This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json) Hash identifier: yzkzih7h8hYCu0M1u0HyPbMGAg6RoXYOHR2YrnPKJk8= Subject key identifier: A5:B2:8B:E8:4F:5B:E5:4D:82:E6:B8:92:86:22:7C:A3:9F:0F:7C:92 Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Certificate serial: 019C1CF0D17BCA1AF030DDF57264BB445A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft Manifest number: 1800 Signing time: Mon 02 Feb 2026 06:01:09 +0000 Manifest this update: Mon 02 Feb 2026 06:01:09 +0000 Manifest next update: Tue 03 Feb 2026 06:01:09 +0000 Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: 5a0BOte4m9oYDbvDXQS11X/Bk/BY4nbA5CFo7fHbB94=) 2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:d1:7b:ca:1a:f0:30:dd:f5:72:64:bb:44:5a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Validity Not Before: Feb 2 06:01:09 2026 GMT Not After : Feb 3 06:01:09 2026 GMT Subject: CN=a5b28be84f5be54d82e6b89286227ca39f0f7c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:49:52:76:c5:21:8f:6e:15:94:b5:a6:1b:08: 96:36:a8:42:a8:73:cd:2c:4d:14:85:03:73:df:a1: 75:cb:30:51:65:a6:92:80:bf:65:0c:4e:53:48:2c: fa:e9:9b:08:dd:c2:7a:00:55:d6:1f:18:a7:d4:b1: c1:ed:f0:bf:40:66:d9:f0:c8:02:fa:30:35:59:82: 4e:08:b7:f4:0d:21:9f:e9:68:7e:ed:8e:18:6d:3b: 53:07:42:fc:fb:3e:c7:f4:0b:71:22:1f:ee:72:f3: 96:51:65:3b:6e:53:51:e7:aa:0a:ae:58:48:66:c5: ff:73:2b:66:19:7f:99:29:15:03:60:b3:a8:56:8a: b8:8a:75:f7:ec:5c:c8:af:41:88:dc:63:d8:d1:ff: 16:62:f0:39:e1:01:15:c1:af:ef:b0:64:b2:c8:ba: 3b:a2:e5:94:bd:f6:f5:5b:37:82:9c:03:45:e7:63: 57:f5:67:17:58:71:f0:45:ea:49:02:47:76:ce:09: f5:e4:60:d0:3c:e3:74:29:79:f3:96:b8:2e:4c:9b: 34:6e:b3:d2:dc:5e:95:22:aa:3b:57:f8:83:db:f8: cf:78:57:83:cb:26:d2:c4:e8:f2:2f:ae:51:de:23: c1:8a:71:76:2c:53:51:cb:11:a1:92:ff:a1:7e:31: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B2:8B:E8:4F:5B:E5:4D:82:E6:B8:92:86:22:7C:A3:9F:0F:7C:92 X509v3 Authority Key Identifier: keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:66:02:6f:ac:ca:a6:00:21:5e:0d:e1:5f:b0:6d:cf:17:78: 52:1a:a1:aa:9a:2b:d1:ed:3f:fa:a9:2e:04:d7:4c:86:ad:ec: e2:6d:b6:59:72:1c:ec:44:b4:2a:16:64:b2:2b:10:5f:16:6b: fb:af:69:be:cb:9d:0e:84:eb:3a:4f:c6:ad:43:5a:a9:90:ec: c7:7f:ef:c7:5f:11:a8:c1:bf:1e:d7:6b:a4:0b:e6:3b:8b:ca: bf:7d:59:63:2c:78:e4:1c:58:bc:74:32:fc:d6:4a:a7:f2:04: c7:2f:2d:72:8d:dc:63:e9:25:12:16:e4:20:9f:0a:85:8f:41: ba:bd:ed:3d:32:e9:77:8a:e7:4a:9a:d7:e5:fb:7d:22:9b:5a: 62:2c:bd:97:08:26:fd:52:d4:f9:56:b7:db:20:cc:ee:a4:43: 34:60:a5:fb:04:91:bf:a5:6e:24:3e:4b:12:90:a1:e0:c5:85: 2d:bc:3a:1a:10:43:fe:96:3f:58:25:7e:f9:de:5e:ab:fb:fb: 39:1b:9f:38:8a:65:6d:d4:c5:a8:c8:71:00:6b:07:7d:3b:6d: 15:e2:ad:12:b7:17:66:ec:11:98:8d:0b:33:1b:27:94:e5:dc: 9a:e1:1c:99:1d:b6:25:61:2f:1c:39:f3:9e:2d:59:6d:da:3c: 65:98:4a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8NF7yhrwMN31cmS7RFqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz YWNhM2MwHhcNMjYwMjAyMDYwMTA5WhcNMjYwMjAzMDYwMTA5WjAzMTEwLwYDVQQD EyhhNWIyOGJlODRmNWJlNTRkODJlNmI4OTI4NjIyN2NhMzlmMGY3YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UlSdsUhj24VlLWmGwiWNqhCqHPN LE0UhQNz36F1yzBRZaaSgL9lDE5TSCz66ZsI3cJ6AFXWHxin1LHB7fC/QGbZ8MgC +jA1WYJOCLf0DSGf6Wh+7Y4YbTtTB0L8+z7H9AtxIh/ucvOWUWU7blNR56oKrlhI ZsX/cytmGX+ZKRUDYLOoVoq4inX37FzIr0GI3GPY0f8WYvA54QEVwa/vsGSyyLo7 ouWUvfb1WzeCnANF52NX9WcXWHHwRepJAkd2zgn15GDQPON0KXnzlrguTJs0brPS 3F6VIqo7V/iD2/jPeFeDyybSxOjyL65R3iPBinF2LFNRyxGhkv+hfjHY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWyi+hPW+VNgua4koYifKOfD3ySMB8GA1UdIwQY MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2YCb6zK pgAhXg3hX7Btzxd4Uhqhqpor0e0/+qkuBNdMhq3s4m22WXIc7ES0KhZksisQXxZr +69pvsudDoTrOk/GrUNaqZDsx3/vx18RqMG/HtdrpAvmO4vKv31ZYyx45BxYvHQy /NZKp/IExy8tco3cY+klEhbkIJ8KhY9Bur3tPTLpd4rnSprX5ft9IptaYiy9lwgm /VLU+Va32yDM7qRDNGCl+wSRv6VuJD5LEpCh4MWFLbw6GhBD/pY/WCV++d5eq/v7 ORufOIplbdTFqMhxAGsHfTttFeKtErcXZuwRmI0LMxsnlOXcmuEcmR22JWEvHDnz ni1Zbdo8ZZhKVg== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:00 2026 by rpki-client