This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json) Hash identifier: uIWV2At7bS+VJ1Ab/1YqZXUMLE2rTUqESzp0JWgDIOM= Subject key identifier: B7:71:8D:77:F7:B4:3D:63:73:BC:DD:2C:9C:99:D0:DB:4B:EE:9D:1B Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6 Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6 Certificate serial: 019C41D89410378E2588E2A76D8FCB300BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft Manifest number: 0213 Signing time: Mon 09 Feb 2026 10:00:38 +0000 Manifest this update: Mon 09 Feb 2026 10:00:38 +0000 Manifest next update: Tue 10 Feb 2026 10:00:38 +0000 Files and hashes: 1: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: YrBTDJBQ+ldJ6NifoQ3uON66S9BT7quWji7SwgqABC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:94:10:37:8e:25:88:e2:a7:6d:8f:cb:30:0b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6 Validity Not Before: Feb 9 10:00:38 2026 GMT Not After : Feb 10 10:00:38 2026 GMT Subject: CN=b7718d77f7b43d6373bcdd2c9c99d0db4bee9d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:33:9c:0b:84:cb:84:6a:a4:83:14:a6:71: f9:3e:a7:0a:ec:f6:3b:37:f1:f3:d1:9b:2b:cb:ac: 8e:31:33:e6:cd:c7:2e:5c:e6:2f:19:98:1c:71:9e: 2f:e2:e9:bf:0b:09:5d:9e:e8:f1:f4:f3:82:28:40: c1:11:f1:e7:9f:2a:89:6f:d7:90:37:ca:00:61:bf: d1:27:3a:f7:7e:d6:db:8c:ee:83:d3:9f:47:05:5d: 98:6a:d0:da:8f:61:76:c6:3f:c4:fe:2c:20:44:36: 52:39:23:01:c9:cf:71:80:0e:87:76:29:a4:19:60: e3:f2:1a:1b:d0:48:fd:a3:1c:e8:ad:36:61:51:cf: ee:aa:ec:ef:d8:24:ca:e3:f5:99:f1:80:c7:35:34: 43:9e:63:c3:01:ed:73:f7:c1:bc:0c:1e:0a:a6:b8: 16:6f:f2:2e:1d:f8:06:d0:18:62:c8:7b:37:ad:b0: e3:1f:8b:a3:62:39:1c:fd:e1:5d:b8:20:5b:78:a9: 7b:50:b6:ce:a7:93:80:92:1c:20:47:b5:ac:0e:64: ae:d9:e7:4c:e7:29:c0:30:59:63:86:91:4e:db:a6: 80:4e:ed:fd:46:18:c0:f7:99:ad:ed:28:44:48:b4: bd:74:2d:32:50:d8:28:94:b2:10:74:52:ad:6e:35: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:71:8D:77:F7:B4:3D:63:73:BC:DD:2C:9C:99:D0:DB:4B:EE:9D:1B X509v3 Authority Key Identifier: keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:97:c2:9c:ec:67:bf:49:29:b2:73:db:d6:fa:94:e0:86:db: d0:be:7f:ca:7e:00:93:56:68:8d:e9:1b:dd:86:16:74:48:7d: 38:52:e1:d7:a0:75:4c:44:21:ea:bb:92:7b:29:a2:67:a6:eb: 83:d2:51:76:3f:fb:8f:71:84:ea:da:70:45:3c:10:9a:83:0d: 2c:af:39:bb:64:98:bd:0b:d8:37:87:37:fb:42:fa:ed:85:89: 83:2b:d7:4d:49:51:6f:aa:f4:c3:30:35:ad:c9:ce:31:1c:5f: bc:83:8f:ea:29:b2:0a:83:e8:63:2b:d6:e5:c5:d6:42:cb:5d: a8:38:a1:7c:58:57:de:ea:d3:62:d2:ba:69:a0:34:e5:ba:8a: 0b:13:9c:64:60:67:04:7c:46:0a:4e:a0:cb:01:34:7a:94:ea: bc:c1:35:de:46:ea:ba:70:d0:84:ea:09:7b:7e:5c:de:bc:73: d5:7d:1b:e9:6b:e7:d1:2c:e1:f7:a6:36:cc:93:85:0c:22:6d: fa:65:b3:ed:7d:b5:8c:f2:26:33:15:99:fb:fa:2d:45:74:c4: 4a:d9:d8:8e:2f:6f:c2:0b:d4:be:c1:0c:52:a0:47:38:f2:ef: 18:1c:bd:8c:db:18:87:57:fa:93:b2:d4:46:59:8e:35:60:da: 9f:ca:15:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JQQN44liOKnbY/LMAvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGU3YjM4YmVhZjNjNjM4NzlmZjkzMDk3M2QxNjNmMWU4 OGU3ZTYwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD EyhiNzcxOGQ3N2Y3YjQzZDYzNzNiY2RkMmM5Yzk5ZDBkYjRiZWU5ZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQznAuEy4RqpIMUpnH5PqcK7PY7 N/Hz0Zsry6yOMTPmzccuXOYvGZgccZ4v4um/Cwldnujx9POCKEDBEfHnnyqJb9eQ N8oAYb/RJzr3ftbbjO6D059HBV2YatDaj2F2xj/E/iwgRDZSOSMByc9xgA6Hdimk GWDj8hob0Ej9oxzorTZhUc/uquzv2CTK4/WZ8YDHNTRDnmPDAe1z98G8DB4KprgW b/IuHfgG0BhiyHs3rbDjH4ujYjkc/eFduCBbeKl7ULbOp5OAkhwgR7WsDmSu2edM 5ynAMFljhpFO26aATu39RhjA95mt7ShESLS9dC0yUNgolLIQdFKtbjW3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdxjXf3tD1jc7zdLJyZ0NtL7p0bMB8GA1UdIwQY MBaAFEzeezi+rzxjh5/5MJc9Fj8eiOfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMjYxOWMtNzZhMC00YTVkLWI1ZDgt Mzc1YzZiNjg5ZTJmLzEvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMjYxOWMtNzZhMC00YTVkLWI1ZDgtMzc1YzZiNjg5ZTJm LzEvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5fCnOxn v0kpsnPb1vqU4Ibb0L5/yn4Ak1Zojekb3YYWdEh9OFLh16B1TEQh6ruSeymiZ6br g9JRdj/7j3GE6tpwRTwQmoMNLK85u2SYvQvYN4c3+0L67YWJgyvXTUlRb6r0wzA1 rcnOMRxfvIOP6imyCoPoYyvW5cXWQstdqDihfFhX3urTYtK6aaA05bqKCxOcZGBn BHxGCk6gywE0epTqvME13kbqunDQhOoJe35c3rxz1X0b6Wvn0Szh96Y2zJOFDCJt +mWz7X21jPImMxWZ+/otRXTEStnYji9vwgvUvsEMUqBHOPLvGBy9jNsYh1f6k7LU RlmONWDan8oVXw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:39 2026 by rpki-client