This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json) Hash identifier: QTZPsmDrfTcBVDUvKMI8Mk7lQoFJEmK8VwEsL+EE+1U= Subject key identifier: 95:C7:21:EB:09:99:F3:B5:F1:2F:14:33:10:89:68:0C:BA:EE:DD:D2 Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f Certificate serial: 019C43222528278CDE2C39A0BB8D8191D8D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft Manifest number: 0E6D Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: suT5YFz2eltq51JwBWYygHPtxrO6nzOjKvjKL0kA43Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:25:28:27:8c:de:2c:39:a0:bb:8d:81:91:d8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=95c721eb0999f3b5f12f14331089680cbaeeddd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:6a:da:6c:ab:58:32:c7:f1:95:cd:33:a9: 73:6e:08:b0:30:f6:bb:8f:b1:c7:d7:e5:c2:61:51: a0:1f:df:99:c4:fe:49:19:07:0f:25:19:5a:02:35: 65:a0:17:33:cc:b3:3c:41:4a:d0:a0:09:90:05:a4: 88:e1:4b:5c:4f:2d:a8:3d:bb:af:df:55:67:8f:5b: 4d:a4:80:14:a6:38:65:e5:11:03:61:11:db:dd:aa: d6:1a:be:d4:0d:d5:01:ab:88:11:ce:92:18:1a:58: 53:a4:21:c8:23:c9:7d:fd:44:a5:84:25:25:ae:14: 22:4a:7e:71:58:8b:f9:01:f6:2e:eb:b6:00:06:b6: 3e:b7:a4:3f:17:a5:0e:89:46:f7:37:74:8a:2c:07: 14:a4:23:02:c5:9a:4e:d9:01:d5:39:59:0c:ed:d1: 6c:d3:77:8e:3c:56:59:d6:02:a4:32:9c:94:2c:47: 11:91:19:aa:c7:ab:0d:f9:3a:c6:c8:20:ac:c2:35: 41:aa:cb:ce:60:b3:30:3b:6a:8f:79:26:ff:bf:ae: 08:f3:67:ac:ec:a8:66:45:15:d4:88:68:47:58:09: d4:ef:07:b7:20:17:13:18:c8:a6:84:ea:7d:2b:8a: 1b:0f:1a:61:6d:7a:d5:4f:c6:69:7e:f1:51:0f:4e: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C7:21:EB:09:99:F3:B5:F1:2F:14:33:10:89:68:0C:BA:EE:DD:D2 X509v3 Authority Key Identifier: keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fe:99:e6:66:7d:58:58:a9:6c:c8:e4:9c:39:d1:f3:a2:97: 59:60:6e:8e:d8:53:86:5c:79:50:d3:37:9b:07:59:0c:89:7f: 6c:29:ba:33:03:e7:2f:41:fa:64:30:ef:46:d8:ce:89:73:a7: 34:c6:25:0d:28:b9:53:e3:0f:47:d5:f7:5e:89:12:14:5b:40: c0:e8:b9:9b:54:a9:a2:03:33:f0:aa:29:85:80:b8:be:a6:c8: 73:a9:3d:21:1c:21:bc:2d:5b:75:e0:db:c9:25:fd:4a:a0:6d: a7:9d:15:91:7d:82:56:d7:f6:02:57:de:4e:bb:0b:bd:d3:95: 11:8b:80:dc:e0:a3:23:92:71:c3:00:b9:33:a2:a6:e7:70:27: 89:b1:91:f1:3d:1e:e4:c5:9f:58:97:07:45:58:2b:e6:15:de: b9:e0:19:59:49:24:82:ed:a4:ae:7d:2a:9b:a6:c3:f5:84:26: e5:22:cf:26:c8:59:53:f6:05:39:2d:0a:35:66:c4:2f:7e:db: 82:7d:c9:f4:cf:48:cb:df:68:8f:62:e0:bc:46:7c:9d:bf:37: ff:1b:6a:87:18:fb:c1:7c:b4:64:45:5f:3c:94:72:87:15:d9: 44:64:d7:93:10:44:3e:7c:e1:27:7c:10:17:bc:b8:1b:0f:15: 17:d0:cb:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiUoJ4zeLDmgu42BkdjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2YxZjI0MzJlMjI0YmRlNDliZmFiMTlmNjc1MzYyOWFi NTcwN2YwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD Eyg5NWM3MjFlYjA5OTlmM2I1ZjEyZjE0MzMxMDg5NjgwY2JhZWVkZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4lq2myrWDLH8ZXNM6lzbgiwMPa7 j7HH1+XCYVGgH9+ZxP5JGQcPJRlaAjVloBczzLM8QUrQoAmQBaSI4UtcTy2oPbuv 31Vnj1tNpIAUpjhl5REDYRHb3arWGr7UDdUBq4gRzpIYGlhTpCHII8l9/USlhCUl rhQiSn5xWIv5AfYu67YABrY+t6Q/F6UOiUb3N3SKLAcUpCMCxZpO2QHVOVkM7dFs 03eOPFZZ1gKkMpyULEcRkRmqx6sN+TrGyCCswjVBqsvOYLMwO2qPeSb/v64I82es 7KhmRRXUiGhHWAnU7we3IBcTGMimhOp9K4obDxphbXrVT8ZpfvFRD06XuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXHIesJmfO18S8UMxCJaAy67t3SMB8GA1UdIwQY MBaAFLU/HyQy4iS95Jv6sZ9nU2KatXB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUt N2JiMTg0NDAxNGQ2LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUtN2JiMTg0NDAxNGQ2 LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiv6Z5mZ9 WFipbMjknDnR86KXWWBujthThlx5UNM3mwdZDIl/bCm6MwPnL0H6ZDDvRtjOiXOn NMYlDSi5U+MPR9X3XokSFFtAwOi5m1SpogMz8KophYC4vqbIc6k9IRwhvC1bdeDb ySX9SqBtp50VkX2CVtf2AlfeTrsLvdOVEYuA3OCjI5JxwwC5M6Km53AnibGR8T0e 5MWfWJcHRVgr5hXeueAZWUkkgu2krn0qm6bD9YQm5SLPJshZU/YFOS0KNWbEL37b gn3J9M9Iy99oj2LgvEZ8nb83/xtqhxj7wXy0ZEVfPJRyhxXZRGTXkxBEPnzhJ3wQ F7y4Gw8VF9DLag== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:37 2026 by rpki-client