This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json) Hash identifier: If5/9rXuPCaOF9QYgxihPI2nqGbXsa3zQ6xFAYCaPxk= Subject key identifier: BC:2F:53:05:F1:F0:9A:53:8A:5A:A1:8E:FE:F6:38:9C:AF:D6:41:49 Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e Certificate serial: 019C420FCA4EC5EDFA6DAC9F0C7C41A86AE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 11:00:56 +0000 Manifest this update: Mon 09 Feb 2026 11:00:56 +0000 Manifest next update: Tue 10 Feb 2026 11:00:56 +0000 Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: vTeMfuiaRJV9ehM22mOGeO/TzHUIOL/bV+Rmd60YmYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ca:4e:c5:ed:fa:6d:ac:9f:0c:7c:41:a8:6a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e Validity Not Before: Feb 9 11:00:56 2026 GMT Not After : Feb 10 11:00:56 2026 GMT Subject: CN=bc2f5305f1f09a538a5aa18efef6389cafd64149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1b:e3:9b:b2:00:d8:e5:72:9a:48:f5:42:fe: ae:4b:4b:f2:56:00:1e:8b:c3:59:d2:1f:87:f3:1a: 62:4f:12:09:d5:2a:46:ee:ca:7d:d7:ca:31:38:f4: 7e:36:7b:a1:bd:40:43:57:09:ba:e6:ba:66:ff:d3: 30:e0:8c:c4:40:dc:d5:77:aa:4b:d2:31:d0:23:30: e0:ce:92:60:a0:3c:e4:59:2e:ac:f1:73:ab:a6:9b: c2:f4:ad:da:87:47:ae:04:c7:99:d9:66:6d:51:e5: d8:8e:ba:6d:6d:91:4d:13:61:fc:1b:9f:ac:bd:79: 69:7c:39:86:cb:1a:38:a9:1c:e6:8d:d7:37:c5:f0: 7d:1c:07:d6:66:de:d7:c4:e4:da:ff:8f:41:5f:db: e9:96:7f:2e:d7:fe:17:2d:e2:98:94:7a:a9:90:7e: 3d:9e:b5:95:48:e5:30:9d:9e:d2:98:e9:b0:1e:9c: c7:66:0d:4b:89:46:cb:81:75:ae:70:c4:9c:07:a7: b5:92:c0:7e:44:28:91:0b:8c:1c:81:a3:c7:c1:0b: 50:e0:6a:ec:5e:91:26:58:cc:ba:33:6b:8f:d7:c4: 91:75:ab:95:21:c8:e9:a7:26:37:b0:04:a5:18:c9: 5c:ec:2b:27:20:62:41:9a:df:5a:d8:44:25:e2:db: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2F:53:05:F1:F0:9A:53:8A:5A:A1:8E:FE:F6:38:9C:AF:D6:41:49 X509v3 Authority Key Identifier: keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:03:03:94:b0:60:40:ad:23:38:f9:f5:81:ab:69:60:06: d0:fd:f3:dd:09:23:ec:b8:bb:f3:36:54:91:82:79:c0:05:08: 53:ca:a8:93:98:a8:9c:41:43:34:a0:09:ae:27:2c:95:63:39: 87:de:e7:8a:e4:9a:2f:03:8b:94:77:e7:97:23:0e:d2:01:98: 71:c9:d0:81:3e:f6:06:6f:fd:56:65:63:e3:f1:11:c2:fb:6e: 24:1c:4f:d3:83:2a:e8:7e:77:28:24:6b:9e:62:b4:6a:27:48: 97:fd:80:5b:0d:ea:13:6a:cd:e5:0c:2a:63:4a:4f:8a:71:56: e7:02:8a:08:e1:b6:d0:59:e1:ce:2b:64:21:c7:04:59:eb:56: bb:db:e6:02:35:6a:68:dc:8d:9c:26:d2:b6:ce:60:c7:cf:b3: b1:8b:f6:4a:23:2f:7c:25:49:9e:bb:39:32:5f:ce:45:2c:a4: c7:89:5a:31:fd:13:bf:7b:c6:86:c3:bd:6b:cc:ec:4e:ea:5b: 4e:52:ba:dc:fb:ef:7a:cb:db:e0:8b:96:f0:16:e7:ec:de:b7: 96:14:eb:b6:38:af:a3:17:17:b0:9a:96:e0:49:fa:ec:48:29: 1c:06:15:8b:a4:30:dd:c7:d5:c9:ca:2b:6d:30:32:3f:19:88: 53:36:63:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8pOxe36bayfDHxBqGrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYTg5M2UzM2E4MjFmZjY2ZDM4ZjBlYmNlNDk5MTFmM2E1 Zjk2NGUwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD EyhiYzJmNTMwNWYxZjA5YTUzOGE1YWExOGVmZWY2Mzg5Y2FmZDY0MTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRvjm7IA2OVymkj1Qv6uS0vyVgAe i8NZ0h+H8xpiTxIJ1SpG7sp918oxOPR+NnuhvUBDVwm65rpm/9Mw4IzEQNzVd6pL 0jHQIzDgzpJgoDzkWS6s8XOrppvC9K3ah0euBMeZ2WZtUeXYjrptbZFNE2H8G5+s vXlpfDmGyxo4qRzmjdc3xfB9HAfWZt7XxOTa/49BX9vpln8u1/4XLeKYlHqpkH49 nrWVSOUwnZ7SmOmwHpzHZg1LiUbLgXWucMScB6e1ksB+RCiRC4wcgaPHwQtQ4Grs XpEmWMy6M2uP18SRdauVIcjppyY3sASlGMlc7CsnIGJBmt9a2EQl4tvMRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwvUwXx8JpTilqhjv72OJyv1kFJMB8GA1UdIwQY MBaAFE+ok+M6gh/2bTjw685JkR86X5ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iODVjYWYtZjIwZS00YjY3LTk4YTAt ZmY3ZjQ4ZjkzZjAxLzEvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iODVjYWYtZjIwZS00YjY3LTk4YTAtZmY3ZjQ4ZjkzZjAx LzEvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1gDA5Sw YECtIzj59YGraWAG0P3z3Qkj7Li78zZUkYJ5wAUIU8qok5ionEFDNKAJricslWM5 h97niuSaLwOLlHfnlyMO0gGYccnQgT72Bm/9VmVj4/ERwvtuJBxP04Mq6H53KCRr nmK0aidIl/2AWw3qE2rN5QwqY0pPinFW5wKKCOG20FnhzitkIccEWetWu9vmAjVq aNyNnCbSts5gx8+zsYv2SiMvfCVJnrs5Ml/ORSykx4laMf0Tv3vGhsO9a8zsTupb TlK63Pvvesvb4IuW8Bbn7N63lhTrtjivoxcXsJqW4En67EgpHAYVi6Qw3cfVycor bTAyPxmIUzZjUA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:58 2026 by rpki-client