This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json) Hash identifier: MzCUXxKJT/QYShqaQxPouAMtQU732hxllLlWNdWUwiA= Subject key identifier: 01:27:DE:CE:69:E9:E6:32:A5:35:D8:7A:B2:A4:E1:4C:84:A5:EA:0E Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6 Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6 Certificate serial: 019C435921D947B8CE6AC479CB1B2EA62624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft Manifest number: 0529 Signing time: Mon 09 Feb 2026 17:00:40 +0000 Manifest this update: Mon 09 Feb 2026 17:00:40 +0000 Manifest next update: Tue 10 Feb 2026 17:00:40 +0000 Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: 2AduKClK6vxzhZnHaGou4PMQS9J69JLLvTCXU2jrquo=) 2: jP1Y1GrBhcV5AXNPH0IQ21pDByI.roa (hash: KbbHbK0Z3zk1vvgM/oztcZSTAImni1g8tfvWsc3e20Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:21:d9:47:b8:ce:6a:c4:79:cb:1b:2e:a6:26:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6 Validity Not Before: Feb 9 17:00:40 2026 GMT Not After : Feb 10 17:00:40 2026 GMT Subject: CN=0127dece69e9e632a535d87ab2a4e14c84a5ea0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:69:0a:b8:2d:31:3d:42:70:a8:06:0b:d1: 81:7d:e4:7c:d5:e5:c5:39:73:0e:d6:79:da:43:6f: df:a4:12:94:5c:93:38:31:62:43:90:65:1d:bc:ef: 1c:24:c7:c3:6f:dc:d2:47:62:5b:92:7d:80:83:1e: 42:c0:db:85:a5:eb:ef:11:3d:46:3c:51:20:35:c1: 6a:b9:6b:fd:fe:bb:5b:a9:16:a9:80:68:db:4a:5e: 7c:d2:6f:f0:bd:3d:64:20:11:96:85:91:d9:2f:58: b6:36:83:fe:22:f8:ca:7b:46:79:e8:3d:fa:05:9d: 8d:7f:f2:2e:2e:d6:59:46:e0:a8:c6:00:ef:8f:ad: cf:98:85:03:81:9b:08:d4:2b:3c:c3:ad:b6:65:f1: 28:7b:45:88:01:44:6b:b7:e1:45:96:3a:da:1e:d3: 23:be:ec:2a:7f:a2:79:42:22:41:01:33:81:18:c8: 61:2b:a6:ec:ba:04:be:f0:86:1a:53:06:01:a5:02: f0:97:d7:13:fb:4a:8b:c9:87:82:89:ab:96:16:59: e8:fd:e1:e8:77:f1:d5:75:75:bf:d2:47:5a:95:93: 02:a2:1f:1c:19:2b:ba:a4:59:f1:2c:53:36:83:77: bc:53:db:79:76:09:a6:b8:39:1c:9e:e1:79:56:89: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:DE:CE:69:E9:E6:32:A5:35:D8:7A:B2:A4:E1:4C:84:A5:EA:0E X509v3 Authority Key Identifier: keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6e:8b:0d:72:61:2a:65:0f:48:0a:f3:8e:a7:01:26:d4:f5: 48:66:f2:88:99:b3:a4:54:89:a9:c8:23:eb:c5:a0:73:cb:86: cd:23:52:37:e8:be:4f:7a:ed:b5:b3:22:6e:62:fa:1c:9d:9a: 7a:60:84:e7:81:07:9e:60:69:89:0e:80:8a:f8:fe:36:9f:72: 13:bb:3a:d0:40:c7:58:73:0d:16:c5:54:50:4c:7a:c0:ec:20: 00:fc:08:be:b4:66:ed:96:c7:b7:42:8e:c7:af:7b:46:2e:75: 91:0e:84:04:8a:30:23:46:39:43:41:4a:9f:17:53:83:30:f9: e8:9d:6b:a6:ba:41:70:ee:c6:75:77:6e:fd:0a:88:14:3e:10: fa:af:c0:08:ce:49:20:de:f8:40:2a:ef:d7:02:ce:31:c3:25: 38:cb:af:97:c2:6c:f0:6b:49:f6:31:d1:e1:48:44:7b:28:4e: 3e:61:a1:0e:16:9c:16:ba:39:1f:1a:4c:34:95:ff:d4:97:ec: 3e:da:6e:77:c3:6c:24:7f:6a:12:5c:94:be:32:ac:97:78:69: 8b:ee:fa:4e:bc:9b:0c:9b:7a:49:68:4d:3c:5e:88:ed:7d:1f: 51:3b:0c:09:e9:8d:08:8c:48:75:05:e2:47:d9:bc:43:06:1a: e4:38:04:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSHZR7jOasR5yxsupiYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MzhjNWMyMmM5NzZkYTY1YTFmZDE2ZThmOWMwYzk0ZTI3 YTRiYTYwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD EygwMTI3ZGVjZTY5ZTllNjMyYTUzNWQ4N2FiMmE0ZTE0Yzg0YTVlYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2ZpCrgtMT1CcKgGC9GBfeR81eXF OXMO1nnaQ2/fpBKUXJM4MWJDkGUdvO8cJMfDb9zSR2Jbkn2Agx5CwNuFpevvET1G PFEgNcFquWv9/rtbqRapgGjbSl580m/wvT1kIBGWhZHZL1i2NoP+IvjKe0Z56D36 BZ2Nf/IuLtZZRuCoxgDvj63PmIUDgZsI1Cs8w622ZfEoe0WIAURrt+FFljraHtMj vuwqf6J5QiJBATOBGMhhK6bsugS+8IYaUwYBpQLwl9cT+0qLyYeCiauWFlno/eHo d/HVdXW/0kdalZMCoh8cGSu6pFnxLFM2g3e8U9t5dgmmuDkcnuF5VonEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEn3s5p6eYypTXYerKk4UyEpeoOMB8GA1UdIwQY MBaAFBg4xcIsl22mWh/Rbo+cDJTiekumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjEyYzEtOTEzMy00YTJiLTlkZjgt OWI1MzdmNjNiNzVkLzEvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjEyYzEtOTEzMy00YTJiLTlkZjgtOWI1MzdmNjNiNzVk LzEvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd26LDXJh KmUPSArzjqcBJtT1SGbyiJmzpFSJqcgj68Wgc8uGzSNSN+i+T3rttbMibmL6HJ2a emCE54EHnmBpiQ6Aivj+Np9yE7s60EDHWHMNFsVUUEx6wOwgAPwIvrRm7ZbHt0KO x697Ri51kQ6EBIowI0Y5Q0FKnxdTgzD56J1rprpBcO7GdXdu/QqIFD4Q+q/ACM5J IN74QCrv1wLOMcMlOMuvl8Js8GtJ9jHR4UhEeyhOPmGhDhacFro5HxpMNJX/1Jfs Ptpud8NsJH9qElyUvjKsl3hpi+76TrybDJt6SWhNPF6I7X0fUTsMCemNCIxIdQXi R9m8QwYa5DgE9w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:36 2026 by rpki-client