This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json) Hash identifier: ATuoxkYnKgETyNbOQrwvW1KDA7/Kx7BRa//z3pvSl0w= Subject key identifier: DA:41:2A:50:A0:3C:BA:3A:33:45:90:EC:C5:72:C9:C6:DC:7B:D1:CC Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae Certificate serial: 019C432210AF60ADE8B244AF066B91A8BC63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft Manifest number: 0331 Signing time: Mon 09 Feb 2026 16:00:31 +0000 Manifest this update: Mon 09 Feb 2026 16:00:31 +0000 Manifest next update: Tue 10 Feb 2026 16:00:31 +0000 Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: y93+Xbqq+bcE4RNygY4neiQlGjOkdnoTVm3M7woq134=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:10:af:60:ad:e8:b2:44:af:06:6b:91:a8:bc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae Validity Not Before: Feb 9 16:00:31 2026 GMT Not After : Feb 10 16:00:31 2026 GMT Subject: CN=da412a50a03cba3a334590ecc572c9c6dc7bd1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:90:5e:5a:54:09:e7:22:71:ad:97:9c:69: 33:d9:bd:6e:60:1a:c8:da:1e:a8:d2:63:75:b9:5b: 65:5f:7f:8b:41:83:b9:41:c8:70:30:a1:61:2a:28: 56:d9:bb:07:1b:b6:ff:79:9e:41:45:ab:de:ef:fe: 9c:9a:72:5a:42:37:8e:35:74:e2:3f:6f:d8:c3:8f: 87:77:67:42:d9:49:93:5b:ce:3b:c0:84:4f:5a:4b: 70:6a:b4:1d:47:8b:06:81:c9:48:2c:5d:83:d6:68: b5:84:b3:67:34:71:af:ab:7a:35:a9:fd:15:70:2b: 7d:18:ff:b7:6a:da:8a:ce:c5:9e:58:b0:90:c4:fa: 52:77:c4:89:b5:12:86:6a:bf:c5:8f:52:46:2d:a5: 9e:62:7e:a6:69:b3:2b:f5:6c:97:39:c5:84:e9:1f: 0f:07:5b:ab:ae:3f:ae:df:bc:98:df:ca:21:38:2f: f7:fa:12:78:df:12:9c:3d:82:44:fa:2b:82:77:d5: 77:21:2f:c2:7d:1d:5a:4b:e4:fc:d0:ee:49:ae:6e: 74:24:cf:9b:4d:80:c4:f5:6d:85:07:d5:dd:7e:8e: 5d:04:7e:80:27:87:27:65:3c:a3:81:6f:c5:ab:3f: 59:00:95:94:b7:e5:bb:0f:a4:5a:2f:46:16:ea:7b: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:2A:50:A0:3C:BA:3A:33:45:90:EC:C5:72:C9:C6:DC:7B:D1:CC X509v3 Authority Key Identifier: keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fe:e5:c7:8b:98:8f:f9:a2:15:fa:79:dd:a4:8b:16:3b:8d: b7:27:7a:5f:3f:33:59:d3:c1:2f:49:a7:7d:1c:9b:44:be:31: e3:30:86:b7:36:f7:73:70:90:cb:74:06:07:a0:f7:33:ee:c2: 85:4c:aa:06:d6:69:84:f2:a3:e4:c8:eb:9c:72:11:b4:13:b8: 7b:27:fa:e4:cb:55:fd:5c:7c:78:b8:a8:83:58:29:b3:22:22: 86:31:a2:8e:be:33:43:fb:f0:55:d0:b0:51:a4:39:78:d9:a5: 4a:80:fb:bb:9e:f3:54:31:f3:ef:bb:21:31:2d:d2:56:63:e5: 65:35:2c:76:f2:2f:af:d3:52:f7:48:6f:8d:64:80:1c:e0:6c: 12:09:03:1f:5b:e9:2d:84:03:86:a5:82:05:db:02:05:6d:8f: a8:da:47:b4:5d:95:2a:57:44:ec:0c:f2:69:54:eb:b3:a9:45: 68:3a:2f:7a:f4:f6:ed:09:f0:83:54:c9:47:45:2b:bc:5e:f7: 99:b7:4d:b3:b0:42:78:4d:1c:1f:b7:01:6a:37:8e:fc:3c:24: 88:f3:8c:8e:93:70:9c:22:2b:ca:78:6f:8f:a9:a0:8b:af:de: b8:0f:28:27:c5:59:93:07:da:df:34:f0:5b:6c:9f:54:1e:e8: bf:34:19:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhCvYK3oskSvBmuRqLxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzRiYTZlM2UyNjk0YzdiMzhlNDY1MWFmZWUwNjFiMGIy MWRlYWUwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD EyhkYTQxMmE1MGEwM2NiYTNhMzM0NTkwZWNjNTcyYzljNmRjN2JkMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0COQXlpUCecica2XnGkz2b1uYBrI 2h6o0mN1uVtlX3+LQYO5QchwMKFhKihW2bsHG7b/eZ5BRave7/6cmnJaQjeONXTi P2/Yw4+Hd2dC2UmTW847wIRPWktwarQdR4sGgclILF2D1mi1hLNnNHGvq3o1qf0V cCt9GP+3atqKzsWeWLCQxPpSd8SJtRKGar/Fj1JGLaWeYn6mabMr9WyXOcWE6R8P B1urrj+u37yY38ohOC/3+hJ43xKcPYJE+iuCd9V3IS/CfR1aS+T80O5Jrm50JM+b TYDE9W2FB9Xdfo5dBH6AJ4cnZTyjgW/Fqz9ZAJWUt+W7D6RaL0YW6nvYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpBKlCgPLo6M0WQ7MVyycbce9HMMB8GA1UdIwQY MBaAFE40um4+JpTHs45GUa/uBhsLId6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUt MzkxNzY4NTczNDk2LzEvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUtMzkxNzY4NTczNDk2 LzEvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACf7lx4uY j/miFfp53aSLFjuNtyd6Xz8zWdPBL0mnfRybRL4x4zCGtzb3c3CQy3QGB6D3M+7C hUyqBtZphPKj5MjrnHIRtBO4eyf65MtV/Vx8eLiog1gpsyIihjGijr4zQ/vwVdCw UaQ5eNmlSoD7u57zVDHz77shMS3SVmPlZTUsdvIvr9NS90hvjWSAHOBsEgkDH1vp LYQDhqWCBdsCBW2PqNpHtF2VKldE7AzyaVTrs6lFaDovevT27Qnwg1TJR0UrvF73 mbdNs7BCeE0cH7cBajeO/DwkiPOMjpNwnCIrynhvj6mgi6/euA8oJ8VZkwfa3zTw W2yfVB7ovzQZLw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:10 2026 by rpki-client