This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json) Hash identifier: O5LK1qWCeXZ+YwfQW1p3cUADNJEjwoWzv4ogNwVk6xc= Subject key identifier: 02:30:56:20:D3:98:9D:F6:92:02:55:39:AC:A9:9C:9F:58:C5:C8:3C Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159 Certificate serial: 019C42EB686420E3C8870B7E7AC64D090481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:49 +0000 Manifest this update: Mon 09 Feb 2026 15:00:49 +0000 Manifest next update: Tue 10 Feb 2026 15:00:49 +0000 Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: mIXyDQc/YfwtaiHxLkUlsznUtR/R6FJWTPngSECAxFc=) 2: _OEYR_NlTtbmQ4jWp8KafD4MvOk.roa (hash: 4XDRL8Ii1WLuqDpCaTnrPdX+U3rQ6Em8H+bJRAAY9Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:68:64:20:e3:c8:87:0b:7e:7a:c6:4d:09:04:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1902391799337601331f5a12af11e9f4f6421159 Validity Not Before: Feb 9 15:00:49 2026 GMT Not After : Feb 10 15:00:49 2026 GMT Subject: CN=02305620d3989df692025539aca99c9f58c5c83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:a3:7b:78:37:97:f8:8a:00:cf:91:9b:18: 03:a5:ec:12:99:27:14:f5:98:b8:ad:03:18:37:f2: a6:1a:ed:30:c9:0f:4a:c4:ec:bb:3c:59:1e:7f:2c: 25:44:82:91:e6:44:d7:90:66:4f:94:95:5f:bc:0b: 78:b4:e0:51:e5:3f:17:b1:4d:ec:1c:28:13:5f:37: 27:26:6c:3b:94:22:a8:a2:7f:59:4e:2d:b3:44:76: e2:ce:f3:ab:d5:b5:97:7c:d9:9b:4b:81:4b:99:69: d6:03:a8:ce:ff:c0:a1:9f:a8:95:da:94:8c:56:48: b9:90:c9:9d:65:c4:02:5d:bf:bb:96:49:46:d3:3c: ad:1b:ab:e7:10:d7:45:0a:4e:c7:66:f8:ea:5b:d2: ff:f6:09:8d:9e:31:31:67:4a:0c:ac:6a:b0:e3:22: 5f:12:cc:04:9b:2e:4b:65:b1:6f:62:52:3e:37:38: d2:b1:79:73:91:72:7f:c6:82:08:35:c7:28:0b:96: e4:31:fd:26:9a:bd:09:a8:90:1d:8c:29:f4:77:8e: bf:a7:fa:b7:e0:c4:a0:b1:0d:79:12:4c:c6:b2:e8: b7:f2:a4:c4:39:bb:a2:6d:5a:47:c3:ec:d0:4b:fb: c6:0a:d5:2a:0b:86:a9:ef:28:7c:7b:c1:06:9d:25: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:56:20:D3:98:9D:F6:92:02:55:39:AC:A9:9C:9F:58:C5:C8:3C X509v3 Authority Key Identifier: keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f4:4f:58:43:c8:a5:8f:f2:49:b7:5b:55:a0:08:c7:6d:8c: ff:21:3e:ad:4a:0b:10:85:d9:12:59:48:10:fe:d7:dd:6b:b0: 53:7d:22:73:7a:30:c9:68:fd:5f:f2:38:6f:2c:9c:16:6b:ed: 80:21:97:36:1c:83:b8:81:d9:71:3e:30:4a:5f:98:b8:83:e2: f1:6c:88:a8:11:f4:e5:a4:a7:b9:fb:ba:aa:64:14:81:df:2c: 46:fe:20:21:f2:61:a9:41:70:18:5f:d0:19:a7:93:be:67:d7: 59:69:00:94:e0:16:cb:55:ca:b2:4e:e1:9a:23:11:33:26:58: 0a:a9:e3:92:a8:66:06:32:6e:b9:00:77:ce:8d:45:c9:b7:86: 55:39:e7:18:67:b0:a6:02:da:a9:fe:a3:61:85:18:60:80:27: 5c:c6:51:25:3c:a8:c8:17:1c:f9:42:0a:e0:1c:db:c3:8e:02: d3:0d:0b:80:7d:fb:a7:16:59:98:8d:c1:cb:30:4c:07:e9:58: b7:b9:ba:6f:67:a0:09:6e:3b:40:df:09:71:24:10:9e:c8:58: 3b:24:15:c0:58:80:ef:4e:f7:1f:18:59:55:f1:6c:50:ea:09: 49:56:cd:53:7f:1a:ae:7c:fb:c7:cc:dc:09:df:ef:0a:8e:ff: d2:16:fb:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62hkIOPIhwt+esZNCQSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDIzOTE3OTkzMzc2MDEzMzFmNWExMmFmMTFlOWY0ZjY0 MjExNTkwHhcNMjYwMjA5MTUwMDQ5WhcNMjYwMjEwMTUwMDQ5WjAzMTEwLwYDVQQD EygwMjMwNTYyMGQzOTg5ZGY2OTIwMjU1MzlhY2E5OWM5ZjU4YzVjODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPWje3g3l/iKAM+RmxgDpewSmScU 9Zi4rQMYN/KmGu0wyQ9KxOy7PFkefywlRIKR5kTXkGZPlJVfvAt4tOBR5T8XsU3s HCgTXzcnJmw7lCKoon9ZTi2zRHbizvOr1bWXfNmbS4FLmWnWA6jO/8Chn6iV2pSM Vki5kMmdZcQCXb+7lklG0zytG6vnENdFCk7HZvjqW9L/9gmNnjExZ0oMrGqw4yJf EswEmy5LZbFvYlI+NzjSsXlzkXJ/xoIINccoC5bkMf0mmr0JqJAdjCn0d46/p/q3 4MSgsQ15EkzGsui38qTEObuibVpHw+zQS/vGCtUqC4ap7yh8e8EGnSXMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIwViDTmJ32kgJVOaypnJ9Yxcg8MB8GA1UdIwQY MBaAFBkCOReZM3YBMx9aEq8R6fT2QhFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODct NTU5NzI2MGY2NWVlLzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODctNTU5NzI2MGY2NWVl LzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivRPWEPI pY/ySbdbVaAIx22M/yE+rUoLEIXZEllIEP7X3WuwU30ic3owyWj9X/I4byycFmvt gCGXNhyDuIHZcT4wSl+YuIPi8WyIqBH05aSnufu6qmQUgd8sRv4gIfJhqUFwGF/Q GaeTvmfXWWkAlOAWy1XKsk7hmiMRMyZYCqnjkqhmBjJuuQB3zo1FybeGVTnnGGew pgLaqf6jYYUYYIAnXMZRJTyoyBcc+UIK4Bzbw44C0w0LgH37pxZZmI3ByzBMB+lY t7m6b2egCW47QN8JcSQQnshYOyQVwFiA7073HxhZVfFsUOoJSVbNU38arnz7x8zc Cd/vCo7/0hb71w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:21 2026 by rpki-client