This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json) Hash identifier: Hx6nBEqXprqy5i2PwSgKwILubWLsNrgareblOr4YdWQ= Subject key identifier: 64:3D:FD:9B:3A:29:19:9F:C0:88:0D:4D:92:F5:16:D9:5F:B5:4C:BE Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63 Certificate serial: 019C1D27E92BAD5432AEB4A63E2F0C638650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft Manifest number: 0A87 Signing time: Mon 02 Feb 2026 07:01:20 +0000 Manifest this update: Mon 02 Feb 2026 07:01:20 +0000 Manifest next update: Tue 03 Feb 2026 07:01:20 +0000 Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: VAMrSaj619NVKva5KVbkkprB7MTGxDDXKSVVjArxH7g=) 2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:27:e9:2b:ad:54:32:ae:b4:a6:3e:2f:0c:63:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63 Validity Not Before: Feb 2 07:01:20 2026 GMT Not After : Feb 3 07:01:20 2026 GMT Subject: CN=643dfd9b3a29199fc0880d4d92f516d95fb54cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:ef:52:2a:9c:41:b8:15:bd:33:b8:d9:2d: 8f:7a:79:2d:a6:46:80:22:7d:8a:e7:3d:b6:5e:49: 4d:2c:18:11:be:7a:e5:cb:88:71:82:c9:ce:12:77: 5b:a4:6a:e1:6c:06:02:a4:3a:62:95:32:b1:8b:6f: 31:c7:56:fc:22:5a:e1:13:4a:ce:66:73:5d:11:38: 12:1c:a0:65:77:96:7a:17:bc:79:71:2b:9c:76:18: 01:ac:35:6d:00:9a:f0:fb:a1:53:cd:30:ee:00:3f: 8a:3a:1d:11:0f:76:a9:f9:e8:08:9c:2f:08:0f:96: 0d:8d:f6:1c:6b:a3:e2:3e:17:b5:f8:e4:6c:be:ca: 3e:06:db:a3:94:51:62:4a:c6:a6:9c:e1:10:31:61: c0:db:7c:79:79:cb:06:d1:82:26:6d:6d:4d:2a:cc: e5:4d:15:d3:5d:7a:3a:9c:0b:d2:ca:11:e9:e5:19: d0:ac:52:94:f3:e7:15:fe:2e:b2:fa:d1:03:dd:45: 27:0d:65:b9:69:9b:69:30:3e:eb:26:e9:91:eb:c0: cd:c0:cc:e3:57:08:6b:2a:53:a3:d1:12:5f:60:c9: d0:b4:13:39:c8:ea:36:a3:c7:18:b0:22:e1:57:83: 72:40:7e:ba:ec:56:c5:e6:67:9a:af:56:68:8f:a0: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3D:FD:9B:3A:29:19:9F:C0:88:0D:4D:92:F5:16:D9:5F:B5:4C:BE X509v3 Authority Key Identifier: keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ef:bd:70:3f:a3:92:de:a2:ac:95:a9:a8:6a:f3:77:6a:a2: 78:fc:ed:71:6c:e0:c4:a2:2f:b8:83:0a:b6:95:ec:14:13:25: cd:0c:fb:29:a6:f7:70:6e:a8:75:06:29:9b:30:bb:03:53:0d: db:37:45:a0:e7:c4:62:45:d5:10:3d:52:7c:de:e0:20:84:58: ff:ac:ef:08:88:51:3a:69:de:c7:f7:d9:db:45:ba:cc:30:17: 03:e4:b0:2c:ac:8f:2b:26:d2:7d:58:92:86:6f:97:43:bf:73: d5:b0:3e:08:ac:7e:fa:60:26:5f:96:6a:2c:0c:f9:5f:70:64: 33:3a:7a:33:a6:65:47:cb:c6:a1:9b:d7:32:67:fe:93:10:d8: 03:bf:5a:01:63:c7:97:a9:ba:a6:27:d8:8d:80:89:11:ac:35: 83:42:1f:14:8d:38:07:d4:3c:eb:b3:48:92:3c:8d:6a:19:1b: ef:ea:74:da:5c:ce:65:2b:3e:6f:f6:ec:62:23:08:ac:6b:35: e8:30:10:b8:26:a3:30:84:1a:e2:5f:67:42:75:a5:21:c9:75: f5:55:93:20:b2:db:f3:67:06:28:08:4e:f7:54:7e:00:4e:90: bf:fc:a6:91:3f:18:0a:de:bc:20:a1:12:ce:2b:5e:0b:84:1d: 27:87:28:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdJ+krrVQyrrSmPi8MY4ZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh MTliNjMwHhcNMjYwMjAyMDcwMTIwWhcNMjYwMjAzMDcwMTIwWjAzMTEwLwYDVQQD Eyg2NDNkZmQ5YjNhMjkxOTlmYzA4ODBkNGQ5MmY1MTZkOTVmYjU0Y2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNTvUiqcQbgVvTO42S2PenktpkaA In2K5z22XklNLBgRvnrly4hxgsnOEndbpGrhbAYCpDpilTKxi28xx1b8IlrhE0rO ZnNdETgSHKBld5Z6F7x5cSucdhgBrDVtAJrw+6FTzTDuAD+KOh0RD3ap+egInC8I D5YNjfYca6PiPhe1+ORsvso+BtujlFFiSsamnOEQMWHA23x5ecsG0YImbW1NKszl TRXTXXo6nAvSyhHp5RnQrFKU8+cV/i6y+tED3UUnDWW5aZtpMD7rJumR68DNwMzj VwhrKlOj0RJfYMnQtBM5yOo2o8cYsCLhV4NyQH667FbF5mear1Zoj6BzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ9/Zs6KRmfwIgNTZL1FtlftUy+MB8GA1UdIwQY MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe+9cD+j kt6irJWpqGrzd2qiePztcWzgxKIvuIMKtpXsFBMlzQz7Kab3cG6odQYpmzC7A1MN 2zdFoOfEYkXVED1SfN7gIIRY/6zvCIhROmnex/fZ20W6zDAXA+SwLKyPKybSfViS hm+XQ79z1bA+CKx++mAmX5ZqLAz5X3BkMzp6M6ZlR8vGoZvXMmf+kxDYA79aAWPH l6m6pifYjYCJEaw1g0IfFI04B9Q867NIkjyNahkb7+p02lzOZSs+b/bsYiMIrGs1 6DAQuCajMIQa4l9nQnWlIcl19VWTILLb82cGKAhO91R+AE6Qv/ymkT8YCt68IKES ziteC4QdJ4coXw== -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:48 2026 by rpki-client