This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft File: gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json) Hash identifier: Y+UYt9LM85dvPHX1ZvT19kxQ3IYN6s7eD5dimB40voQ= Subject key identifier: AF:B2:5B:EC:82:A3:10:7A:19:D3:61:6D:3E:23:D2:4B:A4:7D:BA:78 Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7 Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7 Certificate serial: 019C42463DD4631EB50571EA359CEAB62C97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft Manifest number: 47 Signing time: Mon 09 Feb 2026 12:00:25 +0000 Manifest this update: Mon 09 Feb 2026 12:00:25 +0000 Manifest next update: Tue 10 Feb 2026 12:00:25 +0000 Files and hashes: 1: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: g2OGDstXgyeMmjjZRLNi77z5VQCFNhzH9EMAK6BmrL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:3d:d4:63:1e:b5:05:71:ea:35:9c:ea:b6:2c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7 Validity Not Before: Feb 9 12:00:25 2026 GMT Not After : Feb 10 12:00:25 2026 GMT Subject: CN=afb25bec82a3107a19d3616d3e23d24ba47dba78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:7f:f4:13:a7:67:64:42:b6:31:0f:dd:d8: 7b:db:ed:c0:01:05:27:c1:0c:17:cd:b0:12:e5:9b: 3e:66:a8:75:82:99:73:d6:c3:3a:c2:bd:08:e5:db: d6:97:42:77:64:bd:50:29:f4:b5:f3:9b:48:a1:e3: 0d:23:7f:7c:81:36:44:dc:19:0e:9c:2c:21:8a:c1: 1e:98:99:bc:26:4c:98:60:22:90:6e:92:05:5d:6d: 42:e8:12:04:c0:7b:0f:7a:be:27:e4:b1:27:a9:8e: 01:36:55:c5:d8:7a:34:d3:77:fd:d4:1b:3c:6d:cb: de:57:09:f8:ce:10:23:08:59:a8:5f:61:34:ae:8f: 0e:1c:8f:40:7e:b4:88:f7:f9:e5:a8:26:53:b6:67: 52:35:a6:90:11:b1:76:fb:aa:31:a0:15:fa:24:4b: 59:d1:62:a8:0c:57:1a:9c:c3:6c:d1:69:a6:f1:47: 20:b1:6a:0b:6b:1a:8f:74:79:f8:ec:17:10:09:03: 9e:92:59:4d:12:05:64:d4:e5:da:9c:46:59:5b:9c: e2:01:9e:a3:3a:67:01:cb:e6:4c:c3:22:bd:68:2e: 90:21:6c:5d:08:99:f9:d4:96:64:44:ea:e0:bc:05: b0:0a:db:bd:ce:b7:2d:a8:bf:66:48:4a:78:e7:27: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B2:5B:EC:82:A3:10:7A:19:D3:61:6D:3E:23:D2:4B:A4:7D:BA:78 X509v3 Authority Key Identifier: keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d4:9d:c2:a4:82:0d:36:90:dc:e8:30:70:39:4b:42:54:dc: ba:12:9d:d6:8c:dd:a7:d4:bf:07:8e:a8:1b:3a:70:10:88:fc: 35:2b:4e:a1:9d:ef:ac:79:d3:a3:40:6b:06:1c:5d:bb:27:3c: 0a:2c:c6:ad:97:20:60:ed:3d:c3:27:93:78:3c:57:70:bb:22: a3:c2:d2:04:40:e0:ed:5e:e1:93:bd:72:16:04:cd:4d:84:1d: 77:48:47:e4:34:1b:b4:ce:09:78:f5:86:5d:35:00:4e:ae:62: 23:e1:0d:5b:40:70:fd:c4:ca:e2:9e:7a:4f:1e:89:90:0e:a2: f4:4f:79:80:06:aa:02:e4:08:4b:70:c6:04:d4:4c:9f:c2:f1: 85:e7:90:b1:a0:27:0b:69:56:c7:e0:86:1d:2c:62:2c:16:34: 3b:5f:69:89:2b:79:df:37:08:b2:ae:a7:5b:4c:01:30:32:34: 1c:7f:8b:8e:05:ac:6a:2b:98:2f:9d:7d:7a:67:41:c8:37:b5: 4f:f1:2a:c4:0f:0b:50:2d:fe:40:3b:18:b1:e8:84:3b:fd:9d: 32:ae:ec:a9:31:e8:5f:c9:77:08:ad:27:c4:3d:18:98:19:34: d6:fe:03:37:3e:8a:2c:bd:29:89:51:b2:06:ef:ea:08:ef:e4: 8f:f2:d3:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRj3UYx61BXHqNZzqtiyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzg5MjljYzhkOGZjMDBkOTY5NzZiZTRjOGMxZWQ3ZGFm NDU1ZDcwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD EyhhZmIyNWJlYzgyYTMxMDdhMTlkMzYxNmQzZTIzZDI0YmE0N2RiYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3t/9BOnZ2RCtjEP3dh72+3AAQUn wQwXzbAS5Zs+Zqh1gplz1sM6wr0I5dvWl0J3ZL1QKfS185tIoeMNI398gTZE3BkO nCwhisEemJm8JkyYYCKQbpIFXW1C6BIEwHsPer4n5LEnqY4BNlXF2Ho003f91Bs8 bcveVwn4zhAjCFmoX2E0ro8OHI9AfrSI9/nlqCZTtmdSNaaQEbF2+6oxoBX6JEtZ 0WKoDFcanMNs0Wmm8UcgsWoLaxqPdHn47BcQCQOekllNEgVk1OXanEZZW5ziAZ6j OmcBy+ZMwyK9aC6QIWxdCJn51JZkROrgvAWwCtu9zrctqL9mSEp45yenkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+yW+yCoxB6GdNhbT4j0kukfbp4MB8GA1UdIwQY MBaAFIA4kpzI2PwA2Wl2vkyMHtfa9FXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zZGFhNmItNjM0OC00OGIyLThiOTYt NTFhZmIwZDhkMTYzLzEvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zZGFhNmItNjM0OC00OGIyLThiOTYtNTFhZmIwZDhkMTYz LzEvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtSdwqSC DTaQ3OgwcDlLQlTcuhKd1ozdp9S/B46oGzpwEIj8NStOoZ3vrHnTo0BrBhxduyc8 CizGrZcgYO09wyeTeDxXcLsio8LSBEDg7V7hk71yFgTNTYQdd0hH5DQbtM4JePWG XTUATq5iI+ENW0Bw/cTK4p56Tx6JkA6i9E95gAaqAuQIS3DGBNRMn8LxheeQsaAn C2lWx+CGHSxiLBY0O19piSt53zcIsq6nW0wBMDI0HH+LjgWsaiuYL519emdByDe1 T/EqxA8LUC3+QDsYseiEO/2dMq7sqTHoX8l3CK0nxD0YmBk01v4DNz6KLL0piVGy Bu/qCO/kj/LTGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:30 2026 by rpki-client