This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json) Hash identifier: MWyJYnxgsZuV7Oej9NJOa0IKVB60j/GIDdFwEDtiUfw= Subject key identifier: DD:FE:C5:2C:4D:13:D4:89:6A:9E:88:D4:F0:B2:EE:E7:FA:BA:85:E0 Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Certificate serial: 019C41A26065B3BAD04D84C0DFA21968CB18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft Manifest number: 1038 Signing time: Mon 09 Feb 2026 09:01:26 +0000 Manifest this update: Mon 09 Feb 2026 09:01:26 +0000 Manifest next update: Tue 10 Feb 2026 09:01:26 +0000 Files and hashes: 1: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: 7kHEsHkuegbSbr36n33rFsnF43myF+K6GMECKfUQOS0=) 2: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (hash: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:60:65:b3:ba:d0:4d:84:c0:df:a2:19:68:cb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Validity Not Before: Feb 9 09:01:26 2026 GMT Not After : Feb 10 09:01:26 2026 GMT Subject: CN=ddfec52c4d13d4896a9e88d4f0b2eee7faba85e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:ad:24:59:61:7a:65:c7:4b:75:64:7c:5a: 47:00:3d:cf:dc:5f:86:07:4f:55:f9:6c:1d:68:c6: 67:67:51:4c:f8:d0:75:fc:93:b5:e0:1a:44:ad:90: 60:80:53:2b:ad:a7:a2:0d:c6:6e:17:1b:ab:ee:59: 25:59:5f:24:6b:63:bb:0f:60:5a:bd:ff:13:fc:75: e0:6d:b6:28:d9:f1:10:88:2c:b1:1b:fb:1a:8c:6a: 91:16:c9:42:04:7f:85:5c:b4:18:48:80:d0:63:88: ad:5c:17:d7:62:2f:8c:0a:19:6f:c3:be:b0:73:00: c1:5b:47:17:12:70:94:50:2a:ec:01:49:0c:9b:94: c8:5b:de:ac:53:c1:73:94:15:4f:df:0f:df:f1:35: 08:81:68:72:d8:5f:9d:3c:cc:31:10:1e:60:9c:a6: 9b:6d:1a:78:c6:ce:6c:f2:3a:fc:68:a3:dd:39:d5: 8b:80:eb:e6:d4:b8:6a:fb:5e:bb:58:13:1d:d9:3b: 94:33:ca:ed:0a:a6:1f:13:eb:78:06:4f:e2:b5:30: 2d:a4:66:fb:ac:80:17:09:fb:b1:ce:3c:9d:15:6a: 33:e7:c2:be:73:b7:93:4c:29:bf:6c:2b:69:40:bd: d6:a9:40:13:3d:27:6d:12:50:ae:7b:d8:30:15:03: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FE:C5:2C:4D:13:D4:89:6A:9E:88:D4:F0:B2:EE:E7:FA:BA:85:E0 X509v3 Authority Key Identifier: keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ca:b8:43:4d:01:0d:c1:2e:5a:fb:9d:55:0b:4e:36:34:f3: 71:b7:2b:2d:5a:fe:a2:b8:81:ef:44:b8:cd:50:62:6e:da:6f: c5:a4:11:01:22:02:9b:93:28:58:4c:b1:37:bd:6b:74:11:e9: a5:5b:56:b0:49:79:c1:1b:16:9d:d1:cb:12:46:21:aa:42:f7: 5e:4f:9d:06:ae:75:26:ad:f7:a4:4d:6d:c2:38:bd:ec:3b:31: 26:e4:87:13:38:a1:0f:68:00:f2:c3:54:0a:f8:35:3e:66:29: bd:86:46:de:44:35:7c:22:0f:63:05:05:fc:5a:aa:33:3f:da: dc:38:54:66:31:c1:97:e7:a8:c2:e1:04:1f:56:d0:69:87:8b: 67:ff:6c:d7:dd:0a:4c:37:79:e9:68:7d:90:81:b5:dd:64:e5: 16:fa:43:b0:3c:6d:d3:ff:70:5c:29:04:b2:1e:f6:cb:2b:ce: 39:0e:4d:f8:79:90:40:c5:dd:90:41:7f:a9:a5:b3:9c:3d:56: f3:f3:4f:1f:fa:b5:88:b7:d1:a3:49:e3:78:a2:b3:2c:cb:61: 04:2b:55:9c:2f:f6:13:06:50:4f:0e:d0:1b:b1:36:a7:9a:c2: 1e:fd:0d:f7:fc:0d:21:3e:53:3d:0d:34:13:02:68:e5:72:e3: 66:7a:4c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomBls7rQTYTA36IZaMsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj MDg2OTIwHhcNMjYwMjA5MDkwMTI2WhcNMjYwMjEwMDkwMTI2WjAzMTEwLwYDVQQD EyhkZGZlYzUyYzRkMTNkNDg5NmE5ZTg4ZDRmMGIyZWVlN2ZhYmE4NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK6tJFlhemXHS3VkfFpHAD3P3F+G B09V+WwdaMZnZ1FM+NB1/JO14BpErZBggFMrraeiDcZuFxur7lklWV8ka2O7D2Ba vf8T/HXgbbYo2fEQiCyxG/sajGqRFslCBH+FXLQYSIDQY4itXBfXYi+MChlvw76w cwDBW0cXEnCUUCrsAUkMm5TIW96sU8FzlBVP3w/f8TUIgWhy2F+dPMwxEB5gnKab bRp4xs5s8jr8aKPdOdWLgOvm1Lhq+167WBMd2TuUM8rtCqYfE+t4Bk/itTAtpGb7 rIAXCfuxzjydFWoz58K+c7eTTCm/bCtpQL3WqUATPSdtElCue9gwFQMNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3+xSxNE9SJap6I1PCy7uf6uoXgMB8GA1UdIwQY MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcq4Q00B DcEuWvudVQtONjTzcbcrLVr+oriB70S4zVBibtpvxaQRASICm5MoWEyxN71rdBHp pVtWsEl5wRsWndHLEkYhqkL3Xk+dBq51Jq33pE1twji97DsxJuSHEzihD2gA8sNU Cvg1PmYpvYZG3kQ1fCIPYwUF/FqqMz/a3DhUZjHBl+eowuEEH1bQaYeLZ/9s190K TDd56Wh9kIG13WTlFvpDsDxt0/9wXCkEsh72yyvOOQ5N+HmQQMXdkEF/qaWznD1W 8/NPH/q1iLfRo0njeKKzLMthBCtVnC/2EwZQTw7QG7E2p5rCHv0N9/wNIT5TPQ00 EwJo5XLjZnpMjg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:49 2026 by rpki-client