This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft File: RTgz11hvD3jiC4BXaXbQm3rZYDE.mft (raw, json) Hash identifier: QPuxC42Gycdf7HBK4BAHQEzgd8KpWPuk2JLuinJluoU= Subject key identifier: B5:15:72:76:2E:05:89:2D:80:C1:63:CB:79:91:CF:1F:62:ED:7C:DB Authority key identifier: 45:38:33:D7:58:6F:0F:78:E2:0B:80:57:69:76:D0:9B:7A:D9:60:31 Certificate issuer: /CN=453833d7586f0f78e20b80576976d09b7ad96031 Certificate serial: 019C42B4952678C9AE6CE44296DA01A869C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft Manifest number: 27 Signing time: Mon 09 Feb 2026 14:00:56 +0000 Manifest this update: Mon 09 Feb 2026 14:00:56 +0000 Manifest next update: Tue 10 Feb 2026 14:00:56 +0000 Files and hashes: 1: RTgz11hvD3jiC4BXaXbQm3rZYDE.crl (hash: tpIUNCjkErEdE3T5rCKb5OMytYOoZh8rbSCIVGw0+eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft rsync://rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:95:26:78:c9:ae:6c:e4:42:96:da:01:a8:69:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453833d7586f0f78e20b80576976d09b7ad96031 Validity Not Before: Feb 9 14:00:56 2026 GMT Not After : Feb 10 14:00:56 2026 GMT Subject: CN=b51572762e05892d80c163cb7991cf1f62ed7cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:a6:84:9a:57:78:ce:fb:5e:36:fa:9d:82: af:95:08:89:76:ff:51:15:54:7e:5b:39:c6:97:ce: aa:31:62:0f:ca:ad:97:43:c4:41:ff:81:e3:9f:81: 0e:94:df:4e:1c:91:32:e7:6c:b4:16:2e:b2:6f:4c: 5d:74:64:ab:92:e2:2e:f5:f4:4b:2a:a1:f0:a4:48: 4d:dd:09:0b:64:ee:72:c0:e6:59:27:e1:b2:c3:64: c1:05:bb:23:9e:48:eb:b8:9b:a1:cb:a6:00:41:1b: b6:4c:48:e6:b3:da:e4:e3:b3:ba:3e:51:6f:27:6b: 93:e8:c3:6d:86:bf:e8:0f:68:15:78:8a:58:db:e5: bc:25:a3:7b:d3:84:8f:7a:d5:7e:7b:0e:fa:4e:dd: 65:d7:80:be:7c:01:e4:b9:c0:fd:0c:e0:fc:b2:d7: 36:e9:e1:ad:18:cb:41:fa:c5:9d:f8:5f:da:06:a2: 74:79:86:e1:db:8a:2c:9d:f4:13:9d:20:ec:c5:1f: 12:49:73:3f:f6:c2:69:09:c4:57:36:4c:dc:51:07: 9b:ce:33:78:82:d3:64:6d:8d:9c:b1:52:2c:7d:4d: 7e:b6:47:65:3b:d6:20:01:5d:bf:41:e3:92:b3:1c: e6:7f:34:84:a4:bc:65:5d:f2:1f:16:10:8a:ab:45: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:72:76:2E:05:89:2D:80:C1:63:CB:79:91:CF:1F:62:ED:7C:DB X509v3 Authority Key Identifier: keyid:45:38:33:D7:58:6F:0F:78:E2:0B:80:57:69:76:D0:9B:7A:D9:60:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:42:72:4d:d7:61:99:38:02:fc:bc:99:11:24:a9:4c:16:1e: c6:03:95:f8:73:ce:46:df:4c:04:c4:68:35:95:f9:6e:a8:72: