This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json) Hash identifier: y2QaQEIXRbI+6jmWzz22Anf6fcIHn6udG4R6fk0gHO4= Subject key identifier: 06:C3:26:AD:1B:4E:8C:B9:69:2A:4D:06:74:45:57:55:30:31:49:B4 Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd Certificate serial: 019C427DA977C3EDA466871DDBB467E75D06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft Manifest number: 0E34 Signing time: Mon 09 Feb 2026 13:00:57 +0000 Manifest this update: Mon 09 Feb 2026 13:00:57 +0000 Manifest next update: Tue 10 Feb 2026 13:00:57 +0000 Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: uG6XsNad27gA3nyOXv/wFJR3aHycuSP6V94ySX6svKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a9:77:c3:ed:a4:66:87:1d:db:b4:67:e7:5d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd Validity Not Before: Feb 9 13:00:57 2026 GMT Not After : Feb 10 13:00:57 2026 GMT Subject: CN=06c326ad1b4e8cb9692a4d0674455755303149b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:63:c6:f8:68:03:c5:5b:c6:75:07:c5:05: 98:65:35:6c:56:ff:c4:cc:89:6f:17:65:f0:12:93: d9:e9:2b:09:6f:b9:04:46:6f:00:c9:cb:42:2f:18: e5:16:4e:87:4c:b3:00:a2:de:50:4b:37:09:14:90: c6:d7:90:5e:47:34:1f:2c:75:3c:6f:df:20:66:50: d3:b1:bf:ec:8e:17:73:52:03:28:de:11:58:6e:0e: 1f:69:1f:0e:0f:4c:15:cc:42:73:25:d5:15:3d:70: a6:a6:87:e4:2d:9d:bf:b7:c2:3a:c6:5a:78:d8:03: 16:63:e5:0f:78:f0:9d:27:7a:95:89:87:ce:34:10: e6:2f:9a:0d:3d:a3:23:5c:4c:ad:7e:37:6a:71:09: 40:ee:7b:af:94:a5:b2:4c:2b:44:94:ff:90:98:33: c7:ed:4b:b0:29:8d:8b:4b:3d:46:33:4c:35:5d:10: a4:1a:f5:9a:2a:ee:f8:07:19:dc:26:81:40:9b:cf: cf:a4:d8:fd:f3:70:b2:28:1b:55:80:34:6f:7b:9f: 5a:14:46:7b:47:f7:41:5b:5c:17:02:ae:6a:aa:c7: 21:6e:de:c0:93:12:c9:b6:bc:87:25:f1:8f:f9:31: ed:6e:ba:ec:bf:13:da:d7:37:01:84:38:8c:1a:b9: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C3:26:AD:1B:4E:8C:B9:69:2A:4D:06:74:45:57:55:30:31:49:B4 X509v3 Authority Key Identifier: keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:23:91:86:44:3b:0d:47:82:f3:b2:15:61:9c:5f:43:8a:40: 02:89:41:47:2d:56:f6:40:a6:94:f3:45:7f:79:ab:ba:e6:0e: c3:46:ed:eb:be:8a:1b:05:e1:42:7a:aa:9d:7b:c7:74:0a:16: 5c:32:41:d2:7f:ab:77:30:3a:d6:e4:05:dd:7f:40:ea:d5:44: bc:54:9e:c0:4a:07:d1:62:16:fa:a2:22:8f:20:f7:ff:2a:03: 35:4e:45:42:6f:3c:0d:84:bf:63:9d:4f:75:96:4a:a3:ae:04: da:c2:cb:8e:31:3a:2c:a1:42:33:ce:97:68:e0:58:ec:08:22: 49:d0:bc:60:f7:68:28:ed:94:d5:1b:26:92:93:a4:f2:25:da: af:88:80:bc:6f:cd:97:95:5d:28:15:df:8d:fb:17:36:87:89: 09:b7:1a:1f:34:4c:21:1f:6b:13:c0:71:1a:f3:22:4d:bd:e4: c0:87:58:10:64:07:b4:9e:e7:5a:09:be:a5:67:ac:bf:8c:91: ce:e4:70:f4:8c:de:1b:7a:21:50:b8:0e:7d:51:27:c6:cd:c4: 09:3b:ee:d7:a8:9e:f0:75:43:8c:50:88:ab:a7:77:c7:5e:2f: 21:af:39:f0:ad:9b:da:b8:e3:a7:5b:d3:c7:79:d4:e8:c6:6e: 89:ad:17:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfal3w+2kZocd27Rn510GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWQwOTY3Y2EwMDAyZGQ5Y2U0NWJjNDNiYjcwMWI0MTcz ZDc5YmQwHhcNMjYwMjA5MTMwMDU3WhcNMjYwMjEwMTMwMDU3WjAzMTEwLwYDVQQD EygwNmMzMjZhZDFiNGU4Y2I5NjkyYTRkMDY3NDQ1NTc1NTMwMzE0OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWljxvhoA8VbxnUHxQWYZTVsVv/E zIlvF2XwEpPZ6SsJb7kERm8AyctCLxjlFk6HTLMAot5QSzcJFJDG15BeRzQfLHU8 b98gZlDTsb/sjhdzUgMo3hFYbg4faR8OD0wVzEJzJdUVPXCmpofkLZ2/t8I6xlp4 2AMWY+UPePCdJ3qViYfONBDmL5oNPaMjXEytfjdqcQlA7nuvlKWyTCtElP+QmDPH 7UuwKY2LSz1GM0w1XRCkGvWaKu74BxncJoFAm8/PpNj983CyKBtVgDRve59aFEZ7 R/dBW1wXAq5qqschbt7AkxLJtryHJfGP+THtbrrsvxPa1zcBhDiMGrlADQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbDJq0bToy5aSpNBnRFV1UwMUm0MB8GA1UdIwQY MBaAFLWtCWfKAALdnORbxDu3AbQXPXm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTIt N2MzNmVmNjEzYThmLzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTItN2MzNmVmNjEzYThm LzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCORhkQ7 DUeC87IVYZxfQ4pAAolBRy1W9kCmlPNFf3mruuYOw0bt676KGwXhQnqqnXvHdAoW XDJB0n+rdzA61uQF3X9A6tVEvFSewEoH0WIW+qIijyD3/yoDNU5FQm88DYS/Y51P dZZKo64E2sLLjjE6LKFCM86XaOBY7AgiSdC8YPdoKO2U1RsmkpOk8iXar4iAvG/N l5VdKBXfjfsXNoeJCbcaHzRMIR9rE8BxGvMiTb3kwIdYEGQHtJ7nWgm+pWesv4yR zuRw9IzeG3ohULgOfVEnxs3ECTvu16ie8HVDjFCIq6d3x14vIa858K2b2rjjp1vT x3nU6MZuia0Xdw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:25 2026 by rpki-client