This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json) Hash identifier: gyopAgr59xOYqxRRygLrhXfgRuSOr/s1L89F9OlIhK4= Subject key identifier: 61:3F:B3:FF:A2:36:65:E0:E2:1C:35:66:69:22:E9:87:C7:B4:B1:F8 Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Certificate serial: 019C4434BB8D5FAC0EECA61EA2125E8744F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft Manifest number: 0D37 Signing time: Mon 09 Feb 2026 21:00:32 +0000 Manifest this update: Mon 09 Feb 2026 21:00:32 +0000 Manifest next update: Tue 10 Feb 2026 21:00:32 +0000 Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: vmZhUf0fT593GIAePdzoajukrvh8zw5hyCxJ9MGtoFU=) 2: HnXupNyU6Ln1DvOJmDwyBCuBye8.roa (hash: e7NeeQetnUXIz/cPikG/o99FtcutUK+Ayg5ZE+4XzYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:bb:8d:5f:ac:0e:ec:a6:1e:a2:12:5e:87:44:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Validity Not Before: Feb 9 21:00:32 2026 GMT Not After : Feb 10 21:00:32 2026 GMT Subject: CN=613fb3ffa23665e0e21c35666922e987c7b4b1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:e7:02:b0:46:03:1c:20:f1:c7:38:99:f6: 52:7b:0e:fd:d1:0f:69:7d:97:39:d2:95:09:f9:50: 90:d1:3e:00:2a:b7:b8:1a:8e:f6:f0:7d:35:95:11: 39:bc:8a:7a:0a:f0:99:84:65:73:15:2e:5e:c1:f0: f0:76:63:b5:13:80:fc:1e:ff:6b:5b:a3:50:c1:6b: 4a:e1:de:97:91:e9:08:91:6a:f2:60:1e:77:be:99: 36:22:ae:32:d1:66:c2:bd:f7:7c:43:b7:20:19:d0: 59:b6:09:34:76:ee:65:93:77:33:9b:d1:a3:c3:ab: ee:99:fa:58:ae:06:9f:c3:40:c0:f8:19:76:e9:43: 7d:73:4e:62:1c:47:fd:c3:59:c1:11:bf:b1:92:48: 3d:da:55:cd:c1:56:83:1b:ac:ef:af:48:14:be:59: 5a:6c:bb:c2:ca:26:31:2e:9e:13:ea:05:fe:fe:d1: ab:9b:5f:e5:19:cf:e5:af:77:1b:6e:ae:6a:5c:63: 04:b6:34:46:f0:16:ed:c4:5a:b9:29:d3:1a:43:09: 06:6f:d6:8f:f3:c4:a6:b8:22:f6:fd:e1:99:90:e4: ee:61:12:d6:8b:a1:16:ee:73:4d:f6:a7:4a:a4:ed: 2f:a0:7d:f9:ed:d2:68:95:10:13:17:7c:4d:4a:30: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3F:B3:FF:A2:36:65:E0:E2:1C:35:66:69:22:E9:87:C7:B4:B1:F8 X509v3 Authority Key Identifier: keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:54:95:2a:21:0a:49:e9:d8:33:2e:4a:9f:7d:a3:88:33:44: f9:06:58:2f:73:c9:fb:c3:0f:37:41:dd:34:78:44:62:9f:d1: 8d:30:5d:c1:6a:e8:49:33:c5:e6:a1:fa:2d:58:de:c0:7a:72: 76:13:b8:82:11:09:9b:2d:50:ef:c5:8a:98:76:64:b5:94:bf: 6b:88:91:f3:09:ab:01:c6:b1:d5:e2:b8:3a:f7:df:50:fd:22: 95:33:4a:cd:e1:3d:5f:75:15:ea:b6:c5:d3:2d:c4:00:e3:53: 0c:d8:71:26:80:2a:90:3d:8c:c4:e7:3f:d2:7f:e4:aa:e4:fa: 1b:03:45:44:e5:4b:7e:2e:28:53:5f:e7:6f:ad:a6:85:43:23: 03:d9:3f:59:db:1b:32:41:80:1f:94:df:b7:d8:51:8c:38:70: 55:81:a3:c2:c7:db:c0:c8:b6:83:3f:4c:f9:86:4f:53:79:c9: 47:4c:67:8d:48:28:19:57:97:0e:1d:72:f3:a8:68:f7:68:e5: 0c:47:94:04:54:8f:46:df:7e:8f:03:42:08:18:56:eb:8d:78: a7:0d:14:71:5e:89:12:2f:52:bb:fc:60:42:f2:d0:79:05:77: 6b:c9:9a:59:ce:50:5c:20:23:8c:03:d7:d0:03:0e:94:35:82: c2:8d:6d:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENLuNX6wO7KYeohJeh0TxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzE4MTBmZWM4ZTdiMGI1ZWMyNjI5ZTk5Yzg5NjM1OTI2 YzYyNTEwHhcNMjYwMjA5MjEwMDMyWhcNMjYwMjEwMjEwMDMyWjAzMTEwLwYDVQQD Eyg2MTNmYjNmZmEyMzY2NWUwZTIxYzM1NjY2OTIyZTk4N2M3YjRiMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhznArBGAxwg8cc4mfZSew790Q9p fZc50pUJ+VCQ0T4AKre4Go728H01lRE5vIp6CvCZhGVzFS5ewfDwdmO1E4D8Hv9r W6NQwWtK4d6XkekIkWryYB53vpk2Iq4y0WbCvfd8Q7cgGdBZtgk0du5lk3czm9Gj w6vumfpYrgafw0DA+Bl26UN9c05iHEf9w1nBEb+xkkg92lXNwVaDG6zvr0gUvlla bLvCyiYxLp4T6gX+/tGrm1/lGc/lr3cbbq5qXGMEtjRG8BbtxFq5KdMaQwkGb9aP 88SmuCL2/eGZkOTuYRLWi6EW7nNN9qdKpO0voH357dJolRATF3xNSjCbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE/s/+iNmXg4hw1Zmki6YfHtLH4MB8GA1UdIwQY MBaAFBpxgQ/sjnsLXsJinpnIljWSbGJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzIt NDAxN2NlZjViY2E5LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzItNDAxN2NlZjViY2E5 LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVSVKiEK SenYMy5Kn32jiDNE+QZYL3PJ+8MPN0HdNHhEYp/RjTBdwWroSTPF5qH6LVjewHpy dhO4ghEJmy1Q78WKmHZktZS/a4iR8wmrAcax1eK4OvffUP0ilTNKzeE9X3UV6rbF 0y3EAONTDNhxJoAqkD2MxOc/0n/kquT6GwNFROVLfi4oU1/nb62mhUMjA9k/Wdsb MkGAH5Tft9hRjDhwVYGjwsfbwMi2gz9M+YZPU3nJR0xnjUgoGVeXDh1y86ho92jl DEeUBFSPRt9+jwNCCBhW6414pw0UcV6JEi9Su/xgQvLQeQV3a8maWc5QXCAjjAPX 0AMOlDWCwo1tQQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:25 2026 by rpki-client