This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json) Hash identifier: P067JdJD2MYTjMUu1AnyyEmuX37BseDoqWUK5D5scWg= Subject key identifier: ED:25:F6:B5:DD:5B:BD:05:56:E0:7B:16:3C:7B:3A:78:0C:61:7E:4A Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019C446BDB9CA9F68A8D5343D3BB2287F343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft Manifest number: 08EF Signing time: Mon 09 Feb 2026 22:00:45 +0000 Manifest this update: Mon 09 Feb 2026 22:00:45 +0000 Manifest next update: Tue 10 Feb 2026 22:00:45 +0000 Files and hashes: 1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: 9hxOvVjCUCR783EgTjnIJ2OTXSgY6bdKRaWVC4LsVmM=) 2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:db:9c:a9:f6:8a:8d:53:43:d3:bb:22:87:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Feb 9 22:00:45 2026 GMT Not After : Feb 10 22:00:45 2026 GMT Subject: CN=ed25f6b5dd5bbd0556e07b163c7b3a780c617e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:67:c3:ed:e6:29:a1:e0:82:2e:5a:93:65: 3a:ba:47:49:f3:bb:06:09:1e:b2:af:c8:33:25:86: 25:dc:00:f6:9d:40:5b:8e:5f:ba:e8:de:6e:3a:b7: 6d:b0:f5:73:f9:b2:44:68:c5:e9:ac:c0:fc:9e:7b: ba:3a:57:d4:9a:a7:0a:c3:8d:0d:f9:f7:c4:a7:ec: ff:f7:3c:34:e6:43:07:d9:92:df:a3:55:dc:5e:75: 90:b9:d1:de:aa:44:78:e6:a9:eb:bf:0d:e6:05:7f: ae:29:ad:9f:8c:95:44:9b:ab:8e:b7:e5:db:81:55: e2:e4:7e:cc:e2:3b:3e:71:cb:2f:ef:a0:47:1f:fc: cb:74:6a:75:49:9c:bc:97:96:bb:3a:ef:85:52:c4: 9d:19:2b:74:0a:2f:ec:7e:85:71:de:63:b7:b1:a0: 6d:fe:5f:20:62:d4:b5:51:5e:61:25:f1:16:de:9c: 40:66:be:22:48:62:ac:2e:f9:2f:4a:7c:83:fe:df: e0:6f:bb:3e:2d:06:02:52:83:d6:2f:4f:b6:5e:5f: 6a:18:d0:68:5e:5b:a9:0b:d4:a8:68:01:3a:b7:a9: 0d:64:a7:dd:c7:1a:c6:2d:6e:9f:97:96:62:6a:67: 92:57:09:34:98:13:ad:b9:2a:cc:55:d7:69:69:a1: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:25:F6:B5:DD:5B:BD:05:56:E0:7B:16:3C:7B:3A:78:0C:61:7E:4A X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e7:0f:3d:08:20:f4:90:5a:1c:60:6d:7f:f9:c3:64:17:a8: eb:7e:77:d6:57:e0:04:1e:cc:25:3a:8f:65:58:74:48:5f:f3: ae:6c:f5:48:37:88:8e:84:0a:3e:37:c5:4c:ed:37:da:98:36: 70:57:93:fd:87:8e:81:0a:b6:db:7e:f9:7e:bc:2c:c3:30:19: 72:53:ea:65:81:b7:a5:35:5a:16:ae:ff:95:6e:49:fc:96:8b: f5:d1:83:ed:95:28:16:0c:c7:cb:09:0c:d6:2d:94:3c:e0:cc: b7:e9:05:3a:d1:cd:ea:24:cd:24:60:c8:6a:da:ca:75:f3:db: 66:57:fa:aa:68:c6:20:6c:c3:78:07:6b:0b:c2:da:29:b5:9a: 9e:9c:7c:5d:74:6c:6f:ee:0d:93:c1:df:5a:6e:54:d8:46:3c: 62:57:a8:e9:fc:82:a2:d3:82:05:3f:ec:b6:b6:ea:86:3e:ae: f9:0b:c7:55:54:06:f8:9a:bd:b2:f4:00:3a:8d:89:ad:e6:31: 0a:b9:af:fe:66:9b:ba:85:39:ff:45:09:f1:31:e5:f9:a1:93: 8c:73:b7:64:c9:a7:dd:1c:71:16:c0:d1:aa:8d:2f:67:71:d8: 50:fb:0e:c8:f3:f2:37:81:c9:9d:31:16:4e:76:1c:1c:e9:43: 57:26:7b:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa9ucqfaKjVND07sih/NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjYwMjA5MjIwMDQ1WhcNMjYwMjEwMjIwMDQ1WjAzMTEwLwYDVQQD EyhlZDI1ZjZiNWRkNWJiZDA1NTZlMDdiMTYzYzdiM2E3ODBjNjE3ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ahnw+3mKaHggi5ak2U6ukdJ87sG CR6yr8gzJYYl3AD2nUBbjl+66N5uOrdtsPVz+bJEaMXprMD8nnu6OlfUmqcKw40N +ffEp+z/9zw05kMH2ZLfo1XcXnWQudHeqkR45qnrvw3mBX+uKa2fjJVEm6uOt+Xb gVXi5H7M4js+ccsv76BHH/zLdGp1SZy8l5a7Ou+FUsSdGSt0Ci/sfoVx3mO3saBt /l8gYtS1UV5hJfEW3pxAZr4iSGKsLvkvSnyD/t/gb7s+LQYCUoPWL0+2Xl9qGNBo XlupC9SoaAE6t6kNZKfdxxrGLW6fl5ZiameSVwk0mBOtuSrMVddpaaH3CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0l9rXdW70FVuB7Fjx7OngMYX5KMB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAecPPQgg 9JBaHGBtf/nDZBeo63531lfgBB7MJTqPZVh0SF/zrmz1SDeIjoQKPjfFTO032pg2 cFeT/YeOgQq22375frwswzAZclPqZYG3pTVaFq7/lW5J/JaL9dGD7ZUoFgzHywkM 1i2UPODMt+kFOtHN6iTNJGDIatrKdfPbZlf6qmjGIGzDeAdrC8LaKbWanpx8XXRs b+4Nk8HfWm5U2EY8Yleo6fyCotOCBT/strbqhj6u+QvHVVQG+Jq9svQAOo2JreYx Crmv/mabuoU5/0UJ8THl+aGTjHO3ZMmn3RxxFsDRqo0vZ3HYUPsOyPPyN4HJnTEW TnYcHOlDVyZ7WQ== -----END CERTIFICATE-----Generated at Tue Feb 10 05:50:44 2026 by rpki-client