This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json) Hash identifier: 6R0bbaVTZXhSZrdlg+H7/B6QS2utRWnuesFdbwJwMsU= Subject key identifier: 28:76:80:06:21:E9:47:CE:01:EB:F2:A5:CD:6E:6D:6B:D8:AD:3E:3B Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d Certificate serial: 019C42EBA76FF7DB80FAF9E29674B6ECD059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft Manifest number: 0F88 Signing time: Mon 09 Feb 2026 15:01:05 +0000 Manifest this update: Mon 09 Feb 2026 15:01:05 +0000 Manifest next update: Tue 10 Feb 2026 15:01:05 +0000 Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=) 2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: sHkpb1JfW+XE47OIBpaH2tvT9gD9rl1tPHCzP818TMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:a7:6f:f7:db:80:fa:f9:e2:96:74:b6:ec:d0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d Validity Not Before: Feb 9 15:01:05 2026 GMT Not After : Feb 10 15:01:05 2026 GMT Subject: CN=2876800621e947ce01ebf2a5cd6e6d6bd8ad3e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:e3:23:3f:b2:73:7c:69:61:93:a4:3f:92: 4d:41:0f:78:38:03:aa:d1:19:d5:9e:d0:56:d9:42: 9d:57:45:49:76:89:83:c6:ca:d6:1c:4d:0e:9c:f9: b9:83:e7:a4:82:6b:fe:9d:a0:3e:d1:59:56:12:66: ec:a2:17:a4:84:9d:31:6d:67:90:00:9e:17:9b:b1: 61:80:3f:06:3e:69:0d:7f:f0:b8:65:43:4d:dc:20: c4:5e:67:99:b4:37:77:c0:41:48:b1:5f:3e:65:d6: 99:2e:05:02:a0:3a:03:8b:a5:a7:a1:52:99:74:12: 6a:f7:0e:77:2f:ca:7d:fd:c1:eb:c9:e1:80:62:9c: ac:e7:db:7b:85:e5:e0:3f:7b:21:b8:92:f9:05:d4: 9b:73:8c:b6:51:a2:f4:90:b3:45:b7:3e:89:41:3b: c3:21:b6:fa:d3:30:97:c1:00:ad:2e:95:af:32:a0: 00:90:8d:46:a9:fa:d3:87:7a:e3:33:68:e8:98:ba: d6:ca:5d:75:4e:98:d9:0e:41:20:e6:61:67:2c:a6: db:8c:17:b0:4d:fc:94:5a:ca:6b:6c:4f:02:54:7f: 84:41:c8:92:54:07:66:d0:e8:bb:c4:8c:dc:e1:5e: 0d:2d:bc:16:c7:09:26:28:e7:fc:cb:50:c3:2f:1f: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:80:06:21:E9:47:CE:01:EB:F2:A5:CD:6E:6D:6B:D8:AD:3E:3B X509v3 Authority Key Identifier: keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c0:31:5b:56:e4:1b:ea:b9:54:ab:3d:c8:be:f8:66:c8:62: 5d:64:3b:73:9f:3f:fd:dd:62:b8:ab:72:6c:78:10:19:ab:70: 4d:52:39:37:54:4e:5e:01:03:1e:13:a3:58:64:01:1e:c5:77: a9:c8:e8:c9:e9:66:82:c9:cb:bf:2c:06:f8:7f:db:92:8c:49: be:f5:d6:24:15:6f:ab:4f:ac:c8:5d:a7:46:15:94:ed:3f:3a: 4d:6a:cc:1e:c8:cd:b4:74:85:d9:f6:8b:7e:86:35:a9:45:1a: 05:54:4d:a7:be:6e:be:86:cd:12:12:bb:0e:5c:c5:bc:de:b4: f0:56:2a:12:37:ba:6a:50:d8:71:aa:5d:8c:78:5e:9a:cf:f9: 05:ee:17:a0:3b:f3:91:53:b3:5e:a3:d0:4a:bd:24:98:ea:6a: 7f:3e:ae:84:df:2d:86:2b:20:53:09:89:f2:d2:e5:83:73:9c: e9:f1:46:17:bf:f5:9a:c8:16:8b:f2:e3:0b:ec:20:01:d9:1e: a0:98:97:35:df:fc:17:6b:f5:e9:12:2e:5a:a2:99:aa:63:b8: f1:c9:a1:b8:de:b5:d0:a1:83:f5:78:43:6d:75:64:11:19:1f: 55:36:da:7b:eb:65:2e:1d:7d:f3:a7:4c:0d:5c:71:1f:55:25: 32:ab:cf:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66dv99uA+vnilnS27NBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZWQ5YjVjYjRiNjQ4NjZjMzgzZGVlNDU3NmJmZjNmZjg3 NTI0MmQwHhcNMjYwMjA5MTUwMTA1WhcNMjYwMjEwMTUwMTA1WjAzMTEwLwYDVQQD EygyODc2ODAwNjIxZTk0N2NlMDFlYmYyYTVjZDZlNmQ2YmQ4YWQzZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySnjIz+yc3xpYZOkP5JNQQ94OAOq 0RnVntBW2UKdV0VJdomDxsrWHE0OnPm5g+ekgmv+naA+0VlWEmbsohekhJ0xbWeQ AJ4Xm7FhgD8GPmkNf/C4ZUNN3CDEXmeZtDd3wEFIsV8+ZdaZLgUCoDoDi6WnoVKZ dBJq9w53L8p9/cHryeGAYpys59t7heXgP3shuJL5BdSbc4y2UaL0kLNFtz6JQTvD Ibb60zCXwQCtLpWvMqAAkI1GqfrTh3rjM2jomLrWyl11TpjZDkEg5mFnLKbbjBew TfyUWsprbE8CVH+EQciSVAdm0Oi7xIzc4V4NLbwWxwkmKOf8y1DDLx93mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh2gAYh6UfOAevypc1ubWvYrT47MB8GA1UdIwQY MBaAFLbtm1y0tkhmw4Pe5Fdr/z/4dSQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDkt NWE5MDVhZjUwN2MzLzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDktNWE5MDVhZjUwN2Mz LzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMAxW1bk G+q5VKs9yL74ZshiXWQ7c58//d1iuKtybHgQGatwTVI5N1ROXgEDHhOjWGQBHsV3 qcjoyelmgsnLvywG+H/bkoxJvvXWJBVvq0+syF2nRhWU7T86TWrMHsjNtHSF2faL foY1qUUaBVRNp75uvobNEhK7DlzFvN608FYqEje6alDYcapdjHhems/5Be4XoDvz kVOzXqPQSr0kmOpqfz6uhN8thisgUwmJ8tLlg3Oc6fFGF7/1msgWi/LjC+wgAdke oJiXNd/8F2v16RIuWqKZqmO48cmhuN610KGD9XhDbXVkERkfVTbae+tlLh1986dM DVxxH1UlMqvPhA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:21 2026 by rpki-client