This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json) Hash identifier: fR68dbGZIneTcKDSYnWLxFU7o8C30VrbcLNNm4LjaZM= Subject key identifier: 7B:9A:13:D4:26:E7:D6:AC:0D:79:56:A1:6F:20:29:96:53:14:E4:6F Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e Certificate serial: 019C4321C9D0263644443F0762D5B0DDEC33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft Manifest number: 0F53 Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: dkvm7R+lMHxwaFuj1GAKGESs/0VlWi5icFJ5kD4iptQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c9:d0:26:36:44:44:3f:07:62:d5:b0:dd:ec:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=7b9a13d426e7d6ac0d7956a16f2029965314e46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:6d:a5:87:c3:37:af:eb:87:40:aa:85:17: 5a:8c:17:7e:f6:18:de:85:df:64:c8:94:e0:68:96: 77:ee:9f:68:31:4e:e3:56:df:37:1b:2a:1d:5f:79: d5:02:e8:98:c1:a2:19:7d:65:9b:b6:a8:96:12:fb: ae:40:6a:16:f8:50:41:55:9d:12:da:47:9d:df:b8: a6:06:5b:57:72:81:cc:17:33:38:71:f6:12:57:95: da:4e:ac:a4:e5:69:7a:a0:c2:00:8c:7b:b6:89:a3: 56:8f:8a:a7:23:4e:23:d0:fa:ad:dd:c7:f3:36:49: 20:89:d0:19:56:db:54:48:51:a1:4e:cb:93:68:fa: 5a:14:fc:51:23:30:9f:63:a6:cc:ec:07:c7:33:f0: 50:fa:68:0e:38:2d:af:6a:95:fe:5b:fa:1b:69:4f: 5e:d1:09:e1:fb:8e:88:b8:c0:f0:45:58:99:5e:1b: a5:ea:46:a6:d2:a4:45:2d:28:0a:de:10:ef:33:45: 31:84:6d:0e:e6:46:4a:a0:28:54:bb:26:cf:b9:79: 61:fd:6e:d7:a7:0a:0a:c6:90:be:69:14:03:d3:7f: 4f:44:ca:84:9a:96:a0:59:bb:1e:13:07:44:c1:fb: 6a:65:f9:1b:d4:2b:bd:d3:d7:0a:79:ab:51:65:83: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:13:D4:26:E7:D6:AC:0D:79:56:A1:6F:20:29:96:53:14:E4:6F X509v3 Authority Key Identifier: keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2f:dd:a5:d4:00:8d:9f:da:f6:ef:97:59:e3:52:9b:5b:a6: 1b:72:54:85:5f:ab:6b:34:82:a4:ce:4a:c3:fd:db:1d:7b:9e: c3:a2:45:56:d5:b6:06:57:40:72:96:23:c4:5a:e5:94:67:80: 1b:74:57:86:36:6e:d4:90:f6:f4:cf:31:f9:4b:82:04:e7:12: af:f4:be:21:cf:69:fd:d0:c1:23:e3:25:be:a0:9f:42:94:f0: 8d:0f:8f:c9:78:9f:57:88:36:1c:11:c7:f6:e2:75:7b:87:e8: bb:e5:66:d0:21:84:7b:5e:ac:11:e9:4f:f5:c5:9e:d1:e6:7c: e0:8e:56:eb:63:1b:41:40:bc:8f:e6:db:24:e9:76:1f:42:28: 42:8f:08:76:db:e7:93:f6:97:7f:b3:41:29:78:57:b0:32:5e: 4c:c1:28:03:15:65:0a:30:15:52:bf:c7:77:29:57:6e:fc:b3: 2f:b8:52:cf:ed:b6:38:e7:ba:e8:70:5b:01:bc:b4:c6:4c:35: a8:35:40:c7:e4:c3:b0:5e:4d:0b:a7:de:69:ac:c8:fc:56:8d: 5f:a7:a7:1b:95:47:39:20:86:79:d1:ab:54:75:d2:7c:5d:77: 16:1d:f7:3a:ad:6f:bf:52:f0:96:e8:b3:f1:91:42:75:96:31: de:bc:08:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcnQJjZERD8HYtWw3ewzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzVkMzFmMjIyZmVjMjU4YmQ0NzYxOGZkZjk0YzUxMWNl NWUwNmUwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD Eyg3YjlhMTNkNDI2ZTdkNmFjMGQ3OTU2YTE2ZjIwMjk5NjUzMTRlNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmShtpYfDN6/rh0CqhRdajBd+9hje hd9kyJTgaJZ37p9oMU7jVt83GyodX3nVAuiYwaIZfWWbtqiWEvuuQGoW+FBBVZ0S 2ked37imBltXcoHMFzM4cfYSV5XaTqyk5Wl6oMIAjHu2iaNWj4qnI04j0Pqt3cfz NkkgidAZVttUSFGhTsuTaPpaFPxRIzCfY6bM7AfHM/BQ+mgOOC2vapX+W/obaU9e 0Qnh+46IuMDwRViZXhul6kam0qRFLSgK3hDvM0UxhG0O5kZKoChUuybPuXlh/W7X pwoKxpC+aRQD039PRMqEmpagWbseEwdEwftqZfkb1Cu909cKeatRZYN0SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuaE9Qm59asDXlWoW8gKZZTFORvMB8GA1UdIwQY MBaAFBl10x8iL+wli9R2GP35TFEc5eBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMt NjE1ZjY2ZmRlZGVjLzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMtNjE1ZjY2ZmRlZGVj LzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC/dpdQA jZ/a9u+XWeNSm1umG3JUhV+razSCpM5Kw/3bHXuew6JFVtW2BldAcpYjxFrllGeA G3RXhjZu1JD29M8x+UuCBOcSr/S+Ic9p/dDBI+MlvqCfQpTwjQ+PyXifV4g2HBHH 9uJ1e4fou+Vm0CGEe16sEelP9cWe0eZ84I5W62MbQUC8j+bbJOl2H0IoQo8Idtvn k/aXf7NBKXhXsDJeTMEoAxVlCjAVUr/HdylXbvyzL7hSz+22OOe66HBbAby0xkw1 qDVAx+TDsF5NC6feaazI/FaNX6enG5VHOSCGedGrVHXSfF13Fh33Oq1vv1Lwluiz 8ZFCdZYx3rwIqw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:44 2026 by rpki-client