This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json) Hash identifier: 9xgDO3grQeNrqs6pX6YbyXlY6x9II/MqEmTRAszhPec= Subject key identifier: 34:99:F7:28:BD:E9:21:8F:7D:7E:B2:5D:91:1A:86:18:D2:B3:79:28 Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0 Certificate serial: 019C42469A069A60A5D61A69C5D26C3E34D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft Manifest number: 16D4 Signing time: Mon 09 Feb 2026 12:00:49 +0000 Manifest this update: Mon 09 Feb 2026 12:00:49 +0000 Manifest next update: Tue 10 Feb 2026 12:00:49 +0000 Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=) 2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: Jr1/cNZ2/MQh1gGYzz2kGgb/Zy0HuYPFKS6PmL1tyN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9a:06:9a:60:a5:d6:1a:69:c5:d2:6c:3e:34:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0 Validity Not Before: Feb 9 12:00:49 2026 GMT Not After : Feb 10 12:00:49 2026 GMT Subject: CN=3499f728bde9218f7d7eb25d911a8618d2b37928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:cc:8f:75:2a:f2:d4:ad:58:d8:33:c1:16: 09:cc:7f:8f:30:84:8f:86:21:93:24:27:38:51:97: e9:1d:38:fb:9f:d5:4b:6d:53:9d:a2:1a:00:63:b4: 7a:87:b7:31:c4:e9:2b:da:31:e5:64:d2:89:7c:72: 99:e7:e5:aa:f1:94:a2:71:41:7b:71:36:53:c7:75: 1d:77:18:6c:e7:9a:7b:d3:fe:a2:81:f5:be:aa:3e: c0:c1:94:eb:42:c0:04:8f:40:d3:22:c9:2f:a9:ac: 74:5f:2b:c3:d7:91:cc:c5:3f:46:99:97:89:3a:b3: 93:11:41:aa:55:e3:6e:45:1d:29:e2:c6:b4:21:51: 20:af:c8:b7:4e:a4:4f:3c:c4:81:29:8d:4a:2d:6b: e4:2e:d4:6e:e5:87:55:48:50:76:b8:db:58:2d:25: 6b:fa:fa:a4:eb:2a:1b:65:02:15:4a:ab:34:25:e9: 76:c4:87:e2:36:23:da:35:a2:37:8f:3e:e7:a4:7a: 02:a1:91:fa:a3:41:23:bd:3b:54:0e:ee:44:52:4a: 0d:78:e6:ec:82:92:c5:a4:80:44:d2:85:93:ca:33: ff:c6:5d:f7:03:b1:b4:bf:ea:b4:d6:36:87:0c:c4: ba:5b:ce:8d:7f:79:05:23:58:77:eb:34:8f:e4:a0: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:99:F7:28:BD:E9:21:8F:7D:7E:B2:5D:91:1A:86:18:D2:B3:79:28 X509v3 Authority Key Identifier: keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b9:7a:44:89:9b:72:86:3f:f9:9b:7d:7d:f8:6b:2b:8a:96: ef:ae:a9:bf:5e:99:39:07:5b:2b:68:1f:9e:04:42:58:a7:9c: d5:75:f7:a2:1c:08:54:ba:e5:21:1b:2e:b7:a9:94:ae:ef:34: a9:2a:e1:c8:f3:92:49:a4:e0:af:96:0d:ea:6f:45:f5:1e:93: ce:29:f0:87:bc:51:10:45:f6:d1:69:52:b8:c5:27:7f:21:d4: 83:09:e3:54:0a:09:45:0f:53:de:f0:f3:63:d3:a9:c9:22:d9: 6b:9e:9c:27:46:cf:89:bc:d2:4c:34:68:6f:12:52:8b:9f:60: 2b:bb:e7:ca:72:7f:7f:2a:72:46:f3:94:d4:b2:7a:14:91:25: 20:53:0c:d2:61:58:c8:3c:d4:5d:76:09:16:b0:4a:47:6d:c2: fa:8c:50:e8:b9:69:a2:3a:de:a5:f6:0a:a6:ee:29:f3:f1:6e: ed:7e:40:74:4c:9e:a3:00:ae:ff:d7:f2:ba:ab:10:0e:fd:61: 81:da:dc:df:d8:8e:77:4e:a2:f9:b2:0b:8e:4c:ff:36:1d:f9: c0:a8:2a:aa:2d:76:04:88:eb:80:45:28:ed:1d:17:e5:8a:54: f8:b6:6b:3b:08:e0:1d:78:b3:c9:7b:13:25:c8:c0:ca:c1:be: b0:1e:2c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpoGmmCl1hppxdJsPjTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1 MmI3ZDAwHhcNMjYwMjA5MTIwMDQ5WhcNMjYwMjEwMTIwMDQ5WjAzMTEwLwYDVQQD EygzNDk5ZjcyOGJkZTkyMThmN2Q3ZWIyNWQ5MTFhODYxOGQyYjM3OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7Mj3Uq8tStWNgzwRYJzH+PMISP hiGTJCc4UZfpHTj7n9VLbVOdohoAY7R6h7cxxOkr2jHlZNKJfHKZ5+Wq8ZSicUF7 cTZTx3Uddxhs55p70/6igfW+qj7AwZTrQsAEj0DTIskvqax0XyvD15HMxT9GmZeJ OrOTEUGqVeNuRR0p4sa0IVEgr8i3TqRPPMSBKY1KLWvkLtRu5YdVSFB2uNtYLSVr +vqk6yobZQIVSqs0Jel2xIfiNiPaNaI3jz7npHoCoZH6o0EjvTtUDu5EUkoNeObs gpLFpIBE0oWTyjP/xl33A7G0v+q01jaHDMS6W86Nf3kFI1h36zSP5KCT1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSZ9yi96SGPfX6yXZEahhjSs3koMB8GA1UdIwQY MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7l6RImb coY/+Zt9ffhrK4qW766pv16ZOQdbK2gfngRCWKec1XX3ohwIVLrlIRsut6mUru80 qSrhyPOSSaTgr5YN6m9F9R6Tzinwh7xREEX20WlSuMUnfyHUgwnjVAoJRQ9T3vDz Y9OpySLZa56cJ0bPibzSTDRobxJSi59gK7vnynJ/fypyRvOU1LJ6FJElIFMM0mFY yDzUXXYJFrBKR23C+oxQ6LlpojrepfYKpu4p8/Fu7X5AdEyeowCu/9fyuqsQDv1h gdrc39iOd06i+bILjkz/Nh35wKgqqi12BIjrgEUo7R0X5YpU+LZrOwjgHXizyXsT JcjAysG+sB4sjg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:16 2026 by rpki-client