This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json) Hash identifier: jyN3d5wnlMprc63Xbn2sz6SUWT9edv+zCxmcG3wbtkM= Subject key identifier: D0:5C:36:A3:3F:EE:45:0F:31:42:35:13:E7:FE:71:BE:D3:98:35:82 Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94 Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794 Certificate serial: 019C41D8979D75932991185C6F661D392C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft Manifest number: 157B Signing time: Mon 09 Feb 2026 10:00:39 +0000 Manifest this update: Mon 09 Feb 2026 10:00:39 +0000 Manifest next update: Tue 10 Feb 2026 10:00:39 +0000 Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: rXPL2vdl3YcfPFtYsgH4zg8G9nb1+V7a2s2kXD7uldA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:97:9d:75:93:29:91:18:5c:6f:66:1d:39:2c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794 Validity Not Before: Feb 9 10:00:39 2026 GMT Not After : Feb 10 10:00:39 2026 GMT Subject: CN=d05c36a33fee450f31423513e7fe71bed3983582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:a3:7d:77:8c:38:b0:7d:fd:c0:fe:fb:86: be:e4:ff:1b:f8:20:b9:ec:2d:7e:ad:98:d0:12:0c: 97:a6:92:0a:38:a2:87:c1:99:b5:e9:26:89:64:62: b1:1b:f4:99:9d:c1:4a:f1:b5:49:6b:b1:7f:9b:fb: fe:b3:75:f2:6a:54:bb:84:d7:7a:7b:c6:b4:4a:90: 71:89:70:af:4e:08:eb:5b:71:a3:dc:82:65:88:c4: ca:b3:f1:50:5c:a8:47:75:fc:65:74:c1:fe:c6:48: d0:ef:ac:16:08:f0:c2:77:45:1e:2d:ba:63:9c:5a: 68:84:de:e1:c8:39:6d:4b:ee:20:4c:32:38:43:a3: 9c:04:12:95:00:48:70:a4:4e:e6:cd:74:cb:23:d8: fb:e7:43:20:e3:41:e8:41:16:06:cf:f0:77:7c:4b: 02:1c:43:a9:6d:42:61:20:74:95:80:90:53:5f:b7: 72:40:39:3b:75:a3:37:0d:65:10:00:7b:04:67:0c: 5c:1b:16:eb:1f:be:6f:d6:f0:3c:f2:76:be:b8:9e: 8d:1e:94:d6:e0:4d:4c:03:c5:d6:29:be:aa:f7:28: d4:bf:ac:f0:d4:b1:82:5e:12:76:b0:95:a6:c2:92: 76:17:1f:4e:68:49:d0:bb:07:d4:9b:d7:31:30:c2: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5C:36:A3:3F:EE:45:0F:31:42:35:13:E7:FE:71:BE:D3:98:35:82 X509v3 Authority Key Identifier: keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:98:ed:4b:87:a9:e2:18:12:bd:3a:da:5f:0d:ad:8a:44:9a: 61:98:df:79:bf:d7:cf:39:17:11:c1:a0:f1:4b:31:1c:9c:34: fa:e3:07:f9:1f:c9:f7:94:25:37:e4:9d:76:70:69:89:3e:92: 90:45:40:46:8c:e6:1b:ff:85:29:75:46:b0:fd:fd:f0:2f:39: bb:e7:15:a5:4f:1d:3f:bf:1c:3e:76:b0:f1:15:85:83:5c:03: a9:a7:2b:c5:0c:74:c0:25:6b:32:78:f5:85:0f:0b:56:45:66: b8:98:3f:cd:6b:e8:df:f9:dd:10:c5:d6:ec:3c:b7:dc:3b:a7: 7d:0e:1a:41:d4:a5:19:c5:e1:0a:3f:4a:51:e8:68:a5:a6:05: 80:ba:0e:93:39:97:43:4c:91:e5:36:c3:b4:33:4d:47:95:34: 7d:15:09:bb:c8:d2:ff:c2:83:6e:80:c1:ad:7f:ad:06:6b:11: 38:46:aa:66:78:0f:ed:9a:85:26:cf:bf:25:6d:20:28:2b:e0: 73:aa:26:cb:2b:a8:f6:9d:22:5e:d6:2f:b2:65:60:64:8c:c8: 0f:36:af:26:1b:2b:63:10:aa:91:9d:ec:6d:b6:73:27:c6:ab: e4:7a:ce:de:ac:ea:2f:c6:15:e9:9a:11:76:c0:02:23:b5:f8: 8c:12:19:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JeddZMpkRhcb2YdOSxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTA0M2E1NGU2MjMzZDIyZTU2ZGI3NGM5Zjc4ZTJkNmQx Yzk3OTQwHhcNMjYwMjA5MTAwMDM5WhcNMjYwMjEwMTAwMDM5WjAzMTEwLwYDVQQD EyhkMDVjMzZhMzNmZWU0NTBmMzE0MjM1MTNlN2ZlNzFiZWQzOTgzNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk+jfXeMOLB9/cD++4a+5P8b+CC5 7C1+rZjQEgyXppIKOKKHwZm16SaJZGKxG/SZncFK8bVJa7F/m/v+s3XyalS7hNd6 e8a0SpBxiXCvTgjrW3Gj3IJliMTKs/FQXKhHdfxldMH+xkjQ76wWCPDCd0UeLbpj nFpohN7hyDltS+4gTDI4Q6OcBBKVAEhwpE7mzXTLI9j750Mg40HoQRYGz/B3fEsC HEOpbUJhIHSVgJBTX7dyQDk7daM3DWUQAHsEZwxcGxbrH75v1vA88na+uJ6NHpTW 4E1MA8XWKb6q9yjUv6zw1LGCXhJ2sJWmwpJ2Fx9OaEnQuwfUm9cxMMIlQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBcNqM/7kUPMUI1E+f+cb7TmDWCMB8GA1UdIwQY MBaAFBlQQ6VOYjPSLlbbdMn3ji1tHJeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTkt M2I1MjdjYjk4Njg1LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTktM2I1MjdjYjk4Njg1 LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5jtS4ep 4hgSvTraXw2tikSaYZjfeb/XzzkXEcGg8UsxHJw0+uMH+R/J95QlN+SddnBpiT6S kEVARozmG/+FKXVGsP398C85u+cVpU8dP78cPnaw8RWFg1wDqacrxQx0wCVrMnj1 hQ8LVkVmuJg/zWvo3/ndEMXW7Dy33DunfQ4aQdSlGcXhCj9KUehopaYFgLoOkzmX Q0yR5TbDtDNNR5U0fRUJu8jS/8KDboDBrX+tBmsROEaqZngP7ZqFJs+/JW0gKCvg c6omyyuo9p0iXtYvsmVgZIzIDzavJhsrYxCqkZ3sbbZzJ8ar5HrO3qzqL8YV6ZoR dsACI7X4jBIZ+w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:24 2026 by rpki-client