This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft File: GGr6K4fO01gj1aLMCghE56FRa_M.mft (raw, json) Hash identifier: YASHEpVjvzx7biwO5/EgzC2ZsJXCTiEpHtF9HcIVPcU= Subject key identifier: 79:3A:D2:1E:C7:1D:85:4B:2A:BB:68:19:D9:0C:F3:FE:49:25:63:FA Authority key identifier: 18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3 Certificate issuer: /CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3 Certificate serial: 019C4321DA32541F9F651A827691E55F085C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft Manifest number: 0F70 Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: GGr6K4fO01gj1aLMCghE56FRa_M.crl (hash: U/P90sTB5y2Jo9H4ltlthz78llTRn26pf1LtFcPQht0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:da:32:54:1f:9f:65:1a:82:76:91:e5:5f:08:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=793ad21ec71d854b2abb6819d90cf3fe492563fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:95:1a:10:3f:dc:85:07:68:72:cf:df:89: f9:85:0e:7d:58:cd:70:92:b1:aa:ef:13:56:f1:92: 22:37:a8:49:4b:c4:35:17:06:ac:10:26:57:07:d9: c7:23:8c:81:49:9a:f2:6b:d3:3e:e2:b3:eb:69:f0: c5:b4:22:85:d9:a0:13:e6:c2:83:fe:a9:00:71:ab: a8:f1:39:a7:11:fd:29:6a:d0:9e:33:2b:07:57:ab: a1:56:bf:71:ea:df:a2:b4:7c:06:ad:28:f5:71:ff: b4:40:c9:4e:e7:df:26:c5:8b:2c:f5:d7:8a:bc:a4: 89:0a:65:60:a1:bb:27:a2:65:8f:c9:e8:b5:6b:66: ce:3a:53:6d:7b:cd:63:46:69:28:f6:22:e5:e5:93: 41:79:a2:31:b9:4f:30:9b:41:a7:03:e7:93:ee:39: 30:e5:c9:ac:a9:6a:7f:01:aa:a6:02:20:8b:44:d2: 7f:c4:6a:34:19:f0:d8:65:d5:f4:dc:d8:8f:9d:11: 87:72:6b:29:da:3f:0a:74:fb:d2:47:38:78:c1:24: f8:33:5f:58:b2:2d:2e:77:6c:48:c4:59:51:f1:31: 96:4a:d3:79:05:9f:44:89:0c:e9:76:81:fb:91:0a: 67:cd:d4:b0:74:c4:f5:c2:86:57:bd:35:d0:44:01: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:D2:1E:C7:1D:85:4B:2A:BB:68:19:D9:0C:F3:FE:49:25:63:FA X509v3 Authority Key Identifier: keyid:18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:33:9b:08:02:a3:ab:42:1c:81:b8:e6:5e:bf:49:56:06:b3: 68:d3:6a:2c:ad:3e:18:2e:69:e5:47:f5:2d:8f:c1:3d:28:8f: 55:59:0d:d7:fd:e1:5a:bb:d8:1d:24:04:e7:77:66:23:b1:0f: 67:5c:fb:25:e8:73:14:c1:fe:71:6c:5c:13:04:b3:ea:3d:15: d7:86:5c:b1:03:22:75:e7:7c:7d:66:bc:70:85:52:49:aa:32: 37:76:8b:78:ee:90:06:0c:63:f9:09:d2:87:f9:35:15:53:e0: 79:a6:57:8b:5d:d6:82:b4:a3:7f:8e:ee:13:e0:dc:1c:8d:c0: 8a:02:c6:9e:ad:2a:c2:b2:54:db:a9:25:28:cf:86:9b:01:5d: f7:8d:df:f9:dc:19:d0:28:7a:8e:8f:d1:42:d1:8b:c4:99:62: 36:b4:49:30:40:90:1d:d7:cd:9f:42:d3:a6:27:55:3e:a9:49: a3:08:86:12:38:c5:7a:8d:e5:e5:51:d5:fc:c1:2d:ba:86:89: b0:66:34:4e:55:2c:9c:ff:9c:e9:ee:2e:5b:cd:a3:e1:7c:35: 4d:9c:81:4f:73:a2:08:2a:a8:b3:d5:07:da:93:bb:d3:e4:fe: 21:9d:ee:ef:9e:4e:fd:d5:6f:f7:e6:1d:3e:cc:c8:1e:58:0a: 3b:aa:88:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdoyVB+fZRqCdpHlXwhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NmFmYTJiODdjZWQzNTgyM2Q1YTJjYzBhMDg0NGU3YTE1 MTZiZjMwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD Eyg3OTNhZDIxZWM3MWQ4NTRiMmFiYjY4MTlkOTBjZjNmZTQ5MjU2M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa6VGhA/3IUHaHLP34n5hQ59WM1w krGq7xNW8ZIiN6hJS8Q1FwasECZXB9nHI4yBSZrya9M+4rPrafDFtCKF2aAT5sKD /qkAcauo8TmnEf0patCeMysHV6uhVr9x6t+itHwGrSj1cf+0QMlO598mxYss9deK vKSJCmVgobsnomWPyei1a2bOOlNte81jRmko9iLl5ZNBeaIxuU8wm0GnA+eT7jkw 5cmsqWp/AaqmAiCLRNJ/xGo0GfDYZdX03NiPnRGHcmsp2j8KdPvSRzh4wST4M19Y si0ud2xIxFlR8TGWStN5BZ9EiQzpdoH7kQpnzdSwdMT1woZXvTXQRAFL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk60h7HHYVLKrtoGdkM8/5JJWP6MB8GA1UdIwQY MBaAFBhq+iuHztNYI9WizAoIROehUWvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0dyNks0Zk8wMWdqMWFMTUNnaEU1NkZSYV9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lZmIxM2ItNWRiYy00MTFiLWIyMzgt NjU1ZDUzNjk4ZmRhLzEvR0dyNks0Zk8wMWdqMWFMTUNnaEU1NkZSYV9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lZmIxM2ItNWRiYy00MTFiLWIyMzgtNjU1ZDUzNjk4ZmRh LzEvR0dyNks0Zk8wMWdqMWFMTUNnaEU1NkZSYV9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTObCAKj q0IcgbjmXr9JVgazaNNqLK0+GC5p5Uf1LY/BPSiPVVkN1/3hWrvYHSQE53dmI7EP Z1z7JehzFMH+cWxcEwSz6j0V14ZcsQMided8fWa8cIVSSaoyN3aLeO6QBgxj+QnS h/k1FVPgeaZXi13WgrSjf47uE+DcHI3AigLGnq0qwrJU26klKM+GmwFd943f+dwZ 0Ch6jo/RQtGLxJliNrRJMECQHdfNn0LTpidVPqlJowiGEjjFeo3l5VHV/MEtuoaJ sGY0TlUsnP+c6e4uW82j4Xw1TZyBT3OiCCqos9UH2pO70+T+IZ3u755O/dVv9+Yd PszIHlgKO6qIBw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:26 2026 by rpki-client