This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json) Hash identifier: mT88I7TsOOGDgDA+IZh6Gn456owK0QycnYd/YiCKs28= Subject key identifier: B1:D4:EA:70:D3:F2:90:2F:8C:43:E1:91:17:83:12:79:8D:6D:79:F4 Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0 Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0 Certificate serial: 019C43904981A3EF2AD49F631FF76E60E6B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft Manifest number: 031E Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: fVw1SO1JRoyQpw3vgQ8eixnB_dY.roa (hash: M97j0VWdhaZIClC1TkdlR4RLXTy+vP9OT5Bxj4HCOl4=) 2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: wTJ+8p1BiR7p9hPliRUUDkWP7F4nLj90TBq6MEYDCZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:49:81:a3:ef:2a:d4:9f:63:1f:f7:6e:60:e6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0 Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=b1d4ea70d3f2902f8c43e191178312798d6d79f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:d7:28:7f:60:91:f8:9e:05:77:dd:60:8c: a4:4d:b9:72:3d:d6:bc:27:c8:9a:0c:13:09:9f:6c: 33:84:93:f8:1f:26:f7:78:61:69:fb:d0:34:e2:fb: 45:06:9e:f4:4a:69:b4:44:03:f1:e9:24:c3:08:fe: 06:d0:f5:70:d0:56:b9:9a:9c:e4:33:dc:73:dc:df: 9f:f3:9d:26:9f:0e:fc:2a:d3:66:4b:c0:12:8e:83: 24:58:44:1c:e8:82:43:f0:63:1a:36:b8:fd:be:bd: 2e:66:aa:66:6d:f5:41:63:56:92:c6:4e:8f:07:19: b6:64:b5:cd:dd:11:98:d5:3c:40:40:a1:43:2d:16: 81:70:37:48:fe:aa:d5:42:b2:bf:e3:c5:c1:4b:e8: 4e:af:0c:ea:1a:87:60:8e:57:be:25:d6:fd:be:d8: 62:e3:7c:70:33:05:22:38:32:31:83:d8:3b:cb:79: ea:34:dc:b3:e8:d8:14:7f:ac:6b:87:01:28:fe:22: e8:d0:63:23:51:16:ff:08:b1:43:28:a7:bb:bd:cd: 4b:2d:e9:7c:48:fc:cc:d3:9d:69:c7:c4:42:c2:0f: 66:61:02:d0:96:62:a9:c3:30:a9:76:78:9d:93:a7: 36:61:26:7f:46:cb:df:34:f4:15:91:1c:12:36:4e: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D4:EA:70:D3:F2:90:2F:8C:43:E1:91:17:83:12:79:8D:6D:79:F4 X509v3 Authority Key Identifier: keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fc:b9:c7:3c:98:40:f1:19:b2:13:05:fd:0f:f4:7a:43:db: df:57:21:71:49:a2:32:b8:08:c5:04:a4:29:72:91:99:a5:7e: ed:2e:43:6a:c4:71:32:04:4a:1c:bf:32:3c:82:69:fb:4e:a2: c5:2e:e7:79:f5:39:ea:74:fe:12:62:4c:f8:ba:9e:c7:68:df: 42:64:2a:2d:63:35:ac:e7:02:27:fe:78:c1:d7:bc:71:f1:0d: 09:b4:15:7b:86:62:65:db:17:8f:21:d6:5b:3d:d9:f0:06:74: 23:26:06:a5:c5:2a:7a:0e:bf:4b:d2:d3:21:e7:fc:bb:42:63: ea:01:0a:ba:dd:22:3f:9d:6a:e7:f7:bf:1f:42:27:43:24:24: 73:e5:5c:9b:78:62:a6:b6:b1:dd:41:1e:79:1c:97:eb:f1:f5: 69:ec:2a:13:37:fd:1e:46:09:3c:bd:9f:32:cf:5b:82:b2:fd: d6:a3:3d:d9:db:3c:7d:4a:35:7e:7d:9f:7a:3e:3b:e0:47:bc: ca:29:bf:f5:75:79:af:c9:1b:4a:7f:eb:d2:ad:53:7a:1f:d9: 6c:14:ad:6c:fa:97:b5:45:f1:4a:a6:de:03:b1:5d:ae:3f:a0: 7d:0e:aa:b4:39:37:af:f1:8b:a1:88:7d:16:e5:9d:3f:40:ac: 28:bb:91:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEmBo+8q1J9jH/duYOawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzQ2NDliMWVmMDBkYzgzYzI4NTM5YTM5ZDI5MGIzNTMw ZWRmYjAwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD EyhiMWQ0ZWE3MGQzZjI5MDJmOGM0M2UxOTExNzgzMTI3OThkNmQ3OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CPXKH9gkfieBXfdYIykTblyPda8 J8iaDBMJn2wzhJP4Hyb3eGFp+9A04vtFBp70Smm0RAPx6STDCP4G0PVw0Fa5mpzk M9xz3N+f850mnw78KtNmS8ASjoMkWEQc6IJD8GMaNrj9vr0uZqpmbfVBY1aSxk6P Bxm2ZLXN3RGY1TxAQKFDLRaBcDdI/qrVQrK/48XBS+hOrwzqGodgjle+Jdb9vthi 43xwMwUiODIxg9g7y3nqNNyz6NgUf6xrhwEo/iLo0GMjURb/CLFDKKe7vc1LLel8 SPzM051px8RCwg9mYQLQlmKpwzCpdnidk6c2YSZ/RsvfNPQVkRwSNk4gLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHU6nDT8pAvjEPhkReDEnmNbXn0MB8GA1UdIwQY MBaAFIF0ZJse8A3IPChTmjnSkLNTDt+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEt MzI5MjRlZjQ3YTFhLzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEtMzI5MjRlZjQ3YTFh LzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPy5xzyY QPEZshMF/Q/0ekPb31chcUmiMrgIxQSkKXKRmaV+7S5DasRxMgRKHL8yPIJp+06i xS7nefU56nT+EmJM+Lqex2jfQmQqLWM1rOcCJ/54wde8cfENCbQVe4ZiZdsXjyHW Wz3Z8AZ0IyYGpcUqeg6/S9LTIef8u0Jj6gEKut0iP51q5/e/H0InQyQkc+Vcm3hi prax3UEeeRyX6/H1aewqEzf9HkYJPL2fMs9bgrL91qM92ds8fUo1fn2fej474Ee8 yim/9XV5r8kbSn/r0q1Teh/ZbBStbPqXtUXxSqbeA7Fdrj+gfQ6qtDk3r/GLoYh9 FuWdP0CsKLuRsg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:23 2026 by rpki-client