This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json) Hash identifier: 0kxedFWGquFVYR0wnsXfvq9oRVLsmSaQbgvaFFdrR8M= Subject key identifier: 8F:DF:E4:AB:0B:A2:74:AF:C7:DE:C0:80:6E:50:47:40:A1:5D:7B:35 Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4 Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4 Certificate serial: 019C427D720D373909517D7A3B3992B75AB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft Manifest number: 1328 Signing time: Mon 09 Feb 2026 13:00:43 +0000 Manifest this update: Mon 09 Feb 2026 13:00:43 +0000 Manifest next update: Tue 10 Feb 2026 13:00:43 +0000 Files and hashes: 1: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: jDTX72sj8hM989eNGmJ73nsvFjN+pCa6geLQdo/PL00=) 2: zJ9YO7uI6W1Gq5hqe_FdpaKHEOs.roa (hash: wHDNKsjqy6w/5WpMFtLcJHbUM6e7hIDnbt9VTy3GjT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:72:0d:37:39:09:51:7d:7a:3b:39:92:b7:5a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4 Validity Not Before: Feb 9 13:00:43 2026 GMT Not After : Feb 10 13:00:43 2026 GMT Subject: CN=8fdfe4ab0ba274afc7dec0806e504740a15d7b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:6e:ca:a2:7c:85:fa:59:f9:12:c1:81:ea: 63:c8:76:66:26:85:26:fd:11:ac:37:3c:7c:5a:6b: 2f:83:8c:a1:e2:cb:c5:73:8a:b3:92:b8:ee:bf:e7: 89:6e:f4:f9:f8:67:df:77:f9:a2:99:07:30:b5:8d: 1a:77:bc:30:8b:eb:da:7b:55:e7:2b:7c:cf:a9:80: 7c:4e:b7:ea:bc:6b:6c:8f:58:4e:f2:2c:2a:ce:b2: a4:6b:27:e1:4c:72:0a:a8:1c:64:42:a3:fc:5d:e1: 02:fd:21:f1:2a:2f:dd:c6:f5:5b:d7:02:a5:b9:c3: 56:ca:aa:54:2b:0b:40:e2:bd:52:10:73:d4:9b:b6: 28:e2:c7:8c:09:d4:d4:5f:3c:f6:58:dc:92:a0:79: da:5a:af:06:0e:f0:9c:3f:44:70:f5:d1:16:43:21: 5a:02:53:f6:5c:73:e7:8c:7f:24:4f:dd:2f:64:e5: dc:11:1b:99:98:79:3a:f7:e0:2e:e2:c1:3c:15:ce: 60:e1:98:81:24:75:28:05:b5:29:12:cb:c9:71:9a: d3:e6:db:be:aa:13:ca:da:d2:77:5a:7b:2b:0a:1b: 87:7e:2d:3d:d1:1e:b2:cb:c7:68:cb:94:a9:55:99: 8c:fa:97:03:b8:d4:b9:57:8b:6e:a0:c8:0a:3b:e7: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:E4:AB:0B:A2:74:AF:C7:DE:C0:80:6E:50:47:40:A1:5D:7B:35 X509v3 Authority Key Identifier: keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:37:60:6e:c0:14:28:7b:27:a4:b3:01:e8:0d:5e:b1:05:cd: 94:dc:d8:3b:10:64:89:a4:cc:b8:ea:a7:e8:43:db:f6:96:18: 87:18:d2:13:af:6e:b1:03:ac:d6:6b:89:03:a5:d9:af:19:8e: 64:c8:e3:f8:8f:98:d6:06:31:f9:4d:6d:4f:b8:2c:f4:e6:f7: a4:a9:c1:5a:5e:a5:a1:03:0a:07:ae:ed:81:9a:31:35:fe:7c: bc:53:29:8e:1d:8a:bf:66:83:92:a6:7f:f8:9c:80:51:5a:20: d0:33:4a:a9:89:f6:c5:3a:89:58:39:6a:ff:fe:32:c3:45:cd: bd:49:54:42:94:49:ed:8d:30:99:36:18:9c:9b:37:4c:f4:0e: b0:90:6d:ff:9f:e0:d4:a1:da:9f:98:bb:60:30:84:1e:6e:f2: 3b:1e:c4:4f:a7:5c:49:00:24:e9:00:fc:f1:24:b8:8e:3d:6b: 66:e8:7f:09:07:43:e5:54:38:bc:05:4d:e9:ec:c4:b5:80:9e: 61:2f:a9:64:5e:bb:d9:1e:b2:b1:a2:26:08:5f:22:66:14:1f: b2:d9:6b:3a:97:28:b1:6b:ec:47:37:d2:8e:ff:44:22:61:b6: e1:56:08:bc:40:42:42:dc:9e:83:4f:be:44:97:e6:12:e5:ca: 1e:99:2a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXINNzkJUX16OzmSt1q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGVjMzk0MjgxM2QzZjM1MzZjMTI3ZTFhODIxYmZiZWY2 ZGIyYTQwHhcNMjYwMjA5MTMwMDQzWhcNMjYwMjEwMTMwMDQzWjAzMTEwLwYDVQQD Eyg4ZmRmZTRhYjBiYTI3NGFmYzdkZWMwODA2ZTUwNDc0MGExNWQ3YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxahuyqJ8hfpZ+RLBgepjyHZmJoUm /RGsNzx8Wmsvg4yh4svFc4qzkrjuv+eJbvT5+Gffd/mimQcwtY0ad7wwi+vae1Xn K3zPqYB8TrfqvGtsj1hO8iwqzrKkayfhTHIKqBxkQqP8XeEC/SHxKi/dxvVb1wKl ucNWyqpUKwtA4r1SEHPUm7Yo4seMCdTUXzz2WNySoHnaWq8GDvCcP0Rw9dEWQyFa AlP2XHPnjH8kT90vZOXcERuZmHk69+Au4sE8Fc5g4ZiBJHUoBbUpEsvJcZrT5tu+ qhPK2tJ3WnsrChuHfi090R6yy8doy5SpVZmM+pcDuNS5V4tuoMgKO+ewkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/f5KsLonSvx97AgG5QR0ChXXs1MB8GA1UdIwQY MBaAFIOOw5QoE9PzU2wSfhqCG/vvbbKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUt Yjg1MzU2N2RhMGVhLzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUtYjg1MzU2N2RhMGVh LzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTdgbsAU KHsnpLMB6A1esQXNlNzYOxBkiaTMuOqn6EPb9pYYhxjSE69usQOs1muJA6XZrxmO ZMjj+I+Y1gYx+U1tT7gs9Ob3pKnBWl6loQMKB67tgZoxNf58vFMpjh2Kv2aDkqZ/ +JyAUVog0DNKqYn2xTqJWDlq//4yw0XNvUlUQpRJ7Y0wmTYYnJs3TPQOsJBt/5/g 1KHan5i7YDCEHm7yOx7ET6dcSQAk6QD88SS4jj1rZuh/CQdD5VQ4vAVN6ezEtYCe YS+pZF672R6ysaImCF8iZhQfstlrOpcosWvsRzfSjv9EImG24VYIvEBCQtyeg0++ RJfmEuXKHpkqCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:34 2026 by rpki-client