This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json) Hash identifier: WepnNl921mP/t8RDxYQE/nRm40GlCAAd0mmfTXgJZ1M= Subject key identifier: 72:5E:6D:F8:46:C3:F3:AF:71:22:41:92:A4:9B:E5:57:C7:C4:F7:6C Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Certificate serial: 019C4434EBC872A10899875616756EF1C33B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft Manifest number: 0661 Signing time: Mon 09 Feb 2026 21:00:44 +0000 Manifest this update: Mon 09 Feb 2026 21:00:44 +0000 Manifest next update: Tue 10 Feb 2026 21:00:44 +0000 Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: n8hYw7U2Yy6aGADJ4DxQe7uJtTzDNASzqN2U/5ZURO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:eb:c8:72:a1:08:99:87:56:16:75:6e:f1:c3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Validity Not Before: Feb 9 21:00:44 2026 GMT Not After : Feb 10 21:00:44 2026 GMT Subject: CN=725e6df846c3f3af71224192a49be557c7c4f76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:85:1c:5a:83:87:32:54:3d:dc:d0:b9:3e:2a: 8d:cf:c2:ac:5c:53:dc:6c:9b:b4:08:4d:bb:5d:a0: 1c:ca:cc:4c:54:64:ca:a3:f2:0f:b2:57:fa:2b:d4: d1:4a:c3:68:13:9d:c2:53:12:e4:8b:2e:73:a1:1e: 52:eb:73:26:c0:10:6b:e8:49:d2:e0:41:3c:1d:7f: 1b:69:50:30:3a:5d:69:0a:85:5c:fd:3a:54:1c:d9: b3:8b:07:a1:a7:ea:d5:73:3e:3f:2d:2a:4e:62:ba: ae:3f:11:47:63:e5:65:bf:13:26:a9:9d:ea:9c:1e: 01:91:27:e2:90:16:59:3b:eb:f1:33:c7:f8:62:4c: b7:90:a5:2c:75:8e:a0:f9:92:f4:4a:a5:02:23:10: a1:c8:8b:ee:2a:c0:df:cb:6f:1a:ca:89:68:d6:02: f9:d4:70:57:bf:e2:f2:fc:32:c2:50:d0:22:e1:49: fb:1c:a4:4e:a2:c0:79:b6:db:e8:26:5e:13:4e:d4: 16:4b:5a:05:2f:17:32:0a:4e:68:ec:e3:4d:07:b7: 42:c1:53:30:cd:62:9b:e5:e4:b1:b5:bd:21:9b:4b: d7:94:17:39:a3:5c:8b:5b:67:8f:f6:0e:76:e9:0b: 22:4d:e2:45:95:2f:37:ba:6c:f5:41:db:cd:dc:14: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:6D:F8:46:C3:F3:AF:71:22:41:92:A4:9B:E5:57:C7:C4:F7:6C X509v3 Authority Key Identifier: keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:93:d5:3d:50:02:db:f6:64:9e:d9:5e:75:22:a4:18:23:2e: 70:1c:03:46:36:1a:c3:e8:32:8c:87:a6:d2:b7:eb:96:be:bd: 19:7a:23:3f:54:4b:dd:1f:df:69:b8:fb:85:a5:ee:2d:c6:d1: 7e:41:a7:ed:41:94:82:e1:33:f2:3e:55:f9:2b:cc:4e:5b:6e: 39:a8:23:8c:64:02:df:cb:11:10:a7:54:67:aa:ad:2f:36:b3: 62:dc:72:5a:a8:ed:bb:dc:32:6f:39:a0:cd:cb:34:20:57:62: 99:90:89:1f:6a:e4:30:18:65:bf:7b:60:4b:56:6b:4f:76:fb: 6e:eb:fc:bf:b7:66:8a:ca:53:56:97:97:57:bf:87:c1:98:a9: 30:f9:c7:0e:c7:be:94:df:b3:43:26:18:21:d5:e1:1b:eb:5a: d9:88:57:fd:9f:8f:e0:b5:b8:f3:ee:a0:54:7c:a4:f4:e5:4d: 34:e4:34:ae:6d:ff:cc:9f:7e:60:6a:7c:51:ff:1d:2d:ef:b3: f8:a8:ad:57:ce:ea:03:17:1d:58:9d:6a:76:a8:26:c0:e4:74: 70:86:b4:f8:9b:21:e7:b8:68:0f:a2:48:a1:06:de:51:91:de: 63:29:60:fd:5f:e2:3f:6f:30:0a:70:94:9f:2e:e1:1b:77:99: 27:82:f5:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENOvIcqEImYdWFnVu8cM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4 OWVjNjIwHhcNMjYwMjA5MjEwMDQ0WhcNMjYwMjEwMjEwMDQ0WjAzMTEwLwYDVQQD Eyg3MjVlNmRmODQ2YzNmM2FmNzEyMjQxOTJhNDliZTU1N2M3YzRmNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IUcWoOHMlQ93NC5PiqNz8KsXFPc bJu0CE27XaAcysxMVGTKo/IPslf6K9TRSsNoE53CUxLkiy5zoR5S63MmwBBr6EnS 4EE8HX8baVAwOl1pCoVc/TpUHNmziwehp+rVcz4/LSpOYrquPxFHY+VlvxMmqZ3q nB4BkSfikBZZO+vxM8f4Yky3kKUsdY6g+ZL0SqUCIxChyIvuKsDfy28ayolo1gL5 1HBXv+Ly/DLCUNAi4Un7HKROosB5ttvoJl4TTtQWS1oFLxcyCk5o7ONNB7dCwVMw zWKb5eSxtb0hm0vXlBc5o1yLW2eP9g526QsiTeJFlS83umz1QdvN3BT8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJebfhGw/OvcSJBkqSb5VfHxPdsMB8GA1UdIwQY MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3 LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZPVPVAC 2/ZkntledSKkGCMucBwDRjYaw+gyjIem0rfrlr69GXojP1RL3R/fabj7haXuLcbR fkGn7UGUguEz8j5V+SvMTltuOagjjGQC38sREKdUZ6qtLzazYtxyWqjtu9wybzmg zcs0IFdimZCJH2rkMBhlv3tgS1ZrT3b7buv8v7dmispTVpeXV7+HwZipMPnHDse+ lN+zQyYYIdXhG+ta2YhX/Z+P4LW48+6gVHyk9OVNNOQ0rm3/zJ9+YGp8Uf8dLe+z +KitV87qAxcdWJ1qdqgmwOR0cIa0+Jsh57hoD6JIoQbeUZHeYylg/V/iP28wCnCU ny7hG3eZJ4L1nw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:13:05 2026 by rpki-client