This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json) Hash identifier: 9GO3amAvVXuOQORfsN1YRBsW6QbGSTcVgIZKJa7cKGc= Subject key identifier: 11:38:34:A9:47:B6:68:E9:99:4A:5B:2E:3B:01:A1:D2:9C:46:8C:F4 Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13 Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213 Certificate serial: 019C43225FEAF8C36D593F5FC80D6329131B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: goevDHfB+N2vtMUAfzhF39O2CBGa25VmgGpCo+uMnpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5f:ea:f8:c3:6d:59:3f:5f:c8:0d:63:29:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213 Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=113834a947b668e9994a5b2e3b01a1d29c468cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:c1:54:db:e1:81:4f:ab:f0:1e:57:5a:a4: ee:04:26:0f:7f:e5:ee:6e:40:18:98:29:e7:6e:90: d9:30:48:45:aa:67:e2:f2:48:e0:44:7b:7d:a2:54: 90:38:ee:de:a5:19:97:01:7b:52:a2:1e:4d:ea:15: ae:53:69:4d:d9:5b:b4:6a:bf:10:84:c2:22:d5:e0: 6d:26:fe:72:ca:8d:b8:ea:33:5e:0d:58:f6:d4:31: 9b:d2:c4:f7:31:a4:61:42:27:6f:39:b7:6a:ed:e5: 88:d6:52:65:7e:66:50:ca:d6:0c:7b:19:50:17:c7: bc:56:5b:65:74:76:9b:21:74:53:a1:d0:5c:31:21: 47:7a:6a:80:e6:34:71:94:19:79:62:04:9e:6d:66: 1e:4b:21:ba:e4:38:55:b8:20:44:f4:af:90:ca:5c: a9:fc:9f:3c:cd:c5:79:01:4e:08:1e:fc:b9:96:c1: 9b:6b:5e:9c:d6:a5:cf:f0:67:7b:9a:58:09:2d:74: ce:67:ae:ac:94:bc:2a:ef:7f:9a:bd:d5:11:71:51: 9b:e8:79:08:89:ea:dd:32:f1:86:3d:85:b2:6d:0e: d8:01:ff:29:51:84:cf:8a:2d:21:d7:5c:43:c5:6e: 7a:ba:f1:68:ba:2a:92:ec:83:b3:57:a3:32:67:7e: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:34:A9:47:B6:68:E9:99:4A:5B:2E:3B:01:A1:D2:9C:46:8C:F4 X509v3 Authority Key Identifier: keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a6:f9:67:43:e7:9d:3b:0c:ce:c8:ed:eb:d8:da:29:74:f3: 5a:cd:8e:5b:ee:1b:14:c8:da:bb:70:16:45:26:d2:80:5c:6f: 5a:ed:8b:1a:73:52:10:ad:85:4b:f6:b0:f5:c7:93:92:de:ac: 74:73:6f:5f:4d:7d:92:41:2b:c2:a4:1e:b0:76:30:f1:c9:45: 69:b9:5c:96:62:45:22:c8:cb:d2:1a:1a:f6:94:7d:d3:c3:9a: 22:9f:8d:32:20:e5:bf:19:07:d8:0d:86:7d:ff:57:64:f2:cc: c4:78:99:d0:03:41:ab:05:4c:6e:8e:d7:ef:8c:b3:9c:9c:40: a6:da:bf:5a:c3:98:1a:63:0e:9f:10:c9:f5:ad:7e:74:93:22: 03:38:e4:d3:58:f4:b1:f0:db:e7:0e:f9:27:80:33:c0:9c:86: 49:9a:96:2f:ba:7d:1e:79:e1:0d:bc:49:09:09:4f:2c:7a:20: 7b:f2:30:51:a1:6e:cc:ba:7a:01:34:e0:50:48:4a:f8:58:8c: 35:3b:54:de:e7:ac:cf:c1:62:7f:7f:2d:c3:c3:33:b1:74:ee: 99:ea:4d:97:0e:e5:ec:4d:0d:14:02:c4:bf:40:0e:32:3b:9e: 49:89:cf:eb:83:7d:8e:65:c7:7a:27:26:29:49:21:84:e0:c3: 0f:d3:93:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIl/q+MNtWT9fyA1jKRMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWVjMGIzNzU2NGJhNzRkNjE2OTFiOGIyYWQ0MzZiOWRh YWIyMTMwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD EygxMTM4MzRhOTQ3YjY2OGU5OTk0YTViMmUzYjAxYTFkMjljNDY4Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOHBVNvhgU+r8B5XWqTuBCYPf+Xu bkAYmCnnbpDZMEhFqmfi8kjgRHt9olSQOO7epRmXAXtSoh5N6hWuU2lN2Vu0ar8Q hMIi1eBtJv5yyo246jNeDVj21DGb0sT3MaRhQidvObdq7eWI1lJlfmZQytYMexlQ F8e8VltldHabIXRTodBcMSFHemqA5jRxlBl5YgSebWYeSyG65DhVuCBE9K+Qylyp /J88zcV5AU4IHvy5lsGba16c1qXP8Gd7mlgJLXTOZ66slLwq73+avdURcVGb6HkI ierdMvGGPYWybQ7YAf8pUYTPii0h11xDxW56uvFouiqS7IOzV6MyZ34gNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE4NKlHtmjpmUpbLjsBodKcRoz0MB8GA1UdIwQY MBaAFIIewLN1ZLp01haRuLKtQ2udqrITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ODliNWMtYThkOS00N2NhLWFmNjgt OWY5MmYzODU1Zjg2LzEvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ODliNWMtYThkOS00N2NhLWFmNjgtOWY5MmYzODU1Zjg2 LzEvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKb5Z0Pn nTsMzsjt69jaKXTzWs2OW+4bFMjau3AWRSbSgFxvWu2LGnNSEK2FS/aw9ceTkt6s dHNvX019kkErwqQesHYw8clFablclmJFIsjL0hoa9pR908OaIp+NMiDlvxkH2A2G ff9XZPLMxHiZ0ANBqwVMbo7X74yznJxAptq/WsOYGmMOnxDJ9a1+dJMiAzjk01j0 sfDb5w75J4AzwJyGSZqWL7p9HnnhDbxJCQlPLHoge/IwUaFuzLp6ATTgUEhK+FiM NTtU3uesz8Fif38tw8MzsXTumepNlw7l7E0NFALEv0AOMjueSYnP64N9jmXHeicm KUkhhODDD9OTGA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:16 2026 by rpki-client