This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft (raw, json) Hash identifier: 1Uk2gwxEQGhQ3HL9aN0/pfl24qKF/iOWfNZjfR2SPUk= Subject key identifier: F3:CE:36:C2:AD:98:68:DE:B2:57:03:2F:83:00:DA:4A:E8:8F:41:26 Authority key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6 Certificate issuer: /CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6 Certificate serial: 019C42EBACAEDB39F217D7321CCE98D4C813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft Manifest number: 08C7 Signing time: Mon 09 Feb 2026 15:01:07 +0000 Manifest this update: Mon 09 Feb 2026 15:01:07 +0000 Manifest next update: Tue 10 Feb 2026 15:01:07 +0000 Files and hashes: 1: tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl (hash: gmaL8+06plahWYPs5iX6aYYWmm3tyna5vaMkxioNqvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:ac:ae:db:39:f2:17:d7:32:1c:ce:98:d4:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6 Validity Not Before: Feb 9 15:01:07 2026 GMT Not After : Feb 10 15:01:07 2026 GMT Subject: CN=f3ce36c2ad9868deb257032f8300da4ae88f4126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:6c:49:73:46:d4:29:00:fb:50:65:2c:7b: 5f:25:8e:3f:ad:16:9d:6e:45:32:8b:c5:83:9a:45: ae:7f:8e:d5:0e:4c:73:e0:74:45:7b:a1:7f:84:c7: c9:d7:b0:6e:fe:58:e5:ec:79:4c:84:0f:2f:73:d0: ce:b9:28:f5:36:ed:14:12:24:57:90:e3:cf:7d:2c: e4:59:3e:ca:6e:28:04:6b:0b:52:ce:f3:92:ca:f2: ab:a7:a0:6c:ec:89:95:60:02:c3:f0:55:a7:4d:ab: 97:7c:7d:fb:fe:04:61:b7:e1:e5:59:ea:4f:0a:cf: de:fe:23:58:14:e6:92:dd:7f:51:48:09:68:58:31: a7:49:e9:b9:78:6f:01:b1:bc:26:9d:6a:92:af:b9: de:66:f9:c2:57:a4:d3:7a:34:81:65:7c:3e:f4:bc: ee:af:20:d4:b6:b4:f3:eb:f2:4f:a9:92:a2:a7:84: 2b:3e:4a:44:76:01:de:53:c1:4f:71:7a:f1:3b:35: 70:9c:f2:0b:1d:43:84:e2:69:1d:7d:45:23:c7:ef: d1:cc:92:5f:1c:34:bc:ef:8a:c1:22:67:2b:b4:7d: f9:9e:30:de:68:91:7d:ca:80:db:b5:f4:08:aa:b2: 0b:b9:75:c1:a8:e0:0e:cf:38:16:9a:91:7f:9d:7b: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CE:36:C2:AD:98:68:DE:B2:57:03:2F:83:00:DA:4A:E8:8F:41:26 X509v3 Authority Key Identifier: keyid:B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:8a:fa:3f:83:e3:2b:e4:b5:ec:be:8c:d0:d8:ad:ef:1d: ef:c0:f1:c1:ba:8d:89:b3:2a:75:2a:0c:f6:18:93:ee:db:d7: ea:e4:f8:fd:e4:f8:22:76:8e:d7:d7:e8:68:8b:dd:0d:2b:62: 84:05:a5:1e:e9:4c:d4:4d:95:5e:d3:7a:07:4c:0e:d4:b2:ba: 4a:03:e6:4d:d6:9d:79:f2:75:62:7b:9b:2c:02:bf:03:d6:8f: ed:f8:82:2d:91:e3:d0:17:51:e0:dc:7c:f5:87:d9:1c:c6:52: 88:aa:5c:6c:dd:f8:d5:2d:bd:f6:58:80:b5:ac:2c:24:62:24: 24:0f:32:62:fe:8f:2b:9c:e8:86:e9:4a:f4:5d:ee:c0:26:76: 51:6f:12:dc:ea:b2:51:98:eb:f1:01:e7:be:87:b0:00:14:74: d0:ff:b4:d0:9e:9c:b1:b5:d1:a8:00:eb:8e:9c:1c:83:fc:95: dc:4d:98:2e:97:b6:b6:92:a1:5e:f6:49:53:5b:13:ab:a5:a6: 65:52:e4:09:21:2d:d2:ab:8f:75:70:fd:3e:05:ba:28:e8:34: 3e:23:fd:35:6b:31:1f:55:b2:ed:cf:78:b6:3c:34:2a:20:79: 44:e5:d0:a1:3a:71:25:01:71:50:cc:64:27:2b:74:66:1b:f8: 13:80:f1:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66yu2znyF9cyHM6Y1MgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTE5ZmU4Y2JlZjlhYjMyMGFjN2UwZTM0Njg3OWQ0OWQx ODU3ZDYwHhcNMjYwMjA5MTUwMTA3WhcNMjYwMjEwMTUwMTA3WjAzMTEwLwYDVQQD EyhmM2NlMzZjMmFkOTg2OGRlYjI1NzAzMmY4MzAwZGE0YWU4OGY0MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz5sSXNG1CkA+1BlLHtfJY4/rRad bkUyi8WDmkWuf47VDkxz4HRFe6F/hMfJ17Bu/ljl7HlMhA8vc9DOuSj1Nu0UEiRX kOPPfSzkWT7KbigEawtSzvOSyvKrp6Bs7ImVYALD8FWnTauXfH37/gRht+HlWepP Cs/e/iNYFOaS3X9RSAloWDGnSem5eG8BsbwmnWqSr7neZvnCV6TTejSBZXw+9Lzu ryDUtrTz6/JPqZKip4QrPkpEdgHeU8FPcXrxOzVwnPILHUOE4mkdfUUjx+/RzJJf HDS874rBImcrtH35njDeaJF9yoDbtfQIqrILuXXBqOAOzzgWmpF/nXsx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPONsKtmGjeslcDL4MA2kroj0EmMB8GA1UdIwQY MBaAFLaRn+jL75qzIKx+DjRoedSdGFfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBHZjZNdnZtck1nckg0T05HaDUxSjBZVjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjk5NGMtYThjMC00N2UwLWEwMDYt YjA4NjY2NmUyYWRhLzEvdHBHZjZNdnZtck1nckg0T05HaDUxSjBZVjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jNjk5NGMtYThjMC00N2UwLWEwMDYtYjA4NjY2NmUyYWRh LzEvdHBHZjZNdnZtck1nckg0T05HaDUxSjBZVjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu6K+j+D 4yvktey+jNDYre8d78DxwbqNibMqdSoM9hiT7tvX6uT4/eT4InaO19foaIvdDSti hAWlHulM1E2VXtN6B0wO1LK6SgPmTdadefJ1YnubLAK/A9aP7fiCLZHj0BdR4Nx8 9YfZHMZSiKpcbN341S299liAtawsJGIkJA8yYv6PK5zohulK9F3uwCZ2UW8S3Oqy UZjr8QHnvoewABR00P+00J6csbXRqADrjpwcg/yV3E2YLpe2tpKhXvZJU1sTq6Wm ZVLkCSEt0quPdXD9PgW6KOg0PiP9NWsxH1Wy7c94tjw0KiB5ROXQoTpxJQFxUMxk Jyt0Zhv4E4DxPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:13 2026 by rpki-client