This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft File: GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json) Hash identifier: L8ZI2ubFFaU99ODeCIT3Yn+EesKKPZfF0aBZ/MvyBkY= Subject key identifier: 20:52:D9:D5:5F:8C:DD:54:0E:A2:9D:9E:DC:28:FB:BD:1B:51:BD:63 Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48 Certificate issuer: /CN=1877b19d4847fc3f495af936c5b1a1928c912748 Certificate serial: 019C4390CA04E82874DDD0EB687E3E590C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:01:28 +0000 Manifest this update: Mon 09 Feb 2026 18:01:28 +0000 Manifest next update: Tue 10 Feb 2026 18:01:28 +0000 Files and hashes: 1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: kPzryTZ/jwqHVlxGAwZEO7JtdEBOR66qpONDx2sCDug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ca:04:e8:28:74:dd:d0:eb:68:7e:3e:59:0c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748 Validity Not Before: Feb 9 18:01:28 2026 GMT Not After : Feb 10 18:01:28 2026 GMT Subject: CN=2052d9d55f8cdd540ea29d9edc28fbbd1b51bd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:1f:55:f1:5a:05:fa:e4:76:b0:e5:26:fd: 60:ef:13:58:6d:3a:d7:48:ff:f9:4a:82:07:5e:07: ef:fb:05:d3:c6:2c:46:79:b7:69:bd:61:7e:f0:73: f5:a3:72:48:9e:94:0b:d8:2a:34:7b:34:29:dd:ff: f2:29:7a:8e:ff:a9:c6:cb:e1:65:50:a7:29:46:2e: 4a:2e:7e:c2:47:40:26:09:f7:b5:7e:0a:c6:69:21: f9:15:95:45:2d:be:00:2b:a9:b2:36:a6:d0:c7:a7: 81:34:8e:2a:b1:db:4a:5a:c7:0b:85:ee:b1:85:ed: 88:de:5b:03:04:38:c2:cb:f7:12:33:f8:e0:de:59: c6:48:21:1c:33:15:78:0c:de:6b:a2:24:c3:51:08: dd:3b:45:5b:11:c0:18:bd:4a:ef:a9:09:41:e2:4c: 8a:c7:71:c8:00:88:8e:d2:d4:87:4d:2e:e7:56:e8: db:13:01:ef:75:04:fe:61:f0:1d:7f:21:ae:ae:23: e6:fb:c7:db:07:f9:07:22:80:36:34:c2:ac:4a:ae: a1:94:92:6d:f8:57:25:59:03:42:fa:2a:ec:32:35: 55:0d:34:ad:64:22:ef:cb:0c:af:a6:6b:8f:6d:c7: 7f:d5:55:80:54:94:19:6c:15:74:ca:21:d2:73:a3: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:52:D9:D5:5F:8C:DD:54:0E:A2:9D:9E:DC:28:FB:BD:1B:51:BD:63 X509v3 Authority Key Identifier: keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6d:9a:1e:12:79:65:35:2d:60:6f:bf:08:f3:1c:68:63:4c: 3c:45:d7:cd:ef:a4:62:fc:4f:4d:0b:96:24:b3:6e:71:51:90: 3d:9c:d1:d7:5b:70:83:9c:97:d5:f2:b1:d1:ee:fb:77:7b:8a: a3:db:dc:9b:75:76:66:02:d2:92:2f:94:ef:e1:ee:a8:31:3f: c6:94:5b:49:82:f8:94:1d:54:64:88:27:0c:72:05:ca:e5:88: 2a:59:99:48:a5:d6:33:df:6c:93:41:a8:5e:d3:04:20:37:eb: b8:47:47:63:ce:77:03:27:a3:91:e5:ab:4a:ae:a4:bc:ae:f4: 09:96:ad:b7:0d:b2:ed:b7:7b:38:d7:ae:4f:03:24:f1:52:82: 48:6d:60:eb:96:04:db:aa:2a:44:9d:60:c3:bd:d1:5c:e3:b8: dc:a9:a5:b0:f8:16:c5:26:cc:2d:87:f5:91:4f:bb:91:44:8d: ef:19:79:a1:19:30:0e:9f:44:02:b5:5e:cf:11:7b:40:7b:ca: b4:e6:58:bf:fe:6e:77:2e:3e:54:c2:6d:04:b8:02:2f:ae:5a: 17:49:3a:05:c3:8d:5d:e2:99:84:37:fe:46:29:1e:45:d2:de: 14:6a:79:33:77:02:75:ac:10:91:5c:d0:84:1d:4b:30:9e:1c: 76:a1:cb:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMoE6Ch03dDraH4+WQyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NzdiMTlkNDg0N2ZjM2Y0OTVhZjkzNmM1YjFhMTkyOGM5 MTI3NDgwHhcNMjYwMjA5MTgwMTI4WhcNMjYwMjEwMTgwMTI4WjAzMTEwLwYDVQQD EygyMDUyZDlkNTVmOGNkZDU0MGVhMjlkOWVkYzI4ZmJiZDFiNTFiZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5wfVfFaBfrkdrDlJv1g7xNYbTrX SP/5SoIHXgfv+wXTxixGebdpvWF+8HP1o3JInpQL2Co0ezQp3f/yKXqO/6nGy+Fl UKcpRi5KLn7CR0AmCfe1fgrGaSH5FZVFLb4AK6myNqbQx6eBNI4qsdtKWscLhe6x he2I3lsDBDjCy/cSM/jg3lnGSCEcMxV4DN5roiTDUQjdO0VbEcAYvUrvqQlB4kyK x3HIAIiO0tSHTS7nVujbEwHvdQT+YfAdfyGuriPm+8fbB/kHIoA2NMKsSq6hlJJt +FclWQNC+irsMjVVDTStZCLvywyvpmuPbcd/1VWAVJQZbBV0yiHSc6OaJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBS2dVfjN1UDqKdntwo+70bUb1jMB8GA1UdIwQY MBaAFBh3sZ1IR/w/SVr5NsWxoZKMkSdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jMTIyYTctNTcxMi00YmJkLWI2Mzgt YWM5YTkzMTcxYWE1LzEvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jMTIyYTctNTcxMi00YmJkLWI2MzgtYWM5YTkzMTcxYWE1 LzEvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW2aHhJ5 ZTUtYG+/CPMcaGNMPEXXze+kYvxPTQuWJLNucVGQPZzR11twg5yX1fKx0e77d3uK o9vcm3V2ZgLSki+U7+HuqDE/xpRbSYL4lB1UZIgnDHIFyuWIKlmZSKXWM99sk0Go XtMEIDfruEdHY853AyejkeWrSq6kvK70CZattw2y7bd7ONeuTwMk8VKCSG1g65YE 26oqRJ1gw73RXOO43KmlsPgWxSbMLYf1kU+7kUSN7xl5oRkwDp9EArVezxF7QHvK tOZYv/5udy4+VMJtBLgCL65aF0k6BcONXeKZhDf+RikeRdLeFGp5M3cCdawQkVzQ hB1LMJ4cdqHLFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:41 2026 by rpki-client