This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json) Hash identifier: qjFXwJZrLbnGH5OvWbdtq2H1Bd8sZNmMCFIDm9kKOtw= Subject key identifier: E2:37:EC:66:13:99:E1:4C:66:E9:A4:DC:34:92:33:C4:0F:0A:FD:CB Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Certificate serial: 019C45102BE95DEACFDFC0729A23916D776B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft Manifest number: 0E3E Signing time: Tue 10 Feb 2026 01:00:13 +0000 Manifest this update: Tue 10 Feb 2026 01:00:13 +0000 Manifest next update: Wed 11 Feb 2026 01:00:13 +0000 Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: bTRod/Pt6jSBobDEV5Bu7fxxqMmQcrnmLWdCddOZrV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:2b:e9:5d:ea:cf:df:c0:72:9a:23:91:6d:77:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Validity Not Before: Feb 10 01:00:13 2026 GMT Not After : Feb 11 01:00:13 2026 GMT Subject: CN=e237ec661399e14c66e9a4dc349233c40f0afdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:61:dd:93:79:9b:a9:b9:77:02:45:f4:0c: ce:74:65:1c:7a:69:0f:d5:41:3e:d2:f2:de:10:0e: f1:30:18:34:5d:43:3f:52:ad:93:2c:59:03:8d:53: cb:e5:ae:69:8e:55:ce:1a:cd:5f:a3:7b:47:b4:6d: 36:1c:7b:7b:af:53:57:44:58:23:2c:69:cd:4e:af: 0c:c1:f3:ac:b2:d2:c4:99:91:bd:17:8b:13:42:bc: ff:65:c2:d0:e7:42:ff:3f:b8:37:6a:0e:ee:b0:3c: 96:10:95:90:08:aa:03:75:b5:22:93:1c:55:f5:f1: 23:e5:18:78:1e:a2:d2:3d:ad:af:37:1e:df:92:c5: 53:a4:63:fa:13:bc:0b:c1:80:d7:03:d0:37:0c:81: e9:55:57:ed:27:1e:2b:3b:52:0d:50:7d:bf:7c:5a: 27:e9:2a:70:8c:c2:7d:a8:26:80:ad:1b:c3:8e:11: b6:ba:d5:d7:41:1c:62:8c:00:ea:48:8c:fe:0c:18: ff:f1:58:35:39:42:73:3b:18:fc:8d:e4:c0:ed:35: b3:55:37:b0:48:96:b7:a8:7e:6e:49:68:9b:d4:46: e0:ea:fd:e7:0e:d6:c4:be:ec:8c:1b:bf:79:11:69: 16:10:d2:8e:3f:c5:43:15:3b:34:c3:1a:a4:aa:23: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:EC:66:13:99:E1:4C:66:E9:A4:DC:34:92:33:C4:0F:0A:FD:CB X509v3 Authority Key Identifier: keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:39:b6:1c:38:c6:92:aa:28:5e:db:b7:24:b8:94:9b:e1:2e: 98:0d:63:df:fe:6e:3f:c4:0f:81:d8:d7:c0:39:09:ae:19:60: 31:0d:f6:cb:ee:eb:cf:b9:35:7b:df:a0:d9:36:f7:1f:5b:14: 1e:c5:0e:01:59:58:e3:fc:92:c4:13:cf:2e:39:56:e1:7b:d9: 09:91:a8:0a:20:66:d5:1f:66:d2:c8:95:4f:04:64:4f:b1:36: 01:49:0f:08:31:d4:0d:e3:97:90:fe:d8:85:ac:3d:89:26:1e: 80:dd:cb:bb:5c:2f:01:23:5b:15:33:f3:ff:2d:61:85:8d:8d: 4e:21:1c:49:8c:e5:8b:18:df:b2:a9:ad:33:79:89:a5:25:01: dc:e7:71:48:3e:c9:96:a5:37:87:4f:73:0f:f1:d9:ae:d5:d2: d8:15:ff:68:3b:38:26:59:f5:47:0b:e6:83:33:21:21:7c:23: e5:29:97:4d:47:f7:10:42:63:bc:80:a2:96:cf:90:bf:b6:7c: 8d:41:64:8c:93:5d:57:d9:fe:29:c1:ad:75:94:4c:77:91:4e: 3c:ce:3a:04:3c:fa:1f:6e:93:18:7b:58:dd:fb:5f:43:62:e3: da:e1:22:0c:8a:52:3e:cc:94:66:b5:96:5c:9c:d3:dc:d0:54: 59:7a:52:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFECvpXerP38BymiORbXdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl YjUwY2IwHhcNMjYwMjEwMDEwMDEzWhcNMjYwMjExMDEwMDEzWjAzMTEwLwYDVQQD EyhlMjM3ZWM2NjEzOTllMTRjNjZlOWE0ZGMzNDkyMzNjNDBmMGFmZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonVh3ZN5m6m5dwJF9AzOdGUcemkP 1UE+0vLeEA7xMBg0XUM/Uq2TLFkDjVPL5a5pjlXOGs1fo3tHtG02HHt7r1NXRFgj LGnNTq8MwfOsstLEmZG9F4sTQrz/ZcLQ50L/P7g3ag7usDyWEJWQCKoDdbUikxxV 9fEj5Rh4HqLSPa2vNx7fksVTpGP6E7wLwYDXA9A3DIHpVVftJx4rO1INUH2/fFon 6SpwjMJ9qCaArRvDjhG2utXXQRxijADqSIz+DBj/8Vg1OUJzOxj8jeTA7TWzVTew SJa3qH5uSWib1Ebg6v3nDtbEvuyMG795EWkWENKOP8VDFTs0wxqkqiNSGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI37GYTmeFMZumk3DSSM8QPCv3LMB8GA1UdIwQY MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5 LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjm2HDjG kqooXtu3JLiUm+EumA1j3/5uP8QPgdjXwDkJrhlgMQ32y+7rz7k1e9+g2Tb3H1sU HsUOAVlY4/ySxBPPLjlW4XvZCZGoCiBm1R9m0siVTwRkT7E2AUkPCDHUDeOXkP7Y haw9iSYegN3Lu1wvASNbFTPz/y1hhY2NTiEcSYzlixjfsqmtM3mJpSUB3OdxSD7J lqU3h09zD/HZrtXS2BX/aDs4Jln1RwvmgzMhIXwj5SmXTUf3EEJjvICils+Qv7Z8 jUFkjJNdV9n+KcGtdZRMd5FOPM46BDz6H26TGHtY3ftfQ2Lj2uEiDIpSPsyUZrWW XJzT3NBUWXpS6Q== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:59 2026 by rpki-client