This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft File: giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json) Hash identifier: vGlA87X7S2rgfEPL9x+48DsffRPDT1hJKP32EoIavuM= Subject key identifier: C1:21:BC:F5:B8:0F:FD:6F:17:FA:57:6F:46:D9:05:7E:55:2C:0E:62 Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb Certificate serial: 019C4358E3C388C97A8E34D98F91A5D29321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft Manifest number: 1701 Signing time: Mon 09 Feb 2026 17:00:24 +0000 Manifest this update: Mon 09 Feb 2026 17:00:24 +0000 Manifest next update: Tue 10 Feb 2026 17:00:24 +0000 Files and hashes: 1: 6k_g9zpR0oUHNJNOJpWC6Uips58.roa (hash: xsbRkvDZeur19giHSHwKBgppoMpB/PB9Dmlu/eOW38M=) 2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: ePcdbIAOMH4uQs+aTHbrZG5zLmYhrpL9cMkL9fnBCs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e3:c3:88:c9:7a:8e:34:d9:8f:91:a5:d2:93:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb Validity Not Before: Feb 9 17:00:24 2026 GMT Not After : Feb 10 17:00:24 2026 GMT Subject: CN=c121bcf5b80ffd6f17fa576f46d9057e552c0e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:23:b0:6d:02:ef:df:2b:c1:1b:4a:27:6f: 87:01:4b:77:59:2d:e1:9e:94:d3:c0:b6:da:b7:c9: d8:11:c7:1b:20:b1:9c:1a:9f:27:1a:08:10:af:47: 34:09:59:0f:67:c6:89:47:35:26:38:fb:3f:63:fc: 08:a9:05:58:9c:8c:44:3e:2f:79:18:be:f0:d9:12: 51:d2:a5:76:52:a8:dc:5d:52:da:4d:97:49:10:00: f3:22:d4:b1:ba:18:13:7c:4f:a0:c5:02:0b:aa:64: e1:2c:e5:ac:63:02:31:c7:02:6c:85:8c:fd:4b:24: 64:81:80:95:18:07:19:ac:d0:8f:c9:db:5a:69:d3: 02:be:a6:d7:1b:16:b0:f4:29:16:f5:86:25:b9:22: 7d:ef:22:14:38:a3:96:84:60:39:7a:82:3a:79:28: 0e:ee:07:1e:52:1e:ba:50:47:27:f0:f4:d7:38:1f: 99:a3:a7:90:d8:54:a7:f5:db:07:7e:e7:ad:4c:0e: 6a:fe:72:58:d6:59:47:78:bc:8b:2b:c7:95:1e:b9: 11:ce:9e:15:03:81:9f:88:76:b4:74:98:d4:8a:cd: f9:41:f3:ff:8c:4c:2b:bc:df:8b:b7:64:93:f6:94: 3c:92:28:7a:31:a9:b5:a0:47:86:90:e6:05:c8:14: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:21:BC:F5:B8:0F:FD:6F:17:FA:57:6F:46:D9:05:7E:55:2C:0E:62 X509v3 Authority Key Identifier: keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:12:33:65:dd:92:1a:11:a7:d6:cb:af:d2:ec:72:a2:29: a9:62:95:7b:1b:95:2b:79:8e:82:fe:73:26:3c:fb:53:18:8f: 55:57:a5:6f:2f:27:99:1b:3c:8e:d7:54:63:0f:b6:d0:5e:82: 2e:b4:73:85:b0:aa:69:3b:4f:06:1a:c8:e4:35:07:50:8e:28: f2:53:62:c6:b9:be:b9:63:50:06:f1:38:b7:a4:25:39:e6:80: 02:4b:10:ca:03:0f:d7:58:ee:d0:55:8a:f4:7c:82:ed:c6:f1: 0c:7b:3a:7f:3f:d2:b3:5e:46:05:e0:6c:cf:a8:7e:aa:90:90: 73:cd:7f:df:34:4d:7c:73:d4:71:6f:20:2e:4a:5b:8e:62:ee: d3:ef:c8:a5:c1:30:c0:09:7b:7e:35:6e:6f:28:b7:7a:73:1e: e7:6e:d3:fe:66:bb:2d:00:bc:e8:47:6f:fc:02:23:8d:15:e6: 02:f1:8d:0b:44:41:63:50:26:27:94:e4:ad:c6:88:c9:18:de: 9a:67:be:49:63:ba:6b:d4:9d:7a:b8:da:0d:ec:d6:1d:cf:1a: 40:66:7d:43:f0:cd:9b:bf:13:6d:b9:97:aa:2a:28:2b:cb:a5: 8e:31:6f:50:1f:d4:55:86:65:e2:25:dd:34:e3:c9:7b:22:13: c7:f9:24:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOPDiMl6jjTZj5Gl0pMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMjZhOTk3NDEwMmJhNTgyMjE3MTg4YmU2ZDQ5ZDg3NzZk M2JlYmIwHhcNMjYwMjA5MTcwMDI0WhcNMjYwMjEwMTcwMDI0WjAzMTEwLwYDVQQD EyhjMTIxYmNmNWI4MGZmZDZmMTdmYTU3NmY0NmQ5MDU3ZTU1MmMwZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4jsG0C798rwRtKJ2+HAUt3WS3h npTTwLbat8nYEccbILGcGp8nGggQr0c0CVkPZ8aJRzUmOPs/Y/wIqQVYnIxEPi95 GL7w2RJR0qV2UqjcXVLaTZdJEADzItSxuhgTfE+gxQILqmThLOWsYwIxxwJshYz9 SyRkgYCVGAcZrNCPydtaadMCvqbXGxaw9CkW9YYluSJ97yIUOKOWhGA5eoI6eSgO 7gceUh66UEcn8PTXOB+Zo6eQ2FSn9dsHfuetTA5q/nJY1llHeLyLK8eVHrkRzp4V A4GfiHa0dJjUis35QfP/jEwrvN+Lt2ST9pQ8kih6Mam1oEeGkOYFyBQVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEhvPW4D/1vF/pXb0bZBX5VLA5iMB8GA1UdIwQY MBaAFIImqZdBArpYIhcYi+bUnYd20767MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lhcGwwRUN1bGdpRnhpTDV0U2RoM2JUdnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNTQ3N2YtODBkMC00ZWE0LWJiZGUt NzY3YjcyZWI0MDdiLzEvZ2lhcGwwRUN1bGdpRnhpTDV0U2RoM2JUdnJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zNTQ3N2YtODBkMC00ZWE0LWJiZGUtNzY3YjcyZWI0MDdi LzEvZ2lhcGwwRUN1bGdpRnhpTDV0U2RoM2JUdnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMUSM2Xd khoRp9bLr9LscqIpqWKVexuVK3mOgv5zJjz7UxiPVVelby8nmRs8jtdUYw+20F6C LrRzhbCqaTtPBhrI5DUHUI4o8lNixrm+uWNQBvE4t6QlOeaAAksQygMP11ju0FWK 9HyC7cbxDHs6fz/Ss15GBeBsz6h+qpCQc81/3zRNfHPUcW8gLkpbjmLu0+/IpcEw wAl7fjVubyi3enMe527T/ma7LQC86Edv/AIjjRXmAvGNC0RBY1AmJ5TkrcaIyRje mme+SWO6a9SderjaDezWHc8aQGZ9Q/DNm78TbbmXqiooK8uljjFvUB/UVYZl4iXd NOPJeyITx/kkCA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:23 2026 by rpki-client