This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json) Hash identifier: LMmzDmT6SSxvmS1f00wSpIgp4pqCoa1rRqxLOCKdQCo= Subject key identifier: B5:24:D6:47:FD:79:55:59:3D:E2:FD:57:66:AC:85:E4:07:64:7C:53 Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6 Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6 Certificate serial: 019C446C1F9ADE778A4E2F665E84ABAB55EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft Manifest number: 01B1 Signing time: Mon 09 Feb 2026 22:01:02 +0000 Manifest this update: Mon 09 Feb 2026 22:01:02 +0000 Manifest next update: Tue 10 Feb 2026 22:01:02 +0000 Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: RxQcA0qi2GgI/aqiwMIS9IClG8CXySaX3bduwIMPmV0=) 2: M0TOyn3Fajg4bXPrKGJxN9Hvjss.roa (hash: iz1xOigpd52YAYJIyKzuYKInMpgIKrWsoBQltN69+EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:1f:9a:de:77:8a:4e:2f:66:5e:84:ab:ab:55:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6 Validity Not Before: Feb 9 22:01:02 2026 GMT Not After : Feb 10 22:01:02 2026 GMT Subject: CN=b524d647fd7955593de2fd5766ac85e407647c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:6c:bd:76:d2:51:20:48:03:43:aa:cf:d0: 73:b6:de:df:b1:cc:e1:40:05:00:77:4d:c5:a7:74: 58:16:34:1b:55:be:46:42:15:b1:0a:8d:80:4a:f1: 4f:be:91:5a:84:16:80:41:5c:cf:42:66:88:67:22: ab:25:3d:f4:dd:f3:77:99:14:13:cf:3e:5b:3f:12: 33:97:bf:e4:fe:26:12:71:13:2a:e6:99:e8:f8:de: 15:48:11:bd:88:a6:ad:7f:ce:72:d9:dd:db:d7:21: 0e:ec:f5:1a:70:b8:4e:03:38:c1:dc:6a:75:19:5b: 8f:e2:61:e4:53:96:b6:63:2a:b9:76:dd:f4:24:a5: 49:97:c0:12:72:a4:57:26:30:24:67:bd:e4:05:75: dd:dd:a2:8c:b4:2a:60:14:2f:72:f9:bb:85:3e:88: 8d:6a:d4:9c:39:6a:37:d0:a3:0c:b4:63:82:2e:ec: f1:45:c3:d1:79:77:75:4b:7f:17:55:24:fd:b5:da: a8:87:76:22:f9:47:8e:4c:54:cb:d2:e2:c8:c2:1a: c0:cb:98:9f:a4:ac:1b:5f:b0:8f:d1:52:03:74:77: 3c:09:92:03:24:f0:b2:4a:e9:6a:99:e4:84:0b:66: f8:91:e3:6e:5c:d0:be:b4:6a:73:0e:c5:43:7e:01: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:D6:47:FD:79:55:59:3D:E2:FD:57:66:AC:85:E4:07:64:7C:53 X509v3 Authority Key Identifier: keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a7:f4:1f:5a:86:2a:1b:5e:b9:15:69:5a:96:f5:a7:6f:09: 03:48:1b:49:89:d2:94:55:79:8d:50:43:d5:86:f7:b4:d6:17: c4:53:8a:bb:e0:dc:11:39:df:59:4c:85:c0:41:93:0c:15:3b: 0b:0c:5e:e2:6f:af:a3:36:9b:4a:55:56:c8:3e:00:f8:f4:aa: a6:ba:65:b6:81:dc:ab:2a:09:39:9d:fa:ba:5e:15:ef:f3:bf: 04:46:87:31:fe:0d:55:a0:06:01:6b:e1:3f:9a:f7:0f:e7:db: dc:ac:97:42:e1:3d:09:ce:52:06:77:ce:15:b4:e0:f0:5f:22: 3b:50:d7:7f:7a:aa:9d:56:50:02:10:f3:07:8b:18:71:74:c5: 39:05:92:5d:bb:b4:6d:01:81:aa:18:7b:b6:d7:8b:0b:b9:da: 8a:6b:65:40:03:2b:b5:35:5b:09:ee:7c:1d:1c:72:f7:20:d0: d6:da:54:96:2d:38:18:29:0a:20:7f:9d:d4:b2:ad:e9:5f:bd: d3:2e:93:60:6a:a0:98:b9:ba:c8:b5:51:0a:60:d7:17:71:e9: ba:ea:c9:b6:96:ab:32:1f:6c:f1:dd:c1:eb:c5:38:78:68:fb: 3d:00:d8:66:f4:43:1e:37:2a:01:1d:f9:53:2e:43:e4:f5:84: 90:44:fa:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbB+a3neKTi9mXoSrq1XrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDJhMDczYTFhYmM2NDQzNTdhNWY5NzM4ZWViNjc2YTRh OTNkYzYwHhcNMjYwMjA5MjIwMTAyWhcNMjYwMjEwMjIwMTAyWjAzMTEwLwYDVQQD EyhiNTI0ZDY0N2ZkNzk1NTU5M2RlMmZkNTc2NmFjODVlNDA3NjQ3YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyihsvXbSUSBIA0Oqz9Bztt7fsczh QAUAd03Fp3RYFjQbVb5GQhWxCo2ASvFPvpFahBaAQVzPQmaIZyKrJT303fN3mRQT zz5bPxIzl7/k/iYScRMq5pno+N4VSBG9iKatf85y2d3b1yEO7PUacLhOAzjB3Gp1 GVuP4mHkU5a2Yyq5dt30JKVJl8AScqRXJjAkZ73kBXXd3aKMtCpgFC9y+buFPoiN atScOWo30KMMtGOCLuzxRcPReXd1S38XVST9tdqoh3Yi+UeOTFTL0uLIwhrAy5if pKwbX7CP0VIDdHc8CZIDJPCySulqmeSEC2b4keNuXNC+tGpzDsVDfgF/QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUk1kf9eVVZPeL9V2asheQHZHxTMB8GA1UdIwQY MBaAFNYCoHOhq8ZENXpflzjutnakqT3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdLZ2M2R3J4a1ExZWwtWE9PNjJkcVNwUGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MmJkODgtYTBiNC00ZGU0LWE2NTYt MjhhMTU0MDQ0NTNlLzEvMWdLZ2M2R3J4a1ExZWwtWE9PNjJkcVNwUGNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MmJkODgtYTBiNC00ZGU0LWE2NTYtMjhhMTU0MDQ0NTNl LzEvMWdLZ2M2R3J4a1ExZWwtWE9PNjJkcVNwUGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaf0H1qG KhteuRVpWpb1p28JA0gbSYnSlFV5jVBD1Yb3tNYXxFOKu+DcETnfWUyFwEGTDBU7 Cwxe4m+vozabSlVWyD4A+PSqprpltoHcqyoJOZ36ul4V7/O/BEaHMf4NVaAGAWvh P5r3D+fb3KyXQuE9Cc5SBnfOFbTg8F8iO1DXf3qqnVZQAhDzB4sYcXTFOQWSXbu0 bQGBqhh7tteLC7naimtlQAMrtTVbCe58HRxy9yDQ1tpUli04GCkKIH+d1LKt6V+9 0y6TYGqgmLm6yLVRCmDXF3HpuurJtparMh9s8d3B68U4eGj7PQDYZvRDHjcqAR35 Uy5D5PWEkET6yw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:55 2026 by rpki-client