This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft File: GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json) Hash identifier: mHb576Yf251gNLXUKanmy2oXeK+FsR95XnhbuHnMujU= Subject key identifier: 27:8E:13:DA:A5:2F:A7:7F:E8:10:F0:00:1E:24:79:0F:9A:DD:87:7E Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26 Certificate issuer: /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26 Certificate serial: 019C43220A16800D33853E5EEC0C38D0D5B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft Manifest number: 154E Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: SiiVlI2iE9K/xszl5H8IHdT/iNsPLew7Ha0HOXFZmVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0a:16:80:0d:33:85:3e:5e:ec:0c:38:d0:d5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=278e13daa52fa77fe810f0001e24790f9add877e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:b1:a7:dc:e8:5a:64:ab:fe:84:89:df:34: 61:93:c2:e0:c4:03:86:ce:52:6d:96:ab:49:73:ed: c4:a7:5a:0c:0a:14:1c:04:76:ec:a8:73:5f:47:60: 00:39:ae:44:db:f8:9c:09:bf:c9:80:e1:a4:4c:52: 55:94:29:b0:e0:09:d8:da:56:cf:41:3e:8f:ac:d2: d4:b9:3e:aa:4e:cd:16:bb:fc:7c:b2:b9:b3:d4:c4: 8b:4f:69:d1:3f:ea:72:fc:1f:46:9c:32:74:8f:1b: cb:1f:88:ab:a5:6c:3e:19:ec:a3:76:ff:f4:b2:ea: c3:d3:23:32:cc:13:7a:ba:9e:78:ad:98:60:97:ef: 39:d7:ef:4c:e9:fd:0b:ec:5e:4c:f5:a5:2a:78:7f: 6f:93:88:51:76:a6:44:fd:b5:b4:1e:23:61:83:ce: 6e:30:d6:09:ec:98:5c:2d:6a:fd:05:83:2c:53:c0: 16:de:08:cf:80:ff:04:fc:6a:dc:92:17:6f:e9:d2: ee:37:f2:f5:65:b7:50:9d:50:01:74:cc:ff:ff:86: d0:48:56:06:ca:f0:4e:80:e2:cd:b2:47:87:b8:6d: c3:08:35:ee:90:7a:b7:7e:17:d1:01:9f:3e:8f:7e: 75:3b:91:bb:ca:52:87:01:36:63:89:db:c5:ba:39: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:13:DA:A5:2F:A7:7F:E8:10:F0:00:1E:24:79:0F:9A:DD:87:7E X509v3 Authority Key Identifier: keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:a4:88:66:a1:94:e5:56:1e:7f:ad:d2:38:2c:f4:2a:d9: 9e:ce:15:c9:37:47:7e:58:07:f4:43:a9:68:bc:41:72:4d:e3: 65:3b:16:cf:3c:a1:ab:81:9d:25:cc:b9:61:0d:b8:07:be:87: 79:45:08:a4:12:78:40:9b:b7:f8:c5:24:c9:18:ed:59:d6:64: ef:55:42:0b:2f:f1:26:03:36:fe:7d:8c:7e:13:0d:11:66:be: c8:2a:92:7d:83:ba:0a:3b:b1:cc:68:94:9c:dc:67:ce:a8:f1: cc:4b:0a:e0:e4:b1:cf:fb:4e:86:05:19:37:50:c8:8b:f1:8f: e6:87:bc:94:35:36:5b:48:de:69:c0:a6:12:b3:e4:7a:5e:96: 26:c1:1c:10:5d:02:d1:72:af:73:9f:28:39:27:1f:77:62:b9: 19:95:18:0b:93:73:4e:18:55:3c:9a:ad:c2:d2:d1:32:25:4a: 4e:82:1f:85:5c:66:e4:c2:46:1e:cd:1b:7d:66:ce:2c:f1:66: 9e:4f:02:76:02:6e:59:c9:15:ec:9d:07:41:5c:05:62:94:41: 35:b1:24:f4:fb:42:a8:d3:b7:b9:bf:87:b7:c3:7c:7f:83:19: 50:10:82:b8:97:3a:6e:8b:18:da:39:47:89:0c:72:20:8d:fd: b7:a1:b6:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgoWgA0zhT5e7Aw40NWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjM3NzNlODdiN2UxZWQwYjU1ZTE1MGJhNzcxNmIxODI1 YjNlMjYwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD EygyNzhlMTNkYWE1MmZhNzdmZTgxMGYwMDAxZTI0NzkwZjlhZGQ4NzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzemxp9zoWmSr/oSJ3zRhk8LgxAOG zlJtlqtJc+3Ep1oMChQcBHbsqHNfR2AAOa5E2/icCb/JgOGkTFJVlCmw4AnY2lbP QT6PrNLUuT6qTs0Wu/x8srmz1MSLT2nRP+py/B9GnDJ0jxvLH4irpWw+Geyjdv/0 surD0yMyzBN6up54rZhgl+851+9M6f0L7F5M9aUqeH9vk4hRdqZE/bW0HiNhg85u MNYJ7JhcLWr9BYMsU8AW3gjPgP8E/Grckhdv6dLuN/L1ZbdQnVABdMz//4bQSFYG yvBOgOLNskeHuG3DCDXukHq3fhfRAZ8+j351O5G7ylKHATZjidvFujm4GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeOE9qlL6d/6BDwAB4keQ+a3Yd+MB8GA1UdIwQY MBaAFBsjdz6Ht+HtC1XhULp3FrGCWz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3lOM1BvZTM0ZTBMVmVGUXVuY1dzWUpiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hNDg4NDYtODg1YS00OTBkLTg1Nzct ZGM5YmE0MzFkNTdhLzEvR3lOM1BvZTM0ZTBMVmVGUXVuY1dzWUpiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hNDg4NDYtODg1YS00OTBkLTg1NzctZGM5YmE0MzFkNTdh LzEvR3lOM1BvZTM0ZTBMVmVGUXVuY1dzWUpiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6+kiGah lOVWHn+t0jgs9CrZns4VyTdHflgH9EOpaLxBck3jZTsWzzyhq4GdJcy5YQ24B76H eUUIpBJ4QJu3+MUkyRjtWdZk71VCCy/xJgM2/n2MfhMNEWa+yCqSfYO6CjuxzGiU nNxnzqjxzEsK4OSxz/tOhgUZN1DIi/GP5oe8lDU2W0jeacCmErPkel6WJsEcEF0C 0XKvc58oOScfd2K5GZUYC5NzThhVPJqtwtLRMiVKToIfhVxm5MJGHs0bfWbOLPFm nk8CdgJuWckV7J0HQVwFYpRBNbEk9PtCqNO3ub+Ht8N8f4MZUBCCuJc6bosY2jlH iQxyII39t6G2Qw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:42 2026 by rpki-client