This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json) Hash identifier: alBAJDjK6l6QSuXI/ioq6EFZPEkYl9Ax0OK8jtMAlI8= Subject key identifier: 85:BE:B8:1C:28:9F:85:F9:50:24:A0:0E:3D:B8:2F:C1:26:8A:EC:A7 Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f Certificate serial: 019C427D04C89B4D6A24F47DAB7DB99AC6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft Manifest number: 135F Signing time: Mon 09 Feb 2026 13:00:15 +0000 Manifest this update: Mon 09 Feb 2026 13:00:15 +0000 Manifest next update: Tue 10 Feb 2026 13:00:15 +0000 Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: LpRNu6EV0Cot3mWgaSnw+ByeA3OtZNLkDM/0JTPrhw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:04:c8:9b:4d:6a:24:f4:7d:ab:7d:b9:9a:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19337ca56de7c3b977875369ecde53852515746f Validity Not Before: Feb 9 13:00:15 2026 GMT Not After : Feb 10 13:00:15 2026 GMT Subject: CN=85beb81c289f85f95024a00e3db82fc1268aeca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:1d:06:fe:a5:17:8f:bf:50:f6:c3:e7:69: 5d:44:0f:9d:6d:d3:26:69:39:de:bc:91:23:ac:5f: c6:f7:7f:e2:a3:36:60:b9:fb:65:a6:38:b2:48:5f: 79:07:3b:83:4c:99:b8:9a:3a:8a:70:e1:d7:54:84: 36:c6:e0:3e:e8:32:29:8c:1c:e6:a6:b7:fe:da:4b: 48:f6:b1:5f:e5:77:95:6a:8a:ec:a9:e7:c2:ad:5f: 46:de:89:23:a7:ad:83:8b:a4:ad:41:37:62:91:e6: 8d:3a:79:2f:80:0a:ea:e4:be:17:50:b7:4f:72:af: 50:be:51:b5:c1:25:ef:64:54:1a:78:3b:60:f5:d0: ee:ce:ee:81:b5:89:d7:4e:84:41:50:e6:c7:5e:a2: d9:6f:36:54:e2:2f:0b:b0:6c:17:78:a0:36:7c:68: e3:7b:29:4d:70:e6:e2:ea:7b:33:fa:fd:14:70:46: f7:91:53:3c:d1:43:ff:52:52:b0:eb:ba:16:a9:f4: 16:95:1e:e3:56:d9:c1:cd:d4:81:98:b3:e9:a1:a8: 02:dd:ec:44:66:6a:4f:a5:60:64:c6:24:10:f9:7c: 85:4f:c6:43:dd:91:ce:20:b0:57:da:91:e8:d0:14: 30:36:3c:fd:a1:6b:09:67:28:0f:e2:1b:87:66:5e: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BE:B8:1C:28:9F:85:F9:50:24:A0:0E:3D:B8:2F:C1:26:8A:EC:A7 X509v3 Authority Key Identifier: keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:99:bf:36:e5:6f:d5:35:c8:47:83:00:65:78:a9:27:23: 53:d3:5a:11:e7:3b:2e:27:40:b2:81:2f:e1:3d:cb:cd:51:1c: 91:f6:da:f3:aa:ac:49:37:d2:e4:a2:45:da:26:77:0c:f1:84: 9f:3a:cb:af:1c:7b:45:f8:dd:6d:ba:17:5b:87:f4:22:20:77: 80:32:33:26:b6:f0:74:eb:87:b9:c7:91:cf:94:e3:40:e4:33: ae:9b:a2:5f:bc:6b:eb:47:26:5c:9e:61:4a:26:fa:2b:a7:ab: 65:c1:3f:7c:7d:2c:d1:62:49:13:07:7a:bf:1a:80:61:a2:52: 06:7e:72:bb:c2:e1:2c:6b:31:d7:46:84:c5:89:64:3c:ae:f7: 4d:2d:2a:ba:eb:1f:10:f0:4b:92:fe:c4:c6:b4:d6:ee:00:a7: e6:7e:e5:c5:90:17:bc:4b:b7:f0:76:0e:78:57:e8:d0:48:a1: 3d:31:56:11:14:f6:f2:a9:32:15:9b:82:b6:af:53:a0:bf:ed: 8e:24:b2:5f:84:ae:8f:50:30:ca:27:b3:8d:94:eb:fe:da:60: 0b:02:19:7c:de:00:b1:3c:3b:23:d4:07:04:ed:e4:89:e8:ea: ff:78:22:1b:19:b4:2c:87:b5:23:4d:c1:27:a1:a4:93:f6:c6: 68:47:83:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQTIm01qJPR9q325msb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MzM3Y2E1NmRlN2MzYjk3Nzg3NTM2OWVjZGU1Mzg1MjUx NTc0NmYwHhcNMjYwMjA5MTMwMDE1WhcNMjYwMjEwMTMwMDE1WjAzMTEwLwYDVQQD Eyg4NWJlYjgxYzI4OWY4NWY5NTAyNGEwMGUzZGI4MmZjMTI2OGFlY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7AdBv6lF4+/UPbD52ldRA+dbdMm aTnevJEjrF/G93/iozZguftlpjiySF95BzuDTJm4mjqKcOHXVIQ2xuA+6DIpjBzm prf+2ktI9rFf5XeVaorsqefCrV9G3okjp62Di6StQTdikeaNOnkvgArq5L4XULdP cq9QvlG1wSXvZFQaeDtg9dDuzu6BtYnXToRBUObHXqLZbzZU4i8LsGwXeKA2fGjj eylNcObi6nsz+v0UcEb3kVM80UP/UlKw67oWqfQWlR7jVtnBzdSBmLPpoagC3exE ZmpPpWBkxiQQ+XyFT8ZD3ZHOILBX2pHo0BQwNjz9oWsJZygP4huHZl5/iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW+uBwon4X5UCSgDj24L8EmiuynMB8GA1UdIwQY MBaAFBkzfKVt58O5d4dTaezeU4UlFXRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMt NTZiODgxMWU0OTI2LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMtNTZiODgxMWU0OTI2 LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM2Zvzbl b9U1yEeDAGV4qScjU9NaEec7LidAsoEv4T3LzVEckfba86qsSTfS5KJF2iZ3DPGE nzrLrxx7RfjdbboXW4f0IiB3gDIzJrbwdOuHuceRz5TjQOQzrpuiX7xr60cmXJ5h Sib6K6erZcE/fH0s0WJJEwd6vxqAYaJSBn5yu8LhLGsx10aExYlkPK73TS0quusf EPBLkv7ExrTW7gCn5n7lxZAXvEu38HYOeFfo0EihPTFWERT28qkyFZuCtq9ToL/t jiSyX4Suj1AwyiezjZTr/tpgCwIZfN4AsTw7I9QHBO3kiejq/3giGxm0LIe1I03B J6Gkk/bGaEeDug== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:31 2026 by rpki-client