This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json) Hash identifier: CFnLvHpAMF/U9Ck18KtP6auyF5AsGZ/Sgx1Janq2U3k= Subject key identifier: 29:84:A0:22:4A:3B:76:7F:5D:62:14:28:92:FD:6B:58:D7:71:6A:90 Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d Certificate serial: 019C424687FFD0543D0793712AEA9282C757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft Manifest number: 03D6 Signing time: Mon 09 Feb 2026 12:00:44 +0000 Manifest this update: Mon 09 Feb 2026 12:00:44 +0000 Manifest next update: Tue 10 Feb 2026 12:00:44 +0000 Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: aGSqyozA0n9DyLIhEWnXzpWk5cpbYfnU7ndTV+tQqJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:87:ff:d0:54:3d:07:93:71:2a:ea:92:82:c7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d Validity Not Before: Feb 9 12:00:44 2026 GMT Not After : Feb 10 12:00:44 2026 GMT Subject: CN=2984a0224a3b767f5d62142892fd6b58d7716a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:86:1c:74:6e:39:80:b8:dd:c5:e7:70:8e: 5f:49:e7:34:8a:89:51:19:07:d6:78:bd:b8:d0:56: a7:1f:02:8d:02:16:b2:85:03:a2:c1:07:26:52:3d: eb:88:a0:c7:8e:61:e2:30:e3:56:fe:78:34:1a:a0: 44:83:67:f1:56:79:68:03:66:76:de:c7:42:df:67: 95:98:5a:ae:19:38:17:b8:4b:4a:dc:bd:6b:c0:67: 9f:0c:34:f6:cd:25:d2:9f:62:9c:df:04:9c:6f:2c: 0d:c7:c7:48:12:43:07:b8:a7:49:8b:d1:df:a7:e5: 13:9e:ea:9d:57:a9:ec:67:70:bb:3e:09:03:1d:7a: f9:ad:7b:dd:4e:ec:b7:21:7d:40:79:2e:37:d2:9e: 7a:59:ef:c9:ec:ab:37:c2:d6:07:e4:92:54:9d:48: b2:87:49:67:02:e2:e5:6d:02:c6:da:01:33:ed:bf: cd:bd:63:e1:09:12:bf:72:d0:20:7a:59:33:d7:cd: ef:65:73:e6:bd:6f:4f:6e:dc:09:4c:b8:6a:fc:3d: 59:45:0d:31:7e:b0:15:55:82:50:d3:68:4c:a3:16: 98:59:10:81:b7:ba:4a:b9:e4:cb:44:58:e3:d4:ce: e7:dc:e9:b9:74:56:66:92:0f:7a:36:90:82:a8:23: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:A0:22:4A:3B:76:7F:5D:62:14:28:92:FD:6B:58:D7:71:6A:90 X509v3 Authority Key Identifier: keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:b3:07:ab:38:64:b4:60:83:70:3c:75:dd:c9:71:57:77: 6d:7c:23:95:5d:31:01:6f:6c:36:70:dc:f6:5d:8e:b0:65:76: 10:b7:d6:c0:5d:6d:9c:d2:6a:9e:f6:a8:d3:ac:53:e3:aa:4d: 60:fa:e2:06:f9:33:ad:2c:51:7f:a9:32:a9:1f:97:50:e5:2a: 82:32:9d:0a:fa:d3:fd:e3:db:5e:2b:f8:0f:e7:c1:f4:e0:03: 7e:92:3b:11:dd:38:83:b3:96:79:f2:20:01:d7:37:d5:60:c4: 19:93:67:bf:5a:81:04:0f:a1:0a:95:3f:6c:f8:e6:75:32:7f: 52:55:f1:d6:d7:8f:cc:4e:e1:2e:b3:53:4d:5b:6e:0b:d9:70: e5:ad:0c:15:9e:96:94:c5:77:2d:86:3a:3b:1d:fe:6d:a8:ea: 47:e0:64:b7:54:b3:61:10:12:0e:ed:95:4d:2e:b4:8d:7b:2c: 07:65:a0:23:d2:d4:36:b6:cb:c4:63:6c:db:d7:df:74:ea:a3: b6:fe:d7:a1:0f:2c:85:c7:31:4f:6d:90:1a:b9:02:ce:9d:c0: d4:6e:8b:5d:99:7b:b2:5f:91:68:6d:8f:7c:fd:68:de:98:34: 13:d5:04:4b:d6:cf:0b:33:c3:16:7f:25:cd:05:71:00:58:86: d0:03:2d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRof/0FQ9B5NxKuqSgsdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc3MWNlZTg3ZWNhOGJmN2IxMmUwYTYzMDZmMTgxZDJh NTVhNmQwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD EygyOTg0YTAyMjRhM2I3NjdmNWQ2MjE0Mjg5MmZkNmI1OGQ3NzE2YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+qGHHRuOYC43cXncI5fSec0iolR GQfWeL240FanHwKNAhayhQOiwQcmUj3riKDHjmHiMONW/ng0GqBEg2fxVnloA2Z2 3sdC32eVmFquGTgXuEtK3L1rwGefDDT2zSXSn2Kc3wScbywNx8dIEkMHuKdJi9Hf p+UTnuqdV6nsZ3C7PgkDHXr5rXvdTuy3IX1AeS430p56We/J7Ks3wtYH5JJUnUiy h0lnAuLlbQLG2gEz7b/NvWPhCRK/ctAgelkz183vZXPmvW9PbtwJTLhq/D1ZRQ0x frAVVYJQ02hMoxaYWRCBt7pKueTLRFjj1M7n3Om5dFZmkg96NpCCqCMfGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmEoCJKO3Z/XWIUKJL9a1jXcWqQMB8GA1UdIwQY MBaAFE3Xcc7ofsqL97EuCmMG8YHSpVptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMt NTM5ZjljYmEwMGM1LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMtNTM5ZjljYmEwMGM1 LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1qzB6s4 ZLRgg3A8dd3JcVd3bXwjlV0xAW9sNnDc9l2OsGV2ELfWwF1tnNJqnvao06xT46pN YPriBvkzrSxRf6kyqR+XUOUqgjKdCvrT/ePbXiv4D+fB9OADfpI7Ed04g7OWefIg Adc31WDEGZNnv1qBBA+hCpU/bPjmdTJ/UlXx1tePzE7hLrNTTVtuC9lw5a0MFZ6W lMV3LYY6Ox3+bajqR+Bkt1SzYRASDu2VTS60jXssB2WgI9LUNrbLxGNs29ffdOqj tv7XoQ8shccxT22QGrkCzp3A1G6LXZl7sl+RaG2PfP1o3pg0E9UES9bPCzPDFn8l zQVxAFiG0AMtXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:40 2026 by rpki-client