This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json) Hash identifier: OtS8abE06clKdtXDWIU5XruAh4jFdHLZL8BBJAGDVbE= Subject key identifier: E9:F9:F2:DE:A8:2C:52:F1:37:63:6B:4E:5E:66:54:FE:8E:33:6E:DB Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99 Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499 Certificate serial: 019C420F24E18165F9E695083A8C133DBFBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft Manifest number: 0DAC Signing time: Mon 09 Feb 2026 11:00:14 +0000 Manifest this update: Mon 09 Feb 2026 11:00:14 +0000 Manifest next update: Tue 10 Feb 2026 11:00:14 +0000 Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: glaOVwuAPdHpu7jPv4Jggabkbo0WsagXhD5yZ207oZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:24:e1:81:65:f9:e6:95:08:3a:8c:13:3d:bf:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499 Validity Not Before: Feb 9 11:00:14 2026 GMT Not After : Feb 10 11:00:14 2026 GMT Subject: CN=e9f9f2dea82c52f137636b4e5e6654fe8e336edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:fe:63:f7:1c:8b:74:64:60:74:c3:76:9a: 92:3b:90:3d:69:b4:b7:d3:ce:23:b1:09:55:0b:ba: b0:b8:61:f5:10:54:80:27:51:22:59:45:f6:ed:fb: 2e:4f:e0:6d:b2:83:06:96:e4:fe:db:6a:6a:6f:b0: 6c:01:a6:26:57:24:da:03:88:f8:64:e7:09:c6:26: 18:54:cf:48:f7:1e:0a:0b:48:ca:c6:34:0f:b3:01: 76:6e:4a:be:62:83:0a:29:a4:7f:25:5a:55:9a:88: f8:d0:94:73:48:ab:1d:6b:18:3e:bf:b3:23:90:c3: e6:95:fd:60:f5:ab:cf:ef:a6:44:17:0e:9f:c3:9f: 36:4b:b4:86:a2:ea:80:45:40:2d:1c:35:21:94:59: 5d:27:f6:72:82:58:4a:20:05:ee:49:19:dc:f7:2c: 71:3e:b5:08:58:24:f9:76:ef:79:b6:89:b4:39:f8: 62:21:fe:07:8c:80:a2:a3:9d:9c:1c:51:29:9c:46: 88:ae:5b:2f:ca:fc:82:5b:52:13:62:13:c2:90:26: de:80:82:29:67:7e:c5:a5:0f:e8:2f:37:15:30:ed: 52:bd:f4:88:af:ca:81:40:6a:6d:1f:f6:e2:8c:1c: b5:60:87:d6:eb:0a:b1:82:a5:51:c1:fe:e3:19:ff: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:F2:DE:A8:2C:52:F1:37:63:6B:4E:5E:66:54:FE:8E:33:6E:DB X509v3 Authority Key Identifier: keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4b:26:b5:3b:2b:81:5a:13:9a:53:62:1d:bb:79:42:3d:06: 52:62:ae:20:8e:f0:a9:1e:50:52:99:10:af:5e:60:9a:1b:5f: ce:ed:1b:b1:a8:ef:43:00:40:78:e4:55:48:d6:ea:d3:9c:3e: 7c:2d:df:c6:fe:eb:44:0d:2e:4a:35:e2:2e:c6:66:c8:6b:32: 40:d1:4b:8a:b4:40:0b:6a:5f:ac:89:a7:51:2f:bb:50:f9:44: bc:4a:4b:70:0c:ce:9c:9b:ec:8f:d3:ef:c7:65:b1:49:99:ac: e0:bb:cd:f3:a5:b5:ff:dc:b0:51:8e:7a:04:38:de:17:6b:d5: 83:32:2f:e8:e0:c5:92:9e:3e:fd:90:1f:b4:fc:8d:37:01:46: bb:03:22:8f:85:bc:2a:63:6a:0d:d3:d8:e2:6f:08:4f:c6:81: dc:ef:73:a1:99:77:ca:46:3d:9c:4a:e3:2a:7a:70:4a:85:45: 83:46:ac:ba:b4:24:d3:05:39:bb:4c:df:80:2f:15:7f:09:6c: 5a:39:a5:00:59:f9:9a:0a:71:8f:db:16:a6:55:14:ba:5c:52: 32:be:3e:0c:75:60:cc:66:90:26:14:82:38:ee:e8:99:02:48: 89:37:e9:00:23:00:b5:b0:ca:31:21:5d:7c:98:23:df:5b:59: b7:c8:d0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyThgWX55pUIOowTPb+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjMzNmEzYjg2YmY3M2EyN2RkZDkwNjY2N2VhZGE3NWI0 N2M0OTkwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD EyhlOWY5ZjJkZWE4MmM1MmYxMzc2MzZiNGU1ZTY2NTRmZThlMzM2ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua7+Y/cci3RkYHTDdpqSO5A9abS3 084jsQlVC7qwuGH1EFSAJ1EiWUX27fsuT+BtsoMGluT+22pqb7BsAaYmVyTaA4j4 ZOcJxiYYVM9I9x4KC0jKxjQPswF2bkq+YoMKKaR/JVpVmoj40JRzSKsdaxg+v7Mj kMPmlf1g9avP76ZEFw6fw582S7SGouqARUAtHDUhlFldJ/ZyglhKIAXuSRnc9yxx PrUIWCT5du95tom0OfhiIf4HjICio52cHFEpnEaIrlsvyvyCW1ITYhPCkCbegIIp Z37FpQ/oLzcVMO1SvfSIr8qBQGptH/bijBy1YIfW6wqxgqVRwf7jGf9VzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn58t6oLFLxN2NrTl5mVP6OM27bMB8GA1UdIwQY MBaAFIBjNqO4a/c6J93ZBmZ+radbR8SZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEt MDliYjU5NmU4NDU0LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEtMDliYjU5NmU4NDU0 LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUsmtTsr gVoTmlNiHbt5Qj0GUmKuII7wqR5QUpkQr15gmhtfzu0bsajvQwBAeORVSNbq05w+ fC3fxv7rRA0uSjXiLsZmyGsyQNFLirRAC2pfrImnUS+7UPlEvEpLcAzOnJvsj9Pv x2WxSZms4LvN86W1/9ywUY56BDjeF2vVgzIv6ODFkp4+/ZAftPyNNwFGuwMij4W8 KmNqDdPY4m8IT8aB3O9zoZl3ykY9nErjKnpwSoVFg0asurQk0wU5u0zfgC8Vfwls WjmlAFn5mgpxj9sWplUUulxSMr4+DHVgzGaQJhSCOO7omQJIiTfpACMAtbDKMSFd fJgj31tZt8jQ7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:59 2026 by rpki-client