This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json) Hash identifier: EPHcHpgp6K+0rp/NkxG/NfRbUH2jCWO+Fai7s7N+hSE= Subject key identifier: 46:18:3B:43:AB:51:A1:21:85:DB:61:B7:C9:16:53:83:B2:0C:B8:31 Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Certificate serial: 019C42B477C69C1F8058FE9A52CE7479DCFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=) 2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: wrHpfWNb2q5GWkDBFjLo+jWpGkWtIy997ntSe1+96pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:77:c6:9c:1f:80:58:fe:9a:52:ce:74:79:dc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=46183b43ab51a12185db61b7c9165383b20cb831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:f3:2d:38:0d:4a:40:2f:40:19:0c:91:aa: 9d:66:d8:53:7f:0f:da:ab:aa:c0:32:f9:d3:02:ab: 76:3e:fe:3c:ef:b7:65:77:94:90:15:08:1e:b6:f8: 32:b8:35:6a:a7:0d:65:bf:be:0b:8d:fd:5f:c7:c2: f5:e3:d5:58:99:06:06:be:5e:72:74:c2:45:64:eb: 30:3f:f8:2b:cc:2a:a6:96:b2:d0:a9:16:38:99:fd: 44:6b:5c:77:77:ec:a3:b0:a8:99:0b:92:ef:70:97: ba:d5:82:d3:6e:35:d6:79:28:26:09:b6:ee:0a:25: d8:9a:4f:62:47:a4:9b:53:b3:cd:b2:19:60:4d:51: ef:41:5c:14:8d:1c:57:2e:fa:72:35:d1:c7:fd:88: c5:47:be:69:be:39:da:32:c8:f3:de:e5:0d:05:d4: c5:33:3a:0f:2e:26:e9:51:2e:81:ce:03:f5:51:1f: 5c:6e:e3:3e:6c:5f:74:ab:88:21:1d:6a:fa:f8:79: 38:c2:8a:46:d5:1b:d0:2b:b8:a4:d7:38:ff:74:d6: b0:41:46:b7:53:1d:e7:7d:6f:63:84:1a:98:15:46: 1d:47:28:81:0c:32:09:50:f3:3f:73:9e:12:e1:6d: e5:f4:ae:6b:fb:30:8a:6b:84:32:2f:1e:e6:d0:a0: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:18:3B:43:AB:51:A1:21:85:DB:61:B7:C9:16:53:83:B2:0C:B8:31 X509v3 Authority Key Identifier: keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:72:03:1a:5d:83:ca:ff:59:8e:81:e5:66:e1:36:57:c1:28: f6:17:59:9d:3c:c0:7b:f6:79:78:b7:9d:51:e2:fd:50:8a:5e: 77:dc:0d:1b:9a:7b:0b:36:8c:e5:be:40:85:45:01:d2:ca:02: b8:90:e6:55:a5:c9:bb:f9:80:d9:26:8f:5d:c1:ea:88:b2:e6: c9:67:42:86:02:17:b4:1f:25:15:87:c0:02:8d:5c:07:65:c6: b8:20:22:f6:13:b3:00:99:9a:96:97:5c:f5:dc:4d:69:92:2b: 0c:cf:21:25:53:10:b2:52:04:0d:3d:e0:9c:25:f0:82:f5:0b: 17:89:fd:5b:66:07:e1:32:c5:a6:03:ca:13:c1:09:82:84:10: b9:1f:22:ec:ac:a0:57:da:29:11:52:bb:8b:5b:67:60:59:b7: d2:f2:90:aa:ef:f4:c0:6d:6f:8f:9a:09:58:e6:bb:70:2e:28: 62:59:c5:8d:f8:70:a8:46:dc:62:47:b6:67:11:3e:f6:e5:13: 6f:9c:36:ee:b8:25:81:d1:88:17:5c:d7:53:08:db:62:19:eb: d1:f4:56:8e:a5:3a:35:a9:8d:de:6b:ac:11:38:54:47:9e:ac: 7e:56:3a:5d:34:66:b7:cc:d5:34:10:5c:fa:d3:c8:4a:4a:8e: 23:7e:90:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHfGnB+AWP6aUs50edz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm ZDMxZDYwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD Eyg0NjE4M2I0M2FiNTFhMTIxODVkYjYxYjdjOTE2NTM4M2IyMGNiODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit3zLTgNSkAvQBkMkaqdZthTfw/a q6rAMvnTAqt2Pv4877dld5SQFQgetvgyuDVqpw1lv74Ljf1fx8L149VYmQYGvl5y dMJFZOswP/grzCqmlrLQqRY4mf1Ea1x3d+yjsKiZC5LvcJe61YLTbjXWeSgmCbbu CiXYmk9iR6SbU7PNshlgTVHvQVwUjRxXLvpyNdHH/YjFR75pvjnaMsjz3uUNBdTF MzoPLibpUS6BzgP1UR9cbuM+bF90q4ghHWr6+Hk4wopG1RvQK7ik1zj/dNawQUa3 Ux3nfW9jhBqYFUYdRyiBDDIJUPM/c54S4W3l9K5r+zCKa4QyLx7m0KBEFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYYO0OrUaEhhdtht8kWU4OyDLgxMB8GA1UdIwQY MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3IDGl2D yv9ZjoHlZuE2V8Eo9hdZnTzAe/Z5eLedUeL9UIped9wNG5p7CzaM5b5AhUUB0soC uJDmVaXJu/mA2SaPXcHqiLLmyWdChgIXtB8lFYfAAo1cB2XGuCAi9hOzAJmalpdc 9dxNaZIrDM8hJVMQslIEDT3gnCXwgvULF4n9W2YH4TLFpgPKE8EJgoQQuR8i7Kyg V9opEVK7i1tnYFm30vKQqu/0wG1vj5oJWOa7cC4oYlnFjfhwqEbcYke2ZxE+9uUT b5w27rglgdGIF1zXUwjbYhnr0fRWjqU6NamN3musEThUR56sflY6XTRmt8zVNBBc +tPISkqOI36Qhg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:51 2026 by rpki-client