This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft File: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft (raw, json) Hash identifier: rq4YkIKAPd80MXyAOOO6MJcraVgvol5lJXhiQfbZkZ0= Subject key identifier: EC:90:FB:12:C5:73:31:CF:6A:37:8A:FF:B3:96:EF:98:18:8C:84:AD Authority key identifier: 80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92 Certificate issuer: /CN=80e7137d0d80586246c6aff496727b603d351692 Certificate serial: 019C435959C2834FECB77011F04009B6FBB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft Manifest number: 0172 Signing time: Mon 09 Feb 2026 17:00:54 +0000 Manifest this update: Mon 09 Feb 2026 17:00:54 +0000 Manifest next update: Tue 10 Feb 2026 17:00:54 +0000 Files and hashes: 1: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl (hash: 5ZF5tP8JXXNh7sb1x59mQyav4WAACYc80V6uEA7TQM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:59:c2:83:4f:ec:b7:70:11:f0:40:09:b6:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80e7137d0d80586246c6aff496727b603d351692 Validity Not Before: Feb 9 17:00:54 2026 GMT Not After : Feb 10 17:00:54 2026 GMT Subject: CN=ec90fb12c57331cf6a378affb396ef98188c84ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:d0:f4:10:ff:0d:f9:5d:b5:46:94:81:5e: 12:90:dd:76:41:99:f6:79:a5:df:77:b2:7b:0d:73: 53:ec:5c:09:97:18:8c:38:db:64:0e:c1:d9:be:4e: d8:18:c9:5f:c8:a5:fe:73:83:ca:b0:39:f4:a4:6c: 57:e8:b9:8b:11:0c:6e:e4:20:9e:33:55:e1:50:bf: 51:db:35:4a:a6:22:5e:06:28:3d:fb:78:8e:f3:06: a0:80:61:ef:26:84:18:ec:07:38:0f:72:9a:4e:fa: 28:4d:23:d2:af:3f:a4:91:1c:cd:b2:30:98:03:a4: a7:04:e5:cd:1c:5f:fc:ec:a6:67:be:e0:98:96:1d: 7e:82:83:ae:7e:b9:12:42:8a:8a:11:7b:78:e7:81: 76:a8:62:d4:61:00:e1:9e:dc:d4:39:b4:40:82:04: b3:89:9a:c7:20:72:91:a4:88:b2:3d:e4:59:02:8a: 60:4e:fd:34:87:23:1b:e8:10:ba:85:55:d3:a0:2f: c9:e3:b7:36:bc:f0:dd:10:87:8c:4d:fd:e8:a9:87: 05:be:04:02:f7:f7:f5:02:20:89:6c:3b:54:bc:bb: ce:be:6e:da:df:19:d1:76:8f:14:31:27:49:ee:2d: 4e:a2:28:77:39:f2:b1:65:8b:60:72:e1:0c:29:94: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:FB:12:C5:73:31:CF:6A:37:8A:FF:B3:96:EF:98:18:8C:84:AD X509v3 Authority Key Identifier: keyid:80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:d9:34:14:55:43:2f:cd:d1:3d:2a:52:82:d4:fd:c9:62:ab: 7e:52:43:09:fa:36:f6:7f:77:94:2a:f0:62:2e:b9:8c:4a:5b: e6:cc:24:68:b2:b4:af:d1:d1:4f:b7:89:c2:f2:00:10:5e:13: 4c:03:52:c2:1e:63:94:ab:cf:99:88:8c:f5:99:ee:82:d8:c9: 64:55:c2:a6:de:03:01:8f:4a:f5:ef:ac:a7:c0:1e:af:88:3b: 08:4b:d3:a4:ac:5a:c6:86:33:cf:9d:d9:ae:71:12:9c:88:de: 8f:81:70:22:39:d6:0c:b0:20:ca:a2:25:d6:32:b7:e0:0c:80: e7:cb:a3:fc:2f:3f:48:4b:d8:f0:f7:33:53:8f:7d:40:fd:2b: 72:4d:ac:c7:67:0a:18:b9:e1:ab:c0:b8:e2:67:0b:37:93:f2: f5:fe:09:67:89:9e:32:ed:c2:2d:82:f2:24:49:fc:67:57:da: 0e:fb:02:ec:14:00:18:ad:c3:fd:eb:89:6d:45:5b:79:d7:2a: 74:06:6b:07:d9:75:5f:e4:7e:d4:97:f6:b4:4a:c5:15:ee:4e: 48:d7:16:90:04:90:5b:50:d5:0c:f1:46:c7:e3:ff:82:ed:e1: a1:0b:92:72:3f:b7:18:48:e7:66:21:2f:69:60:ea:7e:7a:53: 34:31:d5:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVnCg0/st3AR8EAJtvuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZTcxMzdkMGQ4MDU4NjI0NmM2YWZmNDk2NzI3YjYwM2Qz NTE2OTIwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD EyhlYzkwZmIxMmM1NzMzMWNmNmEzNzhhZmZiMzk2ZWY5ODE4OGM4NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTfQ9BD/DfldtUaUgV4SkN12QZn2 eaXfd7J7DXNT7FwJlxiMONtkDsHZvk7YGMlfyKX+c4PKsDn0pGxX6LmLEQxu5CCe M1XhUL9R2zVKpiJeBig9+3iO8waggGHvJoQY7Ac4D3KaTvooTSPSrz+kkRzNsjCY A6SnBOXNHF/87KZnvuCYlh1+goOufrkSQoqKEXt454F2qGLUYQDhntzUObRAggSz iZrHIHKRpIiyPeRZAopgTv00hyMb6BC6hVXToC/J47c2vPDdEIeMTf3oqYcFvgQC 9/f1AiCJbDtUvLvOvm7a3xnRdo8UMSdJ7i1Ooih3OfKxZYtgcuEMKZRrFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyQ+xLFczHPajeK/7OW75gYjIStMB8GA1UdIwQY MBaAFIDnE30NgFhiRsav9JZye2A9NRaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lZWQxZWItNWUyMi00MzljLTgwNjgt ODJjODAyNjNiNDdlLzEvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9lZWQxZWItNWUyMi00MzljLTgwNjgtODJjODAyNjNiNDdl LzEvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6dk0FFVD L83RPSpSgtT9yWKrflJDCfo29n93lCrwYi65jEpb5swkaLK0r9HRT7eJwvIAEF4T TANSwh5jlKvPmYiM9ZnugtjJZFXCpt4DAY9K9e+sp8Aer4g7CEvTpKxaxoYzz53Z rnESnIjej4FwIjnWDLAgyqIl1jK34AyA58uj/C8/SEvY8PczU499QP0rck2sx2cK GLnhq8C44mcLN5Py9f4JZ4meMu3CLYLyJEn8Z1faDvsC7BQAGK3D/euJbUVbedcq dAZrB9l1X+R+1Jf2tErFFe5OSNcWkASQW1DVDPFGx+P/gu3hoQuScj+3GEjnZiEv aWDqfnpTNDHVPw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:44 2026 by rpki-client