This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json) Hash identifier: zafk3uw/NaEoGx5fwDME1e0Kqs3sNxK7gbrZDH8HIxo= Subject key identifier: AD:72:7F:FE:31:60:BA:3B:6C:F8:A1:CA:E6:A9:B5:5B:76:62:FE:9A Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b Certificate serial: 019C41D834C8731B68995EFF6A7F3B7B5090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft Manifest number: 09BA Signing time: Mon 09 Feb 2026 10:00:14 +0000 Manifest this update: Mon 09 Feb 2026 10:00:14 +0000 Manifest next update: Tue 10 Feb 2026 10:00:14 +0000 Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: Eazl2J/WgDbI/fMt3bXAgPRDGCWhfy/c0/uCzGW0ub8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:34:c8:73:1b:68:99:5e:ff:6a:7f:3b:7b:50:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b Validity Not Before: Feb 9 10:00:14 2026 GMT Not After : Feb 10 10:00:14 2026 GMT Subject: CN=ad727ffe3160ba3b6cf8a1cae6a9b55b7662fe9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:1b:8d:f6:e7:d3:40:fe:e7:f4:a9:b5:3c: 68:9b:4f:65:84:90:5b:ad:ce:3d:2b:6c:65:14:d5: 80:35:59:fb:af:f4:9d:0d:fa:fa:7d:96:ae:07:d1: 55:1f:53:99:41:22:bf:cf:f2:2c:34:49:6c:88:ed: a2:31:5e:fc:9b:dd:15:fb:66:ef:47:7a:36:c6:4f: a8:85:a7:86:84:d4:40:87:ea:3e:56:4f:d0:96:8e: b0:38:de:da:58:90:55:95:4e:90:f9:be:d6:f2:6f: 0c:9d:59:24:1e:9b:b3:2e:69:b5:dd:9c:93:fb:30: 20:29:0f:ff:8d:d1:2a:67:75:a4:89:d9:22:79:cd: f5:79:a2:f0:45:fa:ec:ad:d4:59:be:ee:3a:e1:33: 44:5d:04:db:4e:4f:74:96:20:a4:16:f1:f6:32:25: 6f:53:2c:5f:ba:2d:27:2b:8f:c2:29:f6:55:7d:f8: 21:e1:b3:a5:2d:9c:1e:2b:40:19:51:b2:71:cc:7d: 63:7b:07:77:89:53:35:30:a7:69:33:17:a1:4c:27: eb:cf:c1:5f:4b:0a:a2:6c:6f:94:96:5b:34:c6:d2: d4:2a:3d:76:b4:2c:b2:8b:93:cb:8a:74:02:21:a0: 6d:21:1d:ea:74:f0:3d:fb:4b:76:47:0f:08:94:5b: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:72:7F:FE:31:60:BA:3B:6C:F8:A1:CA:E6:A9:B5:5B:76:62:FE:9A X509v3 Authority Key Identifier: keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8a:09:f4:0f:b7:7d:13:df:91:d7:b9:61:bd:c6:ce:e4:27: 14:aa:9c:82:6e:c8:02:60:40:de:4c:48:66:70:ce:52:08:d4: 1e:4d:1f:ee:0b:0d:ae:ba:65:39:20:5b:cc:ce:a8:46:3d:37: dc:73:ee:84:97:d4:7c:b8:2b:d5:e4:2c:c7:2a:fa:a5:8d:6a: a1:b6:94:f6:01:c4:31:d0:15:b0:fd:85:07:22:9e:c5:2c:55: 4e:b4:66:a4:95:59:b5:c6:94:2e:eb:2c:dc:e0:8c:1a:70:6c: d9:cb:8e:f6:d4:11:03:65:2d:08:3e:46:23:59:9a:4d:75:fe: 8d:c7:2f:9d:6f:5c:b1:79:4b:06:54:35:8f:bc:35:9e:5e:4e: b2:6b:43:54:7c:f0:28:dc:c7:35:3f:79:98:ca:ad:8b:bd:76: 73:85:7f:96:26:ca:68:b6:52:b8:0a:65:53:38:e4:a7:f4:c9: ab:1a:3c:a4:67:79:2f:60:0c:c6:f1:84:b4:17:69:f9:de:db: 12:ce:13:b3:37:15:93:47:39:34:9e:04:bf:60:07:82:90:50: e8:6f:7f:3f:00:e9:e5:1b:44:3e:90:84:63:df:75:4a:ae:eb: 21:53:e9:03:2e:fa:30:33:d7:cb:ef:e7:8d:e2:08:e2:46:34: 69:46:df:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DTIcxtomV7/an87e1CQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYTQ5NGExZGFlNTQ4NzNkZmEyZGViNTZkMDMxMzM0MDc2 YWM5NWIwHhcNMjYwMjA5MTAwMDE0WhcNMjYwMjEwMTAwMDE0WjAzMTEwLwYDVQQD EyhhZDcyN2ZmZTMxNjBiYTNiNmNmOGExY2FlNmE5YjU1Yjc2NjJmZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziIbjfbn00D+5/SptTxom09lhJBb rc49K2xlFNWANVn7r/SdDfr6fZauB9FVH1OZQSK/z/IsNElsiO2iMV78m90V+2bv R3o2xk+ohaeGhNRAh+o+Vk/Qlo6wON7aWJBVlU6Q+b7W8m8MnVkkHpuzLmm13ZyT +zAgKQ//jdEqZ3Wkidkiec31eaLwRfrsrdRZvu464TNEXQTbTk90liCkFvH2MiVv Uyxfui0nK4/CKfZVffgh4bOlLZweK0AZUbJxzH1jewd3iVM1MKdpMxehTCfrz8Ff SwqibG+Ulls0xtLUKj12tCyyi5PLinQCIaBtIR3qdPA9+0t2Rw8IlFsJPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1yf/4xYLo7bPihyuaptVt2Yv6aMB8GA1UdIwQY MBaAFIKklKHa5Uhz36LetW0DEzQHaslbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lYWYxMDctNjcyMy00ZDQ2LTllMGMt YzBiZDAyMDE0OTcxLzEvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lYWYxMDctNjcyMy00ZDQ2LTllMGMtYzBiZDAyMDE0OTcx LzEvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4oJ9A+3 fRPfkde5Yb3GzuQnFKqcgm7IAmBA3kxIZnDOUgjUHk0f7gsNrrplOSBbzM6oRj03 3HPuhJfUfLgr1eQsxyr6pY1qobaU9gHEMdAVsP2FByKexSxVTrRmpJVZtcaULuss 3OCMGnBs2cuO9tQRA2UtCD5GI1maTXX+jccvnW9csXlLBlQ1j7w1nl5OsmtDVHzw KNzHNT95mMqti712c4V/libKaLZSuAplUzjkp/TJqxo8pGd5L2AMxvGEtBdp+d7b Es4TszcVk0c5NJ4Ev2AHgpBQ6G9/PwDp5RtEPpCEY991Sq7rIVPpAy76MDPXy+/n jeII4kY0aUbftQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:49 2026 by rpki-client