This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json) Hash identifier: 9LRKleOJJmJnmSP44sdXLRfVvcPHQoqL+T7Pvrqfpn8= Subject key identifier: 10:B9:E2:21:FF:AA:83:37:42:33:E7:DE:1C:E7:EF:5C:02:F1:81:4F Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31 Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31 Certificate serial: 019C4321E1F52AD4EDDAF96BDE6B44DB7117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 16:00:19 +0000 Manifest this update: Mon 09 Feb 2026 16:00:19 +0000 Manifest next update: Tue 10 Feb 2026 16:00:19 +0000 Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: 8QV76vL5jPcBldHLoeQvTG3o9Oe3A1Is7rjiLntNXLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e1:f5:2a:d4:ed:da:f9:6b:de:6b:44:db:71:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31 Validity Not Before: Feb 9 16:00:19 2026 GMT Not After : Feb 10 16:00:19 2026 GMT Subject: CN=10b9e221ffaa83374233e7de1ce7ef5c02f1814f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:ea:6d:ce:ef:2b:4b:eb:cc:a5:35:bb:49: da:8b:f2:ea:39:68:2c:5b:5b:52:c6:40:c6:7d:0f: bb:35:a4:99:db:28:e5:85:81:97:75:37:86:87:33: 03:97:72:62:cd:5a:f4:d5:c5:8b:ea:9d:3f:6e:6f: 75:78:33:fe:4a:c8:01:ce:3c:96:c1:5c:eb:87:a2: 3d:ab:9d:f3:51:2f:57:22:e8:c7:1a:a4:95:2a:05: ec:4b:44:18:3c:7f:cf:54:bd:75:c1:8e:d8:ad:a1: 27:e2:18:c7:50:8a:2f:0a:06:02:f2:95:04:d0:ec: ad:f5:b3:63:62:3d:5a:1a:a9:88:7c:d4:e7:35:b4: 5c:28:12:f1:dd:6b:06:bc:b4:e3:57:49:cf:a3:8c: 86:c9:90:79:50:70:89:26:19:0c:bd:44:f3:8c:db: c2:b9:ac:a5:81:e0:2c:d0:02:e5:65:ac:11:0b:77: bf:88:77:6d:a4:01:e5:65:af:2d:0a:dd:ab:cd:c8: 22:d5:af:d7:bc:80:e1:d7:dc:45:9a:da:10:22:c3: ab:f4:bf:c4:85:ac:09:32:ff:c8:93:b7:79:d9:3c: 1b:8b:af:ce:1b:30:9a:51:ab:c7:7f:78:94:c8:d1: a1:0b:95:b7:8e:15:a2:cb:61:a3:10:85:f9:f7:a0: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B9:E2:21:FF:AA:83:37:42:33:E7:DE:1C:E7:EF:5C:02:F1:81:4F X509v3 Authority Key Identifier: keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:3d:4e:62:5a:64:6c:86:a8:e0:46:bd:7d:e3:dc:96:be: a0:67:fc:39:b5:9b:34:70:5f:4f:bf:ec:d6:3c:81:d7:30:32: b3:15:68:a8:b5:a9:1c:f1:c4:a6:68:64:a7:5e:a8:48:ce:d4: c0:9e:67:4d:b0:c3:65:49:89:a3:62:39:60:f1:c7:cb:fa:3f: 3a:f1:e7:cc:41:56:db:7d:6f:de:4c:a7:8b:a3:bd:3a:79:af: 8f:9c:41:7c:9e:9b:4b:c4:16:37:86:08:df:61:f5:cf:16:13: 79:a9:c6:4e:ef:ce:83:f7:63:e6:de:81:ed:8d:52:8d:ae:fa: f9:29:67:c6:43:5e:fb:91:b9:b5:2f:49:0d:f8:7b:a3:d3:6c: b0:62:f1:52:61:95:0e:74:8b:ef:08:bf:65:b8:99:c1:c5:ef: 14:a5:78:08:4b:a9:cd:ed:86:8c:7f:3e:a1:ea:2c:37:ea:72: c6:1b:0e:88:1b:15:e0:09:5e:cd:51:14:46:09:73:59:0e:17: 11:c6:37:d4:ad:85:9f:dc:49:5d:f8:36:3e:21:6e:fe:71:21: cd:1d:f6:54:45:b6:27:20:f5:ca:fc:e2:54:31:d0:58:ff:66: 9d:fe:87:74:c7:e6:20:f2:08:1a:69:e0:41:ae:69:8e:fe:cd: 81:ec:90:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeH1KtTt2vlr3mtE23EXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YTZjMjA3NDI4MjIyZjYzZmM5Y2JhODM5ZDBkYmQ5YTY5 NTBiMzEwHhcNMjYwMjA5MTYwMDE5WhcNMjYwMjEwMTYwMDE5WjAzMTEwLwYDVQQD EygxMGI5ZTIyMWZmYWE4MzM3NDIzM2U3ZGUxY2U3ZWY1YzAyZjE4MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnLqbc7vK0vrzKU1u0nai/LqOWgs W1tSxkDGfQ+7NaSZ2yjlhYGXdTeGhzMDl3JizVr01cWL6p0/bm91eDP+SsgBzjyW wVzrh6I9q53zUS9XIujHGqSVKgXsS0QYPH/PVL11wY7YraEn4hjHUIovCgYC8pUE 0Oyt9bNjYj1aGqmIfNTnNbRcKBLx3WsGvLTjV0nPo4yGyZB5UHCJJhkMvUTzjNvC uaylgeAs0ALlZawRC3e/iHdtpAHlZa8tCt2rzcgi1a/XvIDh19xFmtoQIsOr9L/E hawJMv/Ik7d52Twbi6/OGzCaUavHf3iUyNGhC5W3jhWiy2GjEIX596DSAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC54iH/qoM3QjPn3hzn71wC8YFPMB8GA1UdIwQY MBaAFLSmwgdCgiL2P8nLqDnQ29mmlQsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUt ODRhYmNmYmNkZjVlLzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUtODRhYmNmYmNkZjVl LzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfQ9TmJa ZGyGqOBGvX3j3Ja+oGf8ObWbNHBfT7/s1jyB1zAysxVoqLWpHPHEpmhkp16oSM7U wJ5nTbDDZUmJo2I5YPHHy/o/OvHnzEFW231v3kyni6O9Onmvj5xBfJ6bS8QWN4YI 32H1zxYTeanGTu/Og/dj5t6B7Y1Sja76+SlnxkNe+5G5tS9JDfh7o9NssGLxUmGV DnSL7wi/ZbiZwcXvFKV4CEupze2GjH8+oeosN+pyxhsOiBsV4AlezVEURglzWQ4X EcY31K2Fn9xJXfg2PiFu/nEhzR32VEW2JyD1yvziVDHQWP9mnf6HdMfmIPIIGmng Qa5pjv7NgeyQIg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:03 2026 by rpki-client