This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json) Hash identifier: 7561SutVmiIuZ2xT9hpbDX9DdHcb3iJya43jN30Avjg= Subject key identifier: 84:AB:AF:A6:AB:21:12:21:EC:9C:57:A4:AD:4B:84:8C:27:E6:C9:36 Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df Certificate serial: 019C41D87FCDA238C510D0D402539CEE63F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 10:00:33 +0000 Manifest this update: Mon 09 Feb 2026 10:00:33 +0000 Manifest next update: Tue 10 Feb 2026 10:00:33 +0000 Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: 00dDXlHSMqspzoDUY6hACdpHwbzU33mKJUy1GO/Lijw=) 2: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:7f:cd:a2:38:c5:10:d0:d4:02:53:9c:ee:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df Validity Not Before: Feb 9 10:00:33 2026 GMT Not After : Feb 10 10:00:33 2026 GMT Subject: CN=84abafa6ab211221ec9c57a4ad4b848c27e6c936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:7f:a1:97:d5:3f:fa:0b:19:11:8c:89:ac: 08:39:9f:9d:67:3b:00:f1:93:90:dd:f1:a5:af:b4: 12:8a:e7:fc:31:c3:2d:c5:d1:8b:ff:9a:a6:2c:fe: 44:53:ba:d7:ff:49:2f:4c:bf:43:c1:dd:a1:af:78: df:ec:95:b3:16:e3:e3:c1:8a:15:6b:b6:2f:a1:e8: 81:1e:96:38:a3:1d:fc:8b:ae:86:3e:ca:ae:16:ca: 0e:f1:61:ab:36:a0:18:5e:90:a8:5b:7d:c4:ec:11: e2:23:cd:24:c7:a4:11:cf:42:9e:b0:49:74:bb:00: 6a:ef:3e:52:cf:3e:bf:f5:ad:4b:ff:17:9e:b6:6c: 8e:bd:28:91:4f:c0:83:f3:2e:0f:92:3e:29:26:9b: 51:e8:ba:5c:e7:20:cd:87:82:fc:8b:6d:18:30:84: 20:85:31:d1:97:14:e9:1f:97:39:3d:67:4b:1b:5c: 93:19:f5:64:d9:72:29:6a:de:b6:02:28:6c:69:25: 91:97:4e:4f:2b:66:89:46:4f:f9:1c:33:b6:66:77: 50:80:0b:ed:1c:71:ee:e8:ad:a9:00:4c:02:0f:cd: eb:a4:79:fe:9b:3e:fc:85:1e:b0:70:26:5d:e7:3a: 30:d4:14:42:b6:58:3a:a4:da:82:25:bc:c9:13:e6: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:AF:A6:AB:21:12:21:EC:9C:57:A4:AD:4B:84:8C:27:E6:C9:36 X509v3 Authority Key Identifier: keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e4:22:9e:08:77:a1:39:d5:65:f6:06:2d:fb:5c:ec:53:78: 9a:f0:7a:02:86:36:0e:2e:25:93:01:5e:45:9c:d3:a8:f0:71: 53:0b:7c:1a:ed:9d:e9:75:a5:29:5c:a9:a6:eb:28:56:0f:1e: 32:95:d1:58:7e:38:b8:11:e5:2a:9f:2c:8d:88:09:b5:3e:2d: 11:af:38:f6:af:4f:3b:c1:2f:a5:31:d5:b2:36:98:15:72:b6: 48:7f:61:e0:86:66:97:9f:3a:f4:ff:f9:79:56:84:12:90:13: af:3d:c2:8a:fd:83:9e:71:a5:43:97:6d:09:15:27:1a:2b:84: ba:af:b5:96:c7:1e:90:9d:69:a4:12:f5:85:b5:2b:c7:9e:4b: 0d:c5:92:77:93:62:44:2c:22:46:20:3b:9c:a6:ca:30:83:c9: bd:71:b6:42:68:4b:03:dd:c2:af:45:08:1e:6c:0e:78:49:13: a5:55:b1:02:59:c4:01:6d:9a:db:85:ca:01:56:86:6c:d6:54: 2a:2f:87:95:60:17:76:7d:03:4f:90:e8:85:d6:b7:03:5a:65: 9e:ff:d3:6c:2c:a1:37:df:0c:9e:e4:dd:39:24:41:af:b3:1b: 60:53:56:f7:91:08:65:d1:2a:c5:e9:c9:fc:a1:40:0a:e6:21: 09:9b:c0:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2H/NojjFENDUAlOc7mPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh YTcxZGYwHhcNMjYwMjA5MTAwMDMzWhcNMjYwMjEwMTAwMDMzWjAzMTEwLwYDVQQD Eyg4NGFiYWZhNmFiMjExMjIxZWM5YzU3YTRhZDRiODQ4YzI3ZTZjOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4h/oZfVP/oLGRGMiawIOZ+dZzsA 8ZOQ3fGlr7QSiuf8McMtxdGL/5qmLP5EU7rX/0kvTL9Dwd2hr3jf7JWzFuPjwYoV a7YvoeiBHpY4ox38i66GPsquFsoO8WGrNqAYXpCoW33E7BHiI80kx6QRz0KesEl0 uwBq7z5Szz6/9a1L/xeetmyOvSiRT8CD8y4Pkj4pJptR6Lpc5yDNh4L8i20YMIQg hTHRlxTpH5c5PWdLG1yTGfVk2XIpat62AihsaSWRl05PK2aJRk/5HDO2ZndQgAvt HHHu6K2pAEwCD83rpHn+mz78hR6wcCZd5zow1BRCtlg6pNqCJbzJE+Yr/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISrr6arIRIh7JxXpK1LhIwn5sk2MB8GA1UdIwQY MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2 LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuQingh3 oTnVZfYGLftc7FN4mvB6AoY2Di4lkwFeRZzTqPBxUwt8Gu2d6XWlKVyppusoVg8e MpXRWH44uBHlKp8sjYgJtT4tEa849q9PO8EvpTHVsjaYFXK2SH9h4IZml5869P/5 eVaEEpATrz3Civ2DnnGlQ5dtCRUnGiuEuq+1lscekJ1ppBL1hbUrx55LDcWSd5Ni RCwiRiA7nKbKMIPJvXG2QmhLA93Cr0UIHmwOeEkTpVWxAlnEAW2a24XKAVaGbNZU Ki+HlWAXdn0DT5Dohda3A1plnv/TbCyhN98MnuTdOSRBr7MbYFNW95EIZdEqxenJ /KFACuYhCZvAaw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:16 2026 by rpki-client