This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft File: GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft (raw, json) Hash identifier: f2Ad82KzxCsQ+zqcGZMuj7kCp07h13L7QMjsfn37X3I= Subject key identifier: CF:71:C6:3A:08:E9:A8:5B:B0:20:0C:83:B8:C1:D1:D5:D5:8C:C1:2C Authority key identifier: 18:19:C4:F0:30:C7:69:DE:20:BD:1B:C9:FD:58:C7:F9:8C:FD:25:33 Certificate issuer: /CN=1819c4f030c769de20bd1bc9fd58c7f98cfd2533 Certificate serial: 019C40FCDF154B35EC33644B9890ED91B019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft Manifest number: 12 Signing time: Mon 09 Feb 2026 06:00:39 +0000 Manifest this update: Mon 09 Feb 2026 06:00:39 +0000 Manifest next update: Tue 10 Feb 2026 06:00:39 +0000 Files and hashes: 1: GBnE8DDHad4gvRvJ_VjH-Yz9JTM.crl (hash: RoA1R0M9JXoiIO9DgO5p0FlwA2Yz2LwGqzrR55CpHyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:df:15:4b:35:ec:33:64:4b:98:90:ed:91:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1819c4f030c769de20bd1bc9fd58c7f98cfd2533 Validity Not Before: Feb 9 06:00:39 2026 GMT Not After : Feb 10 06:00:39 2026 GMT Subject: CN=cf71c63a08e9a85bb0200c83b8c1d1d5d58cc12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:ce:5e:71:d7:31:0c:bc:13:56:a3:b8:71: 60:f9:3b:4f:7b:d6:ea:a8:4e:51:92:ee:60:38:c1: 33:63:bf:2e:f7:85:27:3e:ae:9e:80:c8:2b:a4:0c: d6:36:8d:bb:2b:3a:3a:0c:ea:b0:86:43:46:77:69: f5:3e:ba:11:40:63:10:2d:cc:0e:f2:bf:1b:61:4f: 27:9b:b0:cb:2e:20:1c:69:ca:85:35:63:58:14:01: de:9f:18:3e:2b:9f:8a:ac:00:6e:85:e7:19:be:1d: 36:0d:93:5f:25:58:b6:de:9d:d8:bc:1a:14:26:4a: 07:21:f7:cb:f2:16:cb:a9:f8:61:09:cc:96:e4:17: 53:27:1b:f9:12:d5:cc:77:d2:5c:43:c5:9f:4b:ca: ac:df:af:16:21:d2:73:71:fa:5e:04:df:c2:a2:e6: 3a:fd:eb:f8:c4:42:50:1d:6f:b0:0b:db:09:d9:d1: 41:fe:72:61:0f:d4:f2:f8:69:f3:ea:bc:5f:03:47: 4e:08:9a:77:bc:76:06:83:fd:11:3f:19:d9:5a:93: 05:94:58:9b:8a:27:c0:b7:c5:ac:13:51:54:3c:75: 91:00:84:e4:61:c1:8f:e6:56:a4:c2:8d:ea:79:dc: b4:9b:d2:e9:36:3d:02:91:f4:3a:53:e3:bf:9b:25: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:C6:3A:08:E9:A8:5B:B0:20:0C:83:B8:C1:D1:D5:D5:8C:C1:2C X509v3 Authority Key Identifier: keyid:18:19:C4:F0:30:C7:69:DE:20:BD:1B:C9:FD:58:C7:F9:8C:FD:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:59:08:2a:c2:bc:02:f1:f5:f0:15:ef:45:ff:23:ff:3d:6a: 0d:54:d8:5f:67:88:6f:bc:21:d2:27:51:5e:43:d0:ca:21:8c: 