This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json) Hash identifier: hOOdggkQyZOfcwHch1QMwAFI28VUBAM7yLGRo5PcRgU= Subject key identifier: D5:3F:BB:EA:B2:C6:29:39:38:7E:45:77:9C:2B:2D:89:4B:B6:2C:65 Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d Certificate serial: 019C4321FF4697ADD13DE92E7AAD86478ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:27 +0000 Manifest this update: Mon 09 Feb 2026 16:00:27 +0000 Manifest next update: Tue 10 Feb 2026 16:00:27 +0000 Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: Oond+NfBqOYwtifVnwyjTwc+zgZhpMvChvM9xOkX5jQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ff:46:97:ad:d1:3d:e9:2e:7a:ad:86:47:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d Validity Not Before: Feb 9 16:00:27 2026 GMT Not After : Feb 10 16:00:27 2026 GMT Subject: CN=d53fbbeab2c62939387e45779c2b2d894bb62c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:0b:f3:bd:a1:5a:bd:23:3b:40:b8:41:12: a5:a2:d7:74:f3:21:71:5e:6f:18:ae:10:d1:a3:c8: 8c:ab:e6:3d:df:39:44:1d:7c:4c:7f:f8:a8:e1:ba: c0:b4:67:cc:3d:ef:2a:b8:b5:18:53:c6:5b:f5:45: ad:c8:eb:9b:94:77:7e:9e:c4:83:0a:13:e9:01:cf: d9:04:52:96:bf:46:df:b1:87:ab:d2:b3:0f:34:77: c0:9a:40:34:be:75:76:ac:1a:14:87:c6:3d:d4:90: d7:62:f0:81:05:46:71:48:3b:b2:1b:af:0d:5d:f8: 15:d0:a5:b5:b2:a1:0b:a0:42:03:59:a7:7f:49:33: dd:de:c0:21:8d:93:ff:9f:3e:b7:77:71:d5:9f:13: fb:7a:a3:03:d9:35:b0:94:7a:f4:84:55:e3:1f:f6: 8e:36:6e:e4:89:af:ae:26:a2:bf:8f:78:fe:76:5f: c3:c1:d3:79:d1:67:b5:d1:f7:e4:1c:0b:62:52:0e: 2b:ed:26:09:d7:55:f3:23:e4:a7:ea:c9:e3:18:c4: d7:c1:45:67:c6:8d:74:39:1b:5f:a0:b1:ad:87:de: 61:40:2d:5b:8f:e1:e4:50:a5:95:2f:73:99:c2:1c: f8:e9:ad:ff:6a:9b:6d:9d:f5:b7:9c:56:b2:46:4f: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:BB:EA:B2:C6:29:39:38:7E:45:77:9C:2B:2D:89:4B:B6:2C:65 X509v3 Authority Key Identifier: keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8d:48:a4:2d:ea:35:4c:a9:fe:a6:97:88:55:cf:2e:12:1a: be:dc:56:ff:5c:93:9f:4e:45:02:c2:20:93:a1:19:dd:b4:3a: 44:03:37:12:40:4c:05:93:7d:c0:93:b7:71:47:a9:2b:f9:ea: 5c:c7:c2:ca:ad:5e:3a:50:0c:a6:ce:82:72:75:fc:f7:42:8b: 42:c8:f9:d2:0c:8c:12:bf:ea:54:08:77:4a:2c:62:a3:7e:03: 4e:05:16:be:00:35:85:6a:2f:7c:a1:fa:7c:a3:c7:6c:e3:78: 3e:19:66:ff:36:5a:6a:3f:d1:e1:41:17:1d:3c:44:0b:96:24: 7d:34:c4:bc:15:cf:49:f2:58:e6:a4:6f:4a:74:05:5d:a1:b5: f7:b5:cf:3e:75:31:86:f0:70:f8:55:47:2e:41:62:37:86:2f: 2e:3b:d8:37:4d:9f:22:2b:61:4d:26:27:00:e1:8a:f5:25:a8: 4b:ac:2d:0b:24:35:2e:64:2c:26:da:bf:41:2e:ff:34:66:5e: b7:94:5d:34:93:1c:be:5f:76:90:42:34:ac:d7:51:8e:aa:6a: 1f:da:98:ff:60:be:a2:4a:9e:05:9d:21:0c:96:c1:06:0b:de: 0b:70:81:fd:3f:33:3c:cf:82:f0:da:03:46:40:c4:77:54:37: 24:bb:33:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIf9Gl63RPekueq2GR47QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDk3OWY4OTJmZWI4MTk5NzZhMjVmZTk0N2Y1ZDdhZjM3 ZWNjN2QwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD EyhkNTNmYmJlYWIyYzYyOTM5Mzg3ZTQ1Nzc5YzJiMmQ4OTRiYjYyYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFQL872hWr0jO0C4QRKlotd08yFx Xm8YrhDRo8iMq+Y93zlEHXxMf/io4brAtGfMPe8quLUYU8Zb9UWtyOublHd+nsSD ChPpAc/ZBFKWv0bfsYer0rMPNHfAmkA0vnV2rBoUh8Y91JDXYvCBBUZxSDuyG68N XfgV0KW1sqELoEIDWad/STPd3sAhjZP/nz63d3HVnxP7eqMD2TWwlHr0hFXjH/aO Nm7kia+uJqK/j3j+dl/DwdN50We10ffkHAtiUg4r7SYJ11XzI+Sn6snjGMTXwUVn xo10ORtfoLGth95hQC1bj+HkUKWVL3OZwhz46a3/apttnfW3nFayRk/mvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNU/u+qyxik5OH5Fd5wrLYlLtixlMB8GA1UdIwQY MBaAFBjZefiS/rgZl2ol/pR/XXrzfsx9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9mNTBiOTAtZjAzMS00MTJlLWEwNDAt YWU2YWJjZTU5YWMxLzEvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9mNTBiOTAtZjAzMS00MTJlLWEwNDAtYWU2YWJjZTU5YWMx LzEvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh41IpC3q NUyp/qaXiFXPLhIavtxW/1yTn05FAsIgk6EZ3bQ6RAM3EkBMBZN9wJO3cUepK/nq XMfCyq1eOlAMps6CcnX890KLQsj50gyMEr/qVAh3Sixio34DTgUWvgA1hWovfKH6 fKPHbON4Phlm/zZaaj/R4UEXHTxEC5YkfTTEvBXPSfJY5qRvSnQFXaG197XPPnUx hvBw+FVHLkFiN4YvLjvYN02fIithTSYnAOGK9SWoS6wtCyQ1LmQsJtq/QS7/NGZe t5RdNJMcvl92kEI0rNdRjqpqH9qY/2C+okqeBZ0hDJbBBgveC3CB/T8zPM+C8NoD RkDEd1Q3JLszhA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:19 2026 by rpki-client