This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json) Hash identifier: sqEQrlri1h1p6aa6qPyYCK2w8yOqHfah9UGhZ516W6I= Subject key identifier: 1C:28:0E:9A:13:91:63:4C:7C:56:7B:9E:00:B7:BF:15:67:92:BD:00 Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20 Certificate serial: 019C43903A7A5F4465203FE9B77C1275ABE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft Manifest number: 0AF7 Signing time: Mon 09 Feb 2026 18:00:51 +0000 Manifest this update: Mon 09 Feb 2026 18:00:51 +0000 Manifest next update: Tue 10 Feb 2026 18:00:51 +0000 Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: lve1fYYeUXMz8LCSfQ6RSSzv9USI6qYqM+zBiM3gnxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:3a:7a:5f:44:65:20:3f:e9:b7:7c:12:75:ab:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20 Validity Not Before: Feb 9 18:00:51 2026 GMT Not After : Feb 10 18:00:51 2026 GMT Subject: CN=1c280e9a1391634c7c567b9e00b7bf156792bd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:aa:9b:96:50:39:37:10:a1:45:b1:eb:75: 13:b3:36:20:f1:a5:c2:4b:2e:df:5e:32:f2:b4:b7: 76:fd:7a:b6:72:8a:9a:5e:e1:c0:6a:3c:04:62:64: 4d:0b:94:39:93:77:90:ca:78:ab:9d:8d:31:d6:3f: 3f:a3:65:d6:f3:6f:f5:d2:92:1f:4b:2c:f3:3b:b9: be:b9:ac:f5:1e:c9:8a:64:95:07:54:ff:5e:e4:e2: cc:2a:3e:51:32:74:2e:6f:7d:df:aa:45:5c:87:c1: 46:16:2a:50:14:be:f9:9a:8d:d6:03:7d:5e:6c:da: 89:11:06:05:16:fc:86:0f:03:51:73:66:d8:98:11: 6a:ed:ea:fc:fe:98:e2:98:7f:50:8c:f5:82:15:32: 07:2e:10:11:8d:23:bc:3a:11:a8:0b:f9:dd:c2:70: 71:d1:4b:c5:c8:65:7f:79:55:33:a3:29:93:ca:7a: db:cf:68:c5:8e:89:73:60:99:ba:56:f3:ab:45:f2: 32:d1:e7:08:f3:25:60:47:75:7a:2a:fb:cc:e8:dc: d9:a9:99:cd:8a:9f:88:dc:c1:10:1c:2f:67:99:67: 31:c8:75:e4:c8:88:49:91:f3:ac:e3:0e:8b:ed:e0: 59:cd:17:92:64:61:35:d7:6d:f2:83:4d:06:e6:92: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:28:0E:9A:13:91:63:4C:7C:56:7B:9E:00:B7:BF:15:67:92:BD:00 X509v3 Authority Key Identifier: keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:20:6d:a0:8e:dc:35:f7:4d:24:9d:48:10:d5:a1:71:b8:63: 39:d1:80:d1:9a:c5:0f:f4:f0:98:02:2d:34:30:b3:56:70:7f: aa:fe:fc:b9:5f:e2:32:fc:12:2b:3d:87:27:5e:e8:37:45:d4: bf:f4:82:61:8c:6c:ac:8d:fb:82:70:73:aa:52:dd:1d:ed:6d: a0:2b:87:3b:b6:f6:44:3f:d8:6e:6d:69:d6:73:f1:88:8e:88: ea:a5:bb:ed:d8:d9:72:71:4e:35:de:e0:6a:ee:fa:4a:94:25: 4f:ca:09:2e:41:36:17:32:8b:6b:47:17:0a:e5:cc:1b:4e:3e: be:34:14:66:50:aa:16:40:e6:78:9d:fc:26:b0:62:84:26:2b: f8:69:b3:b6:ef:37:51:1b:bb:06:08:20:3b:28:b0:29:7b:e1: 18:92:f9:e2:91:24:82:54:ad:90:d5:8c:65:2f:02:a8:7d:26: 38:28:68:d6:8f:4f:aa:35:3a:02:54:ad:1a:28:08:57:64:46: 0d:f4:ab:1f:b7:9c:25:0e:07:23:4c:c0:8e:4f:b0:b9:bf:f8: 78:e7:ab:6b:4a:87:86:02:64:4b:36:04:89:c0:42:f3:0b:2c: 88:e3:41:26:b1:e4:62:4e:07:78:8a:7e:32:fc:9d:34:bc:85: bc:24:ee:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDp6X0RlID/pt3wSdavlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTBmNzQ1MzAyNDNhNjRiMTFiYjIzMmMwMzhkNTc0ZTdm YzRkMjAwHhcNMjYwMjA5MTgwMDUxWhcNMjYwMjEwMTgwMDUxWjAzMTEwLwYDVQQD EygxYzI4MGU5YTEzOTE2MzRjN2M1NjdiOWUwMGI3YmYxNTY3OTJiZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuqm5ZQOTcQoUWx63UTszYg8aXC Sy7fXjLytLd2/Xq2coqaXuHAajwEYmRNC5Q5k3eQynirnY0x1j8/o2XW82/10pIf SyzzO7m+uaz1HsmKZJUHVP9e5OLMKj5RMnQub33fqkVch8FGFipQFL75mo3WA31e bNqJEQYFFvyGDwNRc2bYmBFq7er8/pjimH9QjPWCFTIHLhARjSO8OhGoC/ndwnBx 0UvFyGV/eVUzoymTynrbz2jFjolzYJm6VvOrRfIy0ecI8yVgR3V6KvvM6NzZqZnN ip+I3MEQHC9nmWcxyHXkyIhJkfOs4w6L7eBZzReSZGE1123yg00G5pLeDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwoDpoTkWNMfFZ7ngC3vxVnkr0AMB8GA1UdIwQY MBaAFBlQ90UwJDpksRuyMsA41XTn/E0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4Nzct ZTY4NWE3M2JkN2Q5LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4NzctZTY4NWE3M2JkN2Q5 LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCBtoI7c NfdNJJ1IENWhcbhjOdGA0ZrFD/TwmAItNDCzVnB/qv78uV/iMvwSKz2HJ17oN0XU v/SCYYxsrI37gnBzqlLdHe1toCuHO7b2RD/Ybm1p1nPxiI6I6qW77djZcnFONd7g au76SpQlT8oJLkE2FzKLa0cXCuXMG04+vjQUZlCqFkDmeJ38JrBihCYr+Gmztu83 URu7BgggOyiwKXvhGJL54pEkglStkNWMZS8CqH0mOCho1o9PqjU6AlStGigIV2RG DfSrH7ecJQ4HI0zAjk+wub/4eOera0qHhgJkSzYEicBC8wssiONBJrHkYk4HeIp+ MvydNLyFvCTu8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:51 2026 by rpki-client