This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json) Hash identifier: Y1SROrgBR+nIB8wV580BjbKn3iZIeGMOrp9pHb2+I/E= Subject key identifier: D5:46:AE:2F:50:D5:3A:DE:F5:17:45:D2:D4:5F:75:A9:45:41:87:1C Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Certificate serial: 019C432319C1DF4FEABB01EE454B9BEAE394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft Manifest number: 0B77 Signing time: Mon 09 Feb 2026 16:01:39 +0000 Manifest this update: Mon 09 Feb 2026 16:01:39 +0000 Manifest next update: Tue 10 Feb 2026 16:01:39 +0000 Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: qf55QFYFCLZeWZbH2IOQxV0SWg3Yq7lurY+F1gHs3qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:19:c1:df:4f:ea:bb:01:ee:45:4b:9b:ea:e3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6 Validity Not Before: Feb 9 16:01:39 2026 GMT Not After : Feb 10 16:01:39 2026 GMT Subject: CN=d546ae2f50d53adef51745d2d45f75a94541871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:5a:78:25:9d:fd:f6:0c:2a:27:cc:dd:e6: c0:31:c5:6a:3e:81:7d:6e:78:c2:7e:c6:bd:a1:3f: 8b:27:a4:bc:d3:3e:2f:a1:85:27:b2:89:59:57:14: 3a:00:48:cf:fd:c0:fa:65:3a:10:ef:0a:9b:1a:50: 3b:e8:2c:01:92:30:5b:08:74:af:be:73:3c:40:db: be:8d:2a:d6:17:69:ba:1e:98:43:23:19:67:5c:71: c5:ff:06:f7:60:54:af:17:e8:1a:aa:1c:85:05:70: ee:5a:29:33:08:74:b7:33:73:b0:98:62:63:6e:a5: 75:13:19:c7:63:93:3e:1a:4c:27:45:c8:cb:6e:d8: 4f:67:b6:01:2c:3c:b5:8b:c7:3d:52:5f:0b:aa:98: 22:15:76:c6:0b:31:ca:a0:ec:ab:4b:b2:ce:93:3e: 16:70:bd:a9:eb:d1:5d:d6:8b:42:19:3c:56:5a:a0: b5:73:6f:b1:98:dc:52:26:e7:dd:d3:3a:28:62:03: b3:2a:64:63:16:10:6a:84:70:ac:43:b1:61:64:1e: 7c:05:92:ca:fc:85:f1:3a:df:2c:35:a1:5a:6d:f0: 85:b8:6f:37:6c:73:9a:bb:6f:58:66:53:7f:b7:52: f4:7e:28:38:5b:31:d3:7e:c8:85:d0:6b:02:a9:57: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:AE:2F:50:D5:3A:DE:F5:17:45:D2:D4:5F:75:A9:45:41:87:1C X509v3 Authority Key Identifier: keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3a:d4:9c:db:9a:65:c3:c4:82:42:f1:83:a5:63:35:89:b2: 1c:18:34:e2:c2:5c:5b:5f:4e:93:0e:69:00:89:4e:b0:39:5d: 5b:04:e7:87:c0:35:77:3d:7b:7e:0f:8a:a1:58:68:68:d9:f6: 53:10:1c:67:fd:76:7e:60:06:24:32:1c:52:c1:d4:20:b0:3c: 3c:95:86:77:21:34:48:cc:4f:ff:5b:51:b9:5e:0b:74:50:7e: a0:7a:8d:20:ef:ea:d3:0f:62:77:ac:90:67:30:25:2d:21:1c: 42:47:5b:3f:2c:3e:52:f1:85:53:cb:0c:9f:a1:2e:f9:32:4d: bf:c9:b1:1f:70:79:d5:57:fb:c4:37:11:8d:39:77:4f:3a:cc: af:d7:e6:ba:88:99:c6:5f:bf:47:7a:be:ea:a6:95:f3:2e:0c: 76:8d:9d:df:de:37:d8:93:02:f2:fb:8b:c8:25:e5:9a:d5:48: 84:97:f7:f5:8a:ff:d3:5e:b8:67:59:ef:f9:03:93:7d:69:92: cf:db:70:a1:2f:b0:8f:ef:41:1b:14:70:93:d6:b0:0d:58:a7: 6e:ae:3b:f4:ba:67:1c:80:bc:a4:e0:19:fb:35:b3:c8:e1:fa: 8b:f9:e6:80:e1:d0:83:8a:94:5b:22:45:d9:04:07:fe:b0:06: e8:70:08:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIxnB30/quwHuRUub6uOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh NGI1ZTYwHhcNMjYwMjA5MTYwMTM5WhcNMjYwMjEwMTYwMTM5WjAzMTEwLwYDVQQD EyhkNTQ2YWUyZjUwZDUzYWRlZjUxNzQ1ZDJkNDVmNzVhOTQ1NDE4NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocBaeCWd/fYMKifM3ebAMcVqPoF9 bnjCfsa9oT+LJ6S80z4voYUnsolZVxQ6AEjP/cD6ZToQ7wqbGlA76CwBkjBbCHSv vnM8QNu+jSrWF2m6HphDIxlnXHHF/wb3YFSvF+gaqhyFBXDuWikzCHS3M3OwmGJj bqV1ExnHY5M+GkwnRcjLbthPZ7YBLDy1i8c9Ul8LqpgiFXbGCzHKoOyrS7LOkz4W cL2p69Fd1otCGTxWWqC1c2+xmNxSJufd0zooYgOzKmRjFhBqhHCsQ7FhZB58BZLK /IXxOt8sNaFabfCFuG83bHOau29YZlN/t1L0fig4WzHTfsiF0GsCqVep+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVGri9Q1Tre9RdF0tRfdalFQYccMB8GA1UdIwQY MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDrUnNua ZcPEgkLxg6VjNYmyHBg04sJcW19Okw5pAIlOsDldWwTnh8A1dz17fg+KoVhoaNn2 UxAcZ/12fmAGJDIcUsHUILA8PJWGdyE0SMxP/1tRuV4LdFB+oHqNIO/q0w9id6yQ ZzAlLSEcQkdbPyw+UvGFU8sMn6Eu+TJNv8mxH3B51Vf7xDcRjTl3TzrMr9fmuoiZ xl+/R3q+6qaV8y4Mdo2d39432JMC8vuLyCXlmtVIhJf39Yr/0164Z1nv+QOTfWmS z9twoS+wj+9BGxRwk9awDVinbq479LpnHIC8pOAZ+zWzyOH6i/nmgOHQg4qUWyJF 2QQH/rAG6HAIRg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:29 2026 by rpki-client