This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft File: TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft (raw, json) Hash identifier: UydkCzR8tjlZBClR04TEX2A6QikLqsOx4JAEYtkHgAw= Subject key identifier: 2D:FC:CD:E8:3B:AF:A1:A5:09:83:14:AA:F8:9B:0E:27:44:B5:4A:1E Authority key identifier: 4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A Certificate issuer: /CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a Certificate serial: 019C42B45DCD06DF7CB75F96B56E6ECE7274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft Manifest number: 01B6 Signing time: Mon 09 Feb 2026 14:00:42 +0000 Manifest this update: Mon 09 Feb 2026 14:00:42 +0000 Manifest next update: Tue 10 Feb 2026 14:00:42 +0000 Files and hashes: 1: TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl (hash: GHYzeA6x+3tM++6v9N+iNwzeA6N3+TyzRTWQGhJi+w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:5d:cd:06:df:7c:b7:5f:96:b5:6e:6e:ce:72:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a Validity Not Before: Feb 9 14:00:42 2026 GMT Not After : Feb 10 14:00:42 2026 GMT Subject: CN=2dfccde83bafa1a5098314aaf89b0e2744b54a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:ab:e5:56:69:bb:66:9f:5c:c5:48:3b:25: 24:c8:d9:73:9c:1f:30:2c:d7:fa:2b:e4:81:bb:b5: 60:62:29:9c:1a:c6:89:dc:50:3b:8a:1e:39:ba:66: 82:80:a2:a2:db:8a:e8:3d:b6:a1:7e:d1:87:b6:8d: c0:c3:64:8b:a6:f9:ca:56:c7:a0:5f:5b:fb:78:62: 52:2f:1d:43:59:e9:3b:07:0a:88:75:bf:e5:50:95: f3:f4:31:da:bf:d4:60:e3:97:3c:65:aa:01:b6:25: ee:e3:e5:6b:71:b2:d9:3c:38:63:cc:da:29:ad:ce: 72:6e:52:92:d8:9e:51:e1:c9:68:ab:09:46:b6:ef: 08:6a:6e:5b:2a:c7:1a:b5:a0:1b:6c:c9:35:2c:7d: 95:a2:ec:af:70:c6:65:50:f8:eb:01:e1:c5:a8:9c: f2:f8:da:fe:33:74:f0:ae:6c:30:c2:61:23:b3:bd: 4e:cf:05:22:52:bb:3b:ee:38:ce:f1:da:15:3f:2e: 8c:ec:ad:85:a4:48:58:20:fd:9b:95:c4:8b:eb:37: 46:a8:23:25:13:1d:e8:5d:eb:1e:36:fa:cf:29:c0: f9:39:9d:bc:b2:50:41:5f:47:2d:f5:43:e3:77:6d: 4d:ec:13:1a:8e:90:26:aa:74:c0:17:4b:2f:7f:1b: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FC:CD:E8:3B:AF:A1:A5:09:83:14:AA:F8:9B:0E:27:44:B5:4A:1E X509v3 Authority Key Identifier: keyid:4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e2:45:21:89:f7:ad:f1:67:cf:d6:a3:c9:6d:62:6b:72:77: 93:7e:e6:11:ee:15:ba:36:55:49:39:1c:b5:3d:a8:9a:ab:50: 5d:d8:57:4b:b5:ee:59:55:67:d1:a7:9a:27:ad:0c:5c:6d:f0: 16:96:9d:cc:ad:ea:15:b8:15:ac:f6:76:02:bb:ea:b2:26:73: e0:2b:a4:1d:2f:3a:c9:11:5c:fb:eb:71:3d:af:4e:e0:8f:13: c9:fd:d2:5a:7a:ab:99:3d:80:10:f6:1c:96:b3:52:86:bc:6f: f8:ac:29:8a:28:ab:3a:63:bb:b0:64:db:c9:4e:e6:d9:d4:0f: ab:24:bd:1f:f5:77:11:30:c9:a0:11:23:53:a3:d8:1c:0b:95: 42:7b:2e:23:ef:53:d7:42:ce:bc:3d:a5:5a:8c:c0:74:c8:e7: 16:11:73:b3:f0:35:f4:af:9e:80:d6:ee:86:80:3a:47:79:6f: 5e:9e:64:fd:e7:d4:ab:9b:a0:a8:77:d4:86:85:4e:7b:08:8e: f2:41:cf:ad:72:82:35:71:5d:33:c2:9a:cd:09:77:3e:61:11: 47:20:e8:c9:54:79:12:1b:3f:51:c3:a7:e3:25:75:34:2c:bb: 61:99:4a:69:da:35:e9:80:46:99:6c:03:6a:8c:45:8d:99:70: f1:bb:73:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtF3NBt98t1+WtW5uznJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmMyNDUzZDAwNzkxY2ZmMTMzMmZhNzFjZmI1ZGEzNmFh MDBhMGEwHhcNMjYwMjA5MTQwMDQyWhcNMjYwMjEwMTQwMDQyWjAzMTEwLwYDVQQD EygyZGZjY2RlODNiYWZhMWE1MDk4MzE0YWFmODliMGUyNzQ0YjU0YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEir5VZpu2afXMVIOyUkyNlznB8w LNf6K+SBu7VgYimcGsaJ3FA7ih45umaCgKKi24roPbahftGHto3Aw2SLpvnKVseg X1v7eGJSLx1DWek7BwqIdb/lUJXz9DHav9Rg45c8ZaoBtiXu4+VrcbLZPDhjzNop rc5yblKS2J5R4cloqwlGtu8Iam5bKscataAbbMk1LH2VouyvcMZlUPjrAeHFqJzy +Nr+M3TwrmwwwmEjs71OzwUiUrs77jjO8doVPy6M7K2FpEhYIP2blcSL6zdGqCMl Ex3oXeseNvrPKcD5OZ28slBBX0ct9UPjd21N7BMajpAmqnTAF0svfxtlWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC38zeg7r6GlCYMUqvibDidEtUoeMB8GA1UdIwQY MBaAFE0sJFPQB5HP8TMvpxz7XaNqoAoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFN3a1U5QUhrY194TXktbkhQdGRvMnFnQ2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNzM3ZjctMTg3MS00NDJhLThkYmEt ZGMyYWFhYTEyMDAzLzEvVFN3a1U5QUhrY194TXktbkhQdGRvMnFnQ2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zNzM3ZjctMTg3MS00NDJhLThkYmEtZGMyYWFhYTEyMDAz LzEvVFN3a1U5QUhrY194TXktbkhQdGRvMnFnQ2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+JFIYn3 rfFnz9ajyW1ia3J3k37mEe4VujZVSTkctT2omqtQXdhXS7XuWVVn0aeaJ60MXG3w FpadzK3qFbgVrPZ2ArvqsiZz4CukHS86yRFc++txPa9O4I8Tyf3SWnqrmT2AEPYc lrNShrxv+KwpiiirOmO7sGTbyU7m2dQPqyS9H/V3ETDJoBEjU6PYHAuVQnsuI+9T 10LOvD2lWozAdMjnFhFzs/A19K+egNbuhoA6R3lvXp5k/efUq5ugqHfUhoVOewiO 8kHPrXKCNXFdM8KazQl3PmERRyDoyVR5Ehs/UcOn4yV1NCy7YZlKado16YBGmWwD aoxFjZlw8btzjg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:07 2026 by rpki-client