This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json) Hash identifier: /DQLHhrO0AlHCIvRy5MLJTfZDVhlVzbn696XTTRvCt8= Subject key identifier: DA:0C:32:B8:E4:75:93:E8:94:02:89:AE:8F:4B:F4:67:86:E0:7B:70 Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Certificate serial: 019C42EB6B698D0F29FA348D9A63C394F8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft Manifest number: 162F Signing time: Mon 09 Feb 2026 15:00:50 +0000 Manifest this update: Mon 09 Feb 2026 15:00:50 +0000 Manifest next update: Tue 10 Feb 2026 15:00:50 +0000 Files and hashes: 1: C_loy0B7_p9VbknMqKT5_-soGMw.roa (hash: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM=) 2: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: 05raA5h+5MlMkMMFmdFyKKhf4KWtkFdAnX92CfHHn9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:6b:69:8d:0f:29:fa:34:8d:9a:63:c3:94:f8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Validity Not Before: Feb 9 15:00:50 2026 GMT Not After : Feb 10 15:00:50 2026 GMT Subject: CN=da0c32b8e47593e8940289ae8f4bf46786e07b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:ca:e1:15:cb:30:38:47:15:63:25:a9:db: ca:6b:0a:dd:92:57:8e:e5:b3:89:d6:f2:b0:77:c9: 5d:5a:b4:2d:b5:e1:b2:3c:06:dd:42:c3:77:25:8c: 7c:6e:ec:b7:7b:fb:4f:d7:07:cc:82:f3:5b:5b:ac: c6:b2:8a:59:7f:c3:63:d1:4f:b9:b1:ca:d5:cb:4e: ac:a3:57:72:0e:08:ca:3c:ea:ad:ea:68:e1:ad:10: 71:e0:a2:98:3d:96:a5:05:07:04:a1:09:21:f1:89: 2b:1b:3f:22:ed:46:3e:d7:93:51:79:b9:05:4c:62: 4e:5e:92:4d:b0:52:71:ec:b8:d3:b9:04:9e:93:0f: 55:7f:3a:4d:66:60:3f:ea:45:46:ad:2d:03:bd:e0: 76:6f:58:23:b3:62:32:de:f6:75:d8:cb:f1:31:6c: bc:68:f9:e5:82:1b:d5:a6:30:9a:5b:24:17:32:51: 94:67:3d:78:72:6b:f0:84:e2:e3:b2:3b:61:1a:1c: 3e:3d:1e:3d:80:0a:aa:ea:52:d9:7b:8f:6f:12:ad: ba:7f:02:a1:dd:00:1c:dd:07:fd:11:7e:f6:3e:32: 9d:cc:41:bd:2e:bb:01:ee:81:0a:a3:5d:6c:e2:61: a1:88:2f:07:30:bb:21:9b:d3:5c:ef:19:95:80:1e: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0C:32:B8:E4:75:93:E8:94:02:89:AE:8F:4B:F4:67:86:E0:7B:70 X509v3 Authority Key Identifier: keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:33:0a:84:03:96:0e:25:30:8b:0a:b8:20:3f:da:0b:79: ae:a6:43:7e:0a:96:64:a7:f7:1b:bd:50:05:48:dd:60:b8:17: 43:2b:f9:15:07:d4:a2:b9:50:87:2f:56:eb:92:bf:01:f3:31: 9f:0d:fd:a0:7f:5d:93:36:1a:ba:2c:85:d4:70:4b:37:ee:50: 22:cf:2a:21:97:55:4f:41:5b:00:8b:31:26:76:db:f5:59:46: 5d:02:b8:5d:ba:06:a1:58:ed:d0:84:e5:d6:1a:42:ae:5b:06: 0c:3c:28:1b:bf:dd:6b:33:00:64:0f:ed:8f:7f:5e:f1:83:24: 79:24:94:51:9c:b7:0b:3a:be:3c:58:15:0b:7b:35:22:01:86: 8c:6c:03:37:46:06:4c:a4:45:56:23:c8:0e:33:59:7d:7d:ad: b0:b1:9b:8b:c1:a0:50:25:e2:66:e9:01:24:97:8e:f5:06:6f: 15:3d:9f:0b:06:2b:98:19:24:86:63:0c:9c:65:50:50:93:14: 79:1b:90:78:07:5c:f0:d5:8e:ef:89:d6:b4:41:1d:a1:73:98: 40:98:73:ad:8e:68:67:1b:2e:79:73:37:54:2c:50:1d:ee:3c: 4a:91:86:d9:9c:0a:90:7a:bd:37:e8:89:14:4b:10:a4:fe:7d: a2:2b:31:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62tpjQ8p+jSNmmPDlPijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx YTc3OTQwHhcNMjYwMjA5MTUwMDUwWhcNMjYwMjEwMTUwMDUwWjAzMTEwLwYDVQQD EyhkYTBjMzJiOGU0NzU5M2U4OTQwMjg5YWU4ZjRiZjQ2Nzg2ZTA3YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuPK4RXLMDhHFWMlqdvKawrdkleO 5bOJ1vKwd8ldWrQtteGyPAbdQsN3JYx8buy3e/tP1wfMgvNbW6zGsopZf8Nj0U+5 scrVy06so1dyDgjKPOqt6mjhrRBx4KKYPZalBQcEoQkh8YkrGz8i7UY+15NRebkF TGJOXpJNsFJx7LjTuQSekw9VfzpNZmA/6kVGrS0DveB2b1gjs2Iy3vZ12MvxMWy8 aPnlghvVpjCaWyQXMlGUZz14cmvwhOLjsjthGhw+PR49gAqq6lLZe49vEq26fwKh 3QAc3Qf9EX72PjKdzEG9LrsB7oEKo11s4mGhiC8HMLshm9Nc7xmVgB62HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoMMrjkdZPolAKJro9L9GeG4HtwMB8GA1UdIwQY MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+gzCoQD lg4lMIsKuCA/2gt5rqZDfgqWZKf3G71QBUjdYLgXQyv5FQfUorlQhy9W65K/AfMx nw39oH9dkzYauiyF1HBLN+5QIs8qIZdVT0FbAIsxJnbb9VlGXQK4XboGoVjt0ITl 1hpCrlsGDDwoG7/dazMAZA/tj39e8YMkeSSUUZy3Czq+PFgVC3s1IgGGjGwDN0YG TKRFViPIDjNZfX2tsLGbi8GgUCXiZukBJJeO9QZvFT2fCwYrmBkkhmMMnGVQUJMU eRuQeAdc8NWO74nWtEEdoXOYQJhzrY5oZxsueXM3VCxQHe48SpGG2ZwKkHq9N+iJ FEsQpP59oisxVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:23 2026 by rpki-client