This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json) Hash identifier: s7TqmKEOIz4vqj+bfZlS29sT+zDWmPuWfMEB8Wkso0Y= Subject key identifier: 42:41:BF:C7:2E:41:60:F5:C6:C8:24:92:DF:BA:7C:81:B3:91:BE:AC Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Certificate serial: 019C42B423A97B478680B50B21364506226C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft Manifest number: 0619 Signing time: Mon 09 Feb 2026 14:00:27 +0000 Manifest this update: Mon 09 Feb 2026 14:00:27 +0000 Manifest next update: Tue 10 Feb 2026 14:00:27 +0000 Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: eVpabztWnaFqQCmGiklMHwWnMp9p5823l31L/iKHYzY=) 2: rkyTFWOAnwX3F8qqO766n2upPq4.roa (hash: Lqt7F3+mbWjOVp+tT8JH700oKwS5LDilWe3XGrT0PWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:23:a9:7b:47:86:80:b5:0b:21:36:45:06:22:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Validity Not Before: Feb 9 14:00:27 2026 GMT Not After : Feb 10 14:00:27 2026 GMT Subject: CN=4241bfc72e4160f5c6c82492dfba7c81b391beac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:22:af:a3:78:e4:73:7a:d0:55:78:b7:5a: 67:24:48:b2:46:ab:2a:e1:7c:d8:14:49:10:da:3c: ef:03:6d:82:3f:d1:63:c5:00:0d:44:9e:29:83:ee: b8:8b:e7:d5:1d:2a:82:58:63:be:d9:a1:64:1b:e0: cc:33:a0:fa:a7:8c:ac:52:13:4a:10:ac:1c:1f:84: 31:1f:40:76:f9:c6:4e:22:91:21:b7:3b:1e:47:30: d0:21:14:4b:bd:e4:ac:c1:30:a4:f3:10:e1:43:99: 04:df:ea:c2:ae:54:2e:f3:b3:88:52:a1:d3:44:fe: 72:10:bf:ff:cd:80:52:a2:27:30:d9:2c:2b:5c:d8: aa:5b:9a:a5:ed:3a:6e:a7:a3:31:42:2d:17:09:77: 2e:d5:9f:67:5d:3f:c1:0b:c7:8f:5b:c1:68:b1:4d: 32:71:76:ec:13:6d:ae:c3:e2:86:3a:4a:4a:5a:83: dd:c7:ba:f1:7a:38:ab:ce:95:08:c6:4b:f2:e9:d9: 31:f3:df:02:fe:9c:07:17:0e:e4:42:5e:a4:04:03: 64:76:d3:9a:92:31:42:30:16:45:ed:43:a0:e2:67: c9:22:c4:de:34:47:8f:73:4e:8c:7c:66:d1:b7:9a: bc:3c:32:71:09:68:2b:ff:e6:3e:e4:8e:c0:34:00: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:41:BF:C7:2E:41:60:F5:C6:C8:24:92:DF:BA:7C:81:B3:91:BE:AC X509v3 Authority Key Identifier: keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:37:0e:11:e5:dd:9a:4b:58:05:d3:1d:56:09:31:ce:7c:b2: 82:78:a6:39:13:e1:05:c4:8a:fd:9e:58:a5:c4:7b:ee:15:c0: f9:22:ae:19:58:6c:67:2b:e2:62:da:a2:dd:47:91:c4:fa:c6: 2e:ff:41:00:1a:54:52:19:80:6d:85:04:43:7f:91:2f:86:6f: f8:fa:49:f5:02:03:bc:55:5b:37:22:99:76:33:13:d2:1e:3f: 06:d9:3e:19:c8:f6:2b:19:88:e0:98:d8:e1:31:28:e0:e1:3d: 07:e9:b8:da:cc:2e:19:53:b4:3b:59:2a:4a:c1:e6:72:63:21: a5:a4:15:d7:ba:f4:b1:ab:17:ec:22:6a:5e:10:79:6c:ae:33: a2:4f:ad:42:6a:c8:ce:71:7f:1a:2f:57:36:70:1e:07:6d:a0: f2:6f:20:2b:08:1a:64:5c:9b:3f:89:62:6c:07:d8:4c:35:9f: 39:38:93:5a:3d:bf:8d:22:71:4f:61:77:42:3e:88:b3:e5:b1: 0f:51:7a:45:22:77:1e:da:e2:6d:51:a6:64:85:ec:d4:70:a5: 33:57:b4:e6:b7:9f:83:86:2d:0f:22:0e:fb:24:40:c9:c5:90: be:9d:ed:8a:10:14:0c:db:59:88:e8:7d:56:c3:8e:ce:85:fe: ee:c5:cc:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCOpe0eGgLULITZFBiJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5 YjA1NTAwHhcNMjYwMjA5MTQwMDI3WhcNMjYwMjEwMTQwMDI3WjAzMTEwLwYDVQQD Eyg0MjQxYmZjNzJlNDE2MGY1YzZjODI0OTJkZmJhN2M4MWIzOTFiZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bgir6N45HN60FV4t1pnJEiyRqsq 4XzYFEkQ2jzvA22CP9FjxQANRJ4pg+64i+fVHSqCWGO+2aFkG+DMM6D6p4ysUhNK EKwcH4QxH0B2+cZOIpEhtzseRzDQIRRLveSswTCk8xDhQ5kE3+rCrlQu87OIUqHT RP5yEL//zYBSoicw2SwrXNiqW5ql7Tpup6MxQi0XCXcu1Z9nXT/BC8ePW8FosU0y cXbsE22uw+KGOkpKWoPdx7rxejirzpUIxkvy6dkx898C/pwHFw7kQl6kBANkdtOa kjFCMBZF7UOg4mfJIsTeNEePc06MfGbRt5q8PDJxCWgr/+Y+5I7ANAAW0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJBv8cuQWD1xsgkkt+6fIGzkb6sMB8GA1UdIwQY MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt ZmQ0NjA0ZDdlN2FmLzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDcOEeXd mktYBdMdVgkxznyygnimORPhBcSK/Z5YpcR77hXA+SKuGVhsZyviYtqi3UeRxPrG Lv9BABpUUhmAbYUEQ3+RL4Zv+PpJ9QIDvFVbNyKZdjMT0h4/Btk+Gcj2KxmI4JjY 4TEo4OE9B+m42swuGVO0O1kqSsHmcmMhpaQV17r0sasX7CJqXhB5bK4zok+tQmrI znF/Gi9XNnAeB22g8m8gKwgaZFybP4libAfYTDWfOTiTWj2/jSJxT2F3Qj6Is+Wx D1F6RSJ3HtribVGmZIXs1HClM1e05refg4YtDyIO+yRAycWQvp3tihAUDNtZiOh9 VsOOzoX+7sXM2g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:51 2026 by rpki-client