This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json) Hash identifier: MVSrcXFZ+ltePJo69ecJek1OwXsEROqjLunLxkB93DI= Subject key identifier: 04:6E:FA:C3:3A:D1:F8:3B:65:FF:1B:69:06:55:79:60:2A:6D:C8:D4 Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3 Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3 Certificate serial: 019C4322518AB015120F770E5CF38F1446FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: JkHLfSZF8LSVhV1hF7d08S/2Oyaye7QPxdodAsuozMk=) 2: yZwyp6pL6dNlodNGDiCb82xzbNo.roa (hash: LBR3tLVZPF+ibt91CHtQViRrck7hdn7NxiOMDBIBNf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:51:8a:b0:15:12:0f:77:0e:5c:f3:8f:14:46:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3 Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=046efac33ad1f83b65ff1b69065579602a6dc8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:6d:0b:55:29:c1:03:65:cc:19:08:f6:82: 0a:35:e3:4e:90:99:c3:ff:34:49:6b:bb:49:a9:96: 31:36:17:25:f4:40:3b:32:3e:23:e8:9c:e0:2e:e7: 4b:fd:10:41:13:20:e1:1f:d8:14:2a:81:cd:a3:d3: cb:2f:76:8e:b8:1b:30:8c:2a:7d:06:ba:1b:a6:b4: 14:a2:d0:db:64:d1:0c:a1:f7:5b:02:db:6c:19:dc: 7a:e0:1a:d4:18:e5:f6:02:d7:7b:0b:68:f3:f5:a8: 25:4b:65:1f:41:8e:fd:96:65:43:58:2f:c1:d2:48: 9f:fb:79:6f:e2:35:34:56:80:c6:13:6a:ee:2a:fa: bb:7d:19:1f:1b:58:69:73:bd:52:f1:3a:ef:44:a1: cb:0f:af:6e:2a:7a:19:61:69:08:9c:d7:5e:ee:b8: 5b:2b:24:2a:d1:7e:a7:a1:35:4c:8a:3a:c7:4d:19: 3c:73:0d:60:ae:8f:e9:9f:33:93:ce:07:d4:27:74: 69:fe:c1:9f:a9:63:16:97:c9:17:cf:fa:ef:fb:2c: 90:f0:c9:70:1d:1f:a4:47:10:a4:74:fa:5b:35:58: f3:ab:1a:f3:38:34:38:3f:48:74:0e:23:b3:83:76: 9f:cf:e6:5e:1d:0b:03:28:da:d0:8c:5a:98:11:2e: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6E:FA:C3:3A:D1:F8:3B:65:FF:1B:69:06:55:79:60:2A:6D:C8:D4 X509v3 Authority Key Identifier: keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:20:02:fb:3c:25:e1:6f:cc:6c:f7:0f:7a:69:d4:e8:36:02: 63:70:e3:1f:16:3b:9b:18:6a:f9:51:e1:59:50:da:27:08:62: 24:c5:77:e5:36:62:03:0a:94:32:a2:9b:b1:d2:b3:fe:58:7f: 22:8a:f6:b5:e8:a1:db:1f:70:85:74:4d:76:5b:83:f0:90:8b: b1:8c:13:c1:f4:82:4b:df:41:e3:98:76:76:d9:b6:99:3b:d9: 0a:3b:1f:dd:0a:03:02:96:03:67:a9:15:83:e3:70:8c:85:43: 9d:96:90:8e:78:27:0a:fa:9e:8b:ec:71:c9:14:73:5b:0f:f9: 58:c3:86:b5:84:f2:ae:e4:58:1d:77:32:34:7c:31:27:72:66: 04:63:16:51:11:3b:36:72:a0:52:c3:ca:29:e9:97:bc:88:af: 0b:ab:b9:10:b6:65:1e:df:34:7f:83:82:05:6b:62:47:16:db: 6a:b4:03:99:bd:37:14:1d:ab:0d:8a:a8:9d:4f:43:36:79:ae: f6:8c:b8:cc:1f:3c:d7:a5:ce:cf:eb:5a:0c:3e:9b:98:6d:61: 5d:c7:a2:29:f8:33:c1:0f:7a:1d:c7:a7:79:c1:9f:97:b4:83: 35:64:e8:05:6a:f0:5f:d9:59:f1:d7:13:fb:8e:76:ec:b7:cc: 1e:f6:9e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlGKsBUSD3cOXPOPFEb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzVmNTI2ZDdkMDkwOWU3ZjRhN2RmMmM1Y2FkNzJkMmFm NmIyYzMwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD EygwNDZlZmFjMzNhZDFmODNiNjVmZjFiNjkwNjU1Nzk2MDJhNmRjOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaltC1UpwQNlzBkI9oIKNeNOkJnD /zRJa7tJqZYxNhcl9EA7Mj4j6JzgLudL/RBBEyDhH9gUKoHNo9PLL3aOuBswjCp9 BrobprQUotDbZNEMofdbAttsGdx64BrUGOX2Atd7C2jz9aglS2UfQY79lmVDWC/B 0kif+3lv4jU0VoDGE2ruKvq7fRkfG1hpc71S8TrvRKHLD69uKnoZYWkInNde7rhb KyQq0X6noTVMijrHTRk8cw1gro/pnzOTzgfUJ3Rp/sGfqWMWl8kXz/rv+yyQ8Mlw HR+kRxCkdPpbNVjzqxrzODQ4P0h0DiOzg3afz+ZeHQsDKNrQjFqYES7qUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARu+sM60fg7Zf8baQZVeWAqbcjUMB8GA1UdIwQY MBaAFLQ19SbX0JCef0p98sXK1y0q9rLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEt MzJmNTlmYTViMzExLzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEtMzJmNTlmYTViMzEx LzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSAC+zwl 4W/MbPcPemnU6DYCY3DjHxY7mxhq+VHhWVDaJwhiJMV35TZiAwqUMqKbsdKz/lh/ Ior2teih2x9whXRNdluD8JCLsYwTwfSCS99B45h2dtm2mTvZCjsf3QoDApYDZ6kV g+NwjIVDnZaQjngnCvqei+xxyRRzWw/5WMOGtYTyruRYHXcyNHwxJ3JmBGMWURE7 NnKgUsPKKemXvIivC6u5ELZlHt80f4OCBWtiRxbbarQDmb03FB2rDYqonU9DNnmu 9oy4zB8816XOz+taDD6bmG1hXceiKfgzwQ96HcenecGfl7SDNWToBWrwX9lZ8dcT +4527LfMHvaegA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:20 2026 by rpki-client