This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json) Hash identifier: +ImjEfQVUUUqvLwrGEowec2h2VarzGxZiSjxfWUKwhY= Subject key identifier: 63:C0:F2:48:47:AA:8D:92:1A:DB:C9:97:DA:17:D2:F7:10:A9:76:4E Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Certificate serial: 019C427DCC6CA44DBBAF5081BE5BD8A1FE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft Manifest number: 12BD Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa (hash: WrbsU2ay1yqb6dXswy4M2OA4fKF6n6NbHM9kyKcjgco=) 2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: 9yurFSeSZn/EifSux1L3kkA8YXi93MIYv7wbSlM5QHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cc:6c:a4:4d:bb:af:50:81:be:5b:d8:a1:fe:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=63c0f24847aa8d921adbc997da17d2f710a9764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:29:5b:9f:04:c1:73:c0:2f:49:2f:a3:93: 74:0d:c1:01:04:f8:35:b0:ff:e0:21:06:26:46:f5: bf:82:2d:80:26:b6:5a:9a:73:4e:fd:43:fc:6b:4f: d5:3e:c6:09:8c:a6:b7:d4:3a:d7:bf:c2:b8:c2:44: 8b:8d:06:63:3b:50:eb:7e:0a:dd:2b:c7:14:4b:02: f2:e3:1b:70:71:6b:cd:db:c7:3d:22:2d:8f:8f:4c: 44:7f:6b:20:74:1e:d1:19:45:09:99:3f:58:90:5b: 8d:59:c8:b8:61:d3:50:5b:5f:e7:dd:b0:1d:fc:7a: a7:fe:69:2f:95:c2:58:a1:d9:7a:73:29:4b:f6:76: 28:da:74:82:29:e0:a4:dc:4e:e9:76:78:10:80:44: fb:76:ca:1f:26:6f:90:a5:92:ec:1b:7b:40:aa:7f: 02:a4:7c:db:6e:6e:1b:8c:15:2c:a2:bb:bd:f0:16: d6:b0:a7:40:fa:61:ac:f6:03:a8:45:2b:71:d0:eb: 06:42:16:ec:f7:34:75:6d:7d:83:ac:af:f4:f6:6f: 88:81:24:4e:01:1d:70:f5:3a:c2:ff:49:a4:45:a2: c6:ad:22:d1:c8:da:7f:8e:25:cb:af:62:e0:cb:86: f8:56:bd:92:ae:f7:37:30:1b:ac:67:a4:75:cf:cb: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:F2:48:47:AA:8D:92:1A:DB:C9:97:DA:17:D2:F7:10:A9:76:4E X509v3 Authority Key Identifier: keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e3:7e:2a:cf:52:8b:90:4e:5d:92:51:66:51:ca:1e:f2:48: 60:47:4d:78:a9:69:e4:06:4a:44:5a:5e:29:29:9e:65:b8:41: 73:08:d5:eb:e7:46:90:e0:14:d1:b7:c6:91:18:59:38:44:73: f0:65:d5:f4:7f:8f:be:81:f6:a4:fd:21:e9:b1:6d:86:88:ec: cc:fb:c5:28:35:02:4e:f9:74:46:4e:ef:11:08:0c:4a:35:ab: 56:58:58:b8:9d:67:c1:62:ee:5d:94:69:b2:05:c9:5b:1c:69: 56:57:84:e2:9a:26:18:fb:46:90:74:e1:92:e9:09:0f:f2:81: a8:50:a0:c2:57:9c:4a:f8:4b:77:84:9d:3f:28:9b:56:0f:76: b6:17:b4:e0:09:7b:e9:fa:35:15:90:39:ba:ca:72:13:34:51: 66:a6:5a:96:0a:52:81:88:71:0a:b2:a7:c9:d0:e2:0e:21:f8: 99:e6:43:b8:2c:0a:51:b8:94:b9:cd:c1:fe:47:93:ea:f4:c3: 54:71:7e:79:b7:3e:c3:6e:13:65:d9:7c:e5:4c:92:f9:c2:f0: 57:e5:73:98:94:d7:1f:64:28:83:a0:e8:69:36:bf:4f:52:26: 08:9a:5e:5d:08:9e:41:08:e3:0e:9d:63:33:c2:13:7f:78:a0: b7:5a:c3:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcxspE27r1CBvlvYof5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz YTBiZjkwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD Eyg2M2MwZjI0ODQ3YWE4ZDkyMWFkYmM5OTdkYTE3ZDJmNzEwYTk3NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydgpW58EwXPAL0kvo5N0DcEBBPg1 sP/gIQYmRvW/gi2AJrZamnNO/UP8a0/VPsYJjKa31DrXv8K4wkSLjQZjO1Drfgrd K8cUSwLy4xtwcWvN28c9Ii2Pj0xEf2sgdB7RGUUJmT9YkFuNWci4YdNQW1/n3bAd /Hqn/mkvlcJYodl6cylL9nYo2nSCKeCk3E7pdngQgET7dsofJm+QpZLsG3tAqn8C pHzbbm4bjBUsoru98BbWsKdA+mGs9gOoRStx0OsGQhbs9zR1bX2DrK/09m+IgSRO AR1w9TrC/0mkRaLGrSLRyNp/jiXLr2Lgy4b4Vr2Srvc3MBusZ6R1z8tYKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPA8khHqo2SGtvJl9oX0vcQqXZOMB8GA1UdIwQY MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2 LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+N+Ks9S i5BOXZJRZlHKHvJIYEdNeKlp5AZKRFpeKSmeZbhBcwjV6+dGkOAU0bfGkRhZOERz 8GXV9H+PvoH2pP0h6bFthojszPvFKDUCTvl0Rk7vEQgMSjWrVlhYuJ1nwWLuXZRp sgXJWxxpVleE4pomGPtGkHThkukJD/KBqFCgwlecSvhLd4SdPyibVg92the04Al7 6fo1FZA5uspyEzRRZqZalgpSgYhxCrKnydDiDiH4meZDuCwKUbiUuc3B/keT6vTD VHF+ebc+w24TZdl85UyS+cLwV+VzmJTXH2Qog6DoaTa/T1ImCJpeXQieQQjjDp1j M8ITf3igt1rDHw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:07 2026 by rpki-client