f9:58:f4:2b:f7:26:f7:9f:87:b2:27:2c:c3:0f:62:38:fd:21: 72:3c:55:95:43:f4:e8:61:d4:7c:fe:7a:bf:d5:c8:93:98:03: dd:cb:33:c9:83:2d:98:43:c5:00:f0:b3:7f:77:03:71:3c:87: 62:9f:e4:87:7a:87:f1:bd:3c:b5:a0:eb:1b:9a:12:dc:1e:ec: 90:80:23:e9:73:f8:d6:c5:2b:0d:80:f2:5f:4e:1d:34:bf:36: 7e:1d:e7:ed:a3:63:f2:73:70:18:48:d4:6b:9e:f6:d9:41:0a: 94:5c:71:a0:05:dc:1b:e6:49:cd:a2:3c:42:cd:ac:11:cc:3e: 61:80:8f:5c:34:8b:75:e7:0d:99:b4:94:f7:99:1d:a4:1a:7f: 29:70:9b:00:3f:bf:40:ea:e9:2a:59:cb:2a:08:ee:3c:b5:6c: 56:1e:e7:eb:80:00:34:fa:57:6f:89:43:b4:02:d1:83:0d:0a: 8d:e3:70:79:ce:a1:bf:a5:31:93:cc:04:d0:b0:ff:05:f1:45: 86:41:a2:cc:04:8a:51:2a:1e:03:a4:7a:51:81:20:21:bc:6e: 77:b7:3d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJUmeMmubORCltoBqGnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzgzM2Q3NTg2ZjBmNzhlMjBiODA1NzY5NzZkMDliN2Fk OTYwMzEwHhcNMjYwMjA5MTQwMDU2WhcNMjYwMjEwMTQwMDU2WjAzMTEwLwYDVQQD EyhiNTE1NzI3NjJlMDU4OTJkODBjMTYzY2I3OTkxY2YxZjYyZWQ3Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4umhJpXeM77Xjb6nYKvlQiJdv9R FVR+WznGl86qMWIPyq2XQ8RB/4Hjn4EOlN9OHJEy52y0Fi6yb0xddGSrkuIu9fRL KqHwpEhN3QkLZO5ywOZZJ+Gyw2TBBbsjnkjruJuhy6YAQRu2TEjms9rk47O6PlFv J2uT6MNthr/oD2gVeIpY2+W8JaN704SPetV+ew76Tt1l14C+fAHkucD9DOD8stc2 6eGtGMtB+sWd+F/aBqJ0eYbh24osnfQTnSDsxR8SSXM/9sJpCcRXNkzcUQebzjN4 gtNkbY2csVIsfU1+tkdlO9YgAV2/QeOSsxzmfzSEpLxlXfIfFhCKq0UUaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUVcnYuBYktgMFjy3mRzx9i7XzbMB8GA1UdIwQY MBaAFEU4M9dYbw944guAV2l20Jt62WAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRnejExaHZEM2ppQzRCWGFYYlFtM3JaWURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iYWZiNmQtZDg3NS00NThhLWEyMGIt MjVlY2FjZGIxMTA2LzEvUlRnejExaHZEM2ppQzRCWGFYYlFtM3JaWURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iYWZiNmQtZDg3NS00NThhLWEyMGItMjVlY2FjZGIxMTA2 LzEvUlRnejExaHZEM2ppQzRCWGFYYlFtM3JaWURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUJyTddh mTgC/LyZESSpTBYexgOV+HPORt9MBMRoNZX5bqhy+Vj0K/cm95+Hsicsww9iOP0h cjxVlUP06GHUfP56v9XIk5gD3cszyYMtmEPFAPCzf3cDcTyHYp/kh3qH8b08taDr G5oS3B7skIAj6XP41sUrDYDyX04dNL82fh3n7aNj8nNwGEjUa5722UEKlFxxoAXc G+ZJzaI8Qs2sEcw+YYCPXDSLdecNmbSU95kdpBp/KXCbAD+/QOrpKlnLKgjuPLVs Vh7n64AANPpXb4lDtALRgw0KjeNwec6hv6Uxk8wE0LD/BfFFhkGizASKUSoeA6R6 UYEgIbxud7c9Mw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:33 2026 by rpki-client