This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json) Hash identifier: Ndt+TeaQvORPriGhoENNdjQZFERvQn0kfBqtlkP7R3Y= Subject key identifier: CA:15:6F:ED:BF:57:97:8A:A9:FC:17:D7:1C:0C:EC:E3:19:61:C8:D9 Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f Certificate serial: 019C42100543BC9B015CFDD74AB25760BD23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft Manifest number: 1494 Signing time: Mon 09 Feb 2026 11:01:12 +0000 Manifest this update: Mon 09 Feb 2026 11:01:12 +0000 Manifest next update: Tue 10 Feb 2026 11:01:12 +0000 Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=) 2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: eqqe8dJDH6nsEFUtpoFus+Cj2ueHeepKReA6M7AstAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:05:43:bc:9b:01:5c:fd:d7:4a:b2:57:60:bd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f Validity Not Before: Feb 9 11:01:12 2026 GMT Not After : Feb 10 11:01:12 2026 GMT Subject: CN=ca156fedbf57978aa9fc17d71c0cece31961c8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:1c:11:de:80:13:b3:ee:a3:b3:2d:fd:c1: 55:25:ab:9b:da:71:18:13:38:05:d4:4f:20:1d:a4: ed:1e:22:54:33:0e:e7:bc:32:a0:13:cc:bb:b8:84: 11:fd:c5:7c:6a:8e:c1:97:15:82:a9:d1:08:83:95: eb:ef:23:f2:86:ba:53:9e:13:82:ba:b6:5d:73:69: 55:06:06:69:0d:2a:52:f3:6c:ec:e9:23:f1:81:38: 56:11:ed:df:8e:43:86:c9:cb:52:fc:75:84:18:6f: 8f:cb:fb:9f:df:40:f1:35:74:03:ae:2f:8f:08:34: c1:8b:47:a9:f0:e8:eb:f0:d8:74:b7:fd:ad:22:27: a4:a8:77:b6:e9:a0:7a:7a:2d:21:64:8f:3b:db:98: 99:fe:9c:89:6a:41:06:46:a9:d2:0a:97:58:b5:b8: 4a:51:1b:31:25:55:68:00:ec:77:dd:62:9b:06:c5: 88:5f:f2:d9:98:65:eb:2c:d0:2b:a2:6e:e9:8d:e3: 30:78:d5:21:63:94:50:a3:4f:d2:e0:2c:12:5a:f5: c8:f4:c8:fc:47:e3:0a:a9:4b:d6:77:cf:ab:c5:49: 7c:70:82:cf:dc:72:24:44:f2:e3:30:66:5d:35:43: 4b:e2:5b:3c:ab:2e:04:5c:67:a6:92:c0:a3:83:88: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:15:6F:ED:BF:57:97:8A:A9:FC:17:D7:1C:0C:EC:E3:19:61:C8:D9 X509v3 Authority Key Identifier: keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:09:19:7f:23:c9:76:21:56:bc:10:54:76:c2:a0:fe:1f:d5: a0:ba:6b:0c:84:92:bb:35:b0:94:e8:5c:3b:4b:11:10:73:60: fb:54:ed:e0:55:27:12:83:02:ef:93:c6:b7:fb:a2:8c:af:69: 93:1a:e2:c5:c4:29:3d:19:64:61:20:fd:cb:67:0a:a8:b7:dc: e5:83:c4:0a:30:d8:e3:4a:91:7b:51:21:7d:b4:9a:d5:b0:dc: fc:f5:22:44:7e:29:01:b2:a6:b3:de:50:b1:44:82:73:86:af: 51:b4:c0:5d:e5:7b:53:e7:27:b1:05:7f:b5:21:97:a3:b1:64: f4:d7:a2:eb:5d:2f:e1:36:88:8d:21:9e:21:e3:c2:15:7c:db: 0c:97:2a:a0:a9:eb:02:ba:41:e6:5f:20:85:d8:a5:04:1c:c7: bb:52:e7:d9:e5:45:bd:6d:90:44:f0:3f:28:f8:7d:47:81:f4: c0:43:38:1f:67:ca:2b:b8:4d:d9:23:97:7d:20:b2:d9:d2:b2: 88:8e:90:4e:a4:61:dd:fd:61:a3:c4:45:e3:2d:51:28:f5:6b: c5:ee:2a:8a:63:7b:17:9e:6a:db:84:7c:6e:fc:60:ef:95:e8: 8e:61:42:07:7c:a5:ab:ea:d4:1e:3e:3c:11:2f:a4:7b:1f:43: d9:fc:e6:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAVDvJsBXP3XSrJXYL0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmYwNzQ3NGYxMmY3YTMzZTVjMjFiYzJmZmJiMDc1YTE3 YmQxM2YwHhcNMjYwMjA5MTEwMTEyWhcNMjYwMjEwMTEwMTEyWjAzMTEwLwYDVQQD EyhjYTE1NmZlZGJmNTc5NzhhYTlmYzE3ZDcxYzBjZWNlMzE5NjFjOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMAcEd6AE7Puo7Mt/cFVJaub2nEY EzgF1E8gHaTtHiJUMw7nvDKgE8y7uIQR/cV8ao7BlxWCqdEIg5Xr7yPyhrpTnhOC urZdc2lVBgZpDSpS82zs6SPxgThWEe3fjkOGyctS/HWEGG+Py/uf30DxNXQDri+P CDTBi0ep8Ojr8Nh0t/2tIiekqHe26aB6ei0hZI8725iZ/pyJakEGRqnSCpdYtbhK URsxJVVoAOx33WKbBsWIX/LZmGXrLNArom7pjeMweNUhY5RQo0/S4CwSWvXI9Mj8 R+MKqUvWd8+rxUl8cILP3HIkRPLjMGZdNUNL4ls8qy4EXGemksCjg4jUowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoVb+2/V5eKqfwX1xwM7OMZYcjZMB8GA1UdIwQY MBaAFBtvB0dPEvejPlwhvC/7sHWhe9E/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGIt MDJjNDdiOWVhNDlkLzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGItMDJjNDdiOWVhNDlk LzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgkZfyPJ diFWvBBUdsKg/h/VoLprDISSuzWwlOhcO0sREHNg+1Tt4FUnEoMC75PGt/uijK9p kxrixcQpPRlkYSD9y2cKqLfc5YPECjDY40qRe1EhfbSa1bDc/PUiRH4pAbKms95Q sUSCc4avUbTAXeV7U+cnsQV/tSGXo7Fk9Nei610v4TaIjSGeIePCFXzbDJcqoKnr ArpB5l8ghdilBBzHu1Ln2eVFvW2QRPA/KPh9R4H0wEM4H2fKK7hN2SOXfSCy2dKy iI6QTqRh3f1ho8RF4y1RKPVrxe4qimN7F55q24R8bvxg75XojmFCB3ylq+rUHj48 ES+kex9D2fzmDA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:59 2026 by rpki-client