This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json) Hash identifier: dgdsKaksKz+zMNtcrKI2g8kx3MyIL/Y37mI8V81lA1w= Subject key identifier: 41:2C:21:EA:12:38:84:03:78:F5:78:82:A2:5E:85:CA:74:D3:61:CF Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0 Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0 Certificate serial: 019C43FE69026367608E9A968CA687544C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft Manifest number: 05D7 Signing time: Mon 09 Feb 2026 20:01:12 +0000 Manifest this update: Mon 09 Feb 2026 20:01:12 +0000 Manifest next update: Tue 10 Feb 2026 20:01:12 +0000 Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: RrFLnFjzc8s0qc1018R9XnyYpW0jCHlvAeeW4xVgonM=) 2: RNg5Iw6hK9lFknD64uFpzzZFifw.roa (hash: MPWSSdeEZMH3BcEWDJHSPzUc1H1Qu6OWSelB4NXhiuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:69:02:63:67:60:8e:9a:96:8c:a6:87:54:4c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0 Validity Not Before: Feb 9 20:01:12 2026 GMT Not After : Feb 10 20:01:12 2026 GMT Subject: CN=412c21ea1238840378f57882a25e85ca74d361cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:d7:54:48:e3:a1:61:5e:af:19:3a:7b:8d: f8:93:78:40:2c:48:14:a0:ae:2c:79:b7:85:51:c1: 0a:78:4c:9e:2b:e5:db:bd:e1:3a:28:ff:db:84:2c: 45:5f:2c:65:27:16:f0:7a:73:cc:f4:4b:c1:96:c1: 8d:ae:79:80:35:56:89:f7:e4:bb:a4:16:c0:31:5d: d2:58:60:06:aa:2b:33:6e:4d:a9:58:60:c4:3a:22: 50:2a:40:29:e4:fd:45:bf:39:08:85:cc:fb:c0:db: 58:59:eb:1d:df:07:8a:4d:0a:c8:27:1e:cd:db:c6: 01:ad:73:66:66:9b:1c:46:ba:6b:0c:21:7d:0a:69: 32:1c:f7:ff:e9:7c:39:79:c7:c5:05:55:af:e1:f2: 07:a7:a2:84:c1:bb:5e:e9:69:1b:33:47:b1:c1:9b: e3:1a:be:2f:72:a5:5c:ef:47:d9:e3:ca:f1:70:40: 99:26:cf:00:88:42:53:08:cd:8e:3a:f1:47:0c:12: 05:d7:66:2d:87:9a:3b:c4:b2:46:c5:ae:b4:45:bd: 56:7f:a4:29:9b:50:eb:ad:06:06:92:21:14:aa:fa: 51:42:f3:dc:a0:3d:06:a8:b2:5a:e1:cf:64:41:7e: 68:83:92:87:67:9c:d2:8a:e7:7d:b1:d6:73:4f:3e: 63:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2C:21:EA:12:38:84:03:78:F5:78:82:A2:5E:85:CA:74:D3:61:CF X509v3 Authority Key Identifier: keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b2:1e:83:c3:95:61:b0:3d:fc:92:98:22:d1:0a:a2:1f:95: 4c:43:3a:13:65:12:05:8a:2d:7f:a5:2d:60:0d:e1:95:b0:b6: 9b:5d:6c:1f:30:ed:77:b2:5c:19:0c:35:15:67:33:a0:4d:61: 17:ab:51:6a:81:9e:3a:31:c9:1b:be:58:ab:db:92:b9:de:a4: 06:e0:8f:54:90:10:02:eb:a9:2d:ab:ba:72:1b:30:ee:a0:54: 6c:f8:3d:41:0f:79:fb:f6:9f:31:64:46:11:6c:5b:d1:ab:f0: ae:ff:8f:2e:16:61:9b:5f:5f:21:14:82:4e:5e:82:6a:ec:dc: 51:12:dc:8d:93:8e:16:68:72:aa:cd:87:7d:ec:63:85:a0:94: e5:1e:0c:b1:a5:c6:8b:0f:dc:2e:70:db:48:17:c7:7c:b4:e2: 41:45:95:b4:89:71:00:8c:c3:62:ac:9d:f0:51:e8:91:0a:c0: c2:8c:e1:74:73:94:bc:c0:27:d7:be:4b:76:a5:f6:a9:70:9c: 3f:c7:ae:6f:90:57:68:a8:da:c5:2b:3f:cc:43:20:0b:8c:d8: 98:7f:14:b7:da:fe:15:7b:d7:c4:97:f0:a1:a8:de:11:6e:c0: 40:dc:4c:4b:87:82:23:f3:a2:78:a8:fc:e5:62:d5:71:f2:f2: 4d:6e:36:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mkCY2dgjpqWjKaHVEwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTU3OWZkNzQ2MDlkMjY4Y2NiY2ZiODJmNTNhNWE0ZDA2 MTM1YjAwHhcNMjYwMjA5MjAwMTEyWhcNMjYwMjEwMjAwMTEyWjAzMTEwLwYDVQQD Eyg0MTJjMjFlYTEyMzg4NDAzNzhmNTc4ODJhMjVlODVjYTc0ZDM2MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIjXVEjjoWFerxk6e434k3hALEgU oK4sebeFUcEKeEyeK+XbveE6KP/bhCxFXyxlJxbwenPM9EvBlsGNrnmANVaJ9+S7 pBbAMV3SWGAGqiszbk2pWGDEOiJQKkAp5P1FvzkIhcz7wNtYWesd3weKTQrIJx7N 28YBrXNmZpscRrprDCF9CmkyHPf/6Xw5ecfFBVWv4fIHp6KEwbte6WkbM0exwZvj Gr4vcqVc70fZ48rxcECZJs8AiEJTCM2OOvFHDBIF12Yth5o7xLJGxa60Rb1Wf6Qp m1DrrQYGkiEUqvpRQvPcoD0GqLJa4c9kQX5og5KHZ5zSiud9sdZzTz5jtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEsIeoSOIQDePV4gqJehcp002HPMB8GA1UdIwQY MBaAFBnlef10YJ0mjMvPuC9TpaTQYTWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMt NzQ4NDU0MTRlMDcxLzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMtNzQ4NDU0MTRlMDcx LzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubIeg8OV YbA9/JKYItEKoh+VTEM6E2USBYotf6UtYA3hlbC2m11sHzDtd7JcGQw1FWczoE1h F6tRaoGeOjHJG75Yq9uSud6kBuCPVJAQAuupLau6chsw7qBUbPg9QQ95+/afMWRG EWxb0avwrv+PLhZhm19fIRSCTl6CauzcURLcjZOOFmhyqs2HfexjhaCU5R4MsaXG iw/cLnDbSBfHfLTiQUWVtIlxAIzDYqyd8FHokQrAwozhdHOUvMAn175LdqX2qXCc P8eub5BXaKjaxSs/zEMgC4zYmH8Ut9r+FXvXxJfwoajeEW7AQNxMS4eCI/OieKj8 5WLVcfLyTW42og== -----END CERTIFICATE-----Generated at Tue Feb 10 04:33:28 2026 by rpki-client