This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json) Hash identifier: AECU047pKsPE4bQpiHH1GxuPS0nxjry0Mj52JPjMUqs= Subject key identifier: 0A:BD:DB:D2:41:C8:AB:CE:32:C9:AE:DB:37:AA:84:2B:68:3A:C9:C0 Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74 Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474 Certificate serial: 019C446B94D17D2EC72B8F9C45325C7DF96D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft Manifest number: 0CBC Signing time: Mon 09 Feb 2026 22:00:26 +0000 Manifest this update: Mon 09 Feb 2026 22:00:26 +0000 Manifest next update: Tue 10 Feb 2026 22:00:26 +0000 Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: pmxeoODpKKTud1CkuxLl52YCck+D47BHmXfruPuNQVA=) 2: bsIvknt5fmmAnWdhXsBu-Ue2-v0.roa (hash: n3XIzhJt5VMAiTGqI1g3v5Vdsn00DFS2DY6O4jjQGxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:94:d1:7d:2e:c7:2b:8f:9c:45:32:5c:7d:f9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474 Validity Not Before: Feb 9 22:00:26 2026 GMT Not After : Feb 10 22:00:26 2026 GMT Subject: CN=0abddbd241c8abce32c9aedb37aa842b683ac9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:7c:8b:53:2c:07:7a:0d:be:62:05:a9:48: 8f:d6:9f:d1:6f:d5:a7:0b:03:2e:00:e5:a1:c8:4a: 3d:b2:4f:e0:0c:b7:34:b8:58:45:94:5f:b2:3c:00: 9c:d0:b8:d1:11:94:bb:83:b4:38:56:c0:ef:14:17: 92:34:4a:cb:0c:6f:74:95:b4:88:e7:93:72:cc:71: b8:25:1a:41:30:73:a5:df:39:e5:03:6b:9a:78:23: 8c:ed:e3:88:98:3d:d8:d3:a1:3f:d6:f0:e9:95:90: 5a:2a:a4:d9:21:6c:e7:b5:ef:1f:4c:96:40:b6:82: 9d:c1:6f:3f:7f:ea:de:f7:00:1c:77:c7:5f:aa:4d: a3:e1:c3:4f:af:95:f9:b0:28:d4:61:cf:cf:7c:7b: d0:f2:3b:7b:f7:a4:bc:26:13:a5:b9:1e:60:61:a4: e2:52:6c:e4:c0:46:03:e7:3e:45:3d:0d:7c:6f:23: b4:2b:0f:26:84:bc:f4:a6:d0:f6:cd:9b:b5:12:f2: 2c:3e:d8:89:e2:77:84:8e:4c:9a:39:c6:41:4e:44: b9:87:82:15:b3:01:44:17:71:ba:64:c2:5a:c7:54: 3f:89:a2:74:69:57:8f:e0:0f:88:6f:3f:71:33:22: ff:76:73:cc:84:b1:e3:77:22:fe:47:26:6e:27:1d: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:DB:D2:41:C8:AB:CE:32:C9:AE:DB:37:AA:84:2B:68:3A:C9:C0 X509v3 Authority Key Identifier: keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ef:9a:a1:b5:67:11:cc:55:28:29:75:26:d5:19:2c:55:f9: 1e:2c:11:2e:43:eb:9f:53:f2:e0:12:7c:36:fc:a3:27:05:44: dc:b6:e5:60:d1:a5:05:43:94:d4:33:d7:0f:f1:eb:92:6e:27: 79:5c:d1:f9:b6:88:e4:2d:65:93:bc:7c:9d:72:4b:f6:09:1e: 35:7a:d0:07:6b:6d:8b:f4:28:39:53:49:c2:72:fe:4d:f3:be: 10:55:cb:f6:76:ac:42:39:0a:44:0d:0f:46:b4:6e:2e:55:b7: 7a:d3:99:57:b2:b3:08:a8:ee:f1:0d:dc:23:d8:6e:57:e4:aa: 3b:9d:39:4f:5c:77:0c:e3:a3:67:23:2c:9e:e4:62:66:9f:8c: 22:91:fc:1d:e9:c5:ef:a1:5a:64:0f:15:f9:8c:3a:7a:0c:61: 59:a2:d4:19:16:2a:fe:57:2a:cc:33:e2:80:7d:a5:2e:a9:21: 47:0e:a5:55:6a:07:55:4b:74:32:5b:92:95:31:50:73:52:64: e4:71:3a:77:54:00:e6:70:7f:b7:a6:4b:c6:a5:cb:8d:44:d2: 48:97:0d:a2:87:20:b9:af:ce:da:9a:2e:e2:14:dd:97:28:1f: c6:97:c1:97:e8:45:fd:75:0a:e5:12:2f:c0:08:2c:e1:21:22: 39:da:14:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5TRfS7HK4+cRTJcffltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm ZGY0NzQwHhcNMjYwMjA5MjIwMDI2WhcNMjYwMjEwMjIwMDI2WjAzMTEwLwYDVQQD EygwYWJkZGJkMjQxYzhhYmNlMzJjOWFlZGIzN2FhODQyYjY4M2FjOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWt8i1MsB3oNvmIFqUiP1p/Rb9Wn CwMuAOWhyEo9sk/gDLc0uFhFlF+yPACc0LjREZS7g7Q4VsDvFBeSNErLDG90lbSI 55NyzHG4JRpBMHOl3znlA2uaeCOM7eOImD3Y06E/1vDplZBaKqTZIWznte8fTJZA toKdwW8/f+re9wAcd8dfqk2j4cNPr5X5sCjUYc/PfHvQ8jt796S8JhOluR5gYaTi UmzkwEYD5z5FPQ18byO0Kw8mhLz0ptD2zZu1EvIsPtiJ4neEjkyaOcZBTkS5h4IV swFEF3G6ZMJax1Q/iaJ0aVeP4A+Ibz9xMyL/dnPMhLHjdyL+RyZuJx1O2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq929JByKvOMsmu2zeqhCtoOsnAMB8GA1UdIwQY MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe++aobVn EcxVKCl1JtUZLFX5HiwRLkPrn1Py4BJ8NvyjJwVE3LblYNGlBUOU1DPXD/Hrkm4n eVzR+baI5C1lk7x8nXJL9gkeNXrQB2tti/QoOVNJwnL+TfO+EFXL9nasQjkKRA0P RrRuLlW3etOZV7KzCKju8Q3cI9huV+SqO505T1x3DOOjZyMsnuRiZp+MIpH8HenF 76FaZA8V+Yw6egxhWaLUGRYq/lcqzDPigH2lLqkhRw6lVWoHVUt0MluSlTFQc1Jk 5HE6d1QA5nB/t6ZLxqXLjUTSSJcNoocgua/O2pou4hTdlygfxpfBl+hF/XUK5RIv wAgs4SEiOdoU4Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:31:24 2026 by rpki-client