This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json) Hash identifier: BQog7ezO3KKpHdTB00kzwl+148anwjw24AE+jJyF0FU= Subject key identifier: 18:B9:B9:99:7D:2F:62:22:0F:50:96:AB:DA:A2:9D:24:4A:33:FA:4E Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a Certificate serial: 019C41A2322732C4C6BF32D46D2473FC4A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 09:01:14 +0000 Manifest this update: Mon 09 Feb 2026 09:01:14 +0000 Manifest next update: Tue 10 Feb 2026 09:01:14 +0000 Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: UbFMpiOp6JuzCk7Wh6XlCvJU2aXQyDFzX33oiyH8lxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:32:27:32:c4:c6:bf:32:d4:6d:24:73:fc:4a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a Validity Not Before: Feb 9 09:01:14 2026 GMT Not After : Feb 10 09:01:14 2026 GMT Subject: CN=18b9b9997d2f62220f5096abdaa29d244a33fa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:18:88:b7:f6:bb:cd:d4:e4:1b:39:ae:85: ef:12:c7:b6:c0:e8:21:6f:3f:65:45:3f:1c:05:d1: aa:4e:85:99:bd:42:db:a5:64:fb:21:4c:1a:82:d5: c7:d0:2f:55:e4:05:5e:e0:6f:14:4b:cd:22:8a:6c: c6:71:d7:b4:cc:02:10:d7:33:ab:d7:42:0d:fd:c0: 44:eb:27:35:ae:a8:fc:8c:e9:e1:5a:27:e4:d6:69: 2a:e8:54:7e:20:4e:97:69:01:8c:9c:3e:1c:36:5a: 25:4b:e7:ff:b0:b8:98:8a:82:7f:64:00:b5:a9:4f: 05:f3:f7:a0:0f:6a:69:f1:d9:b7:68:2c:54:bc:9e: 69:17:22:ae:35:1f:59:fa:c3:d3:e0:57:9b:d8:6c: 8d:7c:39:93:dc:a2:18:72:41:90:ea:af:64:78:23: d5:9c:c9:b4:6a:5b:48:d5:07:f6:ca:2c:0d:07:94: de:b7:7d:2f:62:27:cc:03:fe:73:37:30:06:20:ed: 69:00:b5:51:eb:0e:0b:be:85:10:88:f1:db:21:ee: d1:5f:62:94:9f:ff:4e:4f:18:62:3e:5a:96:b5:17: 0a:ee:cb:58:09:0f:33:99:74:3b:4a:67:33:c3:2b: 2b:0b:7a:35:b3:f1:d0:1e:95:95:b8:f1:8a:23:13: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B9:B9:99:7D:2F:62:22:0F:50:96:AB:DA:A2:9D:24:4A:33:FA:4E X509v3 Authority Key Identifier: keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1e:ac:9d:9a:27:17:27:e4:0e:52:8d:f3:ca:b2:90:78:bc: 93:3c:ed:df:c7:03:06:fe:c9:d7:b0:8f:50:1d:81:d3:31:5b: e5:50:42:9f:59:ac:ff:eb:fd:ff:bd:0f:55:23:c2:9e:e5:3a: 09:ae:9e:80:c2:c3:28:05:8a:f5:da:d7:eb:7d:94:f2:50:f0: 5c:fa:6a:5a:8a:7f:ba:c5:ff:c1:51:b8:15:52:5a:f4:26:de: a9:da:b3:9a:91:c5:1f:f4:ed:20:91:5f:28:63:5a:9c:9c:da: 1b:a5:7d:cc:9a:c9:29:85:8b:ab:a3:b7:4b:21:24:aa:cc:6d: b9:c3:96:ce:fd:2b:6a:50:9c:1c:b5:ed:1d:fb:aa:7f:24:f6: 48:b9:0b:53:46:8b:70:46:1b:e4:1b:1e:23:72:c4:5b:83:b9: fe:2a:73:9d:45:de:a7:77:3e:e0:86:0a:11:de:1c:b9:0f:43: 3e:27:4f:d4:b5:89:75:5b:dc:45:d5:37:5f:43:2d:ce:36:46: 7b:b9:13:63:86:1e:46:fa:69:de:3a:4c:0d:7a:41:2e:6c:4c: e2:11:de:ef:40:89:d1:5c:c0:6f:4a:8f:c8:6d:b9:3b:78:4b: ed:5e:c0:eb:72:2c:2d:cf:ea:01:da:3d:00:d6:3b:1e:44:af: 9f:00:25:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBojInMsTGvzLUbSRz/Ep1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzM4MDgyOTZlYTNjMGYzZjFhOTQyMzQ4NDNkZTUzNWE4 MzRlMWEwHhcNMjYwMjA5MDkwMTE0WhcNMjYwMjEwMDkwMTE0WjAzMTEwLwYDVQQD EygxOGI5Yjk5OTdkMmY2MjIyMGY1MDk2YWJkYWEyOWQyNDRhMzNmYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozMYiLf2u83U5Bs5roXvEse2wOgh bz9lRT8cBdGqToWZvULbpWT7IUwagtXH0C9V5AVe4G8US80iimzGcde0zAIQ1zOr 10IN/cBE6yc1rqj8jOnhWifk1mkq6FR+IE6XaQGMnD4cNlolS+f/sLiYioJ/ZAC1 qU8F8/egD2pp8dm3aCxUvJ5pFyKuNR9Z+sPT4Feb2GyNfDmT3KIYckGQ6q9keCPV nMm0altI1Qf2yiwNB5Tet30vYifMA/5zNzAGIO1pALVR6w4LvoUQiPHbIe7RX2KU n/9OTxhiPlqWtRcK7stYCQ8zmXQ7SmczwysrC3o1s/HQHpWVuPGKIxMzJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi5uZl9L2IiD1CWq9qinSRKM/pOMB8GA1UdIwQY MBaAFIAzgIKW6jwPPxqUI0hD3lNag04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RPQWdwYnFQQThfR3BRalNFUGVVMXFEVGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hZjdjOWUtNWM4ZS00OWM3LWFlYWIt ZDgxOWMzODg1ZGVjLzEvZ0RPQWdwYnFQQThfR3BRalNFUGVVMXFEVGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hZjdjOWUtNWM4ZS00OWM3LWFlYWItZDgxOWMzODg1ZGVj LzEvZ0RPQWdwYnFQQThfR3BRalNFUGVVMXFEVGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR6snZon FyfkDlKN88qykHi8kzzt38cDBv7J17CPUB2B0zFb5VBCn1ms/+v9/70PVSPCnuU6 Ca6egMLDKAWK9drX632U8lDwXPpqWop/usX/wVG4FVJa9CbeqdqzmpHFH/TtIJFf KGNanJzaG6V9zJrJKYWLq6O3SyEkqsxtucOWzv0ralCcHLXtHfuqfyT2SLkLU0aL cEYb5BseI3LEW4O5/ipznUXep3c+4IYKEd4cuQ9DPidP1LWJdVvcRdU3X0MtzjZG e7kTY4YeRvpp3jpMDXpBLmxM4hHe70CJ0VzAb0qPyG25O3hL7V7A63IsLc/qAdo9 ANY7HkSvnwAlHA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:21 2026 by rpki-client