This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft File: G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json) Hash identifier: zhJg2WyIxcwnc8QayQJF3Yde0LQCY+g0lQOahrffP5U= Subject key identifier: F1:DB:3E:CA:1E:DE:08:B7:3A:FE:8C:C9:24:B5:A4:42:34:47:03:C0 Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD Certificate issuer: /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd Certificate serial: 019C413376EE5C73CC41BA06E06B820B9467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft Manifest number: 0FA7 Signing time: Mon 09 Feb 2026 07:00:17 +0000 Manifest this update: Mon 09 Feb 2026 07:00:17 +0000 Manifest next update: Tue 10 Feb 2026 07:00:17 +0000 Files and hashes: 1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: T56FhxSIDB3+5fzutfX6/LgDRuzO+3SsEP81SRC1Sqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:76:ee:5c:73:cc:41:ba:06:e0:6b:82:0b:94:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd Validity Not Before: Feb 9 07:00:17 2026 GMT Not After : Feb 10 07:00:17 2026 GMT Subject: CN=f1db3eca1ede08b73afe8cc924b5a442344703c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:68:27:bd:40:89:bb:22:65:69:52:c7:a3: ad:b9:1b:a4:72:33:43:da:b9:76:10:68:74:47:8c: 28:61:7a:77:46:3b:3f:a6:c8:02:be:38:c6:d3:28: d7:8b:44:69:e1:76:b4:5e:02:1b:29:c6:66:04:84: 34:03:6c:81:29:c0:31:52:d2:b7:29:a4:c2:51:e9: 9e:d7:52:6b:e6:4b:32:ff:2f:6b:5e:73:3e:fa:c8: 07:54:f8:f9:47:dd:00:36:aa:bd:50:bd:6d:24:57: b8:a4:b6:32:9c:d3:f7:d0:9d:10:46:33:51:b2:0a: a8:03:40:22:1b:b5:d3:41:ef:4d:d1:53:54:4c:d9: 73:19:14:be:3e:24:74:b0:c4:7f:eb:ca:71:a9:03: ce:94:8b:9e:1f:be:9f:20:1d:1f:e1:b9:f6:f3:69: b9:43:ab:63:c6:d0:00:91:3b:9e:29:28:69:d3:be: 8e:01:e3:d7:3b:87:7e:bf:ad:b5:cb:e0:95:f9:9b: 92:9e:08:81:de:8a:51:d7:4a:a8:74:97:6c:f0:e7: c7:57:ad:4e:8b:85:6d:50:66:b0:84:13:e3:42:ba: 09:1a:86:0a:84:b4:d5:30:3e:5d:88:45:45:4f:43: d3:f5:2c:fb:e4:0c:32:ad:f3:e5:21:50:bb:ad:f8: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:3E:CA:1E:DE:08:B7:3A:FE:8C:C9:24:B5:A4:42:34:47:03:C0 X509v3 Authority Key Identifier: keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:07:fe:e3:e3:44:0e:2a:53:82:97:9d:49:64:fe:66:4e:ec: fb:88:1b:55:9a:f8:22:ba:82:31:64:b4:f4:c3:97:89:cc:67: f2:5a:06:e8:0c:9e:53:94:5c:84:b6:50:7a:28:9d:77:73:24: 11:47:7c:be:26:41:e4:1a:84:a0:8b:15:bd:e1:e0:a0:41:73: 54:9e:56:5e:f0:fd:d1:74:de:2b:24:72:ce:8b:ae:86:bc:b6: 8c:cc:59:38:9c:36:e2:97:73:2b:44:a5:69:cf:83:59:31:c6: 35:51:bd:0b:69:fa:2d:49:40:e3:4a:2e:7b:56:bb:55:81:5a: bb:d7:fe:4e:16:f4:21:d7:48:e9:14:d8:ec:64:8d:a1:9c:93: e3:7a:3f:8b:8a:48:32:6e:63:c6:2f:2b:1a:c8:0d:68:8c:c9: 1f:d6:1c:d8:54:e7:1e:e5:3a:9c:cb:fb:95:ee:8a:10:fb:4c: 55:82:34:a3:86:ac:3b:8e:ec:dc:e2:44:f3:59:00:b7:47:c6: 3f:e9:cb:9d:43:b4:42:95:78:36:2d:de:ce:14:13:61:60:ed: 41:21:69:aa:d1:6b:db:45:1d:d8:71:39:a7:d6:33:3a:9c:bf: bf:70:d6:03:71:2c:61:b4:57:16:54:a6:fa:0d:8d:26:a6:76: ba:99:8e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM3buXHPMQboG4GuCC5RnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjkyYzI5OTRmZmI1MzU3ZjhkYzQ2Mjc5YmRkOTliZTNh NTZjYmQwHhcNMjYwMjA5MDcwMDE3WhcNMjYwMjEwMDcwMDE3WjAzMTEwLwYDVQQD EyhmMWRiM2VjYTFlZGUwOGI3M2FmZThjYzkyNGI1YTQ0MjM0NDcwM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfFoJ71AibsiZWlSx6OtuRukcjND 2rl2EGh0R4woYXp3Rjs/psgCvjjG0yjXi0Rp4Xa0XgIbKcZmBIQ0A2yBKcAxUtK3 KaTCUeme11Jr5ksy/y9rXnM++sgHVPj5R90ANqq9UL1tJFe4pLYynNP30J0QRjNR sgqoA0AiG7XTQe9N0VNUTNlzGRS+PiR0sMR/68pxqQPOlIueH76fIB0f4bn282m5 Q6tjxtAAkTueKShp076OAePXO4d+v621y+CV+ZuSngiB3opR10qodJds8OfHV61O i4VtUGawhBPjQroJGoYKhLTVMD5diEVFT0PT9Sz75AwyrfPlIVC7rfhyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHbPsoe3gi3Ov6MySS1pEI0RwPAMB8GA1UdIwQY MBaAFBv5LCmU/7U1f43EYnm92ZvjpWy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZjczNjEtYjFlNi00MDE5LWFkNjMt MjAwNTk5NGRmNDcxLzEvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ZjczNjEtYjFlNi00MDE5LWFkNjMtMjAwNTk5NGRmNDcx LzEvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAf+4+NE DipTgpedSWT+Zk7s+4gbVZr4IrqCMWS09MOXicxn8loG6AyeU5RchLZQeiidd3Mk EUd8viZB5BqEoIsVveHgoEFzVJ5WXvD90XTeKyRyzouuhry2jMxZOJw24pdzK0Sl ac+DWTHGNVG9C2n6LUlA40oue1a7VYFau9f+Thb0IddI6RTY7GSNoZyT43o/i4pI Mm5jxi8rGsgNaIzJH9Yc2FTnHuU6nMv7le6KEPtMVYI0o4asO47s3OJE81kAt0fG P+nLnUO0QpV4Ni3ezhQTYWDtQSFpqtFr20Ud2HE5p9YzOpy/v3DWA3EsYbRXFlSm +g2NJqZ2upmOsA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:39 2026 by rpki-client