This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json) Hash identifier: L9ZbShl96MI23YJVgnRXGwcl1A3S/fxtzPbHDWiUwis= Subject key identifier: 89:1C:A1:2F:B7:0E:A1:48:A7:3A:39:64:68:48:04:38:1A:86:28:FD Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d Certificate serial: 019C4321C8BE335BF9DDCB57DE2BC8332D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: Mv+Aa3mzup2EQHes5uSkgIK0Kn5MJYKAkdJrZVwYWVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c8:be:33:5b:f9:dd:cb:57:de:2b:c8:33:2d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=891ca12fb70ea148a73a3964684804381a8628fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:21:9d:a2:2a:21:61:62:13:51:55:fd:c0: bb:e0:24:18:e6:f7:7a:57:64:41:0a:e7:90:88:8e: 84:53:10:e0:3a:6a:de:11:a3:11:b9:c3:54:2b:8b: cf:e9:5a:17:5e:a0:27:fc:1e:84:2b:ba:6a:77:b4: 63:72:df:42:e4:6b:c5:7f:84:5b:20:80:a1:91:1d: b7:ab:d2:d7:db:20:7d:02:1d:68:28:8f:3c:13:fd: ea:ab:9b:6e:1f:b8:0c:41:e9:d5:83:9f:3d:ca:19: ed:1f:20:dc:c6:15:e8:81:52:c1:c6:a8:25:4b:14: f9:d0:88:a6:b8:fe:ad:92:ec:62:c4:65:eb:fe:d0: ac:aa:24:91:fd:c8:52:75:70:58:a8:3e:e7:25:39: fa:99:43:7d:75:51:87:24:06:af:62:69:35:c6:da: 6a:94:43:cf:f0:ec:f2:d2:53:d1:4c:6f:fb:6c:18: 06:da:f5:67:61:e0:33:13:79:1a:28:b4:f7:1b:5e: 45:b9:fa:ba:ed:70:cc:93:0c:4b:98:78:42:d0:40: 3b:4c:90:20:0c:b3:a6:20:da:7e:dd:73:5d:26:98: 4e:5a:38:cc:59:91:e6:32:74:a5:52:bb:b2:46:13: ce:98:1c:bb:63:a5:ec:2b:bb:44:4e:e7:62:79:11: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1C:A1:2F:B7:0E:A1:48:A7:3A:39:64:68:48:04:38:1A:86:28:FD X509v3 Authority Key Identifier: keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:96:24:5b:22:1c:c3:9b:7d:a4:af:7b:2c:3a:b8:83:f0:8a: c7:35:3f:26:04:28:73:e6:e5:93:f7:b0:44:0b:f2:18:10:59: e3:8a:33:9a:11:77:e9:63:8c:ed:42:ba:b9:c0:7c:75:78:d7: c5:76:10:76:d2:c6:1f:3c:55:85:f9:cf:c7:f5:28:e7:eb:d6: 6e:4a:72:52:a8:e0:23:c7:ec:e0:dd:8a:3a:8c:21:5f:90:95: bf:90:7f:90:44:f7:67:b9:59:9c:28:b9:18:58:c5:d8:3f:c4: d2:bb:1b:15:7b:41:b0:3d:30:dc:7e:2b:42:32:9f:fb:df:b5: 6a:7f:6c:1b:10:26:f1:91:63:3c:e7:83:e2:f6:90:ff:7a:72: 7f:09:ed:a6:83:26:e8:e5:93:94:7d:39:ce:c9:52:14:73:2f: 59:17:aa:25:0c:55:0a:82:1e:61:9a:6a:4b:30:47:20:0e:08: 8c:a8:79:e1:78:bd:1d:89:d7:2b:f4:23:55:2f:e5:1c:8b:a9: 73:bd:8a:ee:db:28:2a:ce:45:a6:04:f1:f5:4d:7f:30:cd:4c: e5:66:42:27:67:0a:23:a3:4e:47:8a:5d:ac:65:83:f2:7f:b7: 39:b8:26:e8:3e:6f:e2:c6:44:90:d5:f1:c1:2c:a1:7b:ea:68: 2f:47:49:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIci+M1v53ctX3ivIMy18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw YzNiOWQwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD Eyg4OTFjYTEyZmI3MGVhMTQ4YTczYTM5NjQ2ODQ4MDQzODFhODYyOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocohnaIqIWFiE1FV/cC74CQY5vd6 V2RBCueQiI6EUxDgOmreEaMRucNUK4vP6VoXXqAn/B6EK7pqd7Rjct9C5GvFf4Rb IIChkR23q9LX2yB9Ah1oKI88E/3qq5tuH7gMQenVg589yhntHyDcxhXogVLBxqgl SxT50IimuP6tkuxixGXr/tCsqiSR/chSdXBYqD7nJTn6mUN9dVGHJAavYmk1xtpq lEPP8Ozy0lPRTG/7bBgG2vVnYeAzE3kaKLT3G15Fufq67XDMkwxLmHhC0EA7TJAg DLOmINp+3XNdJphOWjjMWZHmMnSlUruyRhPOmBy7Y6XsK7tETudieRGmxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkcoS+3DqFIpzo5ZGhIBDgahij9MB8GA1UdIwQY MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZYkWyIc w5t9pK97LDq4g/CKxzU/JgQoc+blk/ewRAvyGBBZ44ozmhF36WOM7UK6ucB8dXjX xXYQdtLGHzxVhfnPx/Uo5+vWbkpyUqjgI8fs4N2KOowhX5CVv5B/kET3Z7lZnCi5 GFjF2D/E0rsbFXtBsD0w3H4rQjKf+9+1an9sGxAm8ZFjPOeD4vaQ/3pyfwntpoMm 6OWTlH05zslSFHMvWReqJQxVCoIeYZpqSzBHIA4IjKh54Xi9HYnXK/QjVS/lHIup c72K7tsoKs5FpgTx9U1/MM1M5WZCJ2cKI6NOR4pdrGWD8n+3Obgm6D5v4sZEkNXx wSyhe+poL0dJ0w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:26 2026 by rpki-client