This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json) Hash identifier: 1tC0VNbp5gvpDY4R8wCpoYmKPjF5/hJRK9ugqic4iz4= Subject key identifier: AD:D7:80:71:09:CD:57:C4:CC:79:DC:EB:BD:DD:26:D6:31:25:C4:9C Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e Certificate serial: 019C42104AE42C396FAB2D7319932062B0DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft Manifest number: 1548 Signing time: Mon 09 Feb 2026 11:01:29 +0000 Manifest this update: Mon 09 Feb 2026 11:01:29 +0000 Manifest next update: Tue 10 Feb 2026 11:01:29 +0000 Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: LZ9jRilylNER/e/cTk3PLdyeJGynlHyYNMbHcPbNBKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:4a:e4:2c:39:6f:ab:2d:73:19:93:20:62:b0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e Validity Not Before: Feb 9 11:01:29 2026 GMT Not After : Feb 10 11:01:29 2026 GMT Subject: CN=add7807109cd57c4cc79dcebbddd26d63125c49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:62:2e:cf:48:cc:d3:d5:e5:6d:d5:1b:cf: d4:44:b1:45:cc:ef:da:e4:33:73:1a:64:fb:ff:6a: 9c:4a:c1:6e:03:c1:7c:7a:fd:dd:b3:b8:ad:10:58: 91:6c:16:a5:8c:cf:c8:f7:f1:8c:fe:07:7b:05:61: ac:8f:94:7f:c9:b3:a0:35:28:10:9b:53:ee:24:db: 94:75:a3:85:32:a8:92:4b:b4:97:cc:b4:4a:1d:f3: ee:50:ce:8d:2c:3c:e7:e1:57:06:f9:b3:e8:f6:a1: e6:5d:85:ca:0c:09:19:75:c2:49:33:45:bd:06:34: 5d:b4:26:ac:27:fa:00:6e:64:b0:4a:27:66:8a:19: 94:3b:c6:23:fc:fa:a3:84:27:df:97:f1:b1:e2:c1: 1b:85:a4:fd:4c:69:6d:c2:c7:1a:ca:e0:05:80:ee: 62:4f:a4:06:25:65:e0:3d:7e:86:2c:31:20:7a:ec: 4a:44:b8:9a:8d:f0:a5:11:b3:e8:e3:bb:27:58:2d: 47:80:64:6e:be:d1:97:bd:a9:63:c8:66:ad:1a:96: 8a:66:95:80:c1:25:ff:79:4c:43:73:70:d7:34:84: dc:54:db:43:9e:e9:b5:98:41:06:2c:9e:34:cb:83: dd:33:33:6c:d4:e7:e3:d3:c0:a1:88:27:f9:70:26: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:80:71:09:CD:57:C4:CC:79:DC:EB:BD:DD:26:D6:31:25:C4:9C X509v3 Authority Key Identifier: keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b3:eb:dd:ae:bd:70:d7:d0:fc:17:7e:ad:70:f5:ca:dd:9d: e2:df:00:61:17:b4:14:67:54:f5:9a:64:89:f8:b8:53:86:c5: 57:56:bf:3b:37:f4:8b:7b:02:94:94:61:4f:59:56:25:21:0d: dc:d6:77:bf:af:e0:be:5b:77:a6:93:d1:20:68:1e:3c:66:55: 91:a6:30:b9:e6:d0:9a:85:73:37:56:ad:40:6b:10:f7:57:56: 5a:92:a7:d5:48:1e:7a:d8:8e:53:27:37:1a:1c:0c:be:2d:76: 8e:48:60:e0:db:8b:9f:95:42:93:06:a7:e7:4c:fe:ac:86:fd: 86:64:ba:69:43:81:01:95:d9:18:82:ac:65:07:12:f3:10:bd: 44:e5:30:ba:5c:df:6e:1c:7a:24:f2:19:9b:de:95:43:f6:44: 83:da:f3:b4:f5:dc:52:b4:30:16:fb:88:2b:7b:ac:7a:18:83: 8b:1b:cb:a7:22:42:c4:ed:5b:97:65:40:db:c7:3c:8a:1c:9e: d0:17:18:21:f6:62:4e:50:fc:bf:1a:bc:5b:d1:e6:b8:6d:95: 19:3a:43:05:b1:9c:b4:90:ed:4c:38:a9:b3:6b:ae:db:3b:ea: bc:04:a6:b5:43:a4:67:26:0f:24:68:29:5f:15:0d:73:95:e7: b0:a0:67:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEErkLDlvqy1zGZMgYrDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OTg5NGZmZDA3ZjViYTExZGM2NWJmMzhmZDk1ZWM0MWM4 YWY3OGUwHhcNMjYwMjA5MTEwMTI5WhcNMjYwMjEwMTEwMTI5WjAzMTEwLwYDVQQD EyhhZGQ3ODA3MTA5Y2Q1N2M0Y2M3OWRjZWJiZGRkMjZkNjMxMjVjNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxFiLs9IzNPV5W3VG8/URLFFzO/a 5DNzGmT7/2qcSsFuA8F8ev3ds7itEFiRbBaljM/I9/GM/gd7BWGsj5R/ybOgNSgQ m1PuJNuUdaOFMqiSS7SXzLRKHfPuUM6NLDzn4VcG+bPo9qHmXYXKDAkZdcJJM0W9 BjRdtCasJ/oAbmSwSidmihmUO8Yj/PqjhCffl/Gx4sEbhaT9TGltwscayuAFgO5i T6QGJWXgPX6GLDEgeuxKRLiajfClEbPo47snWC1HgGRuvtGXvaljyGatGpaKZpWA wSX/eUxDc3DXNITcVNtDnum1mEEGLJ40y4PdMzNs1Ofj08ChiCf5cCZuUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3XgHEJzVfEzHnc673dJtYxJcScMB8GA1UdIwQY MBaAFBiYlP/Qf1uhHcZb84/ZXsQciveOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUt Y2NjOWIzMzdjY2EwLzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUtY2NjOWIzMzdjY2Ew LzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrPr3a69 cNfQ/Bd+rXD1yt2d4t8AYRe0FGdU9Zpkifi4U4bFV1a/Ozf0i3sClJRhT1lWJSEN 3NZ3v6/gvlt3ppPRIGgePGZVkaYwuebQmoVzN1atQGsQ91dWWpKn1UgeetiOUyc3 GhwMvi12jkhg4NuLn5VCkwan50z+rIb9hmS6aUOBAZXZGIKsZQcS8xC9ROUwulzf bhx6JPIZm96VQ/ZEg9rztPXcUrQwFvuIK3usehiDixvLpyJCxO1bl2VA28c8ihye 0BcYIfZiTlD8vxq8W9HmuG2VGTpDBbGctJDtTDips2uu2zvqvASmtUOkZyYPJGgp XxUNc5XnsKBnZg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:33 2026 by rpki-client