This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json) Hash identifier: fiRrsuwFUbAP0yvohPueRKjo5Z5hiBw0NB4meUa82D0= Subject key identifier: 89:58:AF:72:30:86:67:5C:3D:79:71:CA:17:FB:CF:96:9C:6F:3F:CF Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64 Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364 Certificate serial: 019C421009D019E293A6C4CC44565DD0D410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft Manifest number: 12EF Signing time: Mon 09 Feb 2026 11:01:13 +0000 Manifest this update: Mon 09 Feb 2026 11:01:13 +0000 Manifest next update: Tue 10 Feb 2026 11:01:13 +0000 Files and hashes: 1: ZWEjcdwIM9EyAELpOcIP5A4AjN8.roa (hash: rVWcxdUR4t77+j89visuW0FsrMuy3PkstpLbGV2iT0Y=) 2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: mkqAF6EaDeuqgvNZl6wTGk2aeHbfHq/d6MTsr4Vezms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:09:d0:19:e2:93:a6:c4:cc:44:56:5d:d0:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364 Validity Not Before: Feb 9 11:01:13 2026 GMT Not After : Feb 10 11:01:13 2026 GMT Subject: CN=8958af723086675c3d7971ca17fbcf969c6f3fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:78:ae:54:45:b6:5c:85:fa:50:6f:02:e9: f4:25:76:c6:6d:77:70:4a:7c:5c:d0:21:3a:45:78: 45:83:44:13:70:9d:94:de:e2:7f:a0:64:e1:dd:1b: 27:45:90:d3:31:67:97:cd:03:c6:84:75:82:65:28: b1:38:cb:3a:fc:99:0d:7a:aa:ec:03:58:61:e9:50: a8:82:63:91:bb:44:9b:5c:d4:57:d0:a3:89:6f:cd: d4:50:b3:6e:85:d3:d7:d1:b0:30:3c:06:20:ce:e5: 5b:18:16:7e:86:5f:84:d9:9f:50:12:37:13:98:b3: bc:b7:12:bf:ec:e6:b4:41:da:60:4b:50:25:65:39: 3d:85:40:14:14:ca:03:e4:6d:93:b3:4a:63:10:2f: c3:65:cb:fc:d5:42:52:a1:c4:42:85:20:8f:92:e5: de:19:b8:db:78:e4:cd:ec:52:f8:16:18:1d:59:d4: dc:37:16:25:9a:65:2d:ab:04:a2:0b:55:14:05:b8: 63:ab:46:de:6c:ba:c9:dd:9b:00:97:55:24:bf:5d: c5:dc:d7:e7:47:e4:1a:01:4a:70:3c:d6:3c:a1:b3: 7a:20:3a:ad:7f:a8:98:72:da:9f:4b:aa:5e:c7:a3: 5f:9e:f3:34:6f:56:26:e3:64:05:a3:94:b4:32:fb: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:58:AF:72:30:86:67:5C:3D:79:71:CA:17:FB:CF:96:9C:6F:3F:CF X509v3 Authority Key Identifier: keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2f:7a:2b:02:0f:0d:68:bc:50:6d:df:36:cc:96:08:8a:4f: 03:2e:a6:ba:d2:20:2b:69:e1:35:ff:80:44:d6:29:24:3c:8f: c3:34:7e:ad:75:de:f9:9e:12:c1:90:9f:d7:d2:e2:51:67:39: b8:a1:f0:ee:f8:07:33:ed:29:3d:cf:83:65:cd:d9:90:82:4f: cd:59:e1:ba:fe:ef:34:0f:f5:2b:8a:2a:d0:6e:2f:7d:25:fd: fe:03:40:6f:4b:7d:f3:44:71:dc:e2:e9:67:d2:0e:14:ca:06: 4b:95:e5:cc:99:53:30:fe:b0:dd:61:7c:89:bc:59:9c:67:51: 7e:5f:7a:60:fb:a3:ee:10:ff:b5:d5:89:6d:83:dc:66:f8:32: 47:5e:52:39:61:76:fe:b1:87:af:89:b2:1f:3c:5f:4a:87:ec: 18:a5:5d:5f:79:8d:f3:fd:da:b5:66:04:22:eb:ff:af:97:05: e4:de:6f:62:24:47:c8:f0:d6:83:ed:3e:05:ec:39:00:16:7f: a6:05:50:7c:fa:24:1e:af:6b:fb:2b:ca:3f:23:95:bf:ff:e2: 35:46:50:a0:e9:b6:0f:84:ed:79:a5:47:45:dc:77:cb:79:86: 1d:9a:fb:77:47:ec:d1:16:84:af:bb:56:92:5d:02:64:0d:e0: b1:d5:34:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAnQGeKTpsTMRFZd0NQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzdkOGYzOWUzZjhmYjY2MzhmNzA4M2FiOWYxNmMwNDdk MGQzNjQwHhcNMjYwMjA5MTEwMTEzWhcNMjYwMjEwMTEwMTEzWjAzMTEwLwYDVQQD Eyg4OTU4YWY3MjMwODY2NzVjM2Q3OTcxY2ExN2ZiY2Y5NjljNmYzZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2R4rlRFtlyF+lBvAun0JXbGbXdw Snxc0CE6RXhFg0QTcJ2U3uJ/oGTh3RsnRZDTMWeXzQPGhHWCZSixOMs6/JkNeqrs A1hh6VCogmORu0SbXNRX0KOJb83UULNuhdPX0bAwPAYgzuVbGBZ+hl+E2Z9QEjcT mLO8txK/7Oa0QdpgS1AlZTk9hUAUFMoD5G2Ts0pjEC/DZcv81UJSocRChSCPkuXe GbjbeOTN7FL4FhgdWdTcNxYlmmUtqwSiC1UUBbhjq0bebLrJ3ZsAl1Ukv13F3Nfn R+QaAUpwPNY8obN6IDqtf6iYctqfS6pex6NfnvM0b1Ym42QFo5S0MvsF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlYr3IwhmdcPXlxyhf7z5acbz/PMB8GA1UdIwQY MBaAFIJ32POeP4+2Y49wg6ufFsBH0NNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTkt NTc3ZGExMmUzNjQ4LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTktNTc3ZGExMmUzNjQ4 LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC96KwIP DWi8UG3fNsyWCIpPAy6mutIgK2nhNf+ARNYpJDyPwzR+rXXe+Z4SwZCf19LiUWc5 uKHw7vgHM+0pPc+DZc3ZkIJPzVnhuv7vNA/1K4oq0G4vfSX9/gNAb0t980Rx3OLp Z9IOFMoGS5XlzJlTMP6w3WF8ibxZnGdRfl96YPuj7hD/tdWJbYPcZvgyR15SOWF2 /rGHr4myHzxfSofsGKVdX3mN8/3atWYEIuv/r5cF5N5vYiRHyPDWg+0+Bew5ABZ/ pgVQfPokHq9r+yvKPyOVv//iNUZQoOm2D4TteaVHRdx3y3mGHZr7d0fs0RaEr7tW kl0CZA3gsdU0NA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:30 2026 by rpki-client