This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json) Hash identifier: pX0HiC6NbkL+YkkKbRexsDFVuK4chgFf/1lUJIN7s/w= Subject key identifier: 8D:E2:56:78:11:9E:B2:B4:9E:B5:F6:9E:F6:12:99:1C:B2:E9:97:5C Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Certificate serial: 019C446B9858C8E3A625C0A8A64E3E3C9656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft Manifest number: 06C7 Signing time: Mon 09 Feb 2026 22:00:27 +0000 Manifest this update: Mon 09 Feb 2026 22:00:27 +0000 Manifest next update: Tue 10 Feb 2026 22:00:27 +0000 Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: tF2qz4FLgecr/8zk/moTw4eVU3Ob2gSWYegdb8x6Oac=) 2: ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa (hash: YzJAKJVzdhVwg2Wfzuv11ahwmdOVCIuLQiQ88WgRMJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:98:58:c8:e3:a6:25:c0:a8:a6:4e:3e:3c:96:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Validity Not Before: Feb 9 22:00:27 2026 GMT Not After : Feb 10 22:00:27 2026 GMT Subject: CN=8de25678119eb2b49eb5f69ef612991cb2e9975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:05:be:f1:5e:9f:b7:cb:e4:cb:e3:56:21: 8b:dc:1b:4b:af:ca:4f:a2:9c:55:a2:01:6c:c1:b0: fa:a6:f2:fb:db:b3:54:93:f5:46:d2:ab:96:e3:e6: 28:d4:0d:9c:bf:c2:56:0e:07:01:fa:ca:d5:9b:9a: b8:3f:d7:99:62:98:34:99:f3:a9:94:5e:38:b9:dd: 13:3d:e8:ef:55:79:3e:a1:7b:96:da:a6:f2:3d:d7: 70:68:d7:ba:0e:3b:d5:31:e0:ee:29:bc:e6:0c:36: 01:1c:30:9c:67:07:2b:70:8b:aa:dd:33:79:59:d7: 40:dd:ea:dc:46:94:84:d5:46:12:6f:c2:21:75:9a: ac:90:8e:8e:3a:55:bb:07:2e:bc:8c:1b:84:29:76: e6:78:71:22:2f:e1:c4:d2:a4:2c:e3:00:2c:97:9d: 29:93:54:dd:58:d9:24:08:29:ec:15:34:fc:1c:33: 50:78:f1:b8:4a:e6:81:7f:58:5d:61:7f:ba:72:c5: 2c:44:0a:bf:d6:81:52:a1:13:36:78:9d:a6:4c:c1: 63:de:6b:71:ae:ca:42:e3:be:3c:5a:47:12:1f:84: 4b:5e:7e:e9:71:7b:81:8d:06:d5:3b:c2:f0:4e:4e: 5d:f3:27:e6:3c:51:93:b9:c4:74:e0:02:89:96:b7: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E2:56:78:11:9E:B2:B4:9E:B5:F6:9E:F6:12:99:1C:B2:E9:97:5C X509v3 Authority Key Identifier: keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6d:1b:7e:67:ce:48:4d:2e:44:47:53:bc:69:75:d6:0c:7f: e6:c3:9f:11:bc:3c:61:d9:9b:c7:b7:67:f8:91:d3:92:66:5c: 5a:d9:4c:eb:ee:8d:92:7d:54:b4:c4:81:05:64:68:2c:90:33: 92:00:a3:ee:b6:24:18:db:39:94:7f:0a:3b:cc:77:78:22:0d: 92:b3:3e:b6:c1:11:7e:85:b7:a0:18:ca:bf:63:5c:3d:6e:ce: 8b:b1:22:cd:0a:76:92:e3:b5:1d:3f:b6:5b:f5:ce:fe:52:fa: 12:a0:64:13:d1:1a:3c:52:a7:10:75:46:2c:cf:3f:37:bd:8c: b2:c6:41:47:ae:f0:89:9d:d5:96:a7:c4:4e:22:18:bf:69:ae: db:81:4a:47:a0:f7:c3:27:75:03:97:5d:77:c0:ee:52:68:c8: 5e:a0:26:ae:05:85:4e:4d:87:9c:a3:75:97:3f:99:4f:72:e7: 12:53:00:c1:7c:6a:98:2f:33:4d:66:c9:bf:3b:46:80:03:2e: b6:55:ec:a0:08:c6:78:00:7f:37:43:a9:08:39:a5:11:22:03: fb:6d:54:59:60:3b:8e:f7:59:4b:b1:c3:91:98:d4:8a:88:fa: 00:d7:42:22:44:1c:5b:88:a8:21:b6:fa:23:eb:a8:4d:8d:9e: e6:49:0f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5hYyOOmJcCopk4+PJZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTE3MjgxYWNmOTZkMzhlNzlhMzVjOGJlYjY4YjhjMDU5 NzlhNmYwHhcNMjYwMjA5MjIwMDI3WhcNMjYwMjEwMjIwMDI3WjAzMTEwLwYDVQQD Eyg4ZGUyNTY3ODExOWViMmI0OWViNWY2OWVmNjEyOTkxY2IyZTk5NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrUFvvFen7fL5MvjViGL3BtLr8pP opxVogFswbD6pvL727NUk/VG0quW4+Yo1A2cv8JWDgcB+srVm5q4P9eZYpg0mfOp lF44ud0TPejvVXk+oXuW2qbyPddwaNe6DjvVMeDuKbzmDDYBHDCcZwcrcIuq3TN5 WddA3ercRpSE1UYSb8IhdZqskI6OOlW7By68jBuEKXbmeHEiL+HE0qQs4wAsl50p k1TdWNkkCCnsFTT8HDNQePG4SuaBf1hdYX+6csUsRAq/1oFSoRM2eJ2mTMFj3mtx rspC4748WkcSH4RLXn7pcXuBjQbVO8LwTk5d8yfmPFGTucR04AKJlrf2IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3iVngRnrK0nrX2nvYSmRyy6ZdcMB8GA1UdIwQY MBaAFBpRcoGs+W0455o1yL62i4wFl5pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUt NzAyNzI2ODhlOTcwLzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUtNzAyNzI2ODhlOTcw LzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm0bfmfO SE0uREdTvGl11gx/5sOfEbw8Ydmbx7dn+JHTkmZcWtlM6+6Nkn1UtMSBBWRoLJAz kgCj7rYkGNs5lH8KO8x3eCINkrM+tsERfoW3oBjKv2NcPW7Oi7EizQp2kuO1HT+2 W/XO/lL6EqBkE9EaPFKnEHVGLM8/N72MssZBR67wiZ3VlqfETiIYv2mu24FKR6D3 wyd1A5ddd8DuUmjIXqAmrgWFTk2HnKN1lz+ZT3LnElMAwXxqmC8zTWbJvztGgAMu tlXsoAjGeAB/N0OpCDmlESID+21UWWA7jvdZS7HDkZjUioj6ANdCIkQcW4ioIbb6 I+uoTY2e5kkP0Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:09 2026 by rpki-client