This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json) Hash identifier: GXj5hvG8Skm0fpkx9IKqWd18zc9R5/G0DoYIYx7UNuE= Subject key identifier: 8D:5A:50:6A:A6:FA:6D:CD:16:66:ED:78:D2:AA:09:69:33:00:0E:3A Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6 Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6 Certificate serial: 019C42B40E5D2359A4A159BCEEA86953EDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft Manifest number: 01DC Signing time: Mon 09 Feb 2026 14:00:22 +0000 Manifest this update: Mon 09 Feb 2026 14:00:22 +0000 Manifest next update: Tue 10 Feb 2026 14:00:22 +0000 Files and hashes: 1: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: w9IkqL9D4SSEKdkkHJj13foRyh6J7YkqLGixSnFS6VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0e:5d:23:59:a4:a1:59:bc:ee:a8:69:53:ed:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6 Validity Not Before: Feb 9 14:00:22 2026 GMT Not After : Feb 10 14:00:22 2026 GMT Subject: CN=8d5a506aa6fa6dcd1666ed78d2aa096933000e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:6a:d8:ab:d9:b6:04:2f:95:fb:ad:ad:55: 2b:6e:a8:a3:6d:ed:2e:bf:7f:e7:36:15:4a:45:8a: 41:ef:f1:d6:97:44:01:8b:d1:67:64:5e:a2:48:91: 13:f4:3e:6c:6b:42:ee:b9:6b:17:bd:f2:a5:e5:7e: 31:e9:ed:c6:10:c7:fe:9f:38:dc:c8:50:3c:29:66: 15:81:14:d8:84:05:8b:42:56:a2:55:0d:4e:3c:74: 34:79:83:d2:50:79:ee:67:23:85:f5:3d:1f:b4:f7: 59:4e:5b:2f:38:ed:3d:dc:ad:80:56:14:2c:46:45: d8:05:fd:02:54:05:f1:85:79:b9:71:18:e5:7b:66: d6:ae:45:d4:1c:8e:7e:ad:46:26:6b:ef:d6:f3:b4: e9:c2:07:54:92:78:86:81:78:f5:b9:39:fb:56:96: 14:54:57:a1:01:56:c1:97:9b:f9:e1:9f:cf:7c:c4: 79:cd:91:67:9e:cc:e8:19:d5:65:a9:fc:7f:a5:bd: 13:e0:e2:74:9f:db:ac:63:bc:7b:bc:5f:2e:b6:e6: e4:97:f0:62:76:29:44:f3:9a:43:55:6a:09:78:a6: 80:37:0e:53:ba:5a:99:2b:84:98:d4:1b:cb:3b:1a: b8:ff:d6:17:f1:05:32:7a:ca:52:a4:c2:dd:ba:db: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:50:6A:A6:FA:6D:CD:16:66:ED:78:D2:AA:09:69:33:00:0E:3A X509v3 Authority Key Identifier: keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bd:07:5a:58:0f:0a:bf:94:5c:0f:cd:f3:39:33:b9:e3:6a: 24:e8:14:a3:e5:a7:a6:69:fb:00:2d:3d:ab:d4:63:e7:4a:ad: 42:ee:4e:da:68:05:66:14:17:3f:fd:74:26:50:79:57:13:25: c6:3b:eb:86:33:30:27:c4:76:87:40:04:a8:41:28:1d:04:e7: e5:32:4c:6d:fc:a2:97:be:44:36:93:ca:5f:5b:b3:82:b1:9c: 50:52:7a:7d:dd:ff:ff:f9:92:4e:d3:de:e5:9e:89:7d:ea:0a: de:10:2b:ee:78:a2:96:ab:0b:e5:17:a1:e4:e5:e5:73:8b:b0: 86:4a:af:ff:bd:70:59:d1:c6:0d:23:d7:f1:54:8a:36:b5:3b: 21:ff:ff:6f:d8:a1:bd:1c:0f:1e:e3:3a:e2:ec:6f:59:da:66: c3:ce:d0:1a:8d:76:dd:05:5b:fa:10:bc:54:ff:05:e2:29:03: de:f0:02:90:fd:86:83:7b:48:24:83:3c:97:90:74:09:99:fa: c7:91:f2:68:a1:0f:37:f1:da:d7:16:63:79:73:58:e5:5d:85: c1:37:80:05:bb:57:da:2a:a6:21:e5:07:8f:a0:3c:b2:8d:dc: f0:e9:98:35:0d:47:c4:63:fc:1b:87:1b:59:9d:bb:67:45:4b: 8b:19:a4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtA5dI1mkoVm87qhpU+2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjIzMDViZmI3MDA0ZTUyOWQ2MjNhNDc3NzFiOGU2ZWNk MDUxZDYwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD Eyg4ZDVhNTA2YWE2ZmE2ZGNkMTY2NmVkNzhkMmFhMDk2OTMzMDAwZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Glq2KvZtgQvlfutrVUrbqijbe0u v3/nNhVKRYpB7/HWl0QBi9FnZF6iSJET9D5sa0LuuWsXvfKl5X4x6e3GEMf+nzjc yFA8KWYVgRTYhAWLQlaiVQ1OPHQ0eYPSUHnuZyOF9T0ftPdZTlsvOO093K2AVhQs RkXYBf0CVAXxhXm5cRjle2bWrkXUHI5+rUYma+/W87TpwgdUkniGgXj1uTn7VpYU VFehAVbBl5v54Z/PfMR5zZFnnszoGdVlqfx/pb0T4OJ0n9usY7x7vF8utubkl/Bi dilE85pDVWoJeKaANw5TulqZK4SY1BvLOxq4/9YX8QUyespSpMLdutsXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1aUGqm+m3NFmbteNKqCWkzAA46MB8GA1UdIwQY MBaAFBiyMFv7cATlKdYjpHdxuObs0FHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTkt NjhiODZlZWMyZmZjLzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTktNjhiODZlZWMyZmZj LzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhb0HWlgP Cr+UXA/N8zkzueNqJOgUo+Wnpmn7AC09q9Rj50qtQu5O2mgFZhQXP/10JlB5VxMl xjvrhjMwJ8R2h0AEqEEoHQTn5TJMbfyil75ENpPKX1uzgrGcUFJ6fd3///mSTtPe 5Z6JfeoK3hAr7niilqsL5Reh5OXlc4uwhkqv/71wWdHGDSPX8VSKNrU7If//b9ih vRwPHuM64uxvWdpmw87QGo123QVb+hC8VP8F4ikD3vACkP2Gg3tIJIM8l5B0CZn6 x5HyaKEPN/Ha1xZjeXNY5V2FwTeABbtX2iqmIeUHj6A8so3c8OmYNQ1HxGP8G4cb WZ27Z0VLixmkPw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:44 2026 by rpki-client