This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json) Hash identifier: 4HepFRxYmV0u7C9pEZvpmi9yRVAZYN0BFpnJoPiccFo= Subject key identifier: DD:F9:0E:72:F7:5E:3D:BC:22:0D:5D:D5:8C:1C:EB:C7:C1:2E:24:83 Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697 Certificate serial: 019C397A7E9E80AFCF57429371AED5450FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft Manifest number: 180D Signing time: Sat 07 Feb 2026 19:00:54 +0000 Manifest this update: Sat 07 Feb 2026 19:00:54 +0000 Manifest next update: Sun 08 Feb 2026 19:00:54 +0000 Files and hashes: 1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=) 2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: 2u0Jp6c0JRqpldeIBHnTQA9QoougIZLpJDOReDtxGt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:39:7a:7e:9e:80:af:cf:57:42:93:71:ae:d5:45:0f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d1527d1839bf830360d71590134354e6d904697 Validity Not Before: Feb 7 19:00:54 2026 GMT Not After : Feb 8 19:00:54 2026 GMT Subject: CN=ddf90e72f75e3dbc220d5dd58c1cebc7c12e2483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ab:79:21:51:0d:b4:46:5f:fe:c5:7b:57:39: 1e:cc:01:8b:10:b1:0f:51:ab:bd:40:f0:01:ab:bd: fd:37:eb:3e:43:58:5f:90:fc:cf:fe:14:69:9a:13: e2:2d:25:13:20:81:55:7e:6a:24:4f:83:2c:05:d1: c7:95:7b:7e:5c:08:55:32:d7:78:2f:d3:b8:14:38: 2a:7c:79:6a:e6:91:f7:84:f7:53:20:0f:10:14:a0: c9:6a:0e:87:13:fe:f8:81:96:3b:58:39:89:15:77: 1e:eb:8d:37:37:d6:b2:b8:40:b5:7a:41:14:d2:87: 62:bb:fe:27:c5:d4:6d:63:2e:0f:1c:a4:04:45:60: c9:65:44:56:2b:4b:cd:7c:7b:3f:f6:75:75:9d:26: 12:c2:99:7f:8d:0a:1a:56:00:c0:3a:26:5c:82:33: 2c:ac:25:05:b3:a3:f8:29:fa:00:93:f2:8e:8b:d8: d0:fe:3f:e9:da:38:20:aa:fc:63:f0:14:3f:13:55: f3:28:e9:d0:71:25:72:08:d0:95:bc:1a:d7:61:cf: ee:cb:d6:a2:df:ac:32:df:ad:6b:4a:d8:ad:b7:84: 2d:6d:3c:87:a8:02:bf:33:42:bd:2d:bc:c9:c8:a7: 28:bb:ac:62:35:56:c0:0c:56:65:73:c3:1a:fa:3e: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F9:0E:72:F7:5E:3D:BC:22:0D:5D:D5:8C:1C:EB:C7:C1:2E:24:83 X509v3 Authority Key Identifier: keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2f:55:90:b6:9e:e9:4a:1d:52:b3:de:98:36:45:cb:cf:ec: c8:1a:6c:cf:8a:b6:c6:71:05:be:35:f2:1a:bb:1c:ed:1f:7c: 30:f8:68:f6:07:ff:1c:d0:2a:c2:4d:c6:95:9b:2e:d3:1d:73: 7d:d3:46:ac:c2:e0:3b:d6:60:c6:72:31:c9:f4:e2:41:3a:1a: b6:a0:70:c6:76:db:59:b0:f6:6c:e9:4f:9a:f1:99:f6:e8:d6: b1:f6:a0:73:eb:61:8d:ad:e8:18:68:d9:f3:c4:51:72:ac:37: 94:06:65:81:69:ac:9b:4d:1c:1c:f6:17:52:75:42:d2:44:c4: dc:a7:b8:b4:5c:1c:bf:ca:03:c4:b1:63:28:ef:6a:20:af:95: a2:aa:7a:5d:c3:a7:d3:c5:d6:6f:d1:c4:b7:c6:a7:9c:1d:bb: 7f:1b:51:28:26:ca:32:d6:74:22:cd:00:50:77:d1:3a:36:ee: a2:26:d8:c7:95:72:6a:4c:4a:fd:f4:45:b4:47:cb:ce:a0:67: 93:7b:87:7d:59:3d:7c:22:3a:81:d8:cb:9a:ee:26:61:6f:a9: 79:e3:f9:98:b0:eb:6b:e3:dc:b9:13:f0:21:73:6e:9f:eb:58: c1:b0:18:b5:f4:f4:37:21:38:70:51:e4:4a:97:bf:76:5d:a2: 22:76:5d:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw5en6egK/PV0KTca7VRQ+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5 MDQ2OTcwHhcNMjYwMjA3MTkwMDU0WhcNMjYwMjA4MTkwMDU0WjAzMTEwLwYDVQQD EyhkZGY5MGU3MmY3NWUzZGJjMjIwZDVkZDU4YzFjZWJjN2MxMmUyNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qt5IVENtEZf/sV7VzkezAGLELEP Uau9QPABq739N+s+Q1hfkPzP/hRpmhPiLSUTIIFVfmokT4MsBdHHlXt+XAhVMtd4 L9O4FDgqfHlq5pH3hPdTIA8QFKDJag6HE/74gZY7WDmJFXce6403N9ayuEC1ekEU 0odiu/4nxdRtYy4PHKQERWDJZURWK0vNfHs/9nV1nSYSwpl/jQoaVgDAOiZcgjMs rCUFs6P4KfoAk/KOi9jQ/j/p2jggqvxj8BQ/E1XzKOnQcSVyCNCVvBrXYc/uy9ai 36wy361rStitt4QtbTyHqAK/M0K9LbzJyKcou6xiNVbADFZlc8Ma+j7+8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN35DnL3Xj28Ig1d1Ywc68fBLiSDMB8GA1UdIwQY MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt ZjNkZjY3M2VhNThjLzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy9VkLae 6UodUrPemDZFy8/syBpsz4q2xnEFvjXyGrsc7R98MPho9gf/HNAqwk3GlZsu0x1z fdNGrMLgO9ZgxnIxyfTiQToatqBwxnbbWbD2bOlPmvGZ9ujWsfagc+thja3oGGjZ 88RRcqw3lAZlgWmsm00cHPYXUnVC0kTE3Ke4tFwcv8oDxLFjKO9qIK+Voqp6XcOn 08XWb9HEt8annB27fxtRKCbKMtZ0Is0AUHfROjbuoibYx5VyakxK/fRFtEfLzqBn k3uHfVk9fCI6gdjLmu4mYW+peeP5mLDra+PcuRPwIXNun+tYwbAYtfT0NyE4cFHk Spe/dl2iInZdSg== -----END CERTIFICATE-----Generated at Sat Feb 7 20:51:33 2026 by rpki-client