This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json) Hash identifier: WY52XPV9FZjOYurSPKaHKLukE/U7Ff6/GjAlWpzBnaY= Subject key identifier: C0:9D:15:95:1C:6E:C8:33:29:8F:D0:F9:9C:21:5F:F2:F7:4E:0C:49 Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91 Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591 Certificate serial: 019C43220DF8D664500267EECF900127BE62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft Manifest number: 10D5 Signing time: Mon 09 Feb 2026 16:00:31 +0000 Manifest this update: Mon 09 Feb 2026 16:00:31 +0000 Manifest next update: Tue 10 Feb 2026 16:00:31 +0000 Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: Z7+CVE/aQ08Xfg7AFsAAsOVksMrI1WvPFPE9Fbe47vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0d:f8:d6:64:50:02:67:ee:cf:90:01:27:be:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591 Validity Not Before: Feb 9 16:00:31 2026 GMT Not After : Feb 10 16:00:31 2026 GMT Subject: CN=c09d15951c6ec833298fd0f99c215ff2f74e0c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:7b:8a:c6:d8:f4:7a:98:9d:d1:fe:aa:5c: 54:f1:75:d1:1d:bb:7c:81:ab:e2:00:b4:ce:21:62: 35:7b:1c:ff:c6:cb:1b:fd:94:32:b3:34:34:b7:3c: 55:af:0a:07:65:f5:41:50:df:d1:13:a1:0a:d5:4b: dc:9b:90:06:c7:b6:30:ea:1c:dd:e7:c7:8b:a0:7d: 1a:00:31:65:57:b6:29:c6:1d:ed:3d:82:05:f0:97: 4a:76:18:a7:a6:12:c3:3b:d5:97:88:4a:fe:0f:c8: 66:a3:15:a5:53:bd:4a:52:25:f4:24:3c:8f:d4:7b: 3f:c5:ca:5f:86:9d:bc:25:e5:aa:17:02:71:56:8b: 64:83:b2:ae:a0:2a:3f:4e:56:2a:6d:8f:67:06:b1: e5:4a:c2:0e:61:0e:46:af:83:bc:85:fa:a2:69:fa: 13:47:c3:68:8e:30:ad:5f:86:b3:73:93:9a:5f:fd: 12:4e:1b:59:ae:26:48:a7:4b:89:76:14:7b:08:ba: df:17:0b:8a:17:20:e3:af:0b:25:2a:26:89:82:35: 24:ad:9c:cb:30:3b:ad:8b:66:48:c9:f9:f7:b7:92: 79:6f:d0:7b:82:6a:d0:89:8b:d4:a6:28:35:d5:c2: 99:85:53:f5:c4:59:38:02:97:51:4e:a7:be:14:92: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9D:15:95:1C:6E:C8:33:29:8F:D0:F9:9C:21:5F:F2:F7:4E:0C:49 X509v3 Authority Key Identifier: keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3c:25:da:bf:97:4c:dc:65:1c:34:0d:8a:e7:e8:b0:46:2b: 30:e4:90:1d:d6:12:10:45:4f:96:13:1c:11:a8:75:70:b9:0b: 47:2b:81:22:95:e0:c2:00:7c:b4:8f:66:1b:c7:40:2b:27:a8: f2:82:7a:89:f1:54:09:72:33:94:73:2f:e2:96:9d:e1:1c:04: f4:77:e4:46:20:95:29:87:5d:e5:06:73:bd:39:c2:1e:7f:44: 09:2e:8e:9c:6d:dd:b3:96:f0:b9:b1:38:41:c5:01:f4:5c:ed: 08:1c:1c:35:37:1d:47:e3:01:3b:92:92:bf:5c:ce:30:39:d3: 35:c6:48:d0:3e:2b:20:ed:fe:f7:42:52:8b:52:ca:24:d7:03: 38:24:fb:e5:71:85:36:57:49:5c:42:3b:89:fa:93:17:2a:98: 3d:1a:22:1d:79:85:b2:33:d0:7b:94:99:ff:9f:c0:41:e4:a7: 9c:a6:a3:2e:e8:57:4e:31:e4:a5:34:35:42:7c:6a:1d:a8:1f: be:99:33:79:66:cd:bc:88:82:d8:b4:a0:ca:38:9a:c2:e4:8f: ab:af:7d:50:41:b2:c8:7a:5b:fd:3e:5f:5c:31:cf:16:93:b1: de:74:7f:f7:32:9c:22:b4:b3:5d:37:9e:36:48:0b:60:71:88: e2:4d:13:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIg341mRQAmfuz5ABJ75iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzc5OWU3YzhkOTJhODVjZTk1MDhjMWJlMWEzZjM4MDk1 MDk1OTEwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD EyhjMDlkMTU5NTFjNmVjODMzMjk4ZmQwZjk5YzIxNWZmMmY3NGUwYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAR7isbY9HqYndH+qlxU8XXRHbt8 gaviALTOIWI1exz/xssb/ZQyszQ0tzxVrwoHZfVBUN/RE6EK1Uvcm5AGx7Yw6hzd 58eLoH0aADFlV7Ypxh3tPYIF8JdKdhinphLDO9WXiEr+D8hmoxWlU71KUiX0JDyP 1Hs/xcpfhp28JeWqFwJxVotkg7KuoCo/TlYqbY9nBrHlSsIOYQ5Gr4O8hfqiafoT R8NojjCtX4azc5OaX/0SThtZriZIp0uJdhR7CLrfFwuKFyDjrwslKiaJgjUkrZzL MDuti2ZIyfn3t5J5b9B7gmrQiYvUpig11cKZhVP1xFk4ApdRTqe+FJKbnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCdFZUcbsgzKY/Q+ZwhX/L3TgxJMB8GA1UdIwQY MBaAFIM3mefI2SqFzpUIwb4aPzgJUJWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTIt M2ZhNDY3NmEwZGNlLzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTItM2ZhNDY3NmEwZGNl LzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjwl2r+X TNxlHDQNiufosEYrMOSQHdYSEEVPlhMcEah1cLkLRyuBIpXgwgB8tI9mG8dAKyeo 8oJ6ifFUCXIzlHMv4pad4RwE9HfkRiCVKYdd5QZzvTnCHn9ECS6OnG3ds5bwubE4 QcUB9FztCBwcNTcdR+MBO5KSv1zOMDnTNcZI0D4rIO3+90JSi1LKJNcDOCT75XGF NldJXEI7ifqTFyqYPRoiHXmFsjPQe5SZ/5/AQeSnnKajLuhXTjHkpTQ1QnxqHagf vpkzeWbNvIiC2LSgyjiawuSPq699UEGyyHpb/T5fXDHPFpOx3nR/9zKcIrSzXTee NkgLYHGI4k0Tuw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:56 2026 by rpki-client