This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json) Hash identifier: xvtggHODn56pwKdPbAb4FQbE0CW6cqif5WYMqhSl8oQ= Subject key identifier: 21:16:90:99:94:B0:22:01:17:2A:CE:19:B0:97:D4:6B:C7:B6:57:EC Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55 Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55 Certificate serial: 019C4321F4BA0A403B4265D0ED5B8596273F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: inyGtv6IwVa5FFejgFbjb6Un3XNYVXmf3fsqNY1UkBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f4:ba:0a:40:3b:42:65:d0:ed:5b:85:96:27:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55 Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=2116909994b02201172ace19b097d46bc7b657ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:2f:f8:46:f9:66:75:cf:26:86:a0:c9:a3: 6d:fc:74:a6:99:df:09:7c:11:79:c9:c8:7d:c1:90: a9:41:c0:ef:60:62:65:f9:8f:16:ae:83:28:a9:ab: b4:ba:82:af:2d:2d:4b:4f:41:ca:9c:39:0a:44:cc: 3b:65:9c:5d:cc:a7:14:82:4f:40:fb:2d:cb:94:18: 48:0b:53:6a:7d:7e:09:aa:5c:a7:1c:92:10:3b:64: 1f:14:81:1e:37:51:b4:c1:3c:cc:f3:50:23:d0:0b: 78:3d:0e:5a:1f:52:0f:3d:e1:c0:e5:2d:42:c0:d3: cf:36:76:46:8c:31:01:05:41:d3:7e:d8:e3:0f:eb: 3e:dc:85:af:e9:47:35:c7:70:53:88:7f:e4:23:8c: 85:da:db:0b:c9:64:40:a0:5e:ae:ce:48:fa:1f:ba: 74:48:93:25:ed:64:3d:05:f8:79:e3:c4:26:75:03: d0:04:a1:87:e4:24:de:61:b2:ba:ce:43:c3:9b:23: b2:b5:74:3d:54:2a:53:61:74:08:86:1c:5a:3f:46: ae:99:c9:d6:33:d9:60:7c:d6:67:fc:dd:16:5a:df: f4:06:48:a3:aa:30:b7:ce:ce:dc:34:87:dd:6e:0c: 89:5f:e9:bf:80:96:7c:44:8c:2d:43:c9:74:85:c8: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:90:99:94:B0:22:01:17:2A:CE:19:B0:97:D4:6B:C7:B6:57:EC X509v3 Authority Key Identifier: keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:55:c4:d0:5c:af:42:53:0a:a2:2a:74:19:e5:28:18:1e:00: cf:8c:0b:c5:07:71:22:5c:40:3b:8a:61:03:0d:23:3a:69:0f: 1e:62:87:8c:e8:34:34:6d:ef:93:20:99:3d:c6:7b:51:da:a4: a9:39:82:dc:b3:5e:ae:6c:b9:c6:6b:a1:c7:8a:92:2b:2a:6a: 30:dc:55:29:af:a6:96:6f:b2:f6:ea:36:96:b6:c3:d0:c7:cc: fd:3d:54:38:5c:8d:5a:2e:81:80:db:ce:b7:15:2e:89:ca:dd: 75:48:e1:62:84:a8:af:2a:6d:3b:0e:af:36:bc:fc:9e:0d:7c: a2:24:74:de:d3:c6:9d:7b:fb:12:69:85:57:96:e1:41:cc:f2: e3:22:60:87:25:4a:b9:c0:0f:6a:2b:e2:de:c2:03:e8:6e:03: f0:68:a2:f6:f8:aa:ab:4c:1e:fb:c7:24:d7:13:a0:f7:29:37: 2e:3a:22:c6:1e:60:df:e2:d9:13:28:90:61:ed:9f:06:e6:f6: 7e:19:13:db:e0:be:5d:3a:f2:18:11:fb:47:1a:56:b9:15:45: 90:37:5e:15:cb:64:7c:bf:b4:d8:e9:0c:6e:0b:34:28:c1:c2: fb:15:37:e6:55:63:f6:d1:9e:93:a2:31:4f:d5:7b:61:20:c1: cc:24:d7:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfS6CkA7QmXQ7VuFlic/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQzMDBlNmFjZDFmOTg5NWZjZTNiNWFiZTM4YTVmMDA1 ODRkNTUwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD EygyMTE2OTA5OTk0YjAyMjAxMTcyYWNlMTliMDk3ZDQ2YmM3YjY1N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy90v+Eb5ZnXPJoagyaNt/HSmmd8J fBF5ych9wZCpQcDvYGJl+Y8WroMoqau0uoKvLS1LT0HKnDkKRMw7ZZxdzKcUgk9A +y3LlBhIC1NqfX4JqlynHJIQO2QfFIEeN1G0wTzM81Aj0At4PQ5aH1IPPeHA5S1C wNPPNnZGjDEBBUHTftjjD+s+3IWv6Uc1x3BTiH/kI4yF2tsLyWRAoF6uzkj6H7p0 SJMl7WQ9Bfh548QmdQPQBKGH5CTeYbK6zkPDmyOytXQ9VCpTYXQIhhxaP0aumcnW M9lgfNZn/N0WWt/0BkijqjC3zs7cNIfdbgyJX+m/gJZ8RIwtQ8l0hciZbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEWkJmUsCIBFyrOGbCX1GvHtlfsMB8GA1UdIwQY MBaAFBkNMA5qzR+Ylfzjtavjil8AWE1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2Yzct ZmRjZDlmZDliYjAzLzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2YzctZmRjZDlmZDliYjAz LzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwFXE0Fyv QlMKoip0GeUoGB4Az4wLxQdxIlxAO4phAw0jOmkPHmKHjOg0NG3vkyCZPcZ7Udqk qTmC3LNermy5xmuhx4qSKypqMNxVKa+mlm+y9uo2lrbD0MfM/T1UOFyNWi6BgNvO txUuicrddUjhYoSoryptOw6vNrz8ng18oiR03tPGnXv7EmmFV5bhQczy4yJghyVK ucAPaivi3sID6G4D8Gii9viqq0we+8ck1xOg9yk3Ljoixh5g3+LZEyiQYe2fBub2 fhkT2+C+XTryGBH7RxpWuRVFkDdeFctkfL+02OkMbgs0KMHC+xU35lVj9tGek6Ix T9V7YSDBzCTXRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:21 2026 by rpki-client