This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json) Hash identifier: UJf1LiXm03bRcZrwNznOjORSokUSD9sn93HJLduxSec= Subject key identifier: 25:49:40:C6:C6:77:E5:9A:4B:11:CE:B0:67:9E:34:78:9E:3F:4E:C7 Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6 Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6 Certificate serial: 019C4133D2763C201D2DC14904BA1499544F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft Manifest number: 10D4 Signing time: Mon 09 Feb 2026 07:00:40 +0000 Manifest this update: Mon 09 Feb 2026 07:00:40 +0000 Manifest next update: Tue 10 Feb 2026 07:00:40 +0000 Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: rE7G7uC/ftEUsltrZULBFToPPy8Rud8XAVI+QZJRcBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:d2:76:3c:20:1d:2d:c1:49:04:ba:14:99:54:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6 Validity Not Before: Feb 9 07:00:40 2026 GMT Not After : Feb 10 07:00:40 2026 GMT Subject: CN=254940c6c677e59a4b11ceb0679e34789e3f4ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:1c:3c:6a:e6:cc:1e:84:55:ec:a9:72:40: f9:2c:a6:3e:67:75:94:dc:28:d6:17:5a:4f:0a:6b: 43:7b:5a:d5:fd:7d:f7:71:23:25:8f:49:05:56:e4: 56:6e:cd:0b:8a:c8:f7:d1:76:4e:f1:d3:10:5a:59: ae:34:62:d5:63:2c:1a:1b:36:07:fa:12:91:ff:7c: b0:3c:3e:fd:d3:9a:4c:57:1d:78:73:16:c3:ee:d0: 8f:7b:d0:b2:e4:1e:d6:49:81:46:73:c5:94:e5:4a: 42:bb:7b:71:86:d0:a4:e9:21:c0:ce:d7:59:45:05: 5e:df:48:7a:95:3a:93:72:b7:13:02:84:aa:19:00: 12:06:6d:b6:2c:19:92:0a:99:71:b7:0a:42:1d:ad: e4:85:c6:d9:66:dd:ef:c4:78:37:a7:1b:80:92:98: d6:15:c0:94:1d:af:8f:3e:3f:9d:41:cf:1f:2b:14: 93:e4:3b:83:68:96:ce:8b:7c:d1:52:8a:24:2b:e6: 3f:94:cc:f6:2f:82:f5:6b:da:5a:66:b7:60:e7:d4: 74:8c:9f:93:41:34:b7:8c:9c:aa:1b:56:6f:85:d8: 7f:34:fa:02:54:18:03:79:0c:3a:ad:e9:a6:41:8d: df:16:0f:8d:c1:f0:a7:de:ad:1f:56:30:5c:15:b6: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:40:C6:C6:77:E5:9A:4B:11:CE:B0:67:9E:34:78:9E:3F:4E:C7 X509v3 Authority Key Identifier: keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dd:6f:6c:e8:60:3f:8f:4d:b2:42:57:42:c0:64:99:6a:68: 91:b3:e5:1c:76:55:1e:72:50:46:9e:19:31:a3:03:cd:8c:5d: e0:77:74:17:d6:30:30:36:de:2c:40:d9:c9:77:44:c6:70:98: d8:f8:47:a2:cb:b1:71:3b:87:c0:9b:db:16:ee:dc:08:d6:c0: d2:d2:32:7e:e9:ea:4f:e0:3e:0b:96:31:15:f0:33:6e:42:cc: 5c:70:d3:08:5b:51:fd:b9:30:48:6b:c9:27:db:84:5a:1c:73: 97:76:86:bd:98:92:a3:2a:b5:28:0d:2d:89:bf:f4:71:47:b4: dd:09:62:aa:ef:bf:e8:ae:ed:2b:84:24:a1:e4:e9:e5:c4:4d: a4:86:8a:80:3b:87:c5:5d:f1:9e:5f:ea:06:d5:79:5a:1b:04: e4:32:34:0a:34:53:92:38:56:63:94:55:fe:9e:ba:0e:11:e7: ad:78:f0:44:1e:27:83:b7:a2:71:10:ef:a0:a0:ee:74:11:99: 00:f2:7b:2a:28:c6:d6:2d:30:41:e3:a2:2f:4c:9d:01:a7:03: 7b:87:e8:60:27:19:a8:0a:13:34:94:c8:96:2a:dc:51:7d:c3: 76:bb:30:5b:71:58:3b:d5:33:1a:b1:1e:c7:b2:7d:09:11:1c: 82:d5:74:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM9J2PCAdLcFJBLoUmVRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjYyODYxN2MwMGU4ZGZmMjBjYTY2OTkzMTNhZjc5ZmFk MGFmYzYwHhcNMjYwMjA5MDcwMDQwWhcNMjYwMjEwMDcwMDQwWjAzMTEwLwYDVQQD EygyNTQ5NDBjNmM2NzdlNTlhNGIxMWNlYjA2NzllMzQ3ODllM2Y0ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVwcPGrmzB6EVeypckD5LKY+Z3WU 3CjWF1pPCmtDe1rV/X33cSMlj0kFVuRWbs0Lisj30XZO8dMQWlmuNGLVYywaGzYH +hKR/3ywPD7905pMVx14cxbD7tCPe9Cy5B7WSYFGc8WU5UpCu3txhtCk6SHAztdZ RQVe30h6lTqTcrcTAoSqGQASBm22LBmSCplxtwpCHa3khcbZZt3vxHg3pxuAkpjW FcCUHa+PPj+dQc8fKxST5DuDaJbOi3zRUookK+Y/lMz2L4L1a9paZrdg59R0jJ+T QTS3jJyqG1Zvhdh/NPoCVBgDeQw6remmQY3fFg+NwfCn3q0fVjBcFbbaDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVJQMbGd+WaSxHOsGeeNHieP07HMB8GA1UdIwQY MBaAFBlmKGF8AOjf8gymaZMTr3n60K/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iMDlhY2ItNjM2Yy00NTU3LTgwYTgt NmQ5Mjk2OTVhNWJjLzEvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iMDlhY2ItNjM2Yy00NTU3LTgwYTgtNmQ5Mjk2OTVhNWJj LzEvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT91vbOhg P49NskJXQsBkmWpokbPlHHZVHnJQRp4ZMaMDzYxd4Hd0F9YwMDbeLEDZyXdExnCY 2PhHosuxcTuHwJvbFu7cCNbA0tIyfunqT+A+C5YxFfAzbkLMXHDTCFtR/bkwSGvJ J9uEWhxzl3aGvZiSoyq1KA0tib/0cUe03Qliqu+/6K7tK4QkoeTp5cRNpIaKgDuH xV3xnl/qBtV5WhsE5DI0CjRTkjhWY5RV/p66DhHnrXjwRB4ng7eicRDvoKDudBGZ APJ7KijG1i0wQeOiL0ydAacDe4foYCcZqAoTNJTIlircUX3DdrswW3FYO9UzGrEe x7J9CREcgtV0zA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:14 2026 by rpki-client