This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json) Hash identifier: UOOvns2kN/st1ZGud8u92HTL3spm4Az7OmQt8J4/UYM= Subject key identifier: 9B:91:EE:BE:08:10:00:2C:66:57:0B:59:55:50:1D:D8:20:11:F3:35 Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1 Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1 Certificate serial: 019C41D8E3A10465A48A8537FEC02F7BDC45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft Manifest number: 07AD Signing time: Mon 09 Feb 2026 10:00:58 +0000 Manifest this update: Mon 09 Feb 2026 10:00:58 +0000 Manifest next update: Tue 10 Feb 2026 10:00:58 +0000 Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: jgCDFR1syK+Rh8pTo4esxj5vS/If/jRhMOlfVd+EN9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e3:a1:04:65:a4:8a:85:37:fe:c0:2f:7b:dc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1 Validity Not Before: Feb 9 10:00:58 2026 GMT Not After : Feb 10 10:00:58 2026 GMT Subject: CN=9b91eebe0810002c66570b5955501dd82011f335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:c0:35:03:a4:32:67:cc:28:c8:3f:fe:47: 9c:40:cf:4e:b3:d6:a7:ae:a5:58:ec:ca:15:70:86: bb:7b:19:fe:d6:52:a4:87:29:bc:ea:0e:50:24:68: e0:63:61:40:19:09:6c:82:a7:f2:95:25:f0:c6:ae: 11:5f:78:f0:9d:36:23:23:a0:d2:7b:05:be:b5:63: ba:c3:2a:d5:20:7d:fa:9a:41:9d:0f:d9:22:fd:40: 53:a7:3b:ca:53:6a:1f:21:f9:da:10:17:6b:37:92: 18:76:db:54:05:e5:27:a0:3c:78:cc:c5:5a:c3:0a: 4c:13:1d:9c:5b:92:7a:de:d5:8a:fa:57:51:7e:2c: 33:fb:3b:3b:12:6a:a2:52:6f:5c:c6:08:98:0d:56: 53:a4:6d:c4:7b:2e:62:0f:42:14:c5:11:2b:5f:f8: 36:a8:6a:a8:cd:c6:10:a6:a7:53:92:f6:1c:7d:97: 14:41:12:14:f5:30:c9:0e:18:c8:dc:f6:3d:af:45: c1:c6:7d:d1:27:60:c8:8b:2f:ac:b8:47:f2:0a:ce: c9:d6:a6:15:1c:f3:9f:00:6c:c9:6c:bc:6e:27:76: 00:38:de:b6:81:c9:98:0b:a6:d6:e7:c8:3c:58:20: 60:08:7b:b6:8a:81:36:fc:4d:16:12:12:2b:6f:04: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:91:EE:BE:08:10:00:2C:66:57:0B:59:55:50:1D:D8:20:11:F3:35 X509v3 Authority Key Identifier: keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:95:55:b8:84:bf:50:17:90:f7:6d:59:15:b9:cb:f0:0d:00: 3e:35:9f:57:91:57:5d:d2:7e:9d:52:4f:50:43:87:cc:12:f4: 92:f9:1c:22:48:b9:45:e8:13:4d:42:91:0d:b2:f6:d1:09:31: 99:5c:3a:f2:80:a7:bc:ca:c3:60:eb:34:50:68:d2:1b:af:9e: 78:22:f5:69:b4:7c:6d:70:c8:65:3b:ff:54:84:2f:b3:21:d5: a1:5c:e2:82:d7:48:9c:9b:61:59:3f:dc:15:60:2d:55:f0:51: e7:9d:32:bf:fd:37:4c:5d:39:e4:d0:b2:e4:08:a4:d0:99:11: 59:33:49:5c:d4:95:97:12:74:02:8a:06:77:b3:22:b8:74:2b: 8c:99:74:df:61:ef:d3:3a:8f:2c:27:c0:b0:80:41:13:46:85: 3c:ca:be:17:73:33:f3:b2:f3:0b:a4:d0:7d:00:aa:fd:e4:7c: 9c:33:d2:72:49:a8:1d:e6:cd:2a:18:ba:83:00:f2:79:4b:43: 49:34:ae:b3:36:39:4b:bb:c8:8d:59:b0:02:a6:3b:93:87:12: 71:fe:73:62:b8:c4:f9:7c:25:a1:f8:8d:39:d5:6c:61:7d:62: 69:f2:6f:af:43:04:a5:4d:fb:08:31:56:1a:47:74:5b:ff:99: 5f:26:1f:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OOhBGWkioU3/sAve9xFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZWNlZDY5N2NkNmVmNjAzYzkwZjgwMTg4MTgzYmNlMzAy MDQwZTEwHhcNMjYwMjA5MTAwMDU4WhcNMjYwMjEwMTAwMDU4WjAzMTEwLwYDVQQD Eyg5YjkxZWViZTA4MTAwMDJjNjY1NzBiNTk1NTUwMWRkODIwMTFmMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lrANQOkMmfMKMg//kecQM9Os9an rqVY7MoVcIa7exn+1lKkhym86g5QJGjgY2FAGQlsgqfylSXwxq4RX3jwnTYjI6DS ewW+tWO6wyrVIH36mkGdD9ki/UBTpzvKU2ofIfnaEBdrN5IYdttUBeUnoDx4zMVa wwpMEx2cW5J63tWK+ldRfiwz+zs7EmqiUm9cxgiYDVZTpG3Eey5iD0IUxRErX/g2 qGqozcYQpqdTkvYcfZcUQRIU9TDJDhjI3PY9r0XBxn3RJ2DIiy+suEfyCs7J1qYV HPOfAGzJbLxuJ3YAON62gcmYC6bW58g8WCBgCHu2ioE2/E0WEhIrbwTTFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuR7r4IEAAsZlcLWVVQHdggEfM1MB8GA1UdIwQY MBaAFE3s7Wl81u9gPJD4AYgYO84wIEDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODIt MjIxNDQ5MTE4MzA5LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODItMjIxNDQ5MTE4MzA5 LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpVVuIS/ UBeQ921ZFbnL8A0APjWfV5FXXdJ+nVJPUEOHzBL0kvkcIki5RegTTUKRDbL20Qkx mVw68oCnvMrDYOs0UGjSG6+eeCL1abR8bXDIZTv/VIQvsyHVoVzigtdInJthWT/c FWAtVfBR550yv/03TF055NCy5Aik0JkRWTNJXNSVlxJ0AooGd7MiuHQrjJl032Hv 0zqPLCfAsIBBE0aFPMq+F3Mz87LzC6TQfQCq/eR8nDPSckmoHebNKhi6gwDyeUtD STSuszY5S7vIjVmwAqY7k4cScf5zYrjE+XwlofiNOdVsYX1iafJvr0MEpU37CDFW Gkd0W/+ZXyYfvw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:13:31 2026 by rpki-client