This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json) Hash identifier: 6KBArsCtUCmu06+gBt85IrDdvwOEkhxzpWTdOB5nHyo= Subject key identifier: 09:4E:62:C9:42:A5:DB:F9:9E:E9:32:E2:94:64:5D:5E:A2:DD:DE:EB Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Certificate serial: 019C44346EF804B618267285DBF81D3ADC94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft Manifest number: 1820 Signing time: Mon 09 Feb 2026 21:00:12 +0000 Manifest this update: Mon 09 Feb 2026 21:00:12 +0000 Manifest next update: Tue 10 Feb 2026 21:00:12 +0000 Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: nBtj0oQkBlzklF75+LEItDJEpQmKomyLh/ODvgUzmmw=) 2: rFBai3dtN7fZfaYWmO7HTtf0n_k.roa (hash: VWZKUi8qjHJhvT6NFBJ/pi6UQ/Bzuh/5fCRivrLEGWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:6e:f8:04:b6:18:26:72:85:db:f8:1d:3a:dc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Validity Not Before: Feb 9 21:00:12 2026 GMT Not After : Feb 10 21:00:12 2026 GMT Subject: CN=094e62c942a5dbf99ee932e294645d5ea2dddeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:c5:30:61:e4:1f:2e:71:29:22:fd:7b:b6: f8:6c:40:3c:f9:9d:b7:e7:a7:2a:93:ba:93:92:77: db:6e:df:24:f3:02:54:5f:f7:38:76:5b:17:4f:9a: 59:87:7c:81:22:a9:7c:d1:5e:fd:5f:75:d2:2b:de: 10:be:9a:9b:e3:da:f8:90:5a:d5:9d:ce:21:59:0f: e0:a3:54:9a:86:e6:95:c8:ea:3d:4c:66:25:a2:b6: da:5c:14:d7:84:97:51:4f:e8:a4:16:c0:18:6c:a0: 43:d5:b0:72:67:9f:08:8c:92:55:3e:27:35:c9:74: 76:64:1c:86:de:ae:5b:1e:0b:47:b0:fb:54:b8:c6: c4:9c:4f:fa:29:5c:6a:b6:6e:38:f8:c8:5f:d0:7c: 1d:a5:71:b0:44:11:6f:15:3e:b3:14:d5:27:24:37: 37:c2:49:de:c0:3f:cc:6f:69:49:d2:05:31:5e:7e: b4:f2:9d:38:e3:79:c4:df:0d:d9:39:f2:61:e1:e0: 13:ff:e9:31:d7:b7:68:e9:ec:b8:b5:d4:0e:ef:e7: 1a:26:e1:65:76:bb:66:41:e1:41:f3:a8:61:09:75: c8:87:4d:50:c8:91:8a:41:2b:79:44:3b:51:fc:28: c6:b3:15:56:1e:98:14:0d:f9:5f:87:75:1a:29:2d: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4E:62:C9:42:A5:DB:F9:9E:E9:32:E2:94:64:5D:5E:A2:DD:DE:EB X509v3 Authority Key Identifier: keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:90:34:86:3c:32:b3:71:ab:70:35:db:f4:81:6a:dd:fd:1b: cf:72:a1:c4:8f:f9:fc:79:2b:54:66:f6:7a:30:2e:d1:07:98: c3:64:f5:54:49:c3:aa:2b:d1:23:0c:7d:0a:c4:19:27:49:90: 55:f0:62:19:54:62:09:df:d6:75:c2:3b:02:6a:71:af:60:a6: c8:1a:a2:25:08:bd:d1:dc:9d:d3:87:00:df:94:18:97:71:8f: a9:94:b4:7d:af:c0:d6:9b:b1:bb:0c:a9:36:8b:e7:e0:57:74: 3b:a7:ac:aa:47:df:95:9a:56:f7:6c:3f:45:5a:6f:11:f5:0d: aa:a1:23:d4:ba:b2:15:ec:bc:07:8f:0d:07:91:aa:d8:f5:53: 39:1d:51:e8:ff:eb:fa:a6:6e:14:a0:60:23:fd:f7:58:9e:85: 29:11:43:2e:7d:87:91:bc:fa:65:a0:e5:84:10:95:34:1f:5b: fd:79:55:9d:56:90:d1:20:8b:e5:29:73:2f:97:65:4c:db:7b: f9:cf:9b:98:81:80:b9:87:5e:3c:3e:6e:7c:d8:29:90:1a:0d: a4:dc:9b:a9:92:63:1c:88:4c:4e:3e:4a:42:5a:dd:7e:15:82: 98:a7:6b:98:16:b8:64:e8:76:74:0a:cf:96:24:5f:05:c5:04: 94:f8:4a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENG74BLYYJnKF2/gdOtyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk MjI5YzMwHhcNMjYwMjA5MjEwMDEyWhcNMjYwMjEwMjEwMDEyWjAzMTEwLwYDVQQD EygwOTRlNjJjOTQyYTVkYmY5OWVlOTMyZTI5NDY0NWQ1ZWEyZGRkZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKbFMGHkHy5xKSL9e7b4bEA8+Z23 56cqk7qTknfbbt8k8wJUX/c4dlsXT5pZh3yBIql80V79X3XSK94Qvpqb49r4kFrV nc4hWQ/go1SahuaVyOo9TGYlorbaXBTXhJdRT+ikFsAYbKBD1bByZ58IjJJVPic1 yXR2ZByG3q5bHgtHsPtUuMbEnE/6KVxqtm44+Mhf0HwdpXGwRBFvFT6zFNUnJDc3 wknewD/Mb2lJ0gUxXn608p0443nE3w3ZOfJh4eAT/+kx17do6ey4tdQO7+caJuFl drtmQeFB86hhCXXIh01QyJGKQSt5RDtR/CjGsxVWHpgUDflfh3UaKS0awQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlOYslCpdv5nuky4pRkXV6i3d7rMB8GA1UdIwQY MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZA0hjwy s3GrcDXb9IFq3f0bz3KhxI/5/HkrVGb2ejAu0QeYw2T1VEnDqivRIwx9CsQZJ0mQ VfBiGVRiCd/WdcI7Ampxr2CmyBqiJQi90dyd04cA35QYl3GPqZS0fa/A1puxuwyp Novn4Fd0O6esqkfflZpW92w/RVpvEfUNqqEj1LqyFey8B48NB5Gq2PVTOR1R6P/r +qZuFKBgI/33WJ6FKRFDLn2Hkbz6ZaDlhBCVNB9b/XlVnVaQ0SCL5SlzL5dlTNt7 +c+bmIGAuYdePD5ufNgpkBoNpNybqZJjHIhMTj5KQlrdfhWCmKdrmBa4ZOh2dArP liRfBcUElPhK7g== -----END CERTIFICATE-----Generated at Tue Feb 10 05:50:35 2026 by rpki-client