This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json) Hash identifier: XeBDRW9tI5sCRlcdf+3ECx2Gyay6k0/r6RRdfT/v3XU= Subject key identifier: 6A:74:0A:28:C1:F9:03:30:0B:2E:F5:77:CC:3D:28:16:D4:88:49:90 Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91 Certificate serial: 019C43FE57A08A2A21ECB5C958B6D51B4857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft Manifest number: 032F Signing time: Mon 09 Feb 2026 20:01:07 +0000 Manifest this update: Mon 09 Feb 2026 20:01:07 +0000 Manifest next update: Tue 10 Feb 2026 20:01:07 +0000 Files and hashes: 1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=) 2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: XnPWvyACxb0uSDpuNh8Al25c/krRZnPqwembJOOvLfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:57:a0:8a:2a:21:ec:b5:c9:58:b6:d5:1b:48:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91 Validity Not Before: Feb 9 20:01:07 2026 GMT Not After : Feb 10 20:01:07 2026 GMT Subject: CN=6a740a28c1f903300b2ef577cc3d2816d4884990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:9e:89:e3:4f:46:e5:ab:c3:82:31:1a:78: bc:8d:85:d5:d8:bf:0e:13:b8:45:f8:c1:8b:bc:49: b9:20:1c:e8:f1:d4:2b:05:1e:ba:44:4f:ff:f7:3c: eb:ad:b7:a6:2a:5d:57:c1:0f:bf:59:dd:25:d1:ab: 10:4d:7d:12:30:e3:d7:4f:b8:eb:be:82:c9:bf:e2: 08:e9:6b:f8:28:93:93:52:67:b6:e1:7b:74:fd:19: fc:43:c7:5e:a9:40:38:b1:1b:b9:2f:6f:7a:1f:fa: 6f:cd:21:64:0f:90:7a:d2:ce:22:5b:3e:51:d5:1b: c9:28:2b:ff:f8:76:5a:3e:94:8b:40:66:3c:46:bc: 58:d4:63:31:63:38:d9:a4:04:7c:81:21:4e:9b:84: 2d:f9:07:41:38:d9:0d:74:05:e6:a9:de:9f:e4:f2: 45:77:52:b2:8c:cd:10:5a:a8:5b:81:5b:2e:12:1c: 00:0c:b9:b0:a7:80:e8:0c:e5:66:2f:a5:fe:aa:85: c7:ce:b4:e6:40:5a:d5:6c:93:d2:88:bb:5b:54:e3: 07:ec:8b:88:8e:d7:d0:22:8f:48:6c:4b:e4:6e:6c: 09:7a:e5:9f:b9:de:30:6b:f3:11:08:55:c0:9b:a5: 68:89:8b:75:e9:23:7a:75:93:f7:6e:f7:f8:15:4d: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:74:0A:28:C1:F9:03:30:0B:2E:F5:77:CC:3D:28:16:D4:88:49:90 X509v3 Authority Key Identifier: keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0d:c8:54:a6:9b:a7:a3:54:2b:2d:b2:a8:bd:c4:9f:aa:3f: ab:80:10:44:5c:f8:e7:6e:bc:7d:72:9f:f1:29:4f:0b:e1:03: a8:e0:46:b8:8b:f2:12:1a:8e:76:1d:d2:6e:0a:38:04:98:a7: ec:17:41:cc:e6:5c:33:64:f0:bd:05:b3:e8:a3:82:26:0a:c4: 08:65:74:63:81:89:d9:a0:06:46:8f:f0:66:26:ff:d1:1a:9f: 35:cb:9b:21:52:55:d8:da:2f:11:7e:f3:9d:a5:51:ce:cc:9e: b2:f7:4a:12:af:50:62:7c:4e:0d:36:68:3d:55:7f:e9:88:94: 32:dd:5d:52:a2:1a:d2:a8:5a:86:71:34:90:35:10:fd:6f:bd: c9:4f:15:f0:ec:17:ff:11:9f:35:3c:62:d2:6b:51:96:72:2d: c0:63:a8:69:34:2d:82:d6:f1:46:f0:49:95:15:e3:ab:ff:03: 1f:c6:4f:74:54:d7:64:72:08:fa:67:36:35:2c:bc:01:af:3f: 25:78:0a:aa:12:a9:90:0d:e0:b6:6d:17:d9:e4:50:e5:e1:4a: 07:eb:66:ba:4a:02:97:3f:52:8e:28:2c:80:fe:ab:ef:73:5b: e0:fd:cd:84:f5:d5:e8:3b:3a:0c:b4:89:09:7e:ca:66:38:11: 35:7a:90:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/legiioh7LXJWLbVG0hXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi YTZhOTEwHhcNMjYwMjA5MjAwMTA3WhcNMjYwMjEwMjAwMTA3WjAzMTEwLwYDVQQD Eyg2YTc0MGEyOGMxZjkwMzMwMGIyZWY1NzdjYzNkMjgxNmQ0ODg0OTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEKeieNPRuWrw4IxGni8jYXV2L8O E7hF+MGLvEm5IBzo8dQrBR66RE//9zzrrbemKl1XwQ+/Wd0l0asQTX0SMOPXT7jr voLJv+II6Wv4KJOTUme24Xt0/Rn8Q8deqUA4sRu5L296H/pvzSFkD5B60s4iWz5R 1RvJKCv/+HZaPpSLQGY8RrxY1GMxYzjZpAR8gSFOm4Qt+QdBONkNdAXmqd6f5PJF d1KyjM0QWqhbgVsuEhwADLmwp4DoDOVmL6X+qoXHzrTmQFrVbJPSiLtbVOMH7IuI jtfQIo9IbEvkbmwJeuWfud4wa/MRCFXAm6VoiYt16SN6dZP3bvf4FU0bJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp0CijB+QMwCy71d8w9KBbUiEmQMB8GA1UdIwQY MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWA3IVKab p6NUKy2yqL3En6o/q4AQRFz45268fXKf8SlPC+EDqOBGuIvyEhqOdh3Sbgo4BJin 7BdBzOZcM2TwvQWz6KOCJgrECGV0Y4GJ2aAGRo/wZib/0RqfNcubIVJV2NovEX7z naVRzsyesvdKEq9QYnxODTZoPVV/6YiUMt1dUqIa0qhahnE0kDUQ/W+9yU8V8OwX /xGfNTxi0mtRlnItwGOoaTQtgtbxRvBJlRXjq/8DH8ZPdFTXZHII+mc2NSy8Aa8/ JXgKqhKpkA3gtm0X2eRQ5eFKB+tmukoClz9SjigsgP6r73Nb4P3NhPXV6Ds6DLSJ CX7KZjgRNXqQUw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:31:33 2026 by rpki-client