This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft File: tbU9N1ctag--wt36NciFiLsbKSg.mft (raw, json) Hash identifier: Iesgd3JtpmocXfY5mO8vnhdOUA7LvP7eukbWhXk+/Jw= Subject key identifier: 02:A1:D3:EA:E4:57:41:40:53:77:89:B2:C8:77:33:E9:C9:7A:7B:33 Authority key identifier: B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28 Certificate issuer: /CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928 Certificate serial: 019C41D88670B092623BFB0C2463ACC16C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft Manifest number: 0363 Signing time: Mon 09 Feb 2026 10:00:35 +0000 Manifest this update: Mon 09 Feb 2026 10:00:35 +0000 Manifest next update: Tue 10 Feb 2026 10:00:35 +0000 Files and hashes: 1: tbU9N1ctag--wt36NciFiLsbKSg.crl (hash: IHUCc+48VHR084WgXfEheMi3vT0M0njl2J5v7Gq9u4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:86:70:b0:92:62:3b:fb:0c:24:63:ac:c1:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928 Validity Not Before: Feb 9 10:00:35 2026 GMT Not After : Feb 10 10:00:35 2026 GMT Subject: CN=02a1d3eae4574140537789b2c87733e9c97a7b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:2f:82:64:5c:d8:54:63:29:1a:93:01:d6: 52:f2:9f:71:2e:fe:92:1e:0e:22:cf:f2:b5:ec:ac: 6a:c1:e6:52:02:9c:a6:50:d9:1f:ff:6a:6e:28:e6: 25:d3:96:1b:d8:fc:86:35:0e:67:77:86:0a:57:99: 1b:9a:48:5c:35:86:4a:e6:1d:0c:5a:0e:93:ff:f7: c0:68:95:4e:68:01:17:39:ab:f5:03:d8:0d:7f:ce: 4f:1e:3e:f3:a9:5c:cb:59:f9:2a:ae:74:78:04:2b: d9:b9:2a:8a:94:77:2d:6d:42:bf:31:47:e5:4c:b9: d0:ed:1d:b3:2a:9b:76:4d:60:7c:f0:f6:c0:f3:17: 06:7b:99:49:99:bc:9c:94:bb:36:e2:f4:68:20:aa: 81:aa:3a:a7:4b:d1:6d:ec:f6:e6:dc:6b:bf:2b:7c: b9:98:8d:ea:ca:8f:f0:4c:fb:f5:60:f7:be:4a:7a: dd:07:b6:13:74:5b:87:89:3a:69:e2:ee:a9:59:ee: da:9a:aa:8f:4d:b7:00:d9:e0:71:58:be:aa:ba:cb: 31:f1:73:a4:42:2a:37:18:a2:65:91:2e:4a:bf:e1: 22:a1:28:5d:34:9d:3a:2b:b5:84:3f:85:7f:d5:de: 0e:32:a9:d7:42:9f:0d:81:b1:73:19:2b:32:ec:9f: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:D3:EA:E4:57:41:40:53:77:89:B2:C8:77:33:E9:C9:7A:7B:33 X509v3 Authority Key Identifier: keyid:B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:91:0c:a8:7c:b8:c0:09:de:24:27:ba:ea:2f:24:9d:c0:45: a6:0b:62:df:21:de:76:85:e6:e0:98:48:47:f3:7a:6b:b2:f9: cd:3f:9f:a5:f5:43:8e:e2:66:13:aa:23:18:9f:61:70:bf:58: ce:eb:d9:51:fe:c9:55:f6:07:95:5d:e6:96:19:63:4f:16:3f: c4:4c:a6:f3:ba:ba:ae:58:d0:62:f8:f1:b5:05:93:1e:08:73: c0:1f:0a:dd:e9:c2:a3:df:b6:32:31:e1:2a:f8:04:65:6a:37: 3d:7b:54:5b:b8:3e:d0:71:e5:20:b0:e2:42:7a:4c:c2:ac:67: 7d:c2:5b:09:2b:f5:a9:23:45:62:0c:80:3e:d4:6e:33:b3:59: 89:98:2d:e8:fa:d2:2b:e7:93:be:01:6c:2e:33:55:9c:e6:ea: 8c:1f:e5:81:e5:3d:d6:e9:60:96:bd:e2:9c:f7:9d:bb:eb:4f: 81:56:ab:b2:33:5b:d7:ee:e5:5a:64:6a:6b:83:31:1d:0c:e8: e6:31:3f:ca:b6:c0:a7:13:1e:2c:bc:bf:4a:99:e3:92:8d:7f: b9:64:85:5d:43:b5:91:bd:11:55:dc:be:7e:a6:fc:ac:df:91: be:65:78:5e:85:60:40:7b:f1:d9:5f:bb:01:a6:5c:04:67:be: 50:f0:b6:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IZwsJJiO/sMJGOswWx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjUzZDM3NTcyZDZhMGZiZWMyZGRmYTM1Yzg4NTg4YmIx YjI5MjgwHhcNMjYwMjA5MTAwMDM1WhcNMjYwMjEwMTAwMDM1WjAzMTEwLwYDVQQD EygwMmExZDNlYWU0NTc0MTQwNTM3Nzg5YjJjODc3MzNlOWM5N2E3YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzovgmRc2FRjKRqTAdZS8p9xLv6S Hg4iz/K17KxqweZSApymUNkf/2puKOYl05Yb2PyGNQ5nd4YKV5kbmkhcNYZK5h0M Wg6T//fAaJVOaAEXOav1A9gNf85PHj7zqVzLWfkqrnR4BCvZuSqKlHctbUK/MUfl TLnQ7R2zKpt2TWB88PbA8xcGe5lJmbyclLs24vRoIKqBqjqnS9Ft7Pbm3Gu/K3y5 mI3qyo/wTPv1YPe+SnrdB7YTdFuHiTpp4u6pWe7amqqPTbcA2eBxWL6qussx8XOk Qio3GKJlkS5Kv+EioShdNJ06K7WEP4V/1d4OMqnXQp8NgbFzGSsy7J8IbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKh0+rkV0FAU3eJssh3M+nJenszMB8GA1UdIwQY MBaAFLW1PTdXLWoPvsLd+jXIhYi7GykoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJVOU4xY3RhZy0td3QzNk5jaUZpTHNiS1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iODI4ZmItNzM3Yy00NzhlLThhOWYt YjljMTE2Zjc1ZGYxLzEvdGJVOU4xY3RhZy0td3QzNk5jaUZpTHNiS1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iODI4ZmItNzM3Yy00NzhlLThhOWYtYjljMTE2Zjc1ZGYx LzEvdGJVOU4xY3RhZy0td3QzNk5jaUZpTHNiS1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpEMqHy4 wAneJCe66i8kncBFpgti3yHedoXm4JhIR/N6a7L5zT+fpfVDjuJmE6ojGJ9hcL9Y zuvZUf7JVfYHlV3mlhljTxY/xEym87q6rljQYvjxtQWTHghzwB8K3enCo9+2MjHh KvgEZWo3PXtUW7g+0HHlILDiQnpMwqxnfcJbCSv1qSNFYgyAPtRuM7NZiZgt6PrS K+eTvgFsLjNVnObqjB/lgeU91ulglr3inPedu+tPgVarsjNb1+7lWmRqa4MxHQzo 5jE/yrbApxMeLLy/Spnjko1/uWSFXUO1kb0RVdy+fqb8rN+RvmV4XoVgQHvx2V+7 AaZcBGe+UPC2TQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:58 2026 by rpki-client