77:78:e7:49:21:4f:26:91:ad:2a:a4:97:46:13:56:34:92:0b: 8b:47:a6:ca:e1:d3:17:dc:9e:ff:e4:fc:86:33:2a:18:55:3e: 4a:d5:e9:10:d6:6e:0d:54:95:50:9c:4f:5d:b4:0f:b2:c0:d6: cc:4e:c5:64:1a:7d:8b:f0:fa:ec:08:cb:da:63:bf:cd:b6:f7: ca:09:2d:1a:ec:ca:43:5f:f4:4a:87:0d:fe:b3:7f:d5:a2:f5: 72:92:e4:49:e5:45:3b:85:99:df:2f:0c:68:fe:b2:fe:4f:d3: e8:ff:19:1a:ca:a3:5a:5b:7d:44:98:83:f6:c2:57:40:c6:ce: 25:31:90:dc:bf:4b:89:f9:a2:05:bf:2b:7d:70:64:86:09:bb: c0:b6:8e:d2:9e:63:65:b8:69:54:a9:c0:cb:51:24:b2:d2:a2: 43:3d:bb:01:84:90:ef:e9:57:b9:40:7d:2c:77:17:c6:dc:60: 13:a0:09:0c:bb:c0:c6:73:c2:e9:18:dd:93:cd:f6:df:3c:a4: 19:15:73:4b:2b:9e:c0:6e:95:08:dc:55:22:71:99:26:9a:cb: 73:f4:47:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/N8VSzXsM2RLmJDtkbAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTljNGYwMzBjNzY5ZGUyMGJkMWJjOWZkNThjN2Y5OGNm ZDI1MzMwHhcNMjYwMjA5MDYwMDM5WhcNMjYwMjEwMDYwMDM5WjAzMTEwLwYDVQQD EyhjZjcxYzYzYTA4ZTlhODViYjAyMDBjODNiOGMxZDFkNWQ1OGNjMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPPOXnHXMQy8E1ajuHFg+TtPe9bq qE5Rku5gOMEzY78u94UnPq6egMgrpAzWNo27Kzo6DOqwhkNGd2n1ProRQGMQLcwO 8r8bYU8nm7DLLiAcacqFNWNYFAHenxg+K5+KrABuhecZvh02DZNfJVi23p3YvBoU JkoHIffL8hbLqfhhCcyW5BdTJxv5EtXMd9JcQ8WfS8qs368WIdJzcfpeBN/CouY6 /ev4xEJQHW+wC9sJ2dFB/nJhD9Ty+Gnz6rxfA0dOCJp3vHYGg/0RPxnZWpMFlFib iifAt8WsE1FUPHWRAITkYcGP5lakwo3qedy0m9LpNj0CkfQ6U+O/myWyrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9xxjoI6ahbsCAMg7jB0dXVjMEsMB8GA1UdIwQY MBaAFBgZxPAwx2neIL0byf1Yx/mM/SUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JuRThEREhhZDRndlJ2Sl9WakgtWXo5SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kOTdiYjctOTIwOC00ZTdiLTgwODct NGE1NjIzZmU0MTFlLzEvR0JuRThEREhhZDRndlJ2Sl9WakgtWXo5SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kOTdiYjctOTIwOC00ZTdiLTgwODctNGE1NjIzZmU0MTFl LzEvR0JuRThEREhhZDRndlJ2Sl9WakgtWXo5SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFkIKsK8 AvH18BXvRf8j/z1qDVTYX2eIb7wh0idRXkPQyiGMd3jnSSFPJpGtKqSXRhNWNJIL i0emyuHTF9ye/+T8hjMqGFU+StXpENZuDVSVUJxPXbQPssDWzE7FZBp9i/D67AjL 2mO/zbb3ygktGuzKQ1/0SocN/rN/1aL1cpLkSeVFO4WZ3y8MaP6y/k/T6P8ZGsqj Wlt9RJiD9sJXQMbOJTGQ3L9LifmiBb8rfXBkhgm7wLaO0p5jZbhpVKnAy1EkstKi Qz27AYSQ7+lXuUB9LHcXxtxgE6AJDLvAxnPC6Rjdk8323zykGRVzSyuewG6VCNxV InGZJprLc/RHIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:01 2026 by rpki-client