This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json) Hash identifier: CJVrJzy0P85CStgNIZFVau5RZSBC++0twJgksvtb3x4= Subject key identifier: 33:E8:87:DE:6F:B0:14:C4:23:CC:F0:E4:A3:84:FC:BD:93:E5:08:BA Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84 Certificate serial: 019C41D9039C5C23CC9DC14B92D0E745F470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft Manifest number: 0B53 Signing time: Mon 09 Feb 2026 10:01:06 +0000 Manifest this update: Mon 09 Feb 2026 10:01:06 +0000 Manifest next update: Tue 10 Feb 2026 10:01:06 +0000 Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: q2kNukJVU6EgVhmEmhJECVc9hMQax9gi2o4luXMDxjo=) 2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d9:03:9c:5c:23:cc:9d:c1:4b:92:d0:e7:45:f4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84 Validity Not Before: Feb 9 10:01:06 2026 GMT Not After : Feb 10 10:01:06 2026 GMT Subject: CN=33e887de6fb014c423ccf0e4a384fcbd93e508ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:27:ea:ae:26:43:58:63:b5:29:07:9c:88:35: 62:91:0c:80:62:e2:a6:b5:7f:f2:eb:fc:2f:24:7f: b7:4e:56:41:02:de:7a:74:76:1b:ba:b2:c6:40:90: c2:f5:b6:e1:be:bd:5b:6e:83:6e:23:6c:f3:d4:8b: a9:f8:27:f8:99:ba:de:07:a4:57:d7:7f:62:76:b9: 96:3e:fe:e9:aa:51:77:85:4c:f9:07:51:29:2e:43: 03:78:c1:f5:dd:34:5f:36:f9:6e:0c:61:29:14:92: e3:a3:89:97:34:d8:2d:c5:f1:7e:33:f9:b7:1c:57: 5c:a7:13:f6:1d:34:36:9e:af:d3:64:9e:7a:97:85: 93:d0:21:e6:d0:83:d7:ab:d4:b4:20:b6:51:d1:73: 78:ac:72:d8:74:5a:6c:5e:88:4b:5f:fc:b8:ad:ad: 3e:79:07:0e:d2:ce:99:5d:f2:48:74:46:79:f4:90: c3:a4:b2:6c:a0:a4:3d:09:8a:08:80:d0:99:5f:fb: 65:1b:09:7b:17:c4:d0:57:f1:ba:98:85:83:22:30: 75:5a:2d:c9:27:66:6b:df:c8:26:b4:c9:6b:35:45: 57:d1:eb:3b:a1:d0:8f:22:76:6c:46:11:7a:3c:60: ee:e9:97:08:ca:34:30:b3:fc:a5:a1:54:f7:b3:59: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:87:DE:6F:B0:14:C4:23:CC:F0:E4:A3:84:FC:BD:93:E5:08:BA X509v3 Authority Key Identifier: keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c6:b5:11:5d:64:2f:70:9f:c7:c4:89:0d:46:da:df:f3:34: db:9d:e2:58:17:7f:3d:b7:4d:e1:85:d9:8c:3c:d6:1c:cc:ad: de:f1:fe:f7:d3:14:2d:6a:19:1e:ae:f8:0f:91:e5:69:b1:12: 83:80:97:57:0e:67:40:3b:cc:85:3f:c4:77:2a:be:59:16:73: 84:e1:58:1b:e1:89:6d:0e:07:c5:45:cc:3d:07:78:47:bc:3e: 22:0b:69:a0:c2:5a:53:e6:aa:08:ee:85:e3:a0:cd:7f:ec:c4: 6d:98:1e:c3:44:bf:7c:b4:4b:f6:c7:4d:2c:aa:07:d4:56:8f: 95:cb:34:7e:4a:ab:b4:a4:75:5c:62:a7:39:ff:85:ba:d1:cb: 90:60:1b:9f:8d:6d:ff:e1:4d:ff:e4:4e:98:ef:af:0c:bd:27: 1d:5c:8d:0e:19:81:df:35:d9:d3:8d:6d:8a:ff:ec:9e:3a:ed: 7c:c5:0b:1a:e7:20:55:be:13:47:09:4b:62:95:68:0e:8f:66: 79:9d:7d:f1:66:aa:61:f9:44:9f:3a:85:42:25:d6:e9:30:10: 1d:90:ac:e3:81:2a:30:11:49:c5:19:7a:c1:6d:84:ed:f4:31: 72:0e:45:c8:40:f2:8c:fd:f4:9a:f0:5a:c0:3e:2d:5a:ef:9a: f0:65:6b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2QOcXCPMncFLktDnRfRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2 OTRjODQwHhcNMjYwMjA5MTAwMTA2WhcNMjYwMjEwMTAwMTA2WjAzMTEwLwYDVQQD EygzM2U4ODdkZTZmYjAxNGM0MjNjY2YwZTRhMzg0ZmNiZDkzZTUwOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSfqriZDWGO1KQeciDVikQyAYuKm tX/y6/wvJH+3TlZBAt56dHYburLGQJDC9bbhvr1bboNuI2zz1Iup+Cf4mbreB6RX 139idrmWPv7pqlF3hUz5B1EpLkMDeMH13TRfNvluDGEpFJLjo4mXNNgtxfF+M/m3 HFdcpxP2HTQ2nq/TZJ56l4WT0CHm0IPXq9S0ILZR0XN4rHLYdFpsXohLX/y4ra0+ eQcO0s6ZXfJIdEZ59JDDpLJsoKQ9CYoIgNCZX/tlGwl7F8TQV/G6mIWDIjB1Wi3J J2Zr38gmtMlrNUVX0es7odCPInZsRhF6PGDu6ZcIyjQws/yloVT3s1nEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPoh95vsBTEI8zw5KOE/L2T5Qi6MB8GA1UdIwQY MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4 LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsa1EV1k L3Cfx8SJDUba3/M0253iWBd/PbdN4YXZjDzWHMyt3vH+99MULWoZHq74D5HlabES g4CXVw5nQDvMhT/Edyq+WRZzhOFYG+GJbQ4HxUXMPQd4R7w+IgtpoMJaU+aqCO6F 46DNf+zEbZgew0S/fLRL9sdNLKoH1FaPlcs0fkqrtKR1XGKnOf+FutHLkGAbn41t /+FN/+ROmO+vDL0nHVyNDhmB3zXZ041tiv/snjrtfMULGucgVb4TRwlLYpVoDo9m eZ198WaqYflEnzqFQiXW6TAQHZCs44EqMBFJxRl6wW2E7fQxcg5FyEDyjP30mvBa wD4tWu+a8GVrxA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:19 2026 by rpki-client