This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json) Hash identifier: Z3OOex7xitLgAGNZWMpRLvV/osvlOHkUy6VqPw7l7Nw= Subject key identifier: D3:49:F7:84:03:49:FA:2E:5D:90:79:D6:F6:67:7A:9C:FD:3A:AB:69 Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95 Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95 Certificate serial: 019C427E1167A26544E07E5F891C737E4363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft Manifest number: 135F Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: 3skp7tFRxOzO2Ar-xxZ_-GZkGJA.roa (hash: lluuIQVo59lCKGnliYFSmI59l+40e8vpyBl7Esorldo=) 2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: S36hqbg9KchpcN6OL+3PICeI5n5eWSQvXQgi2IJ7H3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:11:67:a2:65:44:e0:7e:5f:89:1c:73:7e:43:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=d349f7840349fa2e5d9079d6f6677a9cfd3aab69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:df:d8:66:af:95:71:aa:df:35:cb:00:4e: 06:3e:04:4f:c4:2e:0a:f2:07:27:3c:c4:37:46:92: f3:81:e2:46:02:1b:93:64:9e:65:7e:c6:4b:18:f1: cd:99:a2:11:17:47:62:25:df:cf:71:87:37:da:41: 9d:8f:3f:c3:b4:cd:59:8d:41:5e:c0:96:2d:e3:3c: 1d:bd:66:66:3d:18:b2:98:51:9d:d2:b3:f6:dd:bc: a5:b4:ad:0f:82:ef:fb:62:7b:d7:1a:bb:a9:48:37: 27:8c:58:57:00:ab:41:13:4e:d9:bd:6f:7e:77:45: 63:a0:94:21:64:82:fd:18:79:a9:fe:ec:98:dd:18: 7b:61:a2:cb:20:71:83:e3:a3:80:50:1f:39:fa:19: 4a:4f:70:e8:83:46:f1:9e:ed:1b:bf:4f:66:14:8b: 9b:36:a8:a9:59:a8:ab:74:c5:65:75:f7:29:7f:4c: 3b:b8:95:13:0c:dc:ad:c4:e4:de:24:cb:06:68:a2: c1:f9:1e:e7:a4:d9:fc:73:98:ec:3a:c1:0a:d9:ab: c6:de:39:a2:6b:fe:d2:21:71:b7:dc:2e:63:41:30: db:52:b4:f6:bf:3d:29:7f:d6:19:50:c7:41:ef:0c: e9:70:06:41:33:dd:a3:da:6f:1d:48:41:ce:13:1f: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:49:F7:84:03:49:FA:2E:5D:90:79:D6:F6:67:7A:9C:FD:3A:AB:69 X509v3 Authority Key Identifier: keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2e:95:ff:da:46:66:4e:5e:55:c1:c1:44:ee:a1:ce:4a:43: d8:31:7e:a6:24:c0:e6:4e:58:39:f2:68:fc:28:1f:0f:fb:32: 2f:64:6d:cc:dd:48:e9:cd:de:49:52:74:c0:70:4c:46:64:77: fc:dc:5e:50:f5:ab:71:56:ea:68:9e:1b:55:2e:0b:a7:65:b1: d9:e0:73:fb:3c:25:19:5d:11:df:58:f4:87:4d:84:08:58:fb: 59:f0:7b:e7:1c:a0:9b:36:74:ba:7b:5f:90:88:be:d1:70:2b: 0c:66:c1:7d:a6:94:c7:58:b6:ed:cc:83:7d:07:3b:2c:26:ec: 96:cf:ac:14:29:8a:76:1b:93:cc:02:d0:3c:d1:82:e8:a9:56: 6f:70:9a:8d:4c:02:f7:db:6e:5c:15:23:7c:a0:a9:4c:6e:d2: 0a:06:1b:d2:00:c3:37:f0:fd:45:1b:ed:35:31:a9:53:71:39: 27:fa:ab:f7:1a:72:e2:45:7c:d1:77:f7:4e:da:9c:c0:32:a7: 32:4c:1b:d1:ea:7c:cd:66:47:22:98:ee:49:aa:26:74:a9:6c: 80:da:61:3c:ab:7c:70:97:cf:03:9e:63:93:01:d3:7b:f9:5f: fb:31:c8:e7:fc:6a:73:71:8d:a7:46:e7:1b:1a:d8:d7:4c:36: d9:90:e2:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhFnomVE4H5fiRxzfkNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTY3ZTdlZTM3ODM4ZjA3NTFjNDljNWU1ZjNlYzAwMDA2 NGFlOTUwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EyhkMzQ5Zjc4NDAzNDlmYTJlNWQ5MDc5ZDZmNjY3N2E5Y2ZkM2FhYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXf2GavlXGq3zXLAE4GPgRPxC4K 8gcnPMQ3RpLzgeJGAhuTZJ5lfsZLGPHNmaIRF0diJd/PcYc32kGdjz/DtM1ZjUFe wJYt4zwdvWZmPRiymFGd0rP23byltK0Pgu/7YnvXGrupSDcnjFhXAKtBE07ZvW9+ d0VjoJQhZIL9GHmp/uyY3Rh7YaLLIHGD46OAUB85+hlKT3Dog0bxnu0bv09mFIub NqipWairdMVldfcpf0w7uJUTDNytxOTeJMsGaKLB+R7npNn8c5jsOsEK2avG3jmi a/7SIXG33C5jQTDbUrT2vz0pf9YZUMdB7wzpcAZBM92j2m8dSEHOEx+iqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNJ94QDSfouXZB51vZnepz9OqtpMB8GA1UdIwQY MBaAFLUWfn7jeDjwdRxJxeXz7AAAZK6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzIt ZTIyYWVkMWYwOGVjLzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jN2RjMzQtNDRkYi00YzA2LThhMzItZTIyYWVkMWYwOGVj LzEvdFJaLWZ1TjRPUEIxSEVuRjVmUHNBQUJrcnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC6V/9pG Zk5eVcHBRO6hzkpD2DF+piTA5k5YOfJo/CgfD/syL2RtzN1I6c3eSVJ0wHBMRmR3 /NxeUPWrcVbqaJ4bVS4Lp2Wx2eBz+zwlGV0R31j0h02ECFj7WfB75xygmzZ0untf kIi+0XArDGbBfaaUx1i27cyDfQc7LCbsls+sFCmKdhuTzALQPNGC6KlWb3CajUwC 99tuXBUjfKCpTG7SCgYb0gDDN/D9RRvtNTGpU3E5J/qr9xpy4kV80Xf3TtqcwDKn Mkwb0ep8zWZHIpjuSaomdKlsgNphPKt8cJfPA55jkwHTe/lf+zHI5/xqc3GNp0bn GxrY10w22ZDi6g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:29 2026 by rpki-client