This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json) Hash identifier: fZysRz1HkQXc0S6dbhi6qrMZWMz0CIQlBmdvao0WRdc= Subject key identifier: C2:78:4E:23:DD:FB:F9:9E:EC:FD:1C:22:A5:CE:E6:91:A9:68:35:B6 Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Certificate serial: 019C4390A021C2BEE225CFF7B638193699AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: FfdcIz5t85Pst3mPFpf3CZzLuVZ2Kv6FBfeC2CxyVmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a0:21:c2:be:e2:25:cf:f7:b6:38:19:36:99:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=c2784e23ddfbf99eecfd1c22a5cee691a96835b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:df:c9:66:14:ff:5e:91:e0:2a:86:ff:d6: bc:6d:e9:ee:b5:1d:02:0c:55:96:45:21:0b:02:8e: 78:ff:a9:48:f7:71:82:0f:d6:6e:46:16:ae:0e:00: bd:48:20:66:38:c3:31:05:74:c9:9a:a7:4a:9f:cb: a6:d3:f0:43:e3:f4:2b:86:47:7b:de:54:15:86:dc: e3:7c:dd:b3:54:20:96:c3:2f:7a:2c:34:80:94:8a: e8:e1:f1:1f:67:c9:be:87:8c:41:f2:1b:01:b5:f0: 0e:ca:d0:77:b2:d1:7c:71:9b:a4:c4:90:85:88:b4: 97:09:e9:6f:43:bd:64:3d:54:8e:79:e8:ad:20:eb: d6:2a:8d:31:ac:e1:5d:ae:6e:2e:d1:d3:5d:8f:f3: 45:15:62:d3:3f:43:3f:9c:35:57:6f:16:e4:0a:ed: c8:e0:67:04:16:7d:8a:15:16:8c:61:c8:fb:24:b8: 88:d1:b8:28:37:31:dd:8b:22:6d:31:18:33:30:28: 09:42:6d:fc:32:78:39:99:de:f9:29:01:d0:37:74: 9c:d1:dc:94:f5:a1:e5:e6:1b:1e:90:26:f2:b1:c7: 12:b3:68:03:7e:98:a7:41:9d:13:0c:35:bc:18:47: fb:35:ba:0c:00:6e:ce:f6:6e:f2:52:fc:01:f8:30: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:4E:23:DD:FB:F9:9E:EC:FD:1C:22:A5:CE:E6:91:A9:68:35:B6 X509v3 Authority Key Identifier: keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d0:ae:96:90:05:de:9e:26:88:f4:1d:59:6f:4f:ca:9c:69: e5:5f:5b:49:2d:5d:a1:40:21:e4:8f:9c:b3:ee:48:1e:74:b0: 33:6a:b1:ad:f7:0a:c3:e8:76:ee:ac:72:12:40:32:04:6e:66: ef:30:9e:da:24:17:88:b5:7b:f2:ae:1b:3b:13:a3:1c:d2:3b: f7:3a:d1:4b:86:c0:c7:47:c3:24:97:ee:50:ef:28:2e:4f:9a: 73:ad:7f:fe:9c:b7:12:0f:19:f5:4d:f2:20:0a:7a:83:00:04: c3:b5:09:14:a3:9c:4b:c5:80:60:df:af:b9:c9:b0:80:56:f2: ec:d4:ec:ed:99:25:ca:44:98:3b:9e:8e:d9:a6:02:72:73:00: 77:1f:2d:cd:e3:08:03:1c:dd:b9:86:52:48:27:47:31:84:58: 4d:76:be:ea:f3:36:a1:c3:af:d1:37:80:63:ff:e1:7e:2e:86: 1b:fd:73:27:3f:20:74:be:3e:f2:10:79:f9:f5:fe:4c:50:cf: b6:e6:08:ca:68:2c:23:6b:e4:00:91:d1:55:07:7d:4e:b3:a0: 24:d2:e7:f5:61:17:c6:68:ea:fe:ef:db:d5:10:6b:29:62:91: cf:bd:8d:c7:f2:6b:d0:a1:d0:7d:3e:9e:31:d4:4f:6b:c8:2e: b2:e6:22:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKAhwr7iJc/3tjgZNpmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1 M2NlODYwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD EyhjMjc4NGUyM2RkZmJmOTllZWNmZDFjMjJhNWNlZTY5MWE5NjgzNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSPfyWYU/16R4CqG/9a8benutR0C DFWWRSELAo54/6lI93GCD9ZuRhauDgC9SCBmOMMxBXTJmqdKn8um0/BD4/Qrhkd7 3lQVhtzjfN2zVCCWwy96LDSAlIro4fEfZ8m+h4xB8hsBtfAOytB3stF8cZukxJCF iLSXCelvQ71kPVSOeeitIOvWKo0xrOFdrm4u0dNdj/NFFWLTP0M/nDVXbxbkCu3I 4GcEFn2KFRaMYcj7JLiI0bgoNzHdiyJtMRgzMCgJQm38Mng5md75KQHQN3Sc0dyU 9aHl5hsekCbysccSs2gDfpinQZ0TDDW8GEf7NboMAG7O9m7yUvwB+DAxzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ4TiPd+/me7P0cIqXO5pGpaDW2MB8GA1UdIwQY MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9CulpAF 3p4miPQdWW9Pypxp5V9bSS1doUAh5I+cs+5IHnSwM2qxrfcKw+h27qxyEkAyBG5m 7zCe2iQXiLV78q4bOxOjHNI79zrRS4bAx0fDJJfuUO8oLk+ac61//py3Eg8Z9U3y IAp6gwAEw7UJFKOcS8WAYN+vucmwgFby7NTs7ZklykSYO56O2aYCcnMAdx8tzeMI AxzduYZSSCdHMYRYTXa+6vM2ocOv0TeAY//hfi6GG/1zJz8gdL4+8hB5+fX+TFDP tuYIymgsI2vkAJHRVQd9TrOgJNLn9WEXxmjq/u/b1RBrKWKRz72Nx/Jr0KHQfT6e MdRPa8gusuYiEA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:57:44 2026 by rpki-client