This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json) Hash identifier: 7cahOcaUzkr1zxRfmSSn6XI/dW85GXTUVOi8lzpDzcA= Subject key identifier: 84:9B:E8:2B:73:49:03:7E:DC:A6:C8:26:37:87:9F:6E:30:C5:1D:05 Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69 Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69 Certificate serial: 019C1E7114C686BE4ED781399A8862BF5FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft Manifest number: 122F Signing time: Mon 02 Feb 2026 13:00:53 +0000 Manifest this update: Mon 02 Feb 2026 13:00:53 +0000 Manifest next update: Tue 03 Feb 2026 13:00:53 +0000 Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: 883DhnUE/djRxmoY0deLXb444b66ykq0x4Czg0ag2WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:71:14:c6:86:be:4e:d7:81:39:9a:88:62:bf:5f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69 Validity Not Before: Feb 2 13:00:53 2026 GMT Not After : Feb 3 13:00:53 2026 GMT Subject: CN=849be82b7349037edca6c82637879f6e30c51d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:7f:1f:49:e7:9b:91:35:1a:1e:75:f8:da: 7b:9c:f8:41:a9:81:f0:c9:4a:e6:62:3d:d1:22:bf: 44:07:bc:84:d2:b1:e5:83:94:e8:ff:96:d8:2c:b2: ea:35:e2:4c:ef:1d:07:92:e6:7b:15:ce:cc:00:1c: c1:b1:44:f0:51:d1:bd:c1:2a:73:ee:66:26:f8:de: b9:b0:b3:dd:54:0e:5e:d3:a2:7a:23:ec:7b:2d:39: d3:ee:4a:1c:9f:3b:60:35:c6:34:25:61:0c:dc:7d: 0c:9d:dd:50:d1:1e:8e:8b:55:3c:c3:7a:95:29:2c: b9:e3:9f:45:26:26:f1:0e:ec:d7:94:11:b0:80:36: 9d:5e:49:8e:f8:56:9b:c0:3f:92:a8:10:7a:8b:3e: 9c:cf:e0:b3:be:eb:61:d3:a9:75:10:5a:e6:6e:bd: 76:18:ae:e9:46:39:ee:a5:e2:16:6c:80:10:17:9b: 33:f6:4f:ec:1a:ab:5a:02:5d:02:d5:22:bc:4d:97: f0:9b:0f:85:47:c1:af:2f:7e:92:0d:47:be:42:45: 73:7d:0b:b2:98:c4:0a:2e:c7:28:57:f1:12:12:52: bb:e9:f1:2a:41:6a:0a:75:75:90:b0:68:82:c4:5c: b9:2e:78:86:5e:8e:a6:a3:f5:7e:bc:18:a4:9f:12: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9B:E8:2B:73:49:03:7E:DC:A6:C8:26:37:87:9F:6E:30:C5:1D:05 X509v3 Authority Key Identifier: keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1b:48:4e:e1:8c:dd:cf:7c:1a:f1:d0:ba:9e:91:41:fe:e1: 6d:c7:03:9c:6e:38:f8:9d:e4:72:99:86:88:78:95:a7:b8:c9: d1:ac:dd:8b:5e:74:4e:fe:6e:49:67:cc:a8:92:10:21:f3:06: 79:33:57:a2:2f:de:58:5d:6c:4d:e9:b5:ab:c0:38:68:4a:b7: 56:8c:7c:7e:12:80:32:4f:27:ee:6b:a0:cd:64:a5:81:19:1d: c4:2a:f9:14:77:d8:8c:4c:cb:4e:0e:4f:97:61:a4:25:96:8c: 40:2a:cb:41:d5:9f:41:26:92:6b:61:28:ff:40:73:7f:5e:64: 48:4c:f3:d3:cc:2f:97:a3:76:06:81:cf:c4:82:ec:b0:89:a0: 9d:2b:18:d6:a1:6b:9f:43:18:52:6d:6f:d5:0f:93:68:1c:c5: ee:a6:69:e6:08:ac:e5:7f:ea:c3:ab:4e:7e:ea:2b:0b:35:0c: 71:4e:c5:f2:1f:28:e1:ac:d1:28:4b:eb:95:bc:6c:7e:74:9c: 27:97:87:1f:5b:2a:03:1e:c5:85:e6:36:fe:cb:18:14:95:bf: c3:60:d5:67:20:82:98:59:d4:86:cf:f1:de:f3:6f:52:9b:be: 06:62:68:78:e0:8a:37:59:87:4d:6f:95:1a:bf:1b:5a:28:26: c8:f4:e9:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwecRTGhr5O14E5mohiv1/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGRmYzdiYTRkZWMyNjU5NmRjOGFjMjMwNWE5MWVkOGU5 MjljNjkwHhcNMjYwMjAyMTMwMDUzWhcNMjYwMjAzMTMwMDUzWjAzMTEwLwYDVQQD Eyg4NDliZTgyYjczNDkwMzdlZGNhNmM4MjYzNzg3OWY2ZTMwYzUxZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA795/H0nnm5E1Gh51+Np7nPhBqYHw yUrmYj3RIr9EB7yE0rHlg5To/5bYLLLqNeJM7x0HkuZ7Fc7MABzBsUTwUdG9wSpz 7mYm+N65sLPdVA5e06J6I+x7LTnT7kocnztgNcY0JWEM3H0Mnd1Q0R6Oi1U8w3qV KSy5459FJibxDuzXlBGwgDadXkmO+FabwD+SqBB6iz6cz+Czvuth06l1EFrmbr12 GK7pRjnupeIWbIAQF5sz9k/sGqtaAl0C1SK8TZfwmw+FR8GvL36SDUe+QkVzfQuy mMQKLscoV/ESElK76fEqQWoKdXWQsGiCxFy5LniGXo6mo/V+vBiknxKHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISb6CtzSQN+3KbIJjeHn24wxR0FMB8GA1UdIwQY MBaAFExN/Huk3sJlltyKwjBake2OkpxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMt YjI5ZWZmMDkxYmM2LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMtYjI5ZWZmMDkxYmM2 LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBtITuGM 3c98GvHQup6RQf7hbccDnG44+J3kcpmGiHiVp7jJ0azdi150Tv5uSWfMqJIQIfMG eTNXoi/eWF1sTem1q8A4aEq3Vox8fhKAMk8n7mugzWSlgRkdxCr5FHfYjEzLTg5P l2GkJZaMQCrLQdWfQSaSa2Eo/0Bzf15kSEzz08wvl6N2BoHPxILssImgnSsY1qFr n0MYUm1v1Q+TaBzF7qZp5gis5X/qw6tOfuorCzUMcU7F8h8o4azRKEvrlbxsfnSc J5eHH1sqAx7FheY2/ssYFJW/w2DVZyCCmFnUhs/x3vNvUpu+BmJoeOCKN1mHTW+V Gr8bWigmyPTpqg== -----END CERTIFICATE-----Generated at Mon Feb 2 20:51:56 2026 by rpki-client