This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json) Hash identifier: 9nxiHQWJUXc+TyXn01UPmh+PTyAHwshKo3w/Pg+hshQ= Subject key identifier: FA:26:30:7A:88:99:59:8D:AE:03:36:9F:28:2A:D0:9D:E6:A5:69:DD Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42 Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842 Certificate serial: 019C420FAE7DE1AF308D4D1FC338A74BFFBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft Manifest number: 034A Signing time: Mon 09 Feb 2026 11:00:49 +0000 Manifest this update: Mon 09 Feb 2026 11:00:49 +0000 Manifest next update: Tue 10 Feb 2026 11:00:49 +0000 Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: StginfnzmMlySeaq3PJq2OILAusQ1sFj7HWiTKUG13E=) 2: uevpehLgWf1goDveIaAf_RWmFqo.roa (hash: 6gDUveXYOEUjPreD5zKGNwaO5HHi1e9vD8LKnyRtvSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ae:7d:e1:af:30:8d:4d:1f:c3:38:a7:4b:ff:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842 Validity Not Before: Feb 9 11:00:49 2026 GMT Not After : Feb 10 11:00:49 2026 GMT Subject: CN=fa26307a8899598dae03369f282ad09de6a569dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:14:ad:64:57:e6:ca:b5:67:94:4d:a2:55: 76:66:b4:37:0e:66:4c:3f:c7:a4:34:fb:93:5b:e1: fd:24:aa:98:8f:e1:06:ac:ef:a3:b7:5b:2d:16:e2: f1:7a:71:c5:a3:8e:55:79:2d:bb:41:7d:dc:55:4b: 15:d1:24:02:2b:43:f7:54:15:fe:62:20:4a:75:5e: fa:4e:e3:15:1a:65:15:b5:15:40:e8:b6:98:21:85: d5:5a:76:95:7f:c3:ab:62:5e:b1:1b:b9:7d:ec:b3: e0:d1:9d:07:37:61:72:b9:c4:6c:18:a8:93:b5:7c: bd:fc:e8:d4:c8:d6:06:aa:4d:b0:5a:2f:5f:1c:53: e4:5a:6a:8f:9b:ca:6c:da:65:f6:05:81:1b:a2:58: be:db:53:ac:74:71:4b:59:c8:1f:39:1e:b2:10:fa: c0:33:23:5f:f2:ef:0d:00:f7:77:04:af:72:89:73: ac:6e:ac:6d:ea:4e:ac:cd:73:52:0c:56:07:c1:bc: e3:4c:02:f9:53:df:e5:8b:a1:8d:69:11:22:9e:90: bc:4a:09:e9:f3:5f:a4:a5:27:5c:6d:4f:09:8e:00: 29:fa:c3:e8:d9:94:9e:18:29:2d:79:a3:e1:72:ed: c1:32:39:12:67:f0:f3:c2:af:0c:06:0e:08:2f:ce: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:30:7A:88:99:59:8D:AE:03:36:9F:28:2A:D0:9D:E6:A5:69:DD X509v3 Authority Key Identifier: keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:89:45:6e:3f:5c:db:d8:53:a7:be:fd:0f:75:2d:47:67:02: 3a:6c:f1:37:3c:96:ea:db:5e:ff:d7:ce:a4:e3:6b:1e:d9:76: d4:0b:37:47:4b:53:b5:aa:15:4f:43:37:2e:db:4f:23:b2:40: a6:99:42:67:46:44:03:a4:c1:52:ba:29:85:cb:70:20:b2:ab: 80:7a:5b:c0:c8:b7:fa:f5:60:cc:68:b8:62:53:db:4c:0c:40: f4:0f:a4:c9:1c:e0:9c:a7:61:0c:37:6b:2d:0e:fb:bf:6a:95: cf:fc:3b:0c:65:e8:cb:79:29:73:10:86:df:ae:af:10:0f:65: 42:ce:c4:cf:5e:6d:92:51:4d:07:f7:2a:ba:bc:72:6c:dd:f4: 50:87:de:e1:e5:d9:ff:87:03:62:ae:67:ab:f0:d0:17:ee:c9: 0d:85:40:7d:9e:a6:37:38:02:22:15:5b:bf:51:60:41:06:d4: 5a:a8:ab:e7:e2:f7:f1:ae:bd:9c:27:37:9a:00:af:00:4e:dd: 42:3f:66:af:c4:d9:6c:08:e9:f5:5a:f1:3e:2a:53:84:02:e1: a6:d7:92:09:bc:fa:ff:ac:c9:ac:94:92:40:56:f2:bb:6e:b1: 06:32:3b:44:57:ef:55:4a:0d:cd:24:f8:32:bf:58:52:53:e8: de:ca:78:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6594a8wjU0fwzinS/+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4N2E3MDRmNDg1ZTExZGVkYWJjNTYyNjRlNWQ4MGMxNDg3 ZTA4NDIwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD EyhmYTI2MzA3YTg4OTk1OThkYWUwMzM2OWYyODJhZDA5ZGU2YTU2OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+QUrWRX5sq1Z5RNolV2ZrQ3DmZM P8ekNPuTW+H9JKqYj+EGrO+jt1stFuLxenHFo45VeS27QX3cVUsV0SQCK0P3VBX+ YiBKdV76TuMVGmUVtRVA6LaYIYXVWnaVf8OrYl6xG7l97LPg0Z0HN2FyucRsGKiT tXy9/OjUyNYGqk2wWi9fHFPkWmqPm8ps2mX2BYEboli+21OsdHFLWcgfOR6yEPrA MyNf8u8NAPd3BK9yiXOsbqxt6k6szXNSDFYHwbzjTAL5U9/li6GNaREinpC8Sgnp 81+kpSdcbU8JjgAp+sPo2ZSeGCkteaPhcu3BMjkSZ/Dzwq8MBg4IL84XvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPomMHqImVmNrgM2nygq0J3mpWndMB8GA1UdIwQY MBaAFBh6cE9IXhHe2rxWJk5dgMFIfghCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEt Mjg1MTZiYjc1MDVjLzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEtMjg1MTZiYjc1MDVj LzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsolFbj9c 29hTp779D3UtR2cCOmzxNzyW6tte/9fOpONrHtl21As3R0tTtaoVT0M3LttPI7JA pplCZ0ZEA6TBUrophctwILKrgHpbwMi3+vVgzGi4YlPbTAxA9A+kyRzgnKdhDDdr LQ77v2qVz/w7DGXoy3kpcxCG366vEA9lQs7Ez15tklFNB/cqurxybN30UIfe4eXZ /4cDYq5nq/DQF+7JDYVAfZ6mNzgCIhVbv1FgQQbUWqir5+L38a69nCc3mgCvAE7d Qj9mr8TZbAjp9VrxPipThALhpteSCbz6/6zJrJSSQFbyu26xBjI7RFfvVUoNzST4 Mr9YUlPo3sp4TA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:42 2026 by rpki-client