This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json) Hash identifier: 2Xjcgh4QF8yj7Lp8UywcvbNNRUWsxS/P1cbljpIZiz8= Subject key identifier: F3:47:62:09:65:43:C3:80:F8:64:EB:0D:39:39:54:3E:9B:A9:F3:F4 Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Certificate serial: 019C432208110623147E9D85EA472F5D31A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 16:00:29 +0000 Manifest this update: Mon 09 Feb 2026 16:00:29 +0000 Manifest next update: Tue 10 Feb 2026 16:00:29 +0000 Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: TtVtpDH2CleKKX7xx23GN1aDqOLe5LR5SuRrTE7K7VY=) 2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:08:11:06:23:14:7e:9d:85:ea:47:2f:5d:31:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Validity Not Before: Feb 9 16:00:29 2026 GMT Not After : Feb 10 16:00:29 2026 GMT Subject: CN=f34762096543c380f864eb0d3939543e9ba9f3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:c7:db:0f:18:b7:b1:5f:ae:88:26:11:9b: b4:f9:a5:44:78:d1:ed:0e:9e:6f:82:7a:7a:ce:b9: f7:76:1c:78:b4:15:e3:2e:9a:46:a8:9a:b0:59:91: 4c:b3:cf:cb:6d:c3:0b:f9:a9:99:f1:ec:18:3e:55: 41:ca:cc:6e:bf:3d:38:2d:e8:e6:2e:ef:df:2f:a4: e6:82:61:3c:1a:35:20:96:a7:20:37:66:44:41:26: 18:1d:ca:b5:16:28:24:c5:f8:49:f1:91:8b:7f:ec: 67:10:bb:4c:34:0f:e7:5b:06:79:f5:6b:8a:16:6a: e1:3a:b7:b7:c9:f0:bc:78:fa:72:92:4f:3b:44:f9: 6b:9a:6a:be:26:18:e3:ff:52:e6:5e:2a:fc:6e:be: 23:96:96:05:eb:20:7b:a9:7d:e0:b5:48:4a:ac:95: 29:52:7a:1e:b1:98:78:75:83:a9:39:2e:93:00:16: 0d:79:91:0e:c5:b7:56:dc:4f:e7:ca:59:ca:0e:d2: ea:05:6b:87:c5:c4:7e:d0:76:5e:69:7d:7c:e9:1c: 6d:7f:96:02:13:59:46:8a:fb:d0:d0:3e:ca:45:f6: dd:7e:4f:52:69:48:d5:45:28:b6:36:4c:07:e6:9a: ed:3f:b9:d4:5e:d3:c9:7f:30:99:6c:b4:2b:cc:68: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:47:62:09:65:43:C3:80:F8:64:EB:0D:39:39:54:3E:9B:A9:F3:F4 X509v3 Authority Key Identifier: keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1b:1f:24:72:d3:28:8c:a0:9e:bc:a6:99:23:2e:49:1a:87: 40:77:04:fd:80:99:92:68:46:1e:e3:6e:3c:70:19:51:31:ec: d5:22:8e:09:11:66:31:9d:d7:fe:e8:fe:82:dd:93:39:92:0b: 33:9e:59:6e:b7:6d:08:86:63:c5:ae:95:05:2e:89:cf:03:88: 6d:ac:2a:f5:a4:02:53:93:6f:90:17:23:4c:62:a0:ac:1b:22: be:e6:49:ab:8d:72:22:8a:75:14:5f:e2:38:cf:b7:e7:00:91: 0f:b7:94:25:77:94:a5:8b:2a:f8:bb:36:a1:35:51:4e:c6:ba: 8d:1f:4b:88:41:f7:65:09:20:ae:7f:51:cc:6c:a3:83:e3:1d: 8e:47:cf:a1:56:7d:8a:ef:63:37:4c:56:c7:ce:13:2b:ff:ea: af:87:1a:16:b5:3e:e1:62:9e:e8:fb:36:0e:46:b7:8b:97:30: ca:df:88:73:f5:98:96:4a:3e:28:be:26:21:61:b9:82:95:30: 9c:70:0b:e2:a7:7a:f2:3f:50:e5:17:31:5f:95:11:cb:75:a2: e6:99:68:e7:8b:75:e9:92:33:90:d1:80:7d:30:85:f6:a8:6a: 49:1e:e2:bf:3f:9a:ba:1e:1c:ce:7f:39:cd:07:df:37:df:e3: 81:4e:57:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIggRBiMUfp2F6kcvXTGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj MmE1NWYwHhcNMjYwMjA5MTYwMDI5WhcNMjYwMjEwMTYwMDI5WjAzMTEwLwYDVQQD EyhmMzQ3NjIwOTY1NDNjMzgwZjg2NGViMGQzOTM5NTQzZTliYTlmM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0HH2w8Yt7FfrogmEZu0+aVEeNHt Dp5vgnp6zrn3dhx4tBXjLppGqJqwWZFMs8/LbcML+amZ8ewYPlVBysxuvz04Lejm Lu/fL6TmgmE8GjUglqcgN2ZEQSYYHcq1FigkxfhJ8ZGLf+xnELtMNA/nWwZ59WuK FmrhOre3yfC8ePpykk87RPlrmmq+Jhjj/1LmXir8br4jlpYF6yB7qX3gtUhKrJUp UnoesZh4dYOpOS6TABYNeZEOxbdW3E/nylnKDtLqBWuHxcR+0HZeaX186Rxtf5YC E1lGivvQ0D7KRfbdfk9SaUjVRSi2NkwH5prtP7nUXtPJfzCZbLQrzGiTRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNHYgllQ8OA+GTrDTk5VD6bqfP0MB8GA1UdIwQY MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt NjAxMDdiNGVhNGViLzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRsfJHLT KIygnrymmSMuSRqHQHcE/YCZkmhGHuNuPHAZUTHs1SKOCRFmMZ3X/uj+gt2TOZIL M55ZbrdtCIZjxa6VBS6JzwOIbawq9aQCU5NvkBcjTGKgrBsivuZJq41yIop1FF/i OM+35wCRD7eUJXeUpYsq+Ls2oTVRTsa6jR9LiEH3ZQkgrn9RzGyjg+MdjkfPoVZ9 iu9jN0xWx84TK//qr4caFrU+4WKe6Ps2Dka3i5cwyt+Ic/WYlko+KL4mIWG5gpUw nHAL4qd68j9Q5RcxX5URy3Wi5plo54t16ZIzkNGAfTCF9qhqSR7ivz+auh4czn85 zQffN9/jgU5X9w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:26 2026 by rpki-client