This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json) Hash identifier: L1XjFJJDEEd/u9A8K/zAwP0UqNS140sTO0/I2uj0YmI= Subject key identifier: 39:8B:92:94:80:B9:23:9B:BA:46:8A:E7:C6:37:7F:21:B4:09:E9:5B Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b Certificate serial: 019C42EAFC6ECDDF71F1A9F936E9961649C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft Manifest number: 14AE Signing time: Mon 09 Feb 2026 15:00:21 +0000 Manifest this update: Mon 09 Feb 2026 15:00:21 +0000 Manifest next update: Tue 10 Feb 2026 15:00:21 +0000 Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=) 2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 7g8ac2nmLsYlPDYC6LtXePjXFcipiddfEPD/zjFbJp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fc:6e:cd:df:71:f1:a9:f9:36:e9:96:16:49:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Validity Not Before: Feb 9 15:00:21 2026 GMT Not After : Feb 10 15:00:21 2026 GMT Subject: CN=398b929480b9239bba468ae7c6377f21b409e95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:49:97:21:50:47:c1:e9:4d:65:6e:ed:59: a7:45:b0:e9:e5:c1:e4:ba:37:e8:25:f6:27:ba:1b: 0a:cc:e3:b0:f4:91:e9:a7:6f:1e:a1:a8:f4:4a:f1: 6f:ef:6a:5f:ac:90:2b:4e:cc:b2:39:84:77:76:ad: ae:03:87:6f:d9:3c:df:64:eb:da:0a:fc:c7:01:c7: 8f:4b:ee:a9:b7:10:7c:00:b0:be:a8:97:91:c2:59: 12:6d:a7:a4:0f:50:1b:08:a4:90:dd:d2:f0:9f:4c: 1f:cf:fb:fd:35:8a:8b:90:e0:a3:bb:26:66:df:a0: 92:01:32:5e:c9:24:9e:9c:eb:98:b3:ff:43:4c:03: dd:e3:c3:7f:f3:9d:c7:23:40:8b:6c:f3:ae:72:d2: 82:c8:96:a0:8d:56:a8:de:35:c4:06:7c:28:0c:5f: 57:82:6c:55:e5:3a:11:3b:24:d6:fd:82:24:2f:db: bf:82:41:a9:0b:35:c0:12:c9:76:3d:77:8c:b8:ad: a8:41:4b:d4:4a:4f:df:c2:b2:5f:41:2b:34:1d:38: 79:4c:f5:5b:23:a6:fd:3c:6f:04:6b:99:f0:bf:40: ae:b0:16:f7:a8:c0:02:da:e6:3d:5e:6b:a1:74:e3: 98:c0:21:ac:ea:8e:9e:c6:fc:4e:44:2b:b5:39:0a: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:92:94:80:B9:23:9B:BA:46:8A:E7:C6:37:7F:21:B4:09:E9:5B X509v3 Authority Key Identifier: keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3f:cf:66:15:3c:3b:b0:47:4e:e8:f9:8c:32:5d:8e:6f:a8: 48:4b:80:ec:59:1f:da:a4:63:71:a9:32:18:f2:0f:70:ef:e2: 93:b8:be:96:a6:4c:74:c9:8e:76:45:a1:c9:70:50:78:d7:79: 8b:87:e5:f9:46:75:5b:c0:15:89:39:8c:db:75:b1:ab:08:b1: a3:e3:ed:e2:79:06:16:38:fe:79:aa:1e:81:fe:0d:9b:01:d8: f5:bb:de:95:96:2a:83:be:21:a3:60:45:55:f1:d0:3d:24:ac: 70:19:82:3f:fa:73:20:fd:48:56:cb:7f:21:1a:5d:a3:85:67: d4:04:47:aa:d4:a1:9a:9a:35:2b:bb:14:27:26:fb:7b:7b:ba: c3:5f:d9:21:4d:7d:78:ba:e5:b2:19:2d:bb:14:ee:ff:40:8c: 87:98:16:81:3e:a9:7d:6f:f9:ad:70:74:ff:b8:1a:3a:e2:22: e7:c5:b5:fc:8d:7f:d2:6a:57:bb:3f:52:8a:00:9f:8b:72:ad: 42:08:d4:3f:5b:56:1f:8d:0f:48:53:c4:f5:0b:84:07:c7:a3: 6e:ce:02:f1:84:e3:b7:f4:06:f5:10:6e:83:9a:2d:9f:1d:1b: 47:b3:9a:0e:58:b1:28:2a:6a:5a:17:5c:62:10:af:c4:70:97: 21:7a:ea:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vxuzd9x8an5NumWFknFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5 YzBiM2IwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD EygzOThiOTI5NDgwYjkyMzliYmE0NjhhZTdjNjM3N2YyMWI0MDllOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvZJlyFQR8HpTWVu7VmnRbDp5cHk ujfoJfYnuhsKzOOw9JHpp28eoaj0SvFv72pfrJArTsyyOYR3dq2uA4dv2TzfZOva CvzHAcePS+6ptxB8ALC+qJeRwlkSbaekD1AbCKSQ3dLwn0wfz/v9NYqLkOCjuyZm 36CSATJeySSenOuYs/9DTAPd48N/853HI0CLbPOuctKCyJagjVao3jXEBnwoDF9X gmxV5ToROyTW/YIkL9u/gkGpCzXAEsl2PXeMuK2oQUvUSk/fwrJfQSs0HTh5TPVb I6b9PG8Ea5nwv0CusBb3qMAC2uY9XmuhdOOYwCGs6o6exvxORCu1OQrc5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmLkpSAuSObukaK58Y3fyG0CelbMB8GA1UdIwQY MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2 LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT/PZhU8 O7BHTuj5jDJdjm+oSEuA7Fkf2qRjcakyGPIPcO/ik7i+lqZMdMmOdkWhyXBQeNd5 i4fl+UZ1W8AViTmM23Wxqwixo+Pt4nkGFjj+eaoegf4NmwHY9bvelZYqg74ho2BF VfHQPSSscBmCP/pzIP1IVst/IRpdo4Vn1ARHqtShmpo1K7sUJyb7e3u6w1/ZIU19 eLrlshktuxTu/0CMh5gWgT6pfW/5rXB0/7gaOuIi58W1/I1/0mpXuz9SigCfi3Kt QgjUP1tWH40PSFPE9QuEB8ejbs4C8YTjt/QG9RBug5otnx0bR7OaDlixKCpqWhdc YhCvxHCXIXrqug== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:14 2026 by rpki-client