This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json) Hash identifier: vmGWkRxYBdrlIELsbMOTJIhitkUJ681YLABcZgydD8o= Subject key identifier: D3:97:BA:51:FF:B5:14:B4:F4:32:01:42:06:AF:5E:51:97:76:44:27 Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942 Certificate serial: 019C427DACE7CAA8E6C0E560DDF3A42DB988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 13:00:58 +0000 Manifest this update: Mon 09 Feb 2026 13:00:58 +0000 Manifest next update: Tue 10 Feb 2026 13:00:58 +0000 Files and hashes: 1: E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa (hash: wMdtrfklBtkfMKlhkTQEZGLh+FduG0xroz4RyYIx+Jg=) 2: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: R1K5tbcR0BigQeK+PkXoNSkZDV9UBUrBL7zLYTIODPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ac:e7:ca:a8:e6:c0:e5:60:dd:f3:a4:2d:b9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942 Validity Not Before: Feb 9 13:00:58 2026 GMT Not After : Feb 10 13:00:58 2026 GMT Subject: CN=d397ba51ffb514b4f432014206af5e5197764427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:9d:06:b4:fa:33:b3:22:cc:08:f0:db:93: be:4c:73:e1:43:5a:46:59:ba:9a:bd:38:83:6e:91: 90:2a:71:df:8f:42:21:ee:d3:47:d4:a4:7e:d3:c5: b3:36:31:7a:49:f4:1f:bb:26:a9:5e:91:19:e7:87: 73:e3:9b:61:8a:96:48:6f:e9:e9:7e:7e:8b:d1:db: ba:62:d1:d5:53:ca:7b:85:e6:40:e2:b9:b9:72:f3: ad:72:a3:1b:8b:35:20:5a:54:fc:7c:70:74:20:cc: 33:d2:68:66:fe:5d:e7:7b:4e:58:04:77:93:be:e0: e0:99:82:7a:32:15:fd:b3:a9:19:55:03:ac:3e:0a: f0:3f:97:c9:a0:2c:93:e6:9c:87:28:c2:65:e5:11: 11:aa:28:64:50:4b:6b:f7:f0:12:2d:0b:b2:ef:57: e9:e5:81:18:55:43:4a:6c:8a:82:ce:62:e5:4b:c8: cd:ae:3e:38:75:ee:c9:36:1a:76:6c:b0:db:bc:9c: ec:92:58:6d:cf:85:d6:63:66:df:91:b7:8e:0d:fb: fb:bb:56:f9:bb:43:fc:65:f7:57:6c:9a:7c:98:93: 72:79:ca:6a:eb:9d:4b:b2:70:b1:5d:ed:1b:5a:a4: 04:b9:97:e4:9e:57:6b:12:ff:bf:da:95:d1:3f:f5: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:97:BA:51:FF:B5:14:B4:F4:32:01:42:06:AF:5E:51:97:76:44:27 X509v3 Authority Key Identifier: keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:95:b6:99:52:ad:ee:13:20:e4:17:f8:dc:ce:3e:96:5a:b7: 8d:2f:dc:b2:d6:06:a6:6b:43:94:89:ca:54:c3:95:48:c3:2c: 5d:ee:7d:6f:90:e2:38:a9:6c:1c:94:89:d8:54:62:4b:cd:3e: ea:a7:47:a0:11:5e:f8:bf:98:f7:f8:58:ae:28:90:72:b5:f0: 5e:04:65:aa:d3:ed:a0:b8:e3:74:2e:4d:24:1a:35:72:3a:68: 4a:a0:5e:7c:ea:5c:85:a6:70:c3:b9:ba:29:d4:ba:92:62:0c: 1e:b5:34:44:43:cc:99:bb:8f:5a:0a:0a:19:2c:b4:66:d1:a6: 0f:6b:8f:27:b1:2a:d0:04:e5:a0:35:84:a3:27:d4:47:4f:12: 16:45:4b:17:9c:78:a4:d0:2a:f7:5f:33:bb:60:c2:59:b1:a5: ed:e5:5d:1a:03:8d:3d:2d:e5:05:48:b7:61:04:0c:20:85:6f: fd:92:4c:0e:08:09:95:87:f4:d1:24:10:2c:12:0a:bd:ad:81: 87:db:cb:11:ae:16:2d:bb:9c:06:79:9e:fa:1b:8c:a0:3a:59: 15:f3:9b:7f:29:c6:da:65:54:ca:75:9d:15:08:03:b7:7a:20: 02:58:07:49:57:9c:97:2b:3f:53:b8:a2:a9:84:50:85:90:68: 39:71:76:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaznyqjmwOVg3fOkLbmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj NTI5NDIwHhcNMjYwMjA5MTMwMDU4WhcNMjYwMjEwMTMwMDU4WjAzMTEwLwYDVQQD EyhkMzk3YmE1MWZmYjUxNGI0ZjQzMjAxNDIwNmFmNWU1MTk3NzY0NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GmdBrT6M7MizAjw25O+THPhQ1pG WbqavTiDbpGQKnHfj0Ih7tNH1KR+08WzNjF6SfQfuyapXpEZ54dz45thipZIb+np fn6L0du6YtHVU8p7heZA4rm5cvOtcqMbizUgWlT8fHB0IMwz0mhm/l3ne05YBHeT vuDgmYJ6MhX9s6kZVQOsPgrwP5fJoCyT5pyHKMJl5RERqihkUEtr9/ASLQuy71fp 5YEYVUNKbIqCzmLlS8jNrj44de7JNhp2bLDbvJzsklhtz4XWY2bfkbeODfv7u1b5 u0P8ZfdXbJp8mJNyecpq651LsnCxXe0bWqQEuZfknldrEv+/2pXRP/U+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOXulH/tRS09DIBQgavXlGXdkQnMB8GA1UdIwQY MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt MTI2MGE2ZjNhMzkzLzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJW2mVKt 7hMg5Bf43M4+llq3jS/cstYGpmtDlInKVMOVSMMsXe59b5DiOKlsHJSJ2FRiS80+ 6qdHoBFe+L+Y9/hYriiQcrXwXgRlqtPtoLjjdC5NJBo1cjpoSqBefOpchaZww7m6 KdS6kmIMHrU0REPMmbuPWgoKGSy0ZtGmD2uPJ7Eq0ATloDWEoyfUR08SFkVLF5x4 pNAq918zu2DCWbGl7eVdGgONPS3lBUi3YQQMIIVv/ZJMDggJlYf00SQQLBIKva2B h9vLEa4WLbucBnme+huMoDpZFfObfynG2mVUynWdFQgDt3ogAlgHSVeclys/U7ii qYRQhZBoOXF2CA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:36 2026 by rpki-client