This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft File: GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json) Hash identifier: tRFZBhMfX8k2ztgefPTfWvIDD6yLLt7jXKJCCBJnj5A= Subject key identifier: 4A:71:D3:1F:F6:50:4A:89:5E:7B:D2:43:3A:F7:85:A4:AD:C9:19:5A Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63 Certificate issuer: /CN=196d587a405a1904966321a10f3989b6866f5e63 Certificate serial: 019C4358B9D837B7FB6EAD5306FC78D6ABC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft Manifest number: 28 Signing time: Mon 09 Feb 2026 17:00:14 +0000 Manifest this update: Mon 09 Feb 2026 17:00:14 +0000 Manifest next update: Tue 10 Feb 2026 17:00:14 +0000 Files and hashes: 1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: 2K1PSiRhW1k8WT7bgnwAfoKGCL/jMPzB7Uej5RV6UpU=) 2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:b9:d8:37:b7:fb:6e:ad:53:06:fc:78:d6:ab:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63 Validity Not Before: Feb 9 17:00:14 2026 GMT Not After : Feb 10 17:00:14 2026 GMT Subject: CN=4a71d31ff6504a895e7bd2433af785a4adc9195a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:bf:38:ac:37:5e:df:19:0d:1e:a3:a3:e6: a6:59:b0:ef:3a:3c:77:1b:b9:4b:f3:44:c0:b5:e8: de:62:b7:12:2a:31:29:c3:17:f1:19:d5:78:18:8d: 6b:64:52:5b:a2:7f:b2:85:44:2e:36:1b:99:9f:f9: e7:22:98:50:55:c6:8b:16:11:ea:bd:0c:9e:61:06: 6b:ec:be:64:06:78:1a:0b:94:d0:32:6b:38:80:2d: 81:1b:08:7d:51:1b:12:da:42:5a:52:d7:37:4a:2d: c1:2c:f4:5a:be:bb:57:59:06:ed:d2:a2:ea:21:44: 04:42:ef:8d:08:f5:01:ba:39:ae:2c:14:b4:68:3f: 98:21:ac:a6:53:71:bb:af:c6:53:fe:51:62:10:fa: dd:0e:fc:56:fe:b7:4d:ab:8e:a5:dc:f7:87:6b:b2: 59:e5:90:fd:3c:c4:35:2e:0a:a3:b0:9c:34:24:33: 8a:64:9f:19:e7:7f:5e:b7:3c:e0:28:50:e1:10:05: a1:14:f0:ee:70:0e:04:29:ff:8f:cd:64:aa:4c:13: f5:3e:be:a4:d7:68:c7:7c:ec:56:be:38:b1:17:d1: cb:b8:65:b9:e3:17:71:e4:d4:7f:76:f8:f0:3b:d7: fd:94:ad:e0:e6:ce:1f:90:e4:1a:02:33:ee:a0:3f: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:D3:1F:F6:50:4A:89:5E:7B:D2:43:3A:F7:85:A4:AD:C9:19:5A X509v3 Authority Key Identifier: keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a6:4e:bb:18:a9:f1:2f:f1:a5:e9:16:67:a4:ed:67:0a:e0: 7f:e7:d0:5c:84:c9:33:83:81:71:57:c3:9b:e6:6c:76:37:ef: 30:69:02:3a:d2:91:4a:ee:a8:d5:f2:7a:85:f2:ca:57:89:b9: 95:14:a3:fd:ae:eb:4b:3d:47:e3:d3:e6:4c:a8:46:58:fe:06: 48:9e:0f:61:98:15:f6:b4:ad:b2:b5:3a:23:1f:c2:7c:14:9c: 02:d9:7d:62:d0:e4:fa:39:e7:6f:cf:c5:7d:31:ae:96:8f:fc: 31:23:12:90:bc:9d:8b:2f:cf:38:c1:40:39:30:9f:59:cc:01: 8e:a4:44:f7:54:86:13:3e:3e:ab:2f:8e:c1:dc:34:e1:1e:79: 70:97:13:4c:3e:49:24:d8:c8:35:30:aa:ff:bf:32:ec:60:d7: cb:de:00:13:f9:53:a5:0f:7b:13:5b:dd:f8:78:d9:d2:3b:a6: 28:ea:49:f8:15:d8:e0:a5:0d:d2:1e:71:92:5f:8a:1e:43:4c: fe:c3:fb:46:1e:6b:74:71:4d:2d:4b:27:50:6f:76:5e:f5:e1: 51:08:0c:38:5e:38:a9:c3:d2:f9:0d:ac:4d:bd:fc:e8:6e:ed: 92:d7:90:7a:48:1a:af:11:87:31:49:82:39:4a:a6:92:99:6b: 1a:1c:ab:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLnYN7f7bq1TBvx41qvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NmQ1ODdhNDA1YTE5MDQ5NjYzMjFhMTBmMzk4OWI2ODY2 ZjVlNjMwHhcNMjYwMjA5MTcwMDE0WhcNMjYwMjEwMTcwMDE0WjAzMTEwLwYDVQQD Eyg0YTcxZDMxZmY2NTA0YTg5NWU3YmQyNDMzYWY3ODVhNGFkYzkxOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQm/OKw3Xt8ZDR6jo+amWbDvOjx3 G7lL80TAtejeYrcSKjEpwxfxGdV4GI1rZFJbon+yhUQuNhuZn/nnIphQVcaLFhHq vQyeYQZr7L5kBngaC5TQMms4gC2BGwh9URsS2kJaUtc3Si3BLPRavrtXWQbt0qLq IUQEQu+NCPUBujmuLBS0aD+YIaymU3G7r8ZT/lFiEPrdDvxW/rdNq46l3PeHa7JZ 5ZD9PMQ1LgqjsJw0JDOKZJ8Z539etzzgKFDhEAWhFPDucA4EKf+PzWSqTBP1Pr6k 12jHfOxWvjixF9HLuGW54xdx5NR/dvjwO9f9lK3g5s4fkOQaAjPuoD9gWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpx0x/2UEqJXnvSQzr3haStyRlaMB8GA1UdIwQY MBaAFBltWHpAWhkElmMhoQ85ibaGb15jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1cxWWVrQmFHUVNXWXlHaER6bUp0b1p2WG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YTlhYTAtNWM1NC00NDg0LWE1OTQt NjVlMjNlM2ZmOWM4LzEvR1cxWWVrQmFHUVNXWXlHaER6bUp0b1p2WG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YTlhYTAtNWM1NC00NDg0LWE1OTQtNjVlMjNlM2ZmOWM4 LzEvR1cxWWVrQmFHUVNXWXlHaER6bUp0b1p2WG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6ZOuxip 8S/xpekWZ6TtZwrgf+fQXITJM4OBcVfDm+ZsdjfvMGkCOtKRSu6o1fJ6hfLKV4m5 lRSj/a7rSz1H49PmTKhGWP4GSJ4PYZgV9rStsrU6Ix/CfBScAtl9YtDk+jnnb8/F fTGulo/8MSMSkLydiy/POMFAOTCfWcwBjqRE91SGEz4+qy+Owdw04R55cJcTTD5J JNjINTCq/78y7GDXy94AE/lTpQ97E1vd+HjZ0jumKOpJ+BXY4KUN0h5xkl+KHkNM /sP7Rh5rdHFNLUsnUG92XvXhUQgMOF44qcPS+Q2sTb386G7tkteQekgarxGHMUmC OUqmkplrGhyr0w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:37 2026 by rpki-client