This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json) Hash identifier: aHJnRsjpFY+5g9hSFZIlrT83FCKOlukVQjxqDRigKd8= Subject key identifier: 2B:F4:77:11:48:AF:B2:13:60:BB:45:28:E2:8B:91:72:DA:BD:47:EC Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Certificate serial: 019C43226BED49A46AED6F4C9EE91A2D02BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft Manifest number: 03E8 Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 9CBqwK+RsH7ru5OInq91sMQh3SB2pG+0vvpdsNFWpF4=) 2: OalRphnjMBSS6Np5-PPkgZFPsWE.roa (hash: tykpnTBSrACbV7VF5IpAU/9U1wStTD0WGueGsOwXxHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6b:ed:49:a4:6a:ed:6f:4c:9e:e9:1a:2d:02:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=2bf4771148afb21360bb4528e28b9172dabd47ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:b6:7e:34:06:40:e2:46:7a:97:45:ec:c5: fe:64:15:93:6e:c8:23:fb:41:71:7b:d6:63:d2:68: 35:11:0f:c3:f0:29:8b:93:05:0d:50:a5:fa:41:1c: 85:a2:a3:c1:35:60:64:b0:ac:2e:51:4f:09:26:bd: cb:82:38:7e:d0:28:ef:27:18:47:21:d2:c9:ac:49: ef:87:49:9e:71:2e:8c:5b:76:98:ae:12:fb:f2:02: 57:ad:4d:be:72:f6:f6:3a:88:af:ca:1f:4e:be:f3: 1b:67:2f:0c:7d:54:8d:6b:74:f1:90:d3:69:59:ea: 45:5a:f8:78:dd:6e:6d:6d:b5:4a:66:27:09:b0:1a: 37:46:40:ff:61:ab:d9:3d:98:3c:b1:80:5d:04:bb: e8:4d:ac:77:a7:16:6b:13:00:0f:33:87:bd:6f:0c: 30:6a:a6:a5:4f:89:cd:dd:c9:7f:dc:43:24:0c:c0: 77:d8:0c:1a:f3:9f:b6:98:75:7b:ed:04:5d:18:51: 0d:bf:fe:df:58:b1:f9:16:f4:69:12:44:93:96:87: fd:b9:c9:a0:8b:a1:1a:3e:dd:31:8a:09:53:81:41: 66:95:af:70:a7:93:75:ee:35:e1:e4:df:b2:0d:22: d5:f7:eb:83:da:ce:76:1a:37:37:0c:80:4a:7d:fa: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F4:77:11:48:AF:B2:13:60:BB:45:28:E2:8B:91:72:DA:BD:47:EC X509v3 Authority Key Identifier: keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:77:77:01:08:bf:16:d9:80:1e:a8:73:6f:d3:18:df:69:e4: 95:e9:02:e9:e9:29:f6:51:4b:a5:b2:ab:29:7f:46:f5:18:a5: 7f:2e:40:02:ac:02:2c:7f:db:d8:56:9e:d8:cb:e5:1c:4e:3d: b3:4f:59:aa:ca:9b:44:cb:fc:67:da:86:f6:e8:f6:7a:a6:72: ea:34:cf:cd:68:50:b4:c5:14:34:97:76:36:f1:e0:3e:e4:3e: 1c:e3:4a:0b:29:6a:c8:ba:af:24:74:e2:df:b1:19:40:7f:6c: 14:31:81:b6:ea:3e:e8:68:66:23:e8:a7:07:ab:9a:4e:31:14: 0c:89:55:4e:53:80:81:1f:7f:21:2d:2e:7b:96:89:b9:cf:64: d5:33:33:13:c3:32:55:55:a0:e6:f7:b5:d8:09:83:26:6c:d7: c8:85:2b:3a:c0:de:e2:6f:b4:2b:05:a0:26:e1:04:d3:8d:87: 4f:8f:38:a9:2e:6f:8b:a5:35:4c:b6:eb:61:5c:d9:73:1f:c4: de:b2:d4:41:29:71:33:8d:31:06:4b:f7:b0:56:3f:3a:eb:f5: 28:c3:e5:84:e8:c1:b0:58:7c:a1:66:dd:5b:06:ad:31:1d:6e: 8e:98:ff:c0:6d:0b:15:75:4c:3f:31:db:fa:26:f6:dd:33:b3: c1:89:8a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImvtSaRq7W9MnukaLQK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz NjQ1MjIwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD EygyYmY0NzcxMTQ4YWZiMjEzNjBiYjQ1MjhlMjhiOTE3MmRhYmQ0N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/62fjQGQOJGepdF7MX+ZBWTbsgj +0Fxe9Zj0mg1EQ/D8CmLkwUNUKX6QRyFoqPBNWBksKwuUU8JJr3Lgjh+0CjvJxhH IdLJrEnvh0mecS6MW3aYrhL78gJXrU2+cvb2Ooivyh9OvvMbZy8MfVSNa3TxkNNp WepFWvh43W5tbbVKZicJsBo3RkD/YavZPZg8sYBdBLvoTax3pxZrEwAPM4e9bwww aqalT4nN3cl/3EMkDMB32Awa85+2mHV77QRdGFENv/7fWLH5FvRpEkSTlof9ucmg i6EaPt0xiglTgUFmla9wp5N17jXh5N+yDSLV9+uD2s52Gjc3DIBKffovzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv0dxFIr7ITYLtFKOKLkXLavUfsMB8GA1UdIwQY MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1 LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnd3AQi/ FtmAHqhzb9MY32nklekC6ekp9lFLpbKrKX9G9Rilfy5AAqwCLH/b2Fae2MvlHE49 s09ZqsqbRMv8Z9qG9uj2eqZy6jTPzWhQtMUUNJd2NvHgPuQ+HONKCylqyLqvJHTi 37EZQH9sFDGBtuo+6GhmI+inB6uaTjEUDIlVTlOAgR9/IS0ue5aJuc9k1TMzE8My VVWg5ve12AmDJmzXyIUrOsDe4m+0KwWgJuEE042HT484qS5vi6U1TLbrYVzZcx/E 3rLUQSlxM40xBkv3sFY/Ouv1KMPlhOjBsFh8oWbdWwatMR1ujpj/wG0LFXVMPzHb +ib23TOzwYmK2A== -----END CERTIFICATE-----Generated at Mon Feb 9 23:00:25 2026 by rpki-client