This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json) Hash identifier: 4lTbCF5UOjAcZsp4fKP1z5UjHXD01IuNPOU4Uoh4UVM= Subject key identifier: 0A:AD:7E:8C:C9:49:E8:09:69:4D:FF:6B:D6:74:54:32:C6:4D:C8:9D Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13 Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613 Certificate serial: 019C420F723E59BF885F49FA1DC602A3701D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft Manifest number: 04E9 Signing time: Mon 09 Feb 2026 11:00:34 +0000 Manifest this update: Mon 09 Feb 2026 11:00:34 +0000 Manifest next update: Tue 10 Feb 2026 11:00:34 +0000 Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: ylP88jJbqzNydylH3gb1KhV9W25Ausk0806ecY8qfIs=) 2: ndpI9qLffpVaMGScW-JZ0lWj0Ks.roa (hash: vfmuR4iQKhTkQbNhXUi+1cOgTRg44mLCvKB92dRG9wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:72:3e:59:bf:88:5f:49:fa:1d:c6:02:a3:70:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613 Validity Not Before: Feb 9 11:00:34 2026 GMT Not After : Feb 10 11:00:34 2026 GMT Subject: CN=0aad7e8cc949e809694dff6bd6745432c64dc89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:60:01:22:5f:bb:d0:be:ab:ae:3f:36:d7: a8:97:58:58:fe:2a:3a:80:31:0e:32:23:30:ee:37: 65:c4:48:cd:02:be:df:bd:ad:f4:59:ce:a6:c4:df: d3:9e:7a:ca:ab:80:a2:72:f6:11:70:3c:ef:17:6d: 2d:29:22:61:cc:dd:bc:91:47:f3:49:70:b9:61:f8: 83:0a:56:d2:c8:fa:00:04:b5:a9:cc:6c:2b:96:da: 43:72:39:4a:48:57:c2:80:03:25:2f:a9:e7:44:d1: a5:2f:7b:44:4c:95:d0:84:5b:6d:34:85:4b:a0:b6: 2e:cc:f0:47:a5:5c:b4:b3:96:38:9e:0e:97:d4:86: 5b:5a:ff:b6:64:d9:aa:ab:f0:01:da:43:c7:13:a2: 28:a1:0c:7f:36:0b:8f:04:37:c1:f0:bd:36:aa:22: b1:ed:89:ec:e6:9d:91:4e:71:1d:50:02:91:85:00: 63:f8:c3:8f:0c:3d:16:63:e5:e4:71:b3:f3:d9:92: 65:79:d9:4c:18:93:20:5c:9d:e3:ec:c0:14:be:62: 60:07:fc:6e:19:a9:e7:05:6f:9c:72:f4:37:60:50: 0a:38:6f:7c:c2:09:42:f8:b6:00:6c:0e:16:4f:56: a0:12:88:5b:e6:53:1d:be:c5:ee:80:8b:7b:c3:46: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AD:7E:8C:C9:49:E8:09:69:4D:FF:6B:D6:74:54:32:C6:4D:C8:9D X509v3 Authority Key Identifier: keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d8:7f:4d:45:75:b1:4f:51:6a:37:07:99:c7:31:49:19:cd: 65:20:46:ba:a7:c6:b5:a6:32:35:b5:6a:08:c7:c5:29:49:6f: a2:ab:f4:62:65:32:7e:d8:16:f0:12:dd:6d:c4:a4:7d:4b:47: dd:71:0a:ad:e9:7a:24:3d:65:0e:5e:e4:3d:0f:be:c9:e8:74: 04:aa:33:a5:ed:ab:12:e5:c3:a9:ea:a7:9a:70:73:dc:d9:8a: 4a:2d:66:d5:26:94:7f:35:a5:95:0a:91:f8:98:4b:82:b9:aa: 10:62:26:3c:c9:40:fe:91:67:55:a5:61:f6:a1:7d:4f:9f:05: 0a:ff:07:2f:8e:59:3e:76:43:5a:a3:2c:fb:fc:14:06:9a:9f: 9c:8b:15:a4:e1:df:35:fa:18:40:6d:8d:bc:d2:21:4a:f9:e4: 8b:97:a9:9f:3d:e7:f6:1f:54:88:a4:c8:7e:95:0c:4d:e2:6f: 5a:e7:28:b1:d1:26:b1:75:1c:fa:ac:9c:56:5a:3a:22:63:be: 1e:8b:2d:af:40:dd:c9:f6:05:1f:6b:44:fe:4b:a5:19:5a:de: 3b:1d:8b:1f:7b:f5:1b:64:6b:99:df:95:53:94:0a:6d:05:64: fc:cf:52:a1:ce:77:b9:b2:42:42:ca:b4:da:7d:bd:f5:bd:74: c8:3a:2e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3I+Wb+IX0n6HcYCo3AdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw OTA2MTMwHhcNMjYwMjA5MTEwMDM0WhcNMjYwMjEwMTEwMDM0WjAzMTEwLwYDVQQD EygwYWFkN2U4Y2M5NDllODA5Njk0ZGZmNmJkNjc0NTQzMmM2NGRjODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o9gASJfu9C+q64/Nteol1hY/io6 gDEOMiMw7jdlxEjNAr7fva30Wc6mxN/TnnrKq4CicvYRcDzvF20tKSJhzN28kUfz SXC5YfiDClbSyPoABLWpzGwrltpDcjlKSFfCgAMlL6nnRNGlL3tETJXQhFttNIVL oLYuzPBHpVy0s5Y4ng6X1IZbWv+2ZNmqq/AB2kPHE6IooQx/NguPBDfB8L02qiKx 7Yns5p2RTnEdUAKRhQBj+MOPDD0WY+XkcbPz2ZJledlMGJMgXJ3j7MAUvmJgB/xu GannBW+ccvQ3YFAKOG98wglC+LYAbA4WT1agEohb5lMdvsXugIt7w0aerQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqtfozJSegJaU3/a9Z0VDLGTcidMB8GA1UdIwQY MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5 LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9h/TUV1 sU9RajcHmccxSRnNZSBGuqfGtaYyNbVqCMfFKUlvoqv0YmUyftgW8BLdbcSkfUtH 3XEKrel6JD1lDl7kPQ++yeh0BKozpe2rEuXDqeqnmnBz3NmKSi1m1SaUfzWllQqR +JhLgrmqEGImPMlA/pFnVaVh9qF9T58FCv8HL45ZPnZDWqMs+/wUBpqfnIsVpOHf NfoYQG2NvNIhSvnki5epnz3n9h9UiKTIfpUMTeJvWucosdEmsXUc+qycVlo6ImO+ Hostr0DdyfYFH2tE/kulGVreOx2LH3v1G2Rrmd+VU5QKbQVk/M9Soc53ubJCQsq0 2n299b10yDoukQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:48 2026 by rpki-client