This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json) Hash identifier: wzmx7O1tyzfXKwyFRs8q20nHJdonnKkAwaHJhjL3r34= Subject key identifier: 17:CC:A0:36:58:C8:85:51:9A:1C:8D:5F:3A:0D:FB:D6:6F:22:96:CF Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698 Certificate serial: 019C439039E0DED5C202F2CA5B88CF9BC1ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft Manifest number: 08BE Signing time: Mon 09 Feb 2026 18:00:51 +0000 Manifest this update: Mon 09 Feb 2026 18:00:51 +0000 Manifest next update: Tue 10 Feb 2026 18:00:51 +0000 Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: e3Fe6Bi5uKHB3jy6pfSKnvQWTd1co4E1wvjH0UBgCsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:39:e0:de:d5:c2:02:f2:ca:5b:88:cf:9b:c1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698 Validity Not Before: Feb 9 18:00:51 2026 GMT Not After : Feb 10 18:00:51 2026 GMT Subject: CN=17cca03658c885519a1c8d5f3a0dfbd66f2296cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:88:be:7d:d3:55:8a:9e:fd:90:ed:da:ee: 31:38:96:2f:ee:dc:57:ad:0e:17:b4:86:e7:67:03: c9:48:10:93:49:dd:e8:da:d9:a8:cf:f0:b3:f4:8f: 2f:1b:81:78:cd:6c:00:82:47:63:4d:d7:69:55:73: 06:c3:b2:26:31:1b:97:8b:8c:e5:6d:0f:37:75:13: e2:15:2d:a2:aa:bb:09:11:24:d2:a0:0e:f2:55:19: 3a:e5:f5:7a:65:bc:5a:d7:b5:fd:b0:7b:9f:84:19: 77:0d:a4:bb:f6:a1:8b:8d:5a:bb:a9:5c:be:08:f4: 28:09:1b:b9:52:ed:62:08:ad:ee:dd:9f:94:59:c4: 37:29:3c:bb:a0:03:1b:ae:51:5d:4a:3e:f5:cf:b4: 96:08:43:9e:f4:bf:8a:84:9d:58:20:43:db:e6:36: 67:9d:0b:59:dc:6d:d0:fa:86:89:ff:fc:3f:da:54: 6c:fe:cb:85:15:35:27:51:fe:3b:14:19:58:e3:6d: ee:1c:83:29:fa:8e:2f:ee:2d:e0:f7:c9:f1:2b:a3: 27:3d:37:f4:78:9c:a6:53:ba:cf:a0:9c:e4:68:42: 03:b3:42:f8:fb:1d:8e:d5:78:16:56:4c:7a:ec:b7: e9:04:42:6f:49:6b:94:0c:9d:5b:fd:bc:de:ac:f6: a4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CC:A0:36:58:C8:85:51:9A:1C:8D:5F:3A:0D:FB:D6:6F:22:96:CF X509v3 Authority Key Identifier: keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2a:d5:c3:14:eb:0e:0b:a1:9e:49:c2:0c:f2:37:49:8a:39: 42:63:5e:2d:7f:2c:7f:a0:f0:a6:54:86:56:5d:d1:a1:bb:55: f8:06:e4:b1:cd:a4:17:41:7b:db:e5:ef:c6:be:f0:6e:37:9b: 7d:06:ea:c9:ec:88:6b:75:ca:c7:6e:ca:6e:59:bd:7b:3c:66: bb:ed:67:76:be:2b:8b:0b:d6:02:ee:b3:12:c8:77:c0:33:d9: 4a:66:e0:19:94:c3:cf:b2:69:2b:e9:73:1d:ac:e2:5a:6d:5e: 83:bf:a1:cc:a4:d9:2f:2e:71:21:b8:e3:dc:77:0a:ba:da:12: 72:1d:78:8e:08:b2:03:2c:5a:df:8d:80:e8:6b:b8:4a:99:68: 3b:66:c6:32:52:c1:6d:3a:48:ad:4c:7f:6c:61:86:17:12:d6: 75:c6:4b:32:14:4f:de:e4:05:f9:ab:d4:21:3d:fd:23:13:8e: 59:ff:61:02:a2:d6:35:90:5d:3c:f2:a3:43:c6:d1:0f:48:01: ac:72:3d:dc:54:fc:f6:8b:90:1b:54:8f:f8:ac:8f:33:f3:64: f3:1b:e3:a6:0a:56:1a:2c:16:50:a9:b9:0e:11:cd:31:33:69: f4:ff:da:b3:3b:11:97:56:f6:85:13:ed:df:bd:f3:ff:23:5a: b9:43:ce:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDng3tXCAvLKW4jPm8HtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjBjOTQzNTEwNjZlYzA2ZGViZmFiMmJjYTlkZmFlZDQw N2U2OTgwHhcNMjYwMjA5MTgwMDUxWhcNMjYwMjEwMTgwMDUxWjAzMTEwLwYDVQQD EygxN2NjYTAzNjU4Yzg4NTUxOWExYzhkNWYzYTBkZmJkNjZmMjI5NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsCIvn3TVYqe/ZDt2u4xOJYv7txX rQ4XtIbnZwPJSBCTSd3o2tmoz/Cz9I8vG4F4zWwAgkdjTddpVXMGw7ImMRuXi4zl bQ83dRPiFS2iqrsJESTSoA7yVRk65fV6Zbxa17X9sHufhBl3DaS79qGLjVq7qVy+ CPQoCRu5Uu1iCK3u3Z+UWcQ3KTy7oAMbrlFdSj71z7SWCEOe9L+KhJ1YIEPb5jZn nQtZ3G3Q+oaJ//w/2lRs/suFFTUnUf47FBlY423uHIMp+o4v7i3g98nxK6MnPTf0 eJymU7rPoJzkaEIDs0L4+x2O1XgWVkx67LfpBEJvSWuUDJ1b/bzerPakFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfMoDZYyIVRmhyNXzoN+9ZvIpbPMB8GA1UdIwQY MBaAFIJgyUNRBm7Abev6sryp367UB+aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQt ODQ2NGE4MTE0MTgwLzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQtODQ2NGE4MTE0MTgw LzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSrVwxTr DguhnknCDPI3SYo5QmNeLX8sf6DwplSGVl3RobtV+Abksc2kF0F72+Xvxr7wbjeb fQbqyeyIa3XKx27Kblm9ezxmu+1ndr4riwvWAu6zEsh3wDPZSmbgGZTDz7JpK+lz HaziWm1eg7+hzKTZLy5xIbjj3HcKutoSch14jgiyAyxa342A6Gu4SploO2bGMlLB bTpIrUx/bGGGFxLWdcZLMhRP3uQF+avUIT39IxOOWf9hAqLWNZBdPPKjQ8bRD0gB rHI93FT89ouQG1SP+KyPM/Nk8xvjpgpWGiwWUKm5DhHNMTNp9P/aszsRl1b2hRPt 373z/yNauUPOOA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:08 2026 by rpki-client