This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json) Hash identifier: Y2UUAmNhli/rYSKMn0tw0nchQv0Qdbzyezc9qYS6bAs= Subject key identifier: FD:E2:07:65:CD:EC:C8:C1:F5:89:0E:B9:15:3C:F6:54:0E:8D:C6:5F Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220 Certificate serial: 019C43FDAE2E4850AEF9B31F9FACFF44A481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft Manifest number: 0DA8 Signing time: Mon 09 Feb 2026 20:00:24 +0000 Manifest this update: Mon 09 Feb 2026 20:00:24 +0000 Manifest next update: Tue 10 Feb 2026 20:00:24 +0000 Files and hashes: 1: QeR12R9Z_jTNrUpQr1ODF5IR7mc.roa (hash: 8rRLxS0jjdwQyV6rT5Us1y0eR8TYGMlqxEVb79Eceds=) 2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: J1+CqxB3kWN8JyERjg7VNmo0d+f8fWTGORq5lo2eED4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:ae:2e:48:50:ae:f9:b3:1f:9f:ac:ff:44:a4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220 Validity Not Before: Feb 9 20:00:24 2026 GMT Not After : Feb 10 20:00:24 2026 GMT Subject: CN=fde20765cdecc8c1f5890eb9153cf6540e8dc65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:b0:a8:1d:b2:ee:98:a1:ea:58:6d:f3:34: 91:9f:a8:93:b9:d0:4e:62:95:d4:38:b9:0f:ca:72: 4b:ed:4c:95:93:fe:d8:66:de:ff:00:61:d8:7e:6b: a9:ae:cd:a5:77:d5:ee:01:dc:2a:8a:a9:09:0b:f8: ec:57:d1:77:8d:a6:1b:17:1a:63:78:9f:7c:eb:94: 34:d5:1f:48:6f:6f:4f:45:c0:c7:d4:a4:ce:44:e6: 08:8c:53:3b:50:7b:60:4e:45:4c:d3:a1:25:fc:df: 98:0e:91:7a:89:2b:eb:5e:48:2c:ae:07:a2:2c:e4: c5:df:47:03:85:24:da:29:df:c2:ef:17:7e:cd:5e: c1:a7:80:38:80:f4:2a:2b:49:02:86:7e:9a:86:c3: d4:92:49:dc:81:bc:bd:c1:bb:db:d4:69:61:97:5a: da:33:1e:ca:00:7c:a2:3d:e6:7f:01:c5:b6:f1:80: d6:d0:ee:f3:85:c8:c0:a7:d5:a6:72:e6:9b:98:80: 7d:5b:6b:d7:4a:9c:bf:46:c8:d4:46:0c:5c:1c:b2: 53:e7:48:ad:af:45:9b:8e:55:4e:06:11:3b:6a:d5: 16:22:5c:aa:d6:17:f6:d1:62:a6:25:3d:f6:8a:32: 69:36:5a:b8:2e:84:25:0d:fb:c4:e0:76:cf:bd:0c: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E2:07:65:CD:EC:C8:C1:F5:89:0E:B9:15:3C:F6:54:0E:8D:C6:5F X509v3 Authority Key Identifier: keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5f:13:2d:98:4a:5f:d7:fa:8e:d8:87:cf:c8:09:4c:86:9f: 1c:c6:3a:b0:b2:1d:d5:cf:c3:0e:50:28:ff:5c:31:ce:11:eb: 2e:3c:78:ca:7a:ee:92:1a:bd:c9:9e:51:72:84:49:51:10:9e: a6:91:e6:f1:98:dd:37:f0:5e:80:d9:e3:81:74:31:98:f2:73: 93:ab:3e:d5:f0:44:41:09:ba:2e:29:69:a0:8b:c2:c8:f8:28: 98:32:21:6b:7f:5d:6d:62:50:55:fa:bd:08:37:da:2b:92:dd: 57:f2:70:30:5d:20:61:00:a1:4a:e5:a1:92:3c:bb:56:d0:74: 47:ed:e0:88:78:fc:76:e2:80:09:f6:23:67:ff:aa:b8:5f:35: 49:bb:31:9d:32:00:83:24:d1:40:e5:2a:78:0d:c1:61:55:3f: 42:72:2a:e3:be:0c:67:2f:3a:fa:e4:5d:bf:de:e8:3f:a5:d0: dd:93:00:f5:14:72:c8:c5:78:9d:c8:0a:b3:6b:c1:47:ef:af: cc:05:e7:d1:3d:e7:ca:c7:14:a7:53:52:4a:48:be:02:89:98: 54:cb:0e:65:eb:af:b8:1c:52:81:43:36:bb:27:68:69:e8:1d: 96:a6:f6:f6:ae:0a:03:0c:96:b1:cb:67:8e:02:2a:17:bd:23: 92:bb:ee:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/a4uSFCu+bMfn6z/RKSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3 MzEyMjAwHhcNMjYwMjA5MjAwMDI0WhcNMjYwMjEwMjAwMDI0WjAzMTEwLwYDVQQD EyhmZGUyMDc2NWNkZWNjOGMxZjU4OTBlYjkxNTNjZjY1NDBlOGRjNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCwqB2y7pih6lht8zSRn6iTudBO YpXUOLkPynJL7UyVk/7YZt7/AGHYfmuprs2ld9XuAdwqiqkJC/jsV9F3jaYbFxpj eJ9865Q01R9Ib29PRcDH1KTOROYIjFM7UHtgTkVM06El/N+YDpF6iSvrXkgsrgei LOTF30cDhSTaKd/C7xd+zV7Bp4A4gPQqK0kChn6ahsPUkkncgby9wbvb1Glhl1ra Mx7KAHyiPeZ/AcW28YDW0O7zhcjAp9WmcuabmIB9W2vXSpy/RsjURgxcHLJT50it r0WbjlVOBhE7atUWIlyq1hf20WKmJT32ijJpNlq4LoQlDfvE4HbPvQxLeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3iB2XN7MjB9YkOuRU89lQOjcZfMB8GA1UdIwQY MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5 LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf18TLZhK X9f6jtiHz8gJTIafHMY6sLId1c/DDlAo/1wxzhHrLjx4ynrukhq9yZ5RcoRJURCe ppHm8ZjdN/BegNnjgXQxmPJzk6s+1fBEQQm6LilpoIvCyPgomDIha39dbWJQVfq9 CDfaK5LdV/JwMF0gYQChSuWhkjy7VtB0R+3giHj8duKACfYjZ/+quF81SbsxnTIA gyTRQOUqeA3BYVU/QnIq474MZy86+uRdv97oP6XQ3ZMA9RRyyMV4ncgKs2vBR++v zAXn0T3nyscUp1NSSki+AomYVMsOZeuvuBxSgUM2uydoaegdlqb29q4KAwyWsctn jgIqF70jkrvu8Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:12 2026 by rpki-client