This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json) Hash identifier: FVBaSmE9/CCAXnWiNjI9h6hsmjkJkmECsONVaH4xd/s= Subject key identifier: 36:AB:D5:3B:90:FC:01:C7:FA:8A:1C:B6:FE:34:44:E4:41:8B:9A:2A Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3 Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3 Certificate serial: 019C427D7B68802EA54B14C5A31CC3DEFC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft Manifest number: 0757 Signing time: Mon 09 Feb 2026 13:00:45 +0000 Manifest this update: Mon 09 Feb 2026 13:00:45 +0000 Manifest next update: Tue 10 Feb 2026 13:00:45 +0000 Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: RmwB4Vyz7cGiAh6QOTD5aSoSAnX8Nen2W4TUarPe0zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7b:68:80:2e:a5:4b:14:c5:a3:1c:c3:de:fc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3 Validity Not Before: Feb 9 13:00:45 2026 GMT Not After : Feb 10 13:00:45 2026 GMT Subject: CN=36abd53b90fc01c7fa8a1cb6fe3444e4418b9a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:df:1f:b5:c7:6b:2d:33:c3:96:35:b1:3d: 23:02:cf:47:f6:f7:c9:3c:9d:95:d2:ae:4c:0d:4f: ed:3f:d3:a5:4e:1a:39:c5:8b:7f:7e:7e:6f:f3:37: c3:7c:a3:dd:43:2a:3e:58:6d:b9:41:32:dd:85:e0: 67:b5:6f:be:26:82:11:cb:9a:1a:d8:ac:81:85:ff: 0d:3e:86:83:b2:ab:a8:fc:3c:98:2d:7a:42:74:f1: a5:e1:06:71:93:96:29:ae:73:eb:7f:07:7c:c7:e2: 86:a7:f6:e4:3e:9c:1f:f0:02:0c:11:96:37:9d:7c: 5f:84:9c:70:af:cd:cc:53:81:e9:8e:73:50:26:87: 8f:c2:77:a2:ed:2c:a2:d6:4a:e5:be:ac:00:c2:03: 27:1f:55:45:af:42:3f:5a:6d:9d:03:12:82:1f:ef: 07:3e:93:48:d9:57:68:f9:8c:c4:3b:53:58:8d:dd: 3e:99:bc:c9:f8:4d:1e:19:e7:78:20:2b:f3:51:e9: 75:aa:3f:50:a2:80:96:94:d8:9d:12:1c:db:c6:a0: cb:82:03:c9:19:4c:d6:f5:74:fd:d9:8f:bb:9d:36: a7:de:dd:1b:73:0d:c7:b4:79:fa:ce:28:33:62:22: 15:d7:9a:4e:09:9d:a7:46:0e:02:df:84:8b:62:43: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AB:D5:3B:90:FC:01:C7:FA:8A:1C:B6:FE:34:44:E4:41:8B:9A:2A X509v3 Authority Key Identifier: keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bb:81:dd:ca:56:7d:c3:cf:55:f7:98:fe:f0:87:cb:5f:bf: 65:69:f4:16:33:99:51:3c:3a:79:5c:5a:45:36:7a:11:8e:94: 8e:cd:c8:87:e1:2f:47:dc:f4:60:f4:b4:c1:32:c7:d5:46:29: 54:24:21:11:36:fb:36:ff:f8:fd:84:ea:f2:e9:57:ed:e9:da: dd:4a:bd:7a:19:e9:89:81:b0:2e:02:4a:dd:06:e2:d5:9b:f6: ad:68:64:0d:76:12:54:e6:e3:ff:27:2c:94:fb:5a:44:e3:d8: a4:da:34:a1:7d:e0:d6:4a:97:d6:6d:d3:9f:d8:a1:49:66:0e: 7b:8c:78:c0:0e:06:99:4a:93:27:61:67:b0:e3:9a:fb:cb:d1: b9:f1:b7:ed:09:4a:46:fe:3f:02:c0:00:d2:d6:72:95:a5:10: 48:c4:5c:f5:f4:ef:e2:cc:29:cd:de:c3:f6:e4:b7:85:4e:37: c2:2a:a7:a8:ad:9f:ba:74:a2:0e:f0:10:83:e7:94:d5:ad:f8: 64:d0:e9:4a:de:d9:7e:42:4e:79:be:29:da:55:88:80:8b:6d: f0:89:d5:d2:6d:59:0b:d2:9e:11:26:1f:eb:b2:c5:b0:e9:bb: 1d:b5:e7:7f:b0:53:03:54:cc:b4:93:84:0f:b2:e5:bd:06:2a: 9d:4d:ae:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXtogC6lSxTFoxzD3vwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjAzZGI4YmY2NjAwMTkzYmU0OGZiMTBlNmUzMTZiOGI1 Zjg4ZTMwHhcNMjYwMjA5MTMwMDQ1WhcNMjYwMjEwMTMwMDQ1WjAzMTEwLwYDVQQD EygzNmFiZDUzYjkwZmMwMWM3ZmE4YTFjYjZmZTM0NDRlNDQxOGI5YTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeDfH7XHay0zw5Y1sT0jAs9H9vfJ PJ2V0q5MDU/tP9OlTho5xYt/fn5v8zfDfKPdQyo+WG25QTLdheBntW++JoIRy5oa 2KyBhf8NPoaDsquo/DyYLXpCdPGl4QZxk5YprnPrfwd8x+KGp/bkPpwf8AIMEZY3 nXxfhJxwr83MU4HpjnNQJoePwnei7Syi1krlvqwAwgMnH1VFr0I/Wm2dAxKCH+8H PpNI2Vdo+YzEO1NYjd0+mbzJ+E0eGed4ICvzUel1qj9QooCWlNidEhzbxqDLggPJ GUzW9XT92Y+7nTan3t0bcw3HtHn6zigzYiIV15pOCZ2nRg4C34SLYkNiQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDar1TuQ/AHH+ooctv40RORBi5oqMB8GA1UdIwQY MBaAFBvwPbi/ZgAZO+SPsQ5uMWuLX4jjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19BOXVMOW1BQms3NUkteERtNHhhNHRmaU9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNjA3NTItY2E3ZS00YWNmLThjZDEt ZWU1OTg4ZTg3M2UxLzEvR19BOXVMOW1BQms3NUkteERtNHhhNHRmaU9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNjA3NTItY2E3ZS00YWNmLThjZDEtZWU1OTg4ZTg3M2Ux LzEvR19BOXVMOW1BQms3NUkteERtNHhhNHRmaU9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7uB3cpW fcPPVfeY/vCHy1+/ZWn0FjOZUTw6eVxaRTZ6EY6Ujs3Ih+EvR9z0YPS0wTLH1UYp VCQhETb7Nv/4/YTq8ulX7ena3Uq9ehnpiYGwLgJK3Qbi1Zv2rWhkDXYSVObj/ycs lPtaROPYpNo0oX3g1kqX1m3Tn9ihSWYOe4x4wA4GmUqTJ2FnsOOa+8vRufG37QlK Rv4/AsAA0tZylaUQSMRc9fTv4swpzd7D9uS3hU43wiqnqK2funSiDvAQg+eU1a34 ZNDpSt7ZfkJOeb4p2lWIgItt8InV0m1ZC9KeESYf67LFsOm7HbXnf7BTA1TMtJOE D7LlvQYqnU2uRA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:46 2026 by rpki-client