This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft File: TON2ekBU9IaN4L2fsjpcx2kP_tU.mft (raw, json) Hash identifier: sEBCRxjOw+OLnk3ac6SlE6WyFi06DVyzKOF5K0Nd8M4= Subject key identifier: 98:A1:99:70:94:03:BD:01:7B:21:37:1E:F0:FA:DB:2E:73:E3:10:87 Authority key identifier: 4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5 Certificate issuer: /CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5 Certificate serial: 019C42461A8F64F3639DDA63D25D199B6A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft Manifest number: 0FAE Signing time: Mon 09 Feb 2026 12:00:16 +0000 Manifest this update: Mon 09 Feb 2026 12:00:16 +0000 Manifest next update: Tue 10 Feb 2026 12:00:16 +0000 Files and hashes: 1: TON2ekBU9IaN4L2fsjpcx2kP_tU.crl (hash: 0O+bBP5J+jekUjB6/XfSc0675nUwgy3RosbyYKUCh1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:1a:8f:64:f3:63:9d:da:63:d2:5d:19:9b:6a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5 Validity Not Before: Feb 9 12:00:16 2026 GMT Not After : Feb 10 12:00:16 2026 GMT Subject: CN=98a199709403bd017b21371ef0fadb2e73e31087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:9b:92:60:50:14:8b:e3:e2:6c:0c:c1:81: 8e:c1:36:12:72:f1:3d:f8:d0:25:b8:24:0f:88:f9: bd:b5:c6:e4:af:d6:d1:61:a1:65:dd:9c:4f:88:eb: 3f:04:88:2a:2e:e9:9f:03:32:d8:f5:50:80:cb:02: c7:3c:b2:2c:a7:3e:70:ce:d6:c1:20:2d:c6:92:59: 6e:0e:50:5f:9a:6b:45:b7:7b:d1:f3:65:29:6d:4a: 02:fe:20:69:50:fc:5c:cd:09:9a:e9:c8:81:51:60: a6:43:fb:3f:65:e9:cf:d9:bc:ab:cc:45:d1:d0:eb: 49:20:8b:8e:56:85:9b:e7:90:65:6d:0c:cd:cf:e2: f5:9b:fc:ea:36:58:7a:e9:a8:ac:63:2e:be:5d:94: 72:e6:2f:d3:c8:2b:4e:7d:dc:b1:28:3e:d0:b4:6a: 48:4d:85:73:f0:c8:af:e6:e9:62:f3:c7:63:03:dc: b5:c1:c3:5b:bc:0b:7d:f4:b0:bd:f6:74:71:43:0c: f9:ef:cf:b7:88:e4:a9:2f:06:85:09:f3:f4:fa:49: c4:de:1e:18:62:24:5a:ae:0c:b1:43:