This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft File: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft (raw, json) Hash identifier: HeublCfk4ZChY9Vd/grO/14vUMXs9bnqxyqShO2kX3U= Subject key identifier: CD:26:F8:2D:EE:7D:B4:38:93:DD:F3:14:B0:7E:FD:44:2D:35:76:CA Authority key identifier: 4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67 Certificate issuer: /CN=4f49fe0746351c87c3418acd3986e7628c458767 Certificate serial: 019C438FED33EABB00CDFECC036DFEC200CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft Manifest number: 028D Signing time: Mon 09 Feb 2026 18:00:31 +0000 Manifest this update: Mon 09 Feb 2026 18:00:31 +0000 Manifest next update: Tue 10 Feb 2026 18:00:31 +0000 Files and hashes: 1: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl (hash: dcWdcaJQs+Jp7MDMb0NrQcNK+m4MIklBCe6Hq+yqigo=) 2: fxg-toqpHRaP4ghSh5xl_zw2dIs.roa (hash: csJ927dQ/OGFVXUR29yJ4G8BgtCcMI++AUL4mpClHs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ed:33:ea:bb:00:cd:fe:cc:03:6d:fe:c2:00:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f49fe0746351c87c3418acd3986e7628c458767 Validity Not Before: Feb 9 18:00:31 2026 GMT Not After : Feb 10 18:00:31 2026 GMT Subject: CN=cd26f82dee7db43893ddf314b07efd442d3576ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:45:84:68:fa:20:9b:b1:bb:96:3f:a6:e5: 0e:64:4e:63:56:dd:7d:da:af:af:a2:e4:ce:47:83: ef:33:29:1e:9a:1f:b5:58:14:9a:1a:96:8d:21:b1: 93:b7:ff:f2:12:78:b2:fb:90:e2:b2:8d:c6:8d:6b: c1:94:9d:fb:8a:7b:e6:0d:8a:0a:7f:60:b0:6f:a6: 9a:93:e4:77:1a:1f:72:37:20:84:90:26:6e:dd:28: 6e:de:f3:bb:f9:cc:00:05:b2:c7:84:ec:ec:16:06: 88:66:ab:bd:0a:96:80:f2:cc:58:f1:ba:26:2a:bb: 21:18:6a:6b:b3:b0:7a:fb:2d:e6:93:7e:6e:82:cb: fa:61:24:af:33:71:a8:9d:c6:d5:b6:8c:39:7f:91: 93:ae:41:fc:6a:5c:67:d5:9a:4a:f4:69:e7:9b:a9: f5:51:8c:0f:33:71:ea:1e:8c:3a:ab:c7:8d:38:29: 2e:6e:dc:60:44:2c:b0:f2:b2:49:b5:54:1d:5b:e4: db:21:04:55:bc:8b:53:70:5c:79:39:1c:57:27:08: b7:1e:0f:4e:ef:6b:55:74:53:15:7e:65:fd:a0:9f: 55:2d:2e:73:47:87:8b:13:8d:92:96:70:09:e9:20: 13:86:b9:54:e7:57:5c:94:ea:d5:54:d4:4c:de:18: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:F8:2D:EE:7D:B4:38:93:DD:F3:14:B0:7E:FD:44:2D:35:76:CA X509v3 Authority Key Identifier: keyid:4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ae:70:f4:dd:33:2f:5c:50:78:15:43:9d:6d:4a:a8:7c:ec: 7a:f7:5e:03:6c:88:f1:bf:7d:cd:ab:b6:84:9f:8c:e5:d4:b3: ec:3c:df:8e:2d:13:84:ed:f7:4a:ba:fc:51:73:5c:a4:6c:20: 77:81:b4:65:63:1f:75:b0:d5:87:a4:39:8e:29:1d:ca:41:66: 9d:c1:0a:a8:5a:c3:f3:c2:a9:a3:5f:12:32:01:e4:c7:3f:5b: 6d:5d:15:8f:a1:69:1a:b6:cf:10:c2:d4:20:74:2d:13:8c:32: 36:52:19:a6:dc:01:be:5e:2b:85:29:8d:6a:2a:e9:c9:15:0c: c9:1d:d1:6f:a2:30:ba:bb:c8:ff:94:7d:56:0c:c0:10:55:8f: 14:1d:85:f8:85:f0:7e:d1:c4:91:3c:45:1f:a3:44:6e:94:2a: 80:75:b0:ae:d0:e3:66:79:61:ef:93:db:77:b3:93:80:f4:1a: 4e:82:fa:62:c3:46:ed:a3:82:2b:52:10:01:22:fc:e2:06:90: 55:4a:3b:d7:a7:0e:ee:77:60:ee:4e:c6:16:7d:84:66:d4:c1: 67:9d:9c:67:84:7d:4d:cf:3a:83:3d:6d:39:9b:aa:2e:49:a9: e8:d6:82:d7:e0:1b:da:31:70:79:2f:4f:d6:92:c1:aa:f7:94: 13:12:29:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+0z6rsAzf7MA23+wgDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDlmZTA3NDYzNTFjODdjMzQxOGFjZDM5ODZlNzYyOGM0 NTg3NjcwHhcNMjYwMjA5MTgwMDMxWhcNMjYwMjEwMTgwMDMxWjAzMTEwLwYDVQQD EyhjZDI2ZjgyZGVlN2RiNDM4OTNkZGYzMTRiMDdlZmQ0NDJkMzU3NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S9FhGj6IJuxu5Y/puUOZE5jVt19 2q+vouTOR4PvMykemh+1WBSaGpaNIbGTt//yEniy+5Diso3GjWvBlJ37invmDYoK f2Cwb6aak+R3Gh9yNyCEkCZu3Shu3vO7+cwABbLHhOzsFgaIZqu9CpaA8sxY8bom KrshGGprs7B6+y3mk35ugsv6YSSvM3GoncbVtow5f5GTrkH8alxn1ZpK9Gnnm6n1 UYwPM3HqHow6q8eNOCkubtxgRCyw8rJJtVQdW+TbIQRVvItTcFx5ORxXJwi3Hg9O 72tVdFMVfmX9oJ9VLS5zR4eLE42SlnAJ6SAThrlU51dclOrVVNRM3hhLGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0m+C3ufbQ4k93zFLB+/UQtNXbKMB8GA1UdIwQY MBaAFE9J/gdGNRyHw0GKzTmG52KMRYdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMGU5NWItYWYwYy00Nzk2LWFiZTIt ZTdjYzg3MDIzOTYxLzEvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMGU5NWItYWYwYy00Nzk2LWFiZTItZTdjYzg3MDIzOTYx LzEvVDBuLUIwWTFISWZEUVlyTk9ZYm5Zb3hGaDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK5w9N0z L1xQeBVDnW1KqHzsevdeA2yI8b99zau2hJ+M5dSz7Dzfji0ThO33Srr8UXNcpGwg d4G0ZWMfdbDVh6Q5jikdykFmncEKqFrD88Kpo18SMgHkxz9bbV0Vj6FpGrbPEMLU IHQtE4wyNlIZptwBvl4rhSmNairpyRUMyR3Rb6IwurvI/5R9VgzAEFWPFB2F+IXw ftHEkTxFH6NEbpQqgHWwrtDjZnlh75Pbd7OTgPQaToL6YsNG7aOCK1IQASL84gaQ VUo716cO7ndg7k7GFn2EZtTBZ52cZ4R9Tc86gz1tOZuqLkmp6NaC1+Ab2jFweS9P 1pLBqveUExIpxw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:39 2026 by rpki-client