This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft File: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json) Hash identifier: oOzKMM9J6ycOOCzwOklXL9O7USSuf1vS60UcmqpQu0Q= Subject key identifier: A0:CF:1F:A8:CD:36:5A:5C:64:B2:29:94:F8:BD:69:11:B1:BA:3D:48 Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54 Certificate serial: 019C427DA90264388EA2CC2662AE2630B95F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft Manifest number: 1816 Signing time: Mon 09 Feb 2026 13:00:57 +0000 Manifest this update: Mon 09 Feb 2026 13:00:57 +0000 Manifest next update: Tue 10 Feb 2026 13:00:57 +0000 Files and hashes: 1: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: B6N8M4C2IQ/1XJLwRchgK6stx1KSlYy/lB4R5LFg1ZI=) 2: laTjIMA_Q0B0T0NpxDsOwuPbdQo.roa (hash: /wFzciiClGguyVDotQvNMJ7uLZC1BigJCYVP4cmqfI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a9:02:64:38:8e:a2:cc:26:62:ae:26:30:b9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54 Validity Not Before: Feb 9 13:00:57 2026 GMT Not After : Feb 10 13:00:57 2026 GMT Subject: CN=a0cf1fa8cd365a5c64b22994f8bd6911b1ba3d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:2c:25:1b:61:be:1c:af:64:c9:3d:9a:92: ae:09:c6:ac:82:ec:17:a7:7d:a5:9a:b7:10:ab:75: e8:e3:60:ce:2d:3d:bf:8b:7c:7d:f9:02:f7:f3:c1: 2c:e0:77:66:23:a5:a1:e7:70:3b:93:e3:ba:d6:e3: bd:90:9e:e7:8d:46:54:4c:7b:66:b9:4d:55:9b:dd: 27:76:b7:a0:55:1b:f0:bd:78:2a:ca:0b:97:e6:02: 25:69:56:ea:1c:89:b3:ac:78:bb:42:e6:2b:b4:fe: 24:ca:0c:06:8e:e9:56:4a:0d:2e:b9:24:e0:44:41: 3e:7a:45:00:2b:3e:3b:2a:d2:5b:3d:c5:d1:e4:97: a4:42:62:58:08:24:79:a5:61:10:f6:88:77:8c:5e: 47:1d:6e:ba:26:2f:4e:97:80:57:12:8b:e7:47:0e: da:f5:26:08:f4:1b:4d:3c:dc:09:9c:61:4a:f8:8f: 61:33:a9:b5:dd:a4:20:30:fb:c2:0a:fa:8e:b5:d8: 43:50:45:8d:b8:fb:4d:89:7d:44:dd:61:26:bb:a0: 1b:06:c5:00:dd:c9:41:bd:fd:db:28:5e:c5:e4:4c: f8:b7:ce:95:d0:68:ba:a2:5c:79:38:f2:12:90:8e: e6:a4:9f:17:b6:6e:fe:51:1e:76:e8:84:c2:e2:26: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:1F:A8:CD:36:5A:5C:64:B2:29:94:F8:BD:69:11:B1:BA:3D:48 X509v3 Authority Key Identifier: keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:74:8b:f0:72:93:c4:0e:58:6a:33:db:29:47:2b:7b:26:ec: c4:51:f5:f6:3a:33:31:23:47:d5:c4:52:b3:15:3f:33:ab:16: 3e:e0:3a:a5:ab:61:8d:16:bb:a3:5a:ca:89:b6:fa:f2:d9:6b: 28:45:b7:55:4c:95:65:59:9d:9c:3b:f7:44:c8:e4:f8:43:50: fa:aa:08:5d:51:c6:a3:2f:cb:19:c2:9e:71:dc:84:8e:44:dd: 55:d2:90:84:37:20:90:95:bd:95:5b:93:c5:5c:f2:4a:77:a2: 42:08:a5:e7:4b:a5:a2:f8:68:ac:97:a5:e7:a1:b5:a2:43:b5: c2:3d:39:9c:50:d9:dc:dd:5a:b6:cf:a0:17:f0:37:93:ce:d8: af:1b:b4:88:8d:b2:32:ae:41:9d:13:1a:f6:63:06:dc:29:b6: d5:77:e9:06:1c:e0:c2:72:04:68:74:22:ca:5f:f0:4c:e1:c9: 20:f2:4e:a3:ce:4a:04:f8:58:5d:07:bf:15:52:e1:33:5a:c1: 2b:06:a8:3d:38:02:be:31:e1:94:a7:b2:61:0b:fc:0c:6c:d1: d6:22:fd:d1:9a:06:20:ec:44:b2:b3:0a:d9:6d:9a:df:2d:4a: d4:48:5b:07:df:14:62:f7:6d:84:1f:8c:b4:36:dd:e9:d9:e1: 38:5e:68:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfakCZDiOoswmYq4mMLlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5 NmJlNTQwHhcNMjYwMjA5MTMwMDU3WhcNMjYwMjEwMTMwMDU3WjAzMTEwLwYDVQQD EyhhMGNmMWZhOGNkMzY1YTVjNjRiMjI5OTRmOGJkNjkxMWIxYmEzZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6MsJRthvhyvZMk9mpKuCcasguwX p32lmrcQq3Xo42DOLT2/i3x9+QL388Es4HdmI6Wh53A7k+O61uO9kJ7njUZUTHtm uU1Vm90ndregVRvwvXgqyguX5gIlaVbqHImzrHi7QuYrtP4kygwGjulWSg0uuSTg REE+ekUAKz47KtJbPcXR5JekQmJYCCR5pWEQ9oh3jF5HHW66Ji9Ol4BXEovnRw7a 9SYI9BtNPNwJnGFK+I9hM6m13aQgMPvCCvqOtdhDUEWNuPtNiX1E3WEmu6AbBsUA 3clBvf3bKF7F5Ez4t86V0Gi6olx5OPISkI7mpJ8Xtm7+UR526ITC4iYmdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDPH6jNNlpcZLIplPi9aRGxuj1IMB8GA1UdIwQY MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It ZDg3OWY3ZTcwOWQ2LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2 LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXSL8HKT xA5YajPbKUcreybsxFH19jozMSNH1cRSsxU/M6sWPuA6pathjRa7o1rKibb68tlr KEW3VUyVZVmdnDv3RMjk+ENQ+qoIXVHGoy/LGcKecdyEjkTdVdKQhDcgkJW9lVuT xVzySneiQgil50ulovhorJel56G1okO1wj05nFDZ3N1ats+gF/A3k87Yrxu0iI2y Mq5BnRMa9mMG3Cm21XfpBhzgwnIEaHQiyl/wTOHJIPJOo85KBPhYXQe/FVLhM1rB KwaoPTgCvjHhlKeyYQv8DGzR1iL90ZoGIOxEsrMK2W2a3y1K1EhbB98UYvdthB+M tDbd6dnhOF5oaA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:59 2026 by rpki-client