This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json) Hash identifier: p257snMFQeBwtGsVhj4MEr1OyzwX6A8Av0lYTJH780o= Subject key identifier: 16:B5:38:8B:36:D7:28:8D:E5:82:C9:70:F6:5E:5B:AF:72:49:6A:C8 Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e Certificate serial: 019C4134464DC53C88B5DA2C0DA8DF737355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft Manifest number: 0E79 Signing time: Mon 09 Feb 2026 07:01:10 +0000 Manifest this update: Mon 09 Feb 2026 07:01:10 +0000 Manifest next update: Tue 10 Feb 2026 07:01:10 +0000 Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: 3YfU/jXe9QK+bJwUGpAx4Ljw3LDjZ6RehQrkT9EqMlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:46:4d:c5:3c:88:b5:da:2c:0d:a8:df:73:73:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e Validity Not Before: Feb 9 07:01:10 2026 GMT Not After : Feb 10 07:01:10 2026 GMT Subject: CN=16b5388b36d7288de582c970f65e5baf72496ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:81:e0:f8:14:2e:c2:3c:15:b6:63:a5:30: aa:1a:8d:1c:0f:9f:89:c4:a0:22:0d:f9:b4:01:fe: 22:48:32:8e:00:90:38:22:4c:b0:0c:1b:5c:ec:3d: 35:cd:79:01:0b:2e:ae:99:49:3b:81:a7:f4:4b:8c: 65:16:f7:12:7e:5f:60:4a:57:6a:63:20:04:5a:7a: ea:fa:4a:04:96:f6:53:97:45:42:ff:e6:ee:a2:77: 05:48:ba:53:8e:e1:c8:95:6a:bd:c1:c8:dc:90:1f: 3f:9d:ec:e0:5a:33:46:f5:f9:6e:9c:7f:e9:99:f8: ee:91:11:54:f6:0a:ba:d8:cd:78:3e:ea:a5:f2:8e: 1e:16:67:2e:27:14:c3:51:d9:2b:be:1e:74:b8:d6: dd:cc:9e:fc:b6:26:40:12:11:22:3b:ef:3d:7c:50: 6f:00:ca:c7:b3:8a:2c:c7:ea:e8:b5:f4:cb:52:3c: ce:50:f2:cf:24:60:a0:c1:01:67:75:83:43:51:47: ef:0d:27:dd:a4:be:6c:76:8d:f3:91:92:87:8b:8e: 98:11:c4:45:18:e0:13:7c:20:6b:92:f1:99:79:39: ac:39:14:2a:38:d4:4a:3d:73:1d:5a:6e:b5:76:f1: 54:e0:a8:6a:c8:43:ce:22:a9:30:9b:2c:52:a1:64: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:38:8B:36:D7:28:8D:E5:82:C9:70:F6:5E:5B:AF:72:49:6A:C8 X509v3 Authority Key Identifier: keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:dd:70:e1:22:8d:7a:46:90:7a:6e:2e:27:a5:f0:f4:85:9c: bc:f3:86:ed:cb:40:ec:8c:e7:eb:97:cd:a9:33:87:49:4d:c1: cb:6f:12:af:f0:10:34:ca:31:2c:9c:47:62:3d:96:ce:b2:57: 51:5f:e5:fe:f5:46:b8:b6:9e:43:de:ea:af:d5:30:77:16:9d: bb:a4:22:f7:ec:74:e7:42:ba:47:19:fa:44:5c:57:c6:9f:2b: 24:79:5b:59:23:8c:ee:99:67:4f:7b:93:4b:c9:f7:7c:50:34: 80:b7:d1:12:d8:45:03:e0:88:ca:69:1c:cb:e9:0e:a4:97:3e: 66:df:53:3f:b1:14:af:47:86:95:4c:2d:3d:d9:85:ff:35:5d: 67:78:8e:31:9d:70:f4:a2:e8:52:67:48:b8:16:10:85:f8:49: b6:b5:db:60:b8:b7:b5:2f:18:77:ed:85:d4:64:94:d3:e5:0e: 63:08:63:f4:92:5c:da:84:3a:18:06:4d:01:2a:39:a2:8e:08: 8a:e8:c2:12:47:33:bf:ae:d8:a5:6c:6b:f6:09:bf:61:62:70: a3:55:78:98:f1:97:ec:1c:ce:32:6c:2e:ce:5c:67:94:c7:43: e4:a3:2f:ac:3b:2a:a0:5d:ce:ab:eb:d0:d1:03:76:fb:96:ab: e6:00:36:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNEZNxTyItdosDajfc3NVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NzA3MTk3ZTgzNjc2MGM1OTJlMWVmMTFmMWI0Y2JlNWJm ZDRkMmUwHhcNMjYwMjA5MDcwMTEwWhcNMjYwMjEwMDcwMTEwWjAzMTEwLwYDVQQD EygxNmI1Mzg4YjM2ZDcyODhkZTU4MmM5NzBmNjVlNWJhZjcyNDk2YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KmB4PgULsI8FbZjpTCqGo0cD5+J xKAiDfm0Af4iSDKOAJA4IkywDBtc7D01zXkBCy6umUk7gaf0S4xlFvcSfl9gSldq YyAEWnrq+koElvZTl0VC/+buoncFSLpTjuHIlWq9wcjckB8/nezgWjNG9flunH/p mfjukRFU9gq62M14Puql8o4eFmcuJxTDUdkrvh50uNbdzJ78tiZAEhEiO+89fFBv AMrHs4osx+rotfTLUjzOUPLPJGCgwQFndYNDUUfvDSfdpL5sdo3zkZKHi46YEcRF GOATfCBrkvGZeTmsORQqONRKPXMdWm61dvFU4KhqyEPOIqkwmyxSoWQWyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa1OIs21yiN5YLJcPZeW69ySWrIMB8GA1UdIwQY MBaAFLZwcZfoNnYMWS4e8R8bTL5b/U0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG5CeGwtZzJkZ3haTGg3eEh4dE12bHY5VFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MGFjNzgtYmJlMS00MTI0LWI4Nzgt NjY2N2ZhNTFjNDYwLzEvdG5CeGwtZzJkZ3haTGg3eEh4dE12bHY5VFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84MGFjNzgtYmJlMS00MTI0LWI4NzgtNjY2N2ZhNTFjNDYw LzEvdG5CeGwtZzJkZ3haTGg3eEh4dE12bHY5VFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW91w4SKN ekaQem4uJ6Xw9IWcvPOG7ctA7Izn65fNqTOHSU3By28Sr/AQNMoxLJxHYj2WzrJX UV/l/vVGuLaeQ97qr9Uwdxadu6Qi9+x050K6Rxn6RFxXxp8rJHlbWSOM7plnT3uT S8n3fFA0gLfREthFA+CIymkcy+kOpJc+Zt9TP7EUr0eGlUwtPdmF/zVdZ3iOMZ1w 9KLoUmdIuBYQhfhJtrXbYLi3tS8Yd+2F1GSU0+UOYwhj9JJc2oQ6GAZNASo5oo4I iujCEkczv67YpWxr9gm/YWJwo1V4mPGX7BzOMmwuzlxnlMdD5KMvrDsqoF3Oq+vQ 0QN2+5ar5gA2PA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:56 2026 by rpki-client