This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json) Hash identifier: ZreU9K+JGlfB6lB0gt37NEvF6rdt9gsCM4Rg58E6/eQ= Subject key identifier: 99:AA:84:36:B9:DD:90:00:0D:B5:CB:E6:27:EF:90:2B:8D:5C:D4:AD Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Certificate serial: 019C43221316F7D74FE25C8678AA21ECF672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft Manifest number: 143F Signing time: Mon 09 Feb 2026 16:00:32 +0000 Manifest this update: Mon 09 Feb 2026 16:00:32 +0000 Manifest next update: Tue 10 Feb 2026 16:00:32 +0000 Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: SB27pbURNb6J/j/26MIn4P7h95hVm0nGP+/Ku1RQ3vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:13:16:f7:d7:4f:e2:5c:86:78:aa:21:ec:f6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Validity Not Before: Feb 9 16:00:32 2026 GMT Not After : Feb 10 16:00:32 2026 GMT Subject: CN=99aa8436b9dd90000db5cbe627ef902b8d5cd4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:4c:7f:1c:d6:46:03:87:02:1d:ae:b1:59: fb:e0:4e:1e:59:fc:9c:a3:4d:00:fc:a9:1f:15:76: 18:c6:97:38:84:63:7c:a2:51:af:02:53:8e:2c:7d: 82:18:8f:1c:c5:80:f9:49:ff:49:20:97:4e:ca:10: b9:13:a4:83:48:24:c9:d4:f0:6e:6a:2f:ce:7c:4b: 10:c1:de:bf:92:5f:6b:53:6f:ad:96:3f:65:4b:18: 35:bf:c1:e7:3a:fa:f3:71:48:88:08:52:b2:82:dd: fa:a9:cb:86:ac:a0:36:56:4e:6b:24:b1:07:1b:32: 14:10:1d:ab:ab:1a:56:23:f3:34:04:4f:48:38:34: a7:7d:71:10:25:1b:1d:ff:2a:7f:f6:a3:e8:3e:62: b1:f6:7d:65:ca:43:bb:cf:24:e9:31:26:21:ae:e4: 16:63:55:7b:64:ee:23:50:79:6b:b5:f4:4b:2e:88: 61:3c:c4:21:11:a2:30:9b:1d:64:e1:35:30:ba:3d: 37:7a:95:80:f0:97:42:d8:b0:b4:7e:6d:af:0e:c6: 1c:03:1d:65:30:c9:c0:9c:e4:43:50:4c:a6:65:98: 8f:00:b6:33:56:e2:f8:7f:72:f6:fe:93:73:50:0c: d2:5a:5c:f3:e5:e2:4f:d0:8b:d5:7a:0a:8e:00:87: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:84:36:B9:DD:90:00:0D:B5:CB:E6:27:EF:90:2B:8D:5C:D4:AD X509v3 Authority Key Identifier: keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e2:43:1f:00:6d:90:cf:b5:15:92:29:b2:63:96:30:95:b8: 78:60:a3:94:cd:d9:5b:f2:33:d9:7a:73:d0:00:eb:c2:b4:6a: 82:6c:98:b6:54:c8:f2:87:2d:cf:87:77:67:95:ce:27:5b:65: dc:e8:6c:4e:25:91:dc:bd:f1:4b:ff:65:7e:b3:34:49:bc:49: d3:5e:87:b2:02:1b:9b:46:0b:e8:d0:f8:77:d2:3b:98:ba:84: 6e:00:19:ae:20:78:d6:c8:2a:9d:0e:9f:f2:b1:8a:b2:ec:e2: d5:13:ca:d8:de:fd:ab:f1:76:21:2f:44:94:9e:3c:5c:d9:eb: 9b:f0:72:61:6f:ce:b9:b3:e0:fa:5a:55:63:00:1b:34:27:2f: 81:31:f6:47:e1:97:88:19:c0:38:4b:aa:99:1c:62:41:a0:95: 87:02:f0:a3:a9:c4:98:08:0f:a4:f6:e6:4f:9f:b0:31:be:0e: fc:03:b9:95:7c:bf:cf:98:a6:f0:8d:f1:e3:e7:ea:8f:5e:7a: b4:c2:8e:0d:10:79:70:54:a2:62:9c:f5:ba:9e:af:7a:c4:70: 48:9e:40:9b:fb:b8:e9:64:41:19:40:d0:ba:2e:1f:bc:19:9f: d4:57:54:44:63:e1:5c:35:c8:45:8b:e2:0e:01:80:78:f3:8b: 66:57:3d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhMW99dP4lyGeKoh7PZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTcxNzVlYWFlMTBiMTZhNDE1M2I3MGE1Y2ZkNzY4Yzdi NTE5OTAwHhcNMjYwMjA5MTYwMDMyWhcNMjYwMjEwMTYwMDMyWjAzMTEwLwYDVQQD Eyg5OWFhODQzNmI5ZGQ5MDAwMGRiNWNiZTYyN2VmOTAyYjhkNWNkNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphFMfxzWRgOHAh2usVn74E4eWfyc o00A/KkfFXYYxpc4hGN8olGvAlOOLH2CGI8cxYD5Sf9JIJdOyhC5E6SDSCTJ1PBu ai/OfEsQwd6/kl9rU2+tlj9lSxg1v8HnOvrzcUiICFKygt36qcuGrKA2Vk5rJLEH GzIUEB2rqxpWI/M0BE9IODSnfXEQJRsd/yp/9qPoPmKx9n1lykO7zyTpMSYhruQW Y1V7ZO4jUHlrtfRLLohhPMQhEaIwmx1k4TUwuj03epWA8JdC2LC0fm2vDsYcAx1l MMnAnORDUEymZZiPALYzVuL4f3L2/pNzUAzSWlzz5eJP0IvVegqOAIfFxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmqhDa53ZAADbXL5ifvkCuNXNStMB8GA1UdIwQY MBaAFBgXF16q4QsWpBU7cKXP12jHtRmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYt NWQyMTM0OGE2M2M4LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYtNWQyMTM0OGE2M2M4 LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+JDHwBt kM+1FZIpsmOWMJW4eGCjlM3ZW/Iz2Xpz0ADrwrRqgmyYtlTI8octz4d3Z5XOJ1tl 3OhsTiWR3L3xS/9lfrM0SbxJ016HsgIbm0YL6ND4d9I7mLqEbgAZriB41sgqnQ6f 8rGKsuzi1RPK2N79q/F2IS9ElJ48XNnrm/ByYW/OubPg+lpVYwAbNCcvgTH2R+GX iBnAOEuqmRxiQaCVhwLwo6nEmAgPpPbmT5+wMb4O/AO5lXy/z5im8I3x4+fqj156 tMKODRB5cFSiYpz1up6vesRwSJ5Am/u46WRBGUDQui4fvBmf1FdURGPhXDXIRYvi DgGAePOLZlc9KA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:27 2026 by rpki-client