This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json) Hash identifier: wSVOBuKdJ1p1i02l53Ud1BBhk+4RbvXkWy4uXypRvLg= Subject key identifier: A8:A6:4D:6B:D0:B0:10:A9:4F:F6:F2:B0:4C:4D:AE:08:ED:69:FE:2B Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da Certificate serial: 019C4322FB6BFF328A1CFCE9390207044F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft Manifest number: 10CD Signing time: Mon 09 Feb 2026 16:01:31 +0000 Manifest this update: Mon 09 Feb 2026 16:01:31 +0000 Manifest next update: Tue 10 Feb 2026 16:01:31 +0000 Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: Qr9q9WowiD8Lx5VyaqvH5G4uPHUilRb5Be7FQ0tk/0Y=) 2: sy-wPXvfKLWfZlxG6JFjMdz2jc4.roa (hash: hlaNZxdKE60uOdHncJsjvUxLctHZFlI5jG9Xoxf9FL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:fb:6b:ff:32:8a:1c:fc:e9:39:02:07:04:4f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da Validity Not Before: Feb 9 16:01:31 2026 GMT Not After : Feb 10 16:01:31 2026 GMT Subject: CN=a8a64d6bd0b010a94ff6f2b04c4dae08ed69fe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:ac:a7:0a:26:28:a2:86:38:ba:cd:76:02: 6b:d9:80:24:4c:36:b0:90:81:9e:a0:da:90:be:1f: 57:c4:45:54:ff:55:5a:e2:41:cc:e7:12:67:2b:8d: 5c:f5:8e:da:1a:29:07:b4:c9:25:05:ef:6a:76:ed: ba:73:06:3a:44:05:f6:93:ee:dd:5f:75:5d:18:23: 79:6a:ee:23:43:68:14:05:65:ba:b2:b8:a4:c9:f0: 6a:cd:d4:d6:15:5a:63:d2:54:e0:5e:f5:b2:67:d9: 40:3d:37:c2:b3:78:31:6e:6a:21:a6:79:c2:1b:c3: b4:82:22:ba:d9:1e:b7:76:9c:bb:56:3e:82:6f:a9: eb:26:da:57:42:96:81:c8:26:1e:f5:a1:99:40:e9: 2d:1e:1d:1d:12:28:9c:97:16:2e:c1:fc:30:86:55: c1:3b:87:93:62:33:d6:46:42:58:35:e3:fe:42:58: 91:2c:ab:81:72:ac:b2:04:a6:ca:3d:7f:79:d8:00: fb:bd:b0:43:98:42:9f:cd:fe:6a:01:9a:24:59:01: 3c:d9:a6:5c:22:cb:53:be:8c:84:8e:a0:0e:c1:d8: 46:3b:b3:0a:d9:7b:c2:11:33:2b:15:db:ca:22:c0: 72:f4:4c:c8:1e:be:67:cc:57:fb:8a:07:1b:20:5d: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A6:4D:6B:D0:B0:10:A9:4F:F6:F2:B0:4C:4D:AE:08:ED:69:FE:2B X509v3 Authority Key Identifier: keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0f:19:08:b6:9a:24:68:39:13:97:9c:66:f6:39:3a:e3:4f: 1f:ed:f1:b2:77:4e:0c:43:50:35:72:e9:a4:e5:04:57:7b:e1: 29:46:1a:2b:cf:eb:dc:bd:79:95:42:eb:08:13:87:ce:01:6f: a7:c0:9c:b9:3f:59:c6:5d:0d:e2:ad:90:1d:9e:36:f9:20:05: 6a:80:7c:e0:a7:9d:8f:da:64:91:f8:fe:50:48:49:cf:cc:8f: 96:b7:9a:c3:ca:b2:5c:3d:0d:35:b1:a3:bc:32:d0:5e:ae:7e: 9e:12:22:20:d4:ad:72:0a:2e:45:0a:7a:0b:41:43:5c:22:e7: 76:55:0e:92:28:11:f6:83:b6:94:d9:fd:df:b3:62:fc:cd:28: d9:4e:53:4e:7a:a3:e3:6d:d3:56:ba:4c:6b:e7:4d:6a:5f:3f: a9:07:14:a7:fd:a5:1e:e1:38:9f:5a:df:20:73:2e:81:9d:9d: 29:72:a3:53:d1:80:41:f7:dd:8d:1e:be:df:c5:7c:3b:97:b5: bd:f3:8f:65:22:da:0d:fb:4c:f1:02:0e:28:e7:2f:1e:7a:ed: 55:90:33:6f:30:12:3e:53:d1:c6:bb:28:b3:6e:5e:a2:e5:1c: bf:46:b2:2e:7c:c6:cd:c3:96:d9:09:70:56:7c:0f:ae:44:7d: 8b:b3:23:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvtr/zKKHPzpOQIHBE9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2 Y2E0ZGEwHhcNMjYwMjA5MTYwMTMxWhcNMjYwMjEwMTYwMTMxWjAzMTEwLwYDVQQD EyhhOGE2NGQ2YmQwYjAxMGE5NGZmNmYyYjA0YzRkYWUwOGVkNjlmZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2mspwomKKKGOLrNdgJr2YAkTDaw kIGeoNqQvh9XxEVU/1Va4kHM5xJnK41c9Y7aGikHtMklBe9qdu26cwY6RAX2k+7d X3VdGCN5au4jQ2gUBWW6srikyfBqzdTWFVpj0lTgXvWyZ9lAPTfCs3gxbmohpnnC G8O0giK62R63dpy7Vj6Cb6nrJtpXQpaByCYe9aGZQOktHh0dEiiclxYuwfwwhlXB O4eTYjPWRkJYNeP+QliRLKuBcqyyBKbKPX952AD7vbBDmEKfzf5qAZokWQE82aZc IstTvoyEjqAOwdhGO7MK2XvCETMrFdvKIsBy9EzIHr5nzFf7igcbIF0c8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKimTWvQsBCpT/bysExNrgjtaf4rMB8GA1UdIwQY MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw8ZCLaa JGg5E5ecZvY5OuNPH+3xsndODENQNXLppOUEV3vhKUYaK8/r3L15lULrCBOHzgFv p8CcuT9Zxl0N4q2QHZ42+SAFaoB84Kedj9pkkfj+UEhJz8yPlreaw8qyXD0NNbGj vDLQXq5+nhIiINStcgouRQp6C0FDXCLndlUOkigR9oO2lNn937Ni/M0o2U5TTnqj 423TVrpMa+dNal8/qQcUp/2lHuE4n1rfIHMugZ2dKXKjU9GAQffdjR6+38V8O5e1 vfOPZSLaDftM8QIOKOcvHnrtVZAzbzASPlPRxrsos25eouUcv0ayLnzGzcOW2Qlw VnwPrkR9i7Mjvg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:10 2026 by rpki-client