This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft File: g2gKwOhPwS_HIje4rtjl7YX43r0.mft (raw, json) Hash identifier: jT1RmLtB3Ep6fFJSuguED+IW7/hlDiz9VlUx1Ccx2kk= Subject key identifier: 02:CC:9A:95:95:02:23:78:41:D8:96:8B:DA:4C:08:2B:76:D9:49:96 Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd Certificate serial: 019C41D854997BADF7968E235B8E93C44B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 10:00:22 +0000 Manifest this update: Mon 09 Feb 2026 10:00:22 +0000 Manifest next update: Tue 10 Feb 2026 10:00:22 +0000 Files and hashes: 1: g2gKwOhPwS_HIje4rtjl7YX43r0.crl (hash: 7qWCJk99k9WwFv7JhR4mkWTW2m05Ofqtmxt1rqHtwAI=) 2: l1E4OBre5rkDnwWns4RNTN9td_0.roa (hash: m7rZxzIS6jYBXFfEZZ7rvjd/kVyrJu8LndSLzgWjvY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:54:99:7b:ad:f7:96:8e:23:5b:8e:93:c4:4b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd Validity Not Before: Feb 9 10:00:22 2026 GMT Not After : Feb 10 10:00:22 2026 GMT Subject: CN=02cc9a959502237841d8968bda4c082b76d94996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:4f:86:e5:2a:88:6f:f3:4d:8a:ad:3b:72: 45:3a:04:04:c0:c3:ff:be:9b:42:dc:c2:ae:86:73: 82:cc:d7:27:99:8f:e7:b6:20:7e:b8:14:fd:02:13: ae:70:50:c8:d8:15:15:09:c8:fb:f5:ad:64:31:d5: fb:fd:3f:d1:a8:38:fe:44:c4:f2:f3:2f:55:e1:eb: 52:90:24:c4:46:d6:65:0e:d4:f3:71:93:d9:3e:95: b0:46:3c:6f:0c:2a:e5:e2:16:a6:ce:a5:40:b2:c1: 7b:a1:09:68:a6:40:7c:34:b9:ee:e2:d7:98:91:bc: f4:76:5a:74:6c:54:c1:5d:e1:90:07:e2:1d:21:d9: 47:e1:10:b8:44:6c:8f:f7:1d:d3:f6:14:85:ab:bf: b5:c1:93:cf:10:2c:79:7c:f7:f5:ca:c1:d3:05:1b: 06:10:a5:f3:5f:8a:5d:2f:d8:19:87:78:f4:aa:65: ec:84:0a:0c:1c:0e:30:b9:91:f7:05:39:6a:f7:ab: 78:cc:7f:14:6d:51:b9:82:0e:b0:20:44:f4:96:3b: d5:bf:b2:0c:d2:a8:e2:fc:19:b8:e8:c7:1b:bd:1a: 69:95:eb:d3:fc:53:11:d9:78:84:fb:53:b4:3f:6e: 09:2f:37:e2:c7:3b:f9:09:ae:0a:c9:7b:39:d1:4b: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CC:9A:95:95:02:23:78:41:D8:96:8B:DA:4C:08:2B:76:D9:49:96 X509v3 Authority Key Identifier: keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f4:c3:7e:7f:17:a6:a2:34:0c:20:09:4e:06:11:58:ac:66: ea:b8:db:e7:bb:5c:34:97:58:21:e9:6b:99:57:7b:b0:db:47: ee:c3:a9:78:51:28:17:f7:92:54:85:0b:21:6d:9f:a0:57:1b: 4b:d1:21:30:e9:8e:94:33:c7:a1:21:4f:66:9e:5f:79:da:5c: 1d:c9:1f:09:ba:a6:9f:b9:b3:10:f5:b8:f4:d8:7e:21:ba:12: 78:d0:88:e7:fc:4e:c6:e7:33:c8:ab:3d:bf:11:71:cf:65:70: 75:7b:bb:50:9b:f6:f6:89:98:34:5c:fe:dc:22:02:95:96:a5: 41:09:ed:2c:d0:e3:ea:00:74:2c:b6:49:6d:b3:b7:0e:e1:4d: 31:ab:63:a6:79:e9:d2:c3:ae:c6:33:f4:5a:db:d1:f8:e7:88: e7:87:f9:78:c1:73:4c:77:6f:c6:e6:a8:d0:58:f0:4b:b6:00: 7c:8f:74:07:03:55:b7:2a:8a:dc:50:26:eb:a9:13:8e:33:72: e0:fd:27:c9:8e:3d:7a:32:2a:85:e1:d3:2a:5d:01:19:66:d1: ea:e9:09:b9:5b:4e:2f:d5:bc:1b:89:2a:15:01:76:3f:00:fa: 3b:96:42:72:83:b4:b6:8c:37:f5:e9:ab:1d:e6:21:dc:c0:53: 42:3f:57:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FSZe633lo4jW46TxEstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjgwYWMwZTg0ZmMxMmZjNzIyMzdiOGFlZDhlNWVkODVm OGRlYmQwHhcNMjYwMjA5MTAwMDIyWhcNMjYwMjEwMTAwMDIyWjAzMTEwLwYDVQQD EygwMmNjOWE5NTk1MDIyMzc4NDFkODk2OGJkYTRjMDgyYjc2ZDk0OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohlPhuUqiG/zTYqtO3JFOgQEwMP/ vptC3MKuhnOCzNcnmY/ntiB+uBT9AhOucFDI2BUVCcj79a1kMdX7/T/RqDj+RMTy 8y9V4etSkCTERtZlDtTzcZPZPpWwRjxvDCrl4hamzqVAssF7oQlopkB8NLnu4teY kbz0dlp0bFTBXeGQB+IdIdlH4RC4RGyP9x3T9hSFq7+1wZPPECx5fPf1ysHTBRsG EKXzX4pdL9gZh3j0qmXshAoMHA4wuZH3BTlq96t4zH8UbVG5gg6wIET0ljvVv7IM 0qji/Bm46McbvRpplevT/FMR2XiE+1O0P24JLzfixzv5Ca4KyXs50UtH6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALMmpWVAiN4QdiWi9pMCCt22UmWMB8GA1UdIwQY MBaAFINoCsDoT8EvxyI3uK7Y5e2F+N69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgt ZmZhY2QyOWZkYTNhLzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgtZmZhY2QyOWZkYTNh LzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvTDfn8X pqI0DCAJTgYRWKxm6rjb57tcNJdYIelrmVd7sNtH7sOpeFEoF/eSVIULIW2foFcb S9EhMOmOlDPHoSFPZp5fedpcHckfCbqmn7mzEPW49Nh+IboSeNCI5/xOxuczyKs9 vxFxz2VwdXu7UJv29omYNFz+3CIClZalQQntLNDj6gB0LLZJbbO3DuFNMatjpnnp 0sOuxjP0WtvR+OeI54f5eMFzTHdvxuao0FjwS7YAfI90BwNVtyqK3FAm66kTjjNy 4P0nyY49ejIqheHTKl0BGWbR6ukJuVtOL9W8G4kqFQF2PwD6O5ZCcoO0tow39emr HeYh3MBTQj9XaA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:37 2026 by rpki-client