This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json) Hash identifier: 2m3bBp8A7k+NwaYmvah6ijSMU1gygsn1NzP5oCE77JY= Subject key identifier: 86:C9:05:B6:16:77:F9:00:7E:60:DA:FD:5B:12:16:73:CE:B7:C6:A0 Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de Certificate serial: 019C438FDF875704D8F013CDCFBFCDAE9361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft Manifest number: 16FF Signing time: Mon 09 Feb 2026 18:00:28 +0000 Manifest this update: Mon 09 Feb 2026 18:00:28 +0000 Manifest next update: Tue 10 Feb 2026 18:00:28 +0000 Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: tWMkExuoHWXNYWL92eqlHARj0nVhHpUFUnHQAWp5hHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:df:87:57:04:d8:f0:13:cd:cf:bf:cd:ae:93:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de Validity Not Before: Feb 9 18:00:28 2026 GMT Not After : Feb 10 18:00:28 2026 GMT Subject: CN=86c905b61677f9007e60dafd5b121673ceb7c6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:59:10:9c:c4:88:03:0e:be:68:f2:29:6a: ad:3f:c0:d8:ab:ff:b9:35:a7:c2:ba:43:f3:e2:46: d3:09:69:34:7d:30:af:2e:56:33:ff:da:b4:22:d3: 78:b7:d3:93:ea:24:4f:43:b8:23:da:8a:21:14:9a: 15:18:d0:dc:27:e2:af:84:8b:e8:7c:1b:7c:3c:dc: 99:7f:24:cf:a4:b7:18:00:ed:69:98:6e:32:a8:b1: c3:93:d8:82:59:11:40:74:13:6d:cf:ed:eb:f5:80: 05:ca:31:a6:0d:e0:59:d6:d3:77:b0:43:95:42:62: 93:b8:76:5e:40:8d:33:c0:29:4a:4f:24:0f:cd:d8: 9e:f3:61:ce:e8:30:c8:e3:20:d5:3d:24:98:2c:07: eb:13:8b:9d:d4:5c:f2:9e:27:33:3d:1f:70:19:0b: f7:66:7c:39:63:08:27:73:2b:7a:93:b8:54:1c:a3: bd:ed:a5:2d:10:43:3c:79:a5:f3:93:aa:ea:a2:95: d8:84:80:7f:d1:f0:e1:e0:69:c3:b1:78:13:b0:63: fa:e1:80:42:44:6b:e4:48:0e:4b:fe:6a:3f:15:14: 50:78:98:5d:e8:64:26:51:4d:d5:b8:0c:39:82:62: d5:9e:45:7a:ff:29:46:1c:8a:ff:15:f9:4e:8f:98: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C9:05:B6:16:77:F9:00:7E:60:DA:FD:5B:12:16:73:CE:B7:C6:A0 X509v3 Authority Key Identifier: keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:81:c5:2b:9e:fc:27:d9:1a:45:3a:42:36:ee:3d:c3:33:8e: a6:cd:1b:04:64:ef:79:f7:57:dd:ce:9a:37:79:8f:6f:fb:c8: 0a:17:97:93:61:9e:8d:19:42:91:e0:14:46:1f:26:ec:a5:d4: 13:15:58:3f:b0:d9:ff:ff:84:14:8f:db:85:72:7a:7c:93:4c: cd:42:41:b2:47:ce:fc:a0:25:3f:9b:6f:41:db:91:cc:30:55: 3a:ee:b0:37:13:c7:3d:f1:ce:5e:57:c2:d6:ca:15:18:e2:68: f1:97:1e:d6:d9:89:37:ed:a4:24:65:99:4c:cf:0e:b6:f4:f1: 76:62:68:61:9a:01:f9:9d:7f:8e:e0:9e:54:50:fd:11:2f:79: d3:b1:00:29:92:d5:26:de:32:2c:1b:37:92:e8:e0:e1:36:0b: 59:15:a9:a2:16:60:8c:de:4a:52:a7:a0:7d:86:af:2a:a7:c3: 08:f5:79:7c:75:bc:b8:18:85:8c:ef:8e:07:02:93:ae:29:27: dd:be:30:a8:71:76:70:c1:b1:27:b5:59:1d:48:3e:76:59:91: 33:b1:2a:e6:d9:0a:d7:d3:fd:2f:1a:e7:9a:29:36:e5:2f:87: bc:28:7d:c1:9c:3a:cd:e7:ea:63:35:f4:64:5e:47:0a:d2:42: 3d:ab:77:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9+HVwTY8BPNz7/NrpNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2FjNmFkNjVlNWEwOTkyMDliODhiODc5Y2Y0YTA4YWYw ODY4ZGUwHhcNMjYwMjA5MTgwMDI4WhcNMjYwMjEwMTgwMDI4WjAzMTEwLwYDVQQD Eyg4NmM5MDViNjE2NzdmOTAwN2U2MGRhZmQ1YjEyMTY3M2NlYjdjNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QNZEJzEiAMOvmjyKWqtP8DYq/+5 NafCukPz4kbTCWk0fTCvLlYz/9q0ItN4t9OT6iRPQ7gj2oohFJoVGNDcJ+KvhIvo fBt8PNyZfyTPpLcYAO1pmG4yqLHDk9iCWRFAdBNtz+3r9YAFyjGmDeBZ1tN3sEOV QmKTuHZeQI0zwClKTyQPzdie82HO6DDI4yDVPSSYLAfrE4ud1FzyniczPR9wGQv3 Znw5Ywgncyt6k7hUHKO97aUtEEM8eaXzk6rqopXYhIB/0fDh4GnDsXgTsGP64YBC RGvkSA5L/mo/FRRQeJhd6GQmUU3VuAw5gmLVnkV6/ylGHIr/FflOj5jRlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbJBbYWd/kAfmDa/VsSFnPOt8agMB8GA1UdIwQY MBaAFBo6xq1l5aCZIJuIuHnPSgivCGjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUt NzBjYmU5NjI0MWY1LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUtNzBjYmU5NjI0MWY1 LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4HFK578 J9kaRTpCNu49wzOOps0bBGTvefdX3c6aN3mPb/vICheXk2GejRlCkeAURh8m7KXU ExVYP7DZ//+EFI/bhXJ6fJNMzUJBskfO/KAlP5tvQduRzDBVOu6wNxPHPfHOXlfC 1soVGOJo8Zce1tmJN+2kJGWZTM8OtvTxdmJoYZoB+Z1/juCeVFD9ES9507EAKZLV Jt4yLBs3kujg4TYLWRWpohZgjN5KUqegfYavKqfDCPV5fHW8uBiFjO+OBwKTrikn 3b4wqHF2cMGxJ7VZHUg+dlmRM7Eq5tkK19P9Lxrnmik25S+HvCh9wZw6zefqYzX0 ZF5HCtJCPat3XA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:48 2026 by rpki-client