This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json) Hash identifier: e2htFU+OoOMIbO8UZslevDe3l+r14+ZsebhBpsTFoGA= Subject key identifier: CC:BE:A5:07:82:90:D0:99:86:3E:F5:4B:31:D0:0B:5F:FA:8B:86:5E Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0 Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0 Certificate serial: 019C427DF678DC6E190269B351EBEB15DC88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft Manifest number: 08EB Signing time: Mon 09 Feb 2026 13:01:17 +0000 Manifest this update: Mon 09 Feb 2026 13:01:17 +0000 Manifest next update: Tue 10 Feb 2026 13:01:17 +0000 Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: K1Fd8DFfukoF91mcoNtaweYAD9VUeeFIRqx9wNgzuJQ=) 2: Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa (hash: w+2GDqO3QQPP7xUHnZq2EDl7NnG4Qd4Bmp0KetYUXf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f6:78:dc:6e:19:02:69:b3:51:eb:eb:15:dc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0 Validity Not Before: Feb 9 13:01:17 2026 GMT Not After : Feb 10 13:01:17 2026 GMT Subject: CN=ccbea5078290d099863ef54b31d00b5ffa8b865e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:9a:f6:cd:e6:a0:f9:24:2e:28:49:6a:79: a6:4c:eb:53:c3:ed:6c:44:29:a1:68:3e:81:66:17: 9e:44:a0:75:b1:b4:95:5c:36:ac:74:89:ca:2e:b1: dd:f7:97:de:9c:e3:10:f3:b9:10:27:57:ce:c8:94: 44:9a:43:57:7e:03:f0:f7:a5:ec:00:b4:c0:8c:2e: 36:71:b5:11:09:a6:50:80:99:9e:ac:a4:8c:5c:15: 45:9d:a0:9d:e6:44:51:e9:8d:0b:d0:cd:7a:c9:76: 75:dd:6d:ab:e7:f4:6f:09:17:d9:fb:3e:e2:c7:16: b5:3c:48:e0:33:77:f6:62:d8:81:15:43:89:22:ae: 1a:94:d5:5b:34:6f:cc:a6:36:cd:48:e0:98:77:c6: a2:52:08:61:7c:e7:1c:da:f2:be:1e:5e:bc:66:d5: 05:bf:2e:8e:ef:a2:65:ea:42:42:a6:97:ce:64:7c: 01:bd:2e:7b:d8:44:ef:72:61:12:8c:da:e4:33:86: 05:cd:b5:d7:6c:c0:4e:1a:8c:5c:0c:05:79:7e:42: e8:03:80:be:3c:16:8d:31:0d:57:b7:bf:7f:54:49: cd:ca:9e:de:f5:4d:91:6e:07:d6:1c:98:a5:f6:b3: 74:86:b8:a9:1c:66:c2:2a:d4:1a:5c:fd:c9:ce:91: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BE:A5:07:82:90:D0:99:86:3E:F5:4B:31:D0:0B:5F:FA:8B:86:5E X509v3 Authority Key Identifier: keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:ef:aa:95:0c:83:e9:b3:fa:b1:d5:6f:b3:63:10:83:24: f6:64:3c:e7:6a:b9:ca:e3:45:70:a3:21:66:34:10:68:b8:b2: f7:a3:51:25:c1:de:cd:13:47:3c:a1:80:19:ea:43:98:4f:60: 5e:6f:59:f3:02:86:7f:09:34:b1:3f:50:60:a3:e6:9f:09:cd: eb:0a:65:8e:c8:07:12:a6:fd:a8:e9:d9:8d:2a:ac:04:cc:4e: 35:a7:55:97:bd:dd:f3:59:8d:d0:f9:67:25:f4:fd:ea:7b:ac: 0e:fe:41:7c:fe:d1:41:46:9c:b6:37:d8:08:1b:a8:1b:af:f7: d7:c5:a1:81:f7:a1:13:e2:26:f6:53:83:10:52:19:02:52:0d: 89:47:d7:6f:37:dd:c9:4c:29:52:ab:fd:d8:98:f0:3c:73:9d: a4:1f:73:bc:3d:35:d1:b5:a5:ee:eb:6e:7a:ec:7c:57:a7:85: 3e:c0:a1:2a:e6:c8:d6:ef:8f:67:bb:da:4e:0a:c5:00:9f:a7: 8b:2b:4e:01:7f:be:f0:ff:7e:82:0e:26:f0:0e:32:e5:74:99: 97:84:53:37:fc:3a:b3:68:2f:7d:75:c0:6a:5d:22:82:d3:1e: b0:79:83:46:be:ee:31:fb:b6:1d:5b:1b:81:a9:91:69:a4:8b: 38:a1:42:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffZ43G4ZAmmzUevrFdyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy OTU5YzAwHhcNMjYwMjA5MTMwMTE3WhcNMjYwMjEwMTMwMTE3WjAzMTEwLwYDVQQD EyhjY2JlYTUwNzgyOTBkMDk5ODYzZWY1NGIzMWQwMGI1ZmZhOGI4NjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Oa9s3moPkkLihJanmmTOtTw+1s RCmhaD6BZheeRKB1sbSVXDasdInKLrHd95fenOMQ87kQJ1fOyJREmkNXfgPw96Xs ALTAjC42cbURCaZQgJmerKSMXBVFnaCd5kRR6Y0L0M16yXZ13W2r5/RvCRfZ+z7i xxa1PEjgM3f2YtiBFUOJIq4alNVbNG/MpjbNSOCYd8aiUghhfOcc2vK+Hl68ZtUF vy6O76Jl6kJCppfOZHwBvS572ETvcmESjNrkM4YFzbXXbMBOGoxcDAV5fkLoA4C+ PBaNMQ1Xt79/VEnNyp7e9U2RbgfWHJil9rN0hripHGbCKtQaXP3JzpFUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy+pQeCkNCZhj71SzHQC1/6i4ZeMB8GA1UdIwQY MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLjvqpUM g+mz+rHVb7NjEIMk9mQ852q5yuNFcKMhZjQQaLiy96NRJcHezRNHPKGAGepDmE9g Xm9Z8wKGfwk0sT9QYKPmnwnN6wpljsgHEqb9qOnZjSqsBMxONadVl73d81mN0Pln JfT96nusDv5BfP7RQUactjfYCBuoG6/318WhgfehE+Im9lODEFIZAlINiUfXbzfd yUwpUqv92JjwPHOdpB9zvD010bWl7utueux8V6eFPsChKubI1u+PZ7vaTgrFAJ+n iytOAX++8P9+gg4m8A4y5XSZl4RTN/w6s2gvfXXAal0igtMesHmDRr7uMfu2HVsb gamRaaSLOKFCQA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:38 2026 by rpki-client