This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft File: GWa02kiR-4CQGCvDO0m1liT8nZs.mft (raw, json) Hash identifier: cC4BUYUfzSoJoy9uDWDbS/FSr+oAkYF30fhrvhgnfUI= Subject key identifier: 3F:FC:C4:37:92:4C:91:62:FF:34:92:07:F9:ED:02:C0:55:E1:D3:D1 Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B Certificate issuer: /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b Certificate serial: 019C432295E0F97753AE371506A9C208FDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft Manifest number: 16FC Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: GWa02kiR-4CQGCvDO0m1liT8nZs.crl (hash: axuT8SclxP1ZCSBJhChNQl+g63Pzwu87aQbyyx44d3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:95:e0:f9:77:53:ae:37:15:06:a9:c2:08:fd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=3ffcc437924c9162ff349207f9ed02c055e1d3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:de:ec:8e:b8:03:1e:fd:d6:3c:bc:09:04: 7c:53:5a:b0:13:42:56:ad:4f:60:8f:c7:43:4f:0c: 64:48:8c:69:cc:b2:0b:f7:89:de:6f:e9:ba:d9:c0: 27:b9:1d:ac:40:00:ac:88:0c:de:8e:a5:22:24:d7: ed:94:e9:8b:90:2b:3f:e9:90:4e:e2:e5:c7:39:da: 0e:db:d6:de:0c:e0:ea:c9:43:03:a9:a9:4b:25:fd: 01:9c:74:9a:01:d0:e3:f5:b1:1d:d5:4a:55:8b:3d: 01:12:90:ce:28:7f:1b:76:f1:a9:14:a3:9d:76:f8: 21:04:30:27:36:a6:3a:0f:6b:39:01:b5:d9:30:04: 2e:b5:c7:d6:1f:92:bc:e8:86:57:08:f2:68:d2:07: 15:9d:4b:dc:37:c6:2f:5e:b2:f5:99:fa:bc:fa:ca: 37:2d:09:04:20:12:9c:6b:c2:50:02:9b:1f:e7:0c: dd:17:99:42:56:ec:f5:49:d9:ed:c4:35:73:37:ba: 00:ba:0d:0a:8e:20:24:f3:1d:3a:51:77:5b:d0:22: c1:33:3e:f3:d6:b6:cd:7f:97:39:b9:46:34:ac:fe: 40:d5:85:3f:fa:6e:ee:c1:e5:20:2a:e1:72:9a:5a: 81:9d:48:a0:1d:2e:5a:54:20:05:b8:a8:ac:02:7d: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:C4:37:92:4C:91:62:FF:34:92:07:F9:ED:02:C0:55:E1:D3:D1 X509v3 Authority Key Identifier: keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:06:1f:54:e6:d9:18:ab:b2:47:a0:68:64:a5:89:6a:3b:b1: c2:b3:33:b0:68:bf:b4:69:08:ee:5c:af:c2:a0:46:2b:cf:2c: 9b:6e:8f:a8:ad:0c:d5:6b:fa:9e:ad:01:8f:26:a0:56:60:c6: 6f:20:16:40:e2:6b:18:0e:ad:a0:09:20:95:02:ca:45:23:d3: 86:8f:6a:69:08:78:43:34:10:f7:f8:89:8f:be:51:c6:c1:3b: 8e:39:de:8e:c6:e0:58:4d:aa:f4:89:2f:36:46:a7:00:2f:ec: 80:98:92:06:56:f4:fc:38:27:cf:51:98:ab:ca:f9:64:75:54: e9:9e:58:c8:82:d4:0d:f2:e8:f8:7c:76:be:14:5d:90:01:90: f7:17:56:b5:1a:e5:7f:a0:dc:82:c1:b1:91:d0:ed:85:2f:33: 8b:88:20:62:cb:16:02:d9:3f:a7:c4:40:71:0b:da:81:b3:42: a0:d2:cc:a4:3b:7a:97:0d:72:1c:de:80:1f:3e:e6:3a:bd:64: b1:9f:36:f1:5d:02:45:a0:6b:68:8e:55:9c:e6:a1:9b:b6:13: 09:61:dd:50:d7:76:fb:3e:9f:27:b4:0a:f9:68:d4:0a:74:d6: 70:89:4c:2f:7c:a7:81:90:3c:71:07:a4:8c:35:f5:0e:7d:55: 28:d1:30:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpXg+XdTrjcVBqnCCP3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjZiNGRhNDg5MWZiODA5MDE4MmJjMzNiNDliNTk2MjRm YzlkOWIwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD EygzZmZjYzQzNzkyNGM5MTYyZmYzNDkyMDdmOWVkMDJjMDU1ZTFkM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDe7I64Ax791jy8CQR8U1qwE0JW rU9gj8dDTwxkSIxpzLIL94neb+m62cAnuR2sQACsiAzejqUiJNftlOmLkCs/6ZBO 4uXHOdoO29beDODqyUMDqalLJf0BnHSaAdDj9bEd1UpViz0BEpDOKH8bdvGpFKOd dvghBDAnNqY6D2s5AbXZMAQutcfWH5K86IZXCPJo0gcVnUvcN8YvXrL1mfq8+so3 LQkEIBKca8JQApsf5wzdF5lCVuz1SdntxDVzN7oAug0KjiAk8x06UXdb0CLBMz7z 1rbNf5c5uUY0rP5A1YU/+m7uweUgKuFymlqBnUigHS5aVCAFuKisAn0qRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/8xDeSTJFi/zSSB/ntAsBV4dPRMB8GA1UdIwQY MBaAFBlmtNpIkfuAkBgrwztJtZYk/J2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dhMDJraVItNENRR0N2RE8wbTFsaVQ4blpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80MTNlOTEtYWNmZS00N2UxLWFkZDIt NzlkNWI0NmQ5YzBlLzEvR1dhMDJraVItNENRR0N2RE8wbTFsaVQ4blpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80MTNlOTEtYWNmZS00N2UxLWFkZDItNzlkNWI0NmQ5YzBl LzEvR1dhMDJraVItNENRR0N2RE8wbTFsaVQ4blpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQYfVObZ GKuyR6BoZKWJajuxwrMzsGi/tGkI7lyvwqBGK88sm26PqK0M1Wv6nq0BjyagVmDG byAWQOJrGA6toAkglQLKRSPTho9qaQh4QzQQ9/iJj75RxsE7jjnejsbgWE2q9Ikv NkanAC/sgJiSBlb0/Dgnz1GYq8r5ZHVU6Z5YyILUDfLo+Hx2vhRdkAGQ9xdWtRrl f6DcgsGxkdDthS8zi4ggYssWAtk/p8RAcQvagbNCoNLMpDt6lw1yHN6AHz7mOr1k sZ828V0CRaBraI5VnOahm7YTCWHdUNd2+z6fJ7QK+WjUCnTWcIlML3yngZA8cQek jDX1Dn1VKNEwbA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:50 2026 by rpki-client