This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json) Hash identifier: yp1drTFjfjzj550h9lTEvwIR7x0TJ1DpciW+GGUKl9s= Subject key identifier: A3:5B:DF:B3:BF:19:3E:B1:68:54:5A:E2:4B:7F:0B:B4:78:C5:7E:1C Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1 Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1 Certificate serial: 019C43FE2EE3E731508DBD199468BE25C7ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft Manifest number: 10DE Signing time: Mon 09 Feb 2026 20:00:57 +0000 Manifest this update: Mon 09 Feb 2026 20:00:57 +0000 Manifest next update: Tue 10 Feb 2026 20:00:57 +0000 Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: XC3wt5U/CFM9v0ImGb4FUbWh0gOQuzBDpqE2PruYQLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:2e:e3:e7:31:50:8d:bd:19:94:68:be:25:c7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1 Validity Not Before: Feb 9 20:00:57 2026 GMT Not After : Feb 10 20:00:57 2026 GMT Subject: CN=a35bdfb3bf193eb168545ae24b7f0bb478c57e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:ba:75:79:e5:f2:c9:59:56:67:e0:d3:9c: 81:2f:1f:71:9b:ed:c3:de:a7:5c:48:e5:0f:d0:80: a1:be:3f:da:38:13:fa:5f:da:1e:91:39:ff:53:8d: 34:d6:11:a7:25:57:1f:53:ac:d8:f5:dd:c0:5d:c6: 1c:ce:30:89:42:b9:76:d7:9f:15:de:c5:59:b9:2d: ca:8b:a1:f0:af:0c:8e:00:7d:ae:eb:c0:e1:17:fc: 87:ef:00:03:62:eb:46:cf:ec:f6:1f:58:b8:b7:2e: 4d:ea:af:a2:7c:ff:93:b6:67:6f:34:4e:c6:45:df: 93:76:44:00:b5:33:25:3a:dd:40:e5:56:66:79:24: 04:a1:1a:5c:76:e1:6a:fc:20:ea:e9:cc:08:52:8d: 7d:df:a0:b9:ce:73:cd:23:7c:2e:ea:d1:4a:ca:c1: 0d:9b:85:07:3b:00:00:30:be:69:ac:6b:d1:8e:7d: 88:07:29:c0:f9:27:0a:b9:20:0e:dd:2e:49:6c:e6: 78:a7:4d:d6:38:ff:4c:d9:86:7b:98:60:3d:42:f3: af:85:c6:ab:a3:1a:60:cf:74:29:8f:7e:9c:1f:c3: 5b:ac:de:1f:bd:ed:5c:74:f0:31:37:b2:f1:61:c5: 66:95:9a:03:2f:84:40:a2:61:0d:fb:f6:aa:53:d6: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5B:DF:B3:BF:19:3E:B1:68:54:5A:E2:4B:7F:0B:B4:78:C5:7E:1C X509v3 Authority Key Identifier: keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1c:00:64:c7:ae:0d:77:4b:e9:6f:09:b3:d6:80:95:50:66: a9:b7:ce:99:45:73:00:98:0f:dd:49:2b:b5:28:27:c4:17:62: f5:70:af:4d:ec:c3:b0:4a:27:db:24:c2:24:f2:e8:0b:7e:bb: 3f:95:f3:4c:1f:3e:9d:6d:67:1c:f9:21:bc:04:a0:f8:a2:30: 37:98:c3:6c:7c:89:51:d8:98:9a:72:33:9d:86:c6:cd:af:83: 1f:9b:2b:a4:0a:92:6b:c0:22:8f:6e:d9:bc:a2:5f:7e:71:1b: ea:c8:8d:f1:94:08:a2:92:51:d2:48:46:bb:3f:bc:98:2b:bf: 17:30:58:0c:4e:d3:98:03:1c:65:db:fb:df:4e:0e:6a:4c:65: 9c:ec:77:57:35:39:30:cc:70:bc:6c:95:82:40:9a:f0:39:6e: 0e:5b:31:80:f3:2d:3b:69:48:03:d7:88:87:7d:94:98:32:75: 64:0e:ff:6d:bb:0f:53:e1:bd:b2:84:44:b3:77:2e:1c:1c:87: 50:ab:c0:cf:23:f1:e8:d8:00:96:19:8f:5c:b9:8d:f8:af:84: c8:96:c4:af:e4:64:f2:83:43:f0:4c:d6:df:21:eb:65:35:f2: 51:2f:09:16:a1:c3:07:d3:f6:55:07:0b:ab:ea:fa:89:fc:61: 33:90:af:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/i7j5zFQjb0ZlGi+JcftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjRjZTAzODljZjkzZTJkNTdlMDgyZjFiZWM2MWRhODI3 MmZmZjEwHhcNMjYwMjA5MjAwMDU3WhcNMjYwMjEwMjAwMDU3WjAzMTEwLwYDVQQD EyhhMzViZGZiM2JmMTkzZWIxNjg1NDVhZTI0YjdmMGJiNDc4YzU3ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm626dXnl8slZVmfg05yBLx9xm+3D 3qdcSOUP0IChvj/aOBP6X9oekTn/U4001hGnJVcfU6zY9d3AXcYczjCJQrl2158V 3sVZuS3Ki6HwrwyOAH2u68DhF/yH7wADYutGz+z2H1i4ty5N6q+ifP+TtmdvNE7G Rd+TdkQAtTMlOt1A5VZmeSQEoRpcduFq/CDq6cwIUo1936C5znPNI3wu6tFKysEN m4UHOwAAML5prGvRjn2IBynA+ScKuSAO3S5JbOZ4p03WOP9M2YZ7mGA9QvOvhcar oxpgz3Qpj36cH8NbrN4fve1cdPAxN7LxYcVmlZoDL4RAomEN+/aqU9Y73QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNb37O/GT6xaFRa4kt/C7R4xX4cMB8GA1UdIwQY MBaAFAv0zgOJz5Pi1X4ILxvsYdqCcv/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMt NTYyOGZhZWZlMTFkLzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMtNTYyOGZhZWZlMTFk LzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShwAZMeu DXdL6W8Js9aAlVBmqbfOmUVzAJgP3UkrtSgnxBdi9XCvTezDsEon2yTCJPLoC367 P5XzTB8+nW1nHPkhvASg+KIwN5jDbHyJUdiYmnIznYbGza+DH5srpAqSa8Aij27Z vKJffnEb6siN8ZQIopJR0khGuz+8mCu/FzBYDE7TmAMcZdv7304OakxlnOx3VzU5 MMxwvGyVgkCa8DluDlsxgPMtO2lIA9eIh32UmDJ1ZA7/bbsPU+G9soREs3cuHByH UKvAzyPx6NgAlhmPXLmN+K+EyJbEr+Rk8oND8EzW3yHrZTXyUS8JFqHDB9P2VQcL q+r6ifxhM5Cv8Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:32 2026 by rpki-client