This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft File: gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft (raw, json) Hash identifier: onKQs9kIb8dhPkpkqJxH+BozwRT02QFzBvn7Y7+SLGo= Subject key identifier: 6B:0D:88:ED:72:41:D1:4E:33:DB:FF:2F:CE:A0:C9:96:01:BB:55:2E Authority key identifier: 81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61 Certificate issuer: /CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461 Certificate serial: 019C42EB1633A7B10E03CCB341C707EEDAC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft Manifest number: 012B Signing time: Mon 09 Feb 2026 15:00:28 +0000 Manifest this update: Mon 09 Feb 2026 15:00:28 +0000 Manifest next update: Tue 10 Feb 2026 15:00:28 +0000 Files and hashes: 1: FVoVHpn4Qw4M_Fq1r7plRt7Lnrg.roa (hash: 9CN//cNUBbRB1+vFVB2QUaRbXhK9uNEcpq3PjuRDWqE=) 2: gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl (hash: 723K+mqIWRV9pTRlF0aSlGQJFv+YFK2EfilwxGfkd9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:16:33:a7:b1:0e:03:cc:b3:41:c7:07:ee:da:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461 Validity Not Before: Feb 9 15:00:28 2026 GMT Not After : Feb 10 15:00:28 2026 GMT Subject: CN=6b0d88ed7241d14e33dbff2fcea0c99601bb552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:9c:d4:0c:05:c7:2e:19:c7:78:54:5e:36: 28:a7:d8:dd:60:6a:59:11:e6:6d:93:d7:ca:9d:36: fe:00:82:04:52:0b:7b:79:4d:e4:09:9c:d3:57:63: 66:9f:27:5c:34:d3:e7:02:b6:a2:aa:16:d7:e8:4e: 98:01:67:8c:1d:27:e0:b0:5c:0a:e3:6e:7f:49:59: 26:66:f6:99:e7:de:b4:9b:7b:4c:42:84:b5:3a:d0: 11:ed:29:bf:9d:b8:76:92:1e:cd:97:e3:ba:62:ec: 71:01:ad:80:d9:7b:99:8b:a7:f8:4f:58:ae:55:3d: de:83:e0:66:09:f7:da:12:fb:c7:9b:4a:c7:ba:f5: 0b:4e:9b:b2:90:bd:15:18:b4:e2:c9:26:ea:60:29: 13:08:f5:4c:4c:44:df:91:45:4b:1e:d6:c9:54:a7: a6:f5:70:ac:ec:61:b5:83:1b:bd:26:6a:c1:e3:91: 03:be:94:d1:1d:1b:24:84:ef:cf:71:13:0a:2b:08: 3f:ff:13:c1:68:87:1e:79:b4:ed:e5:dc:14:76:c1: 01:5c:e4:32:b1:8a:8e:43:8f:bb:dd:a5:0d:aa:e6: c6:51:e2:4e:3f:06:e6:3f:7b:e5:ef:df:b3:6f:59: 57:7f:ba:bd:dc:65:50:37:39:2b:1a:bd:7c:63:4a: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0D:88:ED:72:41:D1:4E:33:DB:FF:2F:CE:A0:C9:96:01:BB:55:2E X509v3 Authority Key Identifier: keyid:81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:92:1c:3e:b2:7d:5b:5a:e5:49:c0:44:b5:16:ed:b7:44:0c: 5b:3d:bb:88:4c:e6:4b:06:bd:ac:3e:94:14:7d:14:c5:8b:8b: 78:84:40:1d:c7:f3:8e:d8:66:42:da:8d:5b:00:3c:0b:da:f0: 49:48:ef:c6:57:82:10:3b:17:77:0c:95:cc:4d:2f:7e:17:71: 25:72:c9:c3:34:19:5d:36:4a:82:2f:55:cb:83:27:a0:ee:ca: d0:1e:36:df:c4:58:f4:c9:4d:d3:d6:fd:f3:35:22:f5:9f:33: 4c:a5:ab:78:2b:7d:35:57:86:c6:8a:54:47:ba:74:30:f3:f6: da:63:84:a2:b0:97:53:62:fa:c2:58:b4:23:50:17:bb:b7:f8: 5e:54:ec:d2:62:54:b5:0b:4b:f1:67:68:5a:d7:1f:f6:f6:39: 74:ed:72:1b:26:56:60:99:48:89:b8:38:7f:19:29:15:a9:9c: 61:36:eb:4d:27:f5:f9:4a:37:55:b3:b3:4e:51:d6:e0:1a:c5: 98:a7:30:b7:7b:3f:f1:32:d4:71:91:ff:53:47:ca:a9:cd:33: ff:9f:e2:64:ac:77:4e:3f:2a:72:71:f6:6b:ae:ce:b5:ee:08: 43:e3:02:8c:3c:e2:b3:5a:90:c5:e3:a5:ee:26:63:5f:c3:b8: 81:f5:a3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xYzp7EOA8yzQccH7trHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzJkYjlkMTU2NmNjZDc3ZTNjNmIxNjgxZjRkZmE0MWY2 M2M0NjEwHhcNMjYwMjA5MTUwMDI4WhcNMjYwMjEwMTUwMDI4WjAzMTEwLwYDVQQD Eyg2YjBkODhlZDcyNDFkMTRlMzNkYmZmMmZjZWEwYzk5NjAxYmI1NTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAic1AwFxy4Zx3hUXjYop9jdYGpZ EeZtk9fKnTb+AIIEUgt7eU3kCZzTV2NmnydcNNPnAraiqhbX6E6YAWeMHSfgsFwK 425/SVkmZvaZ5960m3tMQoS1OtAR7Sm/nbh2kh7Nl+O6YuxxAa2A2XuZi6f4T1iu VT3eg+BmCffaEvvHm0rHuvULTpuykL0VGLTiySbqYCkTCPVMTETfkUVLHtbJVKem 9XCs7GG1gxu9JmrB45EDvpTRHRskhO/PcRMKKwg//xPBaIceebTt5dwUdsEBXOQy sYqOQ4+73aUNqubGUeJOPwbmP3vl79+zb1lXf7q93GVQNzkrGr18Y0plBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsNiO1yQdFOM9v/L86gyZYBu1UuMB8GA1UdIwQY MBaAFIEy250VZszXfjxrFoH036QfY8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RMYm5SVm16TmQtUEdzV2dmVGZwQjlqeEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZjNlZjMtOTI2Ny00ZDRhLWEzNjUt NzNkMjZlYTliMTkzLzEvZ1RMYm5SVm16TmQtUEdzV2dmVGZwQjlqeEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yZjNlZjMtOTI2Ny00ZDRhLWEzNjUtNzNkMjZlYTliMTkz LzEvZ1RMYm5SVm16TmQtUEdzV2dmVGZwQjlqeEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJIcPrJ9 W1rlScBEtRbtt0QMWz27iEzmSwa9rD6UFH0UxYuLeIRAHcfzjthmQtqNWwA8C9rw SUjvxleCEDsXdwyVzE0vfhdxJXLJwzQZXTZKgi9Vy4MnoO7K0B4238RY9MlN09b9 8zUi9Z8zTKWreCt9NVeGxopUR7p0MPP22mOEorCXU2L6wli0I1AXu7f4XlTs0mJU tQtL8WdoWtcf9vY5dO1yGyZWYJlIibg4fxkpFamcYTbrTSf1+Uo3VbOzTlHW4BrF mKcwt3s/8TLUcZH/U0fKqc0z/5/iZKx3Tj8qcnH2a67Ote4IQ+MCjDzis1qQxeOl 7iZjX8O4gfWjoA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:09 2026 by rpki-client