This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft File: gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json) Hash identifier: 9gpu43HuzOxwrPEOYytpSrie1ohNF5EWg7saH62D5E8= Subject key identifier: 86:58:C8:E7:63:DF:42:F1:8C:EC:01:B4:07:1D:1A:17:73:6E:F0:06 Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75 Certificate issuer: /CN=81062dce1a791e7341d5f4259811ab4d65f6b075 Certificate serial: 019C42101EC37FDCD1A505E3C5DD93F08C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft Manifest number: 13A1 Signing time: Mon 09 Feb 2026 11:01:18 +0000 Manifest this update: Mon 09 Feb 2026 11:01:18 +0000 Manifest next update: Tue 10 Feb 2026 11:01:18 +0000 Files and hashes: 1: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: pqNYmn72XrOS7FJ/2ks3bRKALQ7uhMKcwqQQ/NXCWuo=) 2: vaFLq2PS-Ze0CGgub62mzNljBjk.roa (hash: /5UMsBynyn/kGaKMuuHPXeXo9vSUE24CvsJczMrXDeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:1e:c3:7f:dc:d1:a5:05:e3:c5:dd:93:f0:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075 Validity Not Before: Feb 9 11:01:18 2026 GMT Not After : Feb 10 11:01:18 2026 GMT Subject: CN=8658c8e763df42f18cec01b4071d1a17736ef006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:8e:03:e1:26:b9:e4:b4:73:61:fc:84:1a: 01:ca:dc:35:28:ad:8d:fa:dc:35:8b:98:dc:19:64: d5:31:34:e1:71:a1:f9:1f:5e:2e:d6:e3:f4:6a:25: 4c:c9:2e:6c:0d:4c:ae:ab:ca:d4:5a:db:29:56:1b: d2:3a:4f:ed:33:49:0f:09:eb:7f:6a:1f:f6:d3:c1: 39:dc:02:0a:20:2d:91:91:d8:d4:79:e8:a8:d2:47: ea:6c:8e:0c:1a:98:2c:d0:f8:ef:95:71:66:37:20: 7e:9e:ef:ab:c5:14:3c:4a:92:14:3a:49:57:23:b8: f5:01:5c:17:d1:52:16:50:5f:23:93:11:93:83:1a: c9:f4:88:eb:49:fb:6f:c9:f1:a8:3f:fd:34:d3:00: 49:16:0a:c8:87:b4:b8:02:02:d8:ce:1b:d8:1a:64: 4b:60:de:06:1b:62:01:b0:ed:b7:16:05:66:5a:0b: 16:b9:6a:f6:26:8e:f6:11:ea:db:5f:77:a1:fd:f6: 86:c0:ac:9e:7e:16:f5:e3:61:88:42:88:34:b8:75: 69:db:77:00:00:77:20:8f:64:82:f1:47:43:9a:b5: 85:03:bc:4a:41:5c:18:94:bd:6f:36:77:40:3d:8e: 60:d8:07:12:92:9a:b9:07:de:76:50:a5:a3:d1:75: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:58:C8:E7:63:DF:42:F1:8C:EC:01:B4:07:1D:1A:17:73:6E:F0:06 X509v3 Authority Key Identifier: keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:f8:98:7d:8f:52:fb:5d:7c:a6:4e:5e:8b:42:c9:76:9e:b5: de:56:c3:bb:6f:7c:a2:0f:7e:80:4c:80:9f:41:3f:bf:24:83: db:a6:91:89:a6:99:34:01:61:bc:7f:13:e1:1e:bb:b3:d7:04: 40:d4:ae:df:df:c6:b8:a3:bc:6c:19:ad:f1:75:3a:db:5a:8b: a9:9b:54:59:e0:ed:d5:7c:cc:ab:04:d9:71:0b:13:54:b8:d4: cb:b0:bb:5b:a4:07:20:36:60:4d:17:81:98:08:fd:0d:45:73: e3:15:8a:0e:fa:fe:6c:12:d1:18:fb:b8:89:03:7c:dc:d8:f0: ef:19:d6:59:2f:4b:06:a0:b6:02:e4:1f:15:2c:2d:79:ad:4e: 33:6d:25:98:76:bf:4d:15:f9:a7:4c:de:33:66:8f:b6:1d:ea: 9a:db:13:15:bc:de:c9:f2:70:ca:75:ca:f9:47:b6:c6:54:bc: d8:c5:84:7b:b9:a5:a1:e6:6d:61:97:1c:ab:2f:71:d1:e7:09: 77:e1:ec:98:d5:4d:5f:92:d2:68:f8:ec:ce:cc:63:b8:1b:8e: e3:2e:c3:d8:54:bd:2b:e6:18:94:17:b6:52:d3:81:fc:27:68: d4:2e:f0:ea:97:ae:05:df:4b:1c:5a:0a:c0:2c:f1:72:24:b8: 93:ca:94:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEB7Df9zRpQXjxd2T8IwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDYyZGNlMWE3OTFlNzM0MWQ1ZjQyNTk4MTFhYjRkNjVm NmIwNzUwHhcNMjYwMjA5MTEwMTE4WhcNMjYwMjEwMTEwMTE4WjAzMTEwLwYDVQQD Eyg4NjU4YzhlNzYzZGY0MmYxOGNlYzAxYjQwNzFkMWExNzczNmVmMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkeOA+EmueS0c2H8hBoBytw1KK2N +tw1i5jcGWTVMTThcaH5H14u1uP0aiVMyS5sDUyuq8rUWtspVhvSOk/tM0kPCet/ ah/208E53AIKIC2RkdjUeeio0kfqbI4MGpgs0PjvlXFmNyB+nu+rxRQ8SpIUOklX I7j1AVwX0VIWUF8jkxGTgxrJ9IjrSftvyfGoP/000wBJFgrIh7S4AgLYzhvYGmRL YN4GG2IBsO23FgVmWgsWuWr2Jo72EerbX3eh/faGwKyefhb142GIQog0uHVp23cA AHcgj2SC8UdDmrWFA7xKQVwYlL1vNndAPY5g2AcSkpq5B952UKWj0XWDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZYyOdj30LxjOwBtAcdGhdzbvAGMB8GA1UdIwQY MBaAFIEGLc4aeR5zQdX0JZgRq01l9rB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDc4ZDEtM2UwYy00YzFhLWExNDEt NzRlMjE4ZDRiNjEzLzEvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDc4ZDEtM2UwYy00YzFhLWExNDEtNzRlMjE4ZDRiNjEz LzEvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1viYfY9S +118pk5ei0LJdp613lbDu298og9+gEyAn0E/vySD26aRiaaZNAFhvH8T4R67s9cE QNSu39/GuKO8bBmt8XU621qLqZtUWeDt1XzMqwTZcQsTVLjUy7C7W6QHIDZgTReB mAj9DUVz4xWKDvr+bBLRGPu4iQN83Njw7xnWWS9LBqC2AuQfFSwtea1OM20lmHa/ TRX5p0zeM2aPth3qmtsTFbzeyfJwynXK+Ue2xlS82MWEe7mloeZtYZccqy9x0ecJ d+HsmNVNX5LSaPjszsxjuBuO4y7D2FS9K+YYlBe2UtOB/Cdo1C7w6peuBd9LHFoK wCzxciS4k8qUOA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:03 2026 by rpki-client