9D:38:04:41:59:E4:B0:CB:04:D3:E9:8B:11 X509v3 Authority Key Identifier: keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ec:1e:f1:4f:f2:ed:6c:c5:99:b1:c5:17:33:a2:3a:79:b1: 8c:7c:59:72:62:b7:f0:ac:a9:1a:16:9a:9e:59:08:23:dc:ed: 24:c9:36:e5:57:91:83:77:5d:2f:15:1a:22:47:39:20:98:33: bd:95:ef:6f:5a:06:b7:c2:8b:2e:3c:f1:29:2a:9f:ed:81:d6: 28:c2:38:c2:1f:77:6f:20:11:dc:f8:5f:e3:92:2b:22:a5:41: 09:cd:f4:35:5a:43:d4:42:6e:3b:98:0e:c9:4b:71:7d:ab:be: 5e:05:e1:ae:f9:29:f4:13:2d:96:fc:13:d1:da:c0:23:47:05: 1f:8c:42:c5:0f:49:e8:93:d2:05:25:b1:27:bb:35:c5:8e:46: df:50:52:93:f4:6a:82:12:b4:a5:ef:f8:79:12:9b:b3:a7:fa: c6:33:71:46:78:c3:63:ea:d7:34:3e:3a:3b:41:ef:bd:f8:e6: c4:20:71:b2:bc:75:d9:96:7d:15:f8:34:9a:0b:3a:0f:cc:eb: 31:d8:5b:a2:97:cd:a1:8c:ed:8f:75:01:f8:9a:cb:9e:dc:ea: 98:db:98:40:c1:2f:a3:32:b8:cf:53:67:22:46:30:71:a8:e7: 57:f9:7f:d0:5e:45:54:5d:04:53:3e:f7:9d:b3:c2:ee:70:39: 4e:ca:04:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWP5M3t/XZmTwz1jyuRzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5 YzI2MTIwHhcNMjYwMjA5MTcwMDMxWhcNMjYwMjEwMTcwMDMxWjAzMTEwLwYDVQQD Eyg4NDYwM2RmMmVhNjhkNTlkMzgwNDQxNTllNGIwY2IwNGQzZTk4YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlQZzr/pBTQlgCjigXgNQWZVUjgb FtJAYPuM1TzIXS76pu7wF6Ca47CD9rXPlQUk/C9n4Or18i9ACB0gIb7YRKRA1feT 9YmbiuHW6wfkZ1+J+JRaquvkyr1mpUpQfcIsyxU/VFUi9bhKNGWJ+oao+ZFo2twy Pwdsg9lKAGXdNGzal5oX+0LPfGqwgJOlH2fpBj42o8y/LSLiQysTZ79Jv0TZqjUx llYpmwi67m84S/wiWBHGy8RrKxFetXW+MyxsDD6v0Ct4axf4hjLiDXMBsHmnSXfv dN4UStxBN7AfyFsDc3BprC3jfnm3t4Hd2MKvlhbHxDJcksE8/G0zjqyBWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRgPfLqaNWdOARBWeSwywTT6YsRMB8GA1UdIwQY MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt NjljNGU4NTMzNTIxLzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALewe8U/y 7WzFmbHFFzOiOnmxjHxZcmK38KypGhaanlkII9ztJMk25VeRg3ddLxUaIkc5IJgz vZXvb1oGt8KLLjzxKSqf7YHWKMI4wh93byAR3Phf45IrIqVBCc30NVpD1EJuO5gO yUtxfau+XgXhrvkp9BMtlvwT0drAI0cFH4xCxQ9J6JPSBSWxJ7s1xY5G31BSk/Rq ghK0pe/4eRKbs6f6xjNxRnjDY+rXND46O0HvvfjmxCBxsrx12ZZ9Ffg0mgs6D8zr MdhbopfNoYztj3UB+JrLntzqmNuYQMEvozK4z1NnIkYwcajnV/l/0F5FVF0EUz73 nbPC7nA5TsoEWA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:21 2026 by rpki-client