This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json) Hash identifier: MG/3FU7MDomnOcxdY2AgAtRzH4FsHj5Hvvl0nDX+eLo= Subject key identifier: 1C:4B:8F:73:D9:72:80:52:25:1B:CC:CE:8C:0F:97:62:89:B6:8E:7A Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94 Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194 Certificate serial: 019C43905DB5AEE889B546418E05E846BE7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 18:01:00 +0000 Manifest this update: Mon 09 Feb 2026 18:01:00 +0000 Manifest next update: Tue 10 Feb 2026 18:01:00 +0000 Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: GemIV9lDazKkjVA5SkFW3cTLYuGJpVS9sUrBc9Pe7Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5d:b5:ae:e8:89:b5:46:41:8e:05:e8:46:be:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194 Validity Not Before: Feb 9 18:01:00 2026 GMT Not After : Feb 10 18:01:00 2026 GMT Subject: CN=1c4b8f73d9728052251bccce8c0f976289b68e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:fc:9f:4a:08:f6:fc:fe:b7:fb:d7:59:1a: 31:5a:07:5b:bd:0d:81:a8:4b:be:ec:9e:b5:a1:23: 57:c5:ec:3b:d3:75:25:3f:dd:cf:40:18:3f:e8:91: 3c:8a:5e:06:c2:6b:33:89:e1:6b:ef:d5:e1:92:19: 9a:93:43:8f:d7:28:df:d6:cf:c8:3d:0d:cf:4c:36: 1c:d8:6d:82:36:d1:04:80:60:63:ae:c3:48:e4:c3: ba:62:d3:01:09:74:f4:17:8b:95:8f:a1:53:40:82: de:31:20:0d:61:60:6f:98:4a:bd:4b:40:b8:2b:28: 78:c9:05:83:98:4b:b9:6b:d7:f1:0e:a7:4e:aa:a7: ac:6d:05:0b:77:12:ec:75:6e:0e:d3:2d:82:d4:fe: 64:e8:10:e0:fc:2a:70:83:64:26:bb:59:67:4b:24: 92:b6:86:68:7c:10:52:de:9e:9b:32:c2:a0:8d:9a: c9:c5:c9:08:a7:11:c2:eb:a5:47:95:31:43:c2:52: a3:38:a5:0f:49:ad:c5:5b:98:35:2e:0d:f9:e1:f4: ae:03:2d:2e:b0:e9:57:04:99:b4:2e:af:c0:e7:db: 92:da:07:bf:cb:ec:e4:00:b5:98:9a:51:dd:8a:c2: df:0f:c2:d4:cf:7f:b9:44:09:f1:52:0e:cd:74:ed: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4B:8F:73:D9:72:80:52:25:1B:CC:CE:8C:0F:97:62:89:B6:8E:7A X509v3 Authority Key Identifier: keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7e:2d:36:f0:7f:26:91:3f:3f:36:5c:82:fe:95:c4:fb:8b: e4:94:84:da:16:3f:9f:fb:d4:55:36:45:57:30:71:c0:ef:c5: 4f:e3:02:24:70:81:88:e4:eb:db:57:7a:48:02:f5:da:61:1c: 29:27:c8:cf:b0:ad:00:88:4a:dd:90:ff:d7:33:ad:bc:d7:aa: 00:de:af:4a:54:3b:cd:e9:e5:4c:6d:1f:b1:2b:89:05:f7:36: f8:0d:f7:fa:ce:9d:02:92:b2:5d:40:99:ee:1f:a7:3d:aa:db: 37:c3:70:8c:9e:0a:9f:de:c2:b8:9e:bc:ae:66:4e:af:ca:c4: 86:7f:5f:f6:61:b1:fe:d6:ab:9c:f1:e0:b0:92:b7:b2:81:3b: 69:bc:dc:b9:4f:c6:fc:57:51:57:45:41:d8:53:a3:76:b6:78: 81:29:77:08:66:36:d8:13:2e:31:f9:3e:e0:cc:12:4e:53:aa: f5:a8:e5:1c:f8:a4:5e:43:95:a6:19:85:ea:e9:aa:5d:46:d3: fb:42:56:8a:a7:04:7b:ea:02:9a:47:1c:4a:3a:66:82:85:a2: 46:4c:fd:55:be:b4:35:5d:56:59:5a:81:40:07:61:64:ad:2e: 13:16:3c:37:26:ad:c2:74:65:3f:7d:88:18:39:04:4f:9b:6a: d2:18:63:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkF21ruiJtUZBjgXoRr58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWJiYThiZDNmYWU3YWU4MjQ5YzljNDYxNjhiYTkwMDIz ZGIxOTQwHhcNMjYwMjA5MTgwMTAwWhcNMjYwMjEwMTgwMTAwWjAzMTEwLwYDVQQD EygxYzRiOGY3M2Q5NzI4MDUyMjUxYmNjY2U4YzBmOTc2Mjg5YjY4ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oz8n0oI9vz+t/vXWRoxWgdbvQ2B qEu+7J61oSNXxew703UlP93PQBg/6JE8il4GwmszieFr79Xhkhmak0OP1yjf1s/I PQ3PTDYc2G2CNtEEgGBjrsNI5MO6YtMBCXT0F4uVj6FTQILeMSANYWBvmEq9S0C4 Kyh4yQWDmEu5a9fxDqdOqqesbQULdxLsdW4O0y2C1P5k6BDg/Cpwg2Qmu1lnSySS toZofBBS3p6bMsKgjZrJxckIpxHC66VHlTFDwlKjOKUPSa3FW5g1Lg354fSuAy0u sOlXBJm0Lq/A59uS2ge/y+zkALWYmlHdisLfD8LUz3+5RAnxUg7NdO2PrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxLj3PZcoBSJRvMzowPl2KJto56MB8GA1UdIwQY MBaAFLUbuovT+ueugknJxGFoupACPbGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDct NzgyMzEwZTY2NjJkLzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDctNzgyMzEwZTY2NjJk LzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN34tNvB/ JpE/PzZcgv6VxPuL5JSE2hY/n/vUVTZFVzBxwO/FT+MCJHCBiOTr21d6SAL12mEc KSfIz7CtAIhK3ZD/1zOtvNeqAN6vSlQ7zenlTG0fsSuJBfc2+A33+s6dApKyXUCZ 7h+nParbN8NwjJ4Kn97CuJ68rmZOr8rEhn9f9mGx/tarnPHgsJK3soE7abzcuU/G /FdRV0VB2FOjdrZ4gSl3CGY22BMuMfk+4MwSTlOq9ajlHPikXkOVphmF6umqXUbT +0JWiqcEe+oCmkccSjpmgoWiRkz9Vb60NV1WWVqBQAdhZK0uExY8NyatwnRlP32I GDkET5tq0hhjSA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:47 2026 by rpki-client