This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json) Hash identifier: GAePsdebiBElDQzsOKT8TWxjrrkTQw7BdZT5S8Br+3k= Subject key identifier: F5:E2:A8:A0:67:BC:DD:C6:4E:DD:54:16:FD:9D:4D:DE:DB:79:67:C0 Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Certificate serial: 019C4246C92444CC30F18BDD6557CF3689F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 12:01:01 +0000 Manifest this update: Mon 09 Feb 2026 12:01:01 +0000 Manifest next update: Tue 10 Feb 2026 12:01:01 +0000 Files and hashes: 1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=) 2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: s72RYQ0oz6lIWB90+2ioL6fx8M9T2kHNef7Hx65UNNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c9:24:44:cc:30:f1:8b:dd:65:57:cf:36:89:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Validity Not Before: Feb 9 12:01:01 2026 GMT Not After : Feb 10 12:01:01 2026 GMT Subject: CN=f5e2a8a067bcddc64edd5416fd9d4ddedb7967c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fe:03:bb:65:92:02:96:e1:bf:d7:bb:25:be: c0:8a:33:c8:5e:42:45:a1:bc:fe:83:e4:ae:a5:83: 59:17:ed:d6:16:86:36:01:2a:84:d8:77:2d:c1:9a: 55:9e:52:48:60:94:da:1a:c4:f0:9d:33:82:ee:45: 91:c9:08:ae:4d:d2:b5:eb:38:f7:e0:02:d3:db:a9: f8:46:51:8c:26:f4:d1:ab:56:6f:be:dd:7c:ad:61: 4f:c6:52:91:f8:77:ab:d7:dd:5c:e9:7e:3e:80:2b: b4:72:0c:91:ed:93:60:5a:08:09:82:79:b4:96:23: bc:eb:41:ae:4f:4d:90:0b:f5:3d:ad:32:bf:19:6f: 1d:e6:c1:65:70:be:b7:f8:60:2b:fb:79:64:e1:34: 17:21:81:cd:fe:55:90:21:07:99:2c:1b:d0:2c:70: 4c:47:a3:dd:10:8f:30:20:6b:40:d4:16:b0:8d:0e: f3:01:c1:b2:e2:c8:ed:06:55:55:9b:39:1c:45:ed: 44:58:6f:c3:1b:db:c9:86:71:f0:95:94:16:20:fc: 8a:82:38:33:c3:6a:f9:57:21:1e:15:6d:1d:a0:19: 4f:be:2c:7f:d8:0b:01:59:8d:a9:4a:40:cb:6c:e1: c4:40:1c:b5:58:e8:2a:69:4b:a2:61:80:e0:5a:a4: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:A8:A0:67:BC:DD:C6:4E:DD:54:16:FD:9D:4D:DE:DB:79:67:C0 X509v3 Authority Key Identifier: keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:80:a1:67:6b:01:54:0d:05:9c:e6:44:48:26:50:46:b6:00: db:4f:71:fa:0a:1b:00:9a:80:89:25:54:23:89:7c:e6:27:16: 64:6c:2e:2a:04:4c:9a:4f:4f:a0:1f:7c:74:ba:84:7f:dd:70: ea:7c:7a:44:91:0f:c9:a1:28:3a:5f:67:7a:c9:d6:98:e4:69: d5:a4:01:7d:c7:fc:85:18:d1:31:8d:11:6e:28:c2:07:d7:62: 02:43:38:23:9c:db:36:4c:f1:31:fd:ba:9c:30:c5:d7:fb:14: 51:a8:b7:35:4a:b4:f8:8c:60:46:a3:09:d8:d2:3a:e7:8d:29: cd:b7:21:49:dd:7a:7a:f1:95:85:37:f8:59:0f:ae:a5:9a:09: bf:81:d3:96:27:b7:42:63:f2:02:4d:dd:a7:ed:ff:b2:bf:31: bc:24:0c:4a:02:62:e7:ae:30:fa:36:e6:e2:ed:4b:8a:df:ad: 7a:3d:9b:04:db:f7:2d:6a:31:87:90:08:f3:dd:4e:c9:f2:c5: 80:f3:57:fb:c2:c2:bc:f3:5c:ab:99:74:ff:11:14:0c:80:47: 7e:e9:ad:78:7c:7b:8d:28:92:29:c5:b3:8a:55:26:4b:e5:3a: 4c:0e:89:86:19:82:6e:86:62:02:67:01:bf:a2:f0:76:da:25: 85:ef:86:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRskkRMww8YvdZVfPNon1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli OTM0MjMwHhcNMjYwMjA5MTIwMTAxWhcNMjYwMjEwMTIwMTAxWjAzMTEwLwYDVQQD EyhmNWUyYThhMDY3YmNkZGM2NGVkZDU0MTZmZDlkNGRkZWRiNzk2N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f4Du2WSApbhv9e7Jb7AijPIXkJF obz+g+SupYNZF+3WFoY2ASqE2HctwZpVnlJIYJTaGsTwnTOC7kWRyQiuTdK16zj3 4ALT26n4RlGMJvTRq1Zvvt18rWFPxlKR+Her191c6X4+gCu0cgyR7ZNgWggJgnm0 liO860GuT02QC/U9rTK/GW8d5sFlcL63+GAr+3lk4TQXIYHN/lWQIQeZLBvQLHBM R6PdEI8wIGtA1BawjQ7zAcGy4sjtBlVVmzkcRe1EWG/DG9vJhnHwlZQWIPyKgjgz w2r5VyEeFW0doBlPvix/2AsBWY2pSkDLbOHEQBy1WOgqaUuiYYDgWqTd+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXiqKBnvN3GTt1UFv2dTd7beWfAMB8GA1UdIwQY MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5 LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoChZ2sB VA0FnOZESCZQRrYA209x+gobAJqAiSVUI4l85icWZGwuKgRMmk9PoB98dLqEf91w 6nx6RJEPyaEoOl9nesnWmORp1aQBfcf8hRjRMY0RbijCB9diAkM4I5zbNkzxMf26 nDDF1/sUUai3NUq0+IxgRqMJ2NI6540pzbchSd16evGVhTf4WQ+upZoJv4HTlie3 QmPyAk3dp+3/sr8xvCQMSgJi564w+jbm4u1Lit+tej2bBNv3LWoxh5AI891OyfLF gPNX+8LCvPNcq5l0/xEUDIBHfumteHx7jSiSKcWzilUmS+U6TA6JhhmCboZiAmcB v6Lwdtolhe+GYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:07 2026 by rpki-client