This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json) Hash identifier: dMlXQHWh2ibnMoq/v6ZcIUNih7orcrK4PB+eWRw7Xjo= Subject key identifier: FD:87:CE:34:61:66:7D:12:25:29:D4:20:7A:5C:CC:59:45:FD:A6:1C Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Certificate serial: 019C43590C47F8E7A800DBE12B78E7D62CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft Manifest number: 0C81 Signing time: Mon 09 Feb 2026 17:00:35 +0000 Manifest this update: Mon 09 Feb 2026 17:00:35 +0000 Manifest next update: Tue 10 Feb 2026 17:00:35 +0000 Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: IpaMeRm75iCDW8OAYQ7LLdwJdQ6DN/kzeInZeeoYkWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:0c:47:f8:e7:a8:00:db:e1:2b:78:e7:d6:2c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Validity Not Before: Feb 9 17:00:35 2026 GMT Not After : Feb 10 17:00:35 2026 GMT Subject: CN=fd87ce3461667d122529d4207a5ccc5945fda61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:42:83:c6:a9:4c:4b:81:eb:9e:5c:08:80: 2b:b9:38:31:b4:88:79:31:0d:63:cf:8f:6f:4d:b1: 17:3d:77:a5:d3:5b:f3:06:34:5a:1c:f1:39:41:93: 64:ba:9c:51:4d:f8:bd:6c:2f:2e:e1:e5:3d:8c:e6: 6c:1a:3b:1c:c0:ab:a0:14:0e:9a:cb:35:6c:1d:33: 82:cc:3d:d8:93:31:a6:9f:01:b5:05:b0:f3:11:4a: 7d:f6:58:83:06:8c:92:41:14:dc:6c:52:5f:41:27: 6f:75:a2:df:42:9a:21:19:59:49:66:19:41:ce:f2: 8c:0d:1f:05:2a:80:b5:73:4a:7f:52:fb:0a:51:15: 7f:b3:87:12:98:25:85:b3:1c:33:9c:f1:bd:30:cb: d3:d6:1b:a5:b4:a0:67:4b:5d:f7:1b:46:0f:8a:50: 24:67:80:af:34:50:84:20:60:5c:1f:13:33:a7:65: a7:ba:f3:2f:73:6c:e3:95:9e:97:d5:7c:10:81:08: 46:36:c5:5f:0e:c4:0c:19:24:c4:d1:7d:b9:fc:af: 0f:88:e9:ae:46:f9:76:e7:03:c5:4b:0d:ee:a8:ad: 72:0c:2f:8c:d7:be:81:42:ef:b2:94:1b:82:a1:29: ed:22:82:73:38:35:89:b9:c3:48:50:a3:1f:bc:df: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:87:CE:34:61:66:7D:12:25:29:D4:20:7A:5C:CC:59:45:FD:A6:1C X509v3 Authority Key Identifier: keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:19:13:f8:1b:7f:da:53:d4:37:bf:17:a4:7e:f8:64:da:fa: b7:72:f3:2c:b9:4f:c7:5e:29:e3:b9:c3:0d:e8:1b:1d:6f:e0: 6b:ab:08:f5:b9:8f:19:20:c2:81:09:d8:01:51:ca:d2:04:a4: 2e:22:f5:9b:74:9d:1c:0d:9b:b6:20:16:fc:c4:8a:0c:88:bf: 2f:b1:81:09:ff:b6:02:36:7e:a2:0a:6f:ae:9a:79:f5:43:a8: 8b:1b:ba:2a:8b:a8:d4:ff:08:c5:11:3a:e6:f6:5f:a8:e6:f3: 49:02:9c:2d:9f:c0:c0:ba:da:f5:b6:63:8d:b8:f9:64:77:89: 11:f5:3d:a0:50:a6:ec:5e:e6:74:a7:4b:7e:fa:a9:fa:e4:a0: 31:01:13:ee:a6:5e:24:67:ee:7e:3e:89:7e:24:cf:a7:2e:e6: 7f:ca:e9:2e:ea:80:27:3b:e8:e7:d9:ab:9e:22:91:69:48:04: 79:3f:a4:9c:a2:ff:06:91:7b:c1:e5:fe:0a:cd:90:ff:ca:4b: 14:ce:fb:6b:76:bc:f2:1e:53:22:7e:36:46:d2:69:b7:86:57: 78:c0:d0:1f:dd:2b:3b:56:83:38:6e:88:c4:d9:61:43:e4:f2: b4:6d:2e:42:23:d1:19:cc:28:d4:69:ef:b0:60:0b:1a:0d:d5: f4:4b:3c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQxH+OeoANvhK3jn1izrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz ODE4YjIwHhcNMjYwMjA5MTcwMDM1WhcNMjYwMjEwMTcwMDM1WjAzMTEwLwYDVQQD EyhmZDg3Y2UzNDYxNjY3ZDEyMjUyOWQ0MjA3YTVjY2M1OTQ1ZmRhNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sFCg8apTEuB655cCIAruTgxtIh5 MQ1jz49vTbEXPXel01vzBjRaHPE5QZNkupxRTfi9bC8u4eU9jOZsGjscwKugFA6a yzVsHTOCzD3YkzGmnwG1BbDzEUp99liDBoySQRTcbFJfQSdvdaLfQpohGVlJZhlB zvKMDR8FKoC1c0p/UvsKURV/s4cSmCWFsxwznPG9MMvT1hultKBnS133G0YPilAk Z4CvNFCEIGBcHxMzp2WnuvMvc2zjlZ6X1XwQgQhGNsVfDsQMGSTE0X25/K8PiOmu Rvl25wPFSw3uqK1yDC+M176BQu+ylBuCoSntIoJzODWJucNIUKMfvN8lZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2HzjRhZn0SJSnUIHpczFlF/aYcMB8GA1UdIwQY MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxkT+Bt/ 2lPUN78XpH74ZNr6t3LzLLlPx14p47nDDegbHW/ga6sI9bmPGSDCgQnYAVHK0gSk LiL1m3SdHA2btiAW/MSKDIi/L7GBCf+2AjZ+ogpvrpp59UOoixu6Kouo1P8IxRE6 5vZfqObzSQKcLZ/AwLra9bZjjbj5ZHeJEfU9oFCm7F7mdKdLfvqp+uSgMQET7qZe JGfufj6JfiTPpy7mf8rpLuqAJzvo59mrniKRaUgEeT+knKL/BpF7weX+Cs2Q/8pL FM77a3a88h5TIn42RtJpt4ZXeMDQH90rO1aDOG6IxNlhQ+TytG0uQiPRGcwo1Gnv sGALGg3V9Es8cA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:56 2026 by rpki-client