This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json) Hash identifier: BMnfoz7+aI6GMPMegwtgPsmlxc63CSzuS7KX9bADVjU= Subject key identifier: F6:DB:D4:DB:7F:C0:CA:75:8A:9D:D2:52:35:E6:06:BF:E1:85:B5:06 Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41 Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941 Certificate serial: 019C432291189578AA6DFE74E720C5DB3C2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft Manifest number: 1354 Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: 72N7LneglVPvG2ZwG5zmq1KME4q6kxwssmI4xHx7iNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:91:18:95:78:aa:6d:fe:74:e7:20:c5:db:3c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941 Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=f6dbd4db7fc0ca758a9dd25235e606bfe185b506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:20:8a:45:63:d1:cb:c9:33:29:f2:7e:0c: 1b:fe:31:eb:68:c3:e3:5e:b0:b9:07:df:a2:1e:84: a3:86:78:ee:14:e1:7a:53:e9:39:28:a5:11:78:0c: 3e:50:0a:dd:79:07:03:01:aa:89:61:ea:29:46:be: 11:75:ee:28:a6:df:ab:ea:04:d9:19:9c:4c:e6:b8: 0b:77:39:27:18:cc:2f:81:ee:fe:64:55:42:4e:c6: ef:86:02:2a:04:f1:51:33:2b:7c:bc:30:0c:e4:48: 53:a8:7e:33:2a:e4:62:3e:d4:23:88:b4:c6:b5:78: e1:d7:50:5c:2c:85:65:bd:3b:61:57:fd:bd:1d:c9: 2b:04:3e:26:2b:b9:1b:83:90:4e:5a:8c:33:46:89: cc:23:2b:0a:4b:54:2a:9c:d8:3b:c8:0d:1c:c9:4c: 10:b4:18:c8:c0:77:f8:12:0e:3c:c1:82:e0:d3:8b: c7:6c:cd:97:72:30:ea:e7:dc:b7:23:b2:7e:e2:9c: 98:23:5c:ef:c7:54:c2:39:0e:52:d2:0f:a0:9d:dd: 28:fd:a5:13:f6:d7:f7:25:ed:6f:db:39:19:a8:14: 3e:0d:e6:3f:8b:36:ce:b2:4e:80:2d:55:9b:33:e9: a3:41:23:80:69:f3:df:8d:ff:24:4b:a7:4d:46:da: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DB:D4:DB:7F:C0:CA:75:8A:9D:D2:52:35:E6:06:BF:E1:85:B5:06 X509v3 Authority Key Identifier: keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1d:ba:1e:21:5e:26:bd:98:b5:9a:74:44:0f:04:eb:31:d5: cc:31:86:19:49:74:0e:78:a0:13:6e:4d:ea:f9:62:dc:c9:ae: ad:48:0e:2b:cf:d8:01:cd:c3:e0:4c:76:df:29:8e:85:2f:4d: eb:0e:90:f4:f1:2d:3b:53:ba:7d:f2:69:72:e3:39:15:f4:f3: 39:24:cc:17:6b:2e:1f:fd:b0:b4:5e:9f:90:37:e7:e7:5e:5d: da:dd:cc:d5:30:bc:59:c3:5a:09:6c:fc:2a:86:ee:ff:4d:55: 52:4f:c9:86:81:8e:99:78:34:c6:0a:cc:d3:eb:c6:62:b3:18: 2c:36:e2:a1:1c:07:e9:5e:12:76:ad:c8:8f:ae:39:ee:b9:25: 42:e6:3a:2c:98:31:3b:81:10:ac:d8:27:ac:38:7b:6c:16:7c: ee:18:1c:6b:9a:7b:2e:a0:53:4c:73:53:c3:79:1f:cf:83:a8: e1:75:e2:24:24:91:e6:1d:ff:73:b3:57:9f:1c:e9:2f:88:a4: 44:68:27:be:31:55:68:2c:8a:c9:08:6a:b1:ca:ca:14:cc:ab: c8:ae:ac:4b:06:9b:10:3a:32:6b:04:9f:11:07:a4:30:2d:26: ba:36:2d:58:14:a2:6c:cb:e4:69:0e:e6:e5:a3:b3:2b:e5:74: 0d:20:46:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpEYlXiqbf505yDF2zwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTc2M2Q0MWJiNTMzNTU4YTg1MjBkZTVhOTZlYjIyNTgw Njg5NDEwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EyhmNmRiZDRkYjdmYzBjYTc1OGE5ZGQyNTIzNWU2MDZiZmUxODViNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhogikVj0cvJMynyfgwb/jHraMPj XrC5B9+iHoSjhnjuFOF6U+k5KKUReAw+UArdeQcDAaqJYeopRr4Rde4opt+r6gTZ GZxM5rgLdzknGMwvge7+ZFVCTsbvhgIqBPFRMyt8vDAM5EhTqH4zKuRiPtQjiLTG tXjh11BcLIVlvTthV/29HckrBD4mK7kbg5BOWowzRonMIysKS1QqnNg7yA0cyUwQ tBjIwHf4Eg48wYLg04vHbM2XcjDq59y3I7J+4pyYI1zvx1TCOQ5S0g+gnd0o/aUT 9tf3Je1v2zkZqBQ+DeY/izbOsk6ALVWbM+mjQSOAafPfjf8kS6dNRtozUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbb1Nt/wMp1ip3SUjXmBr/hhbUGMB8GA1UdIwQY MBaAFBpXY9QbtTNVioUg3lqW6yJYBolBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAt NGM4MzY1NTE1OTY1LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAtNGM4MzY1NTE1OTY1 LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR26HiFe Jr2YtZp0RA8E6zHVzDGGGUl0DnigE25N6vli3MmurUgOK8/YAc3D4Ex23ymOhS9N 6w6Q9PEtO1O6ffJpcuM5FfTzOSTMF2suH/2wtF6fkDfn515d2t3M1TC8WcNaCWz8 Kobu/01VUk/JhoGOmXg0xgrM0+vGYrMYLDbioRwH6V4Sdq3Ij6457rklQuY6LJgx O4EQrNgnrDh7bBZ87hgca5p7LqBTTHNTw3kfz4Oo4XXiJCSR5h3/c7NXnxzpL4ik RGgnvjFVaCyKyQhqscrKFMyryK6sSwabEDoyawSfEQekMC0mujYtWBSibMvkaQ7m 5aOzK+V0DSBGzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:15 2026 by rpki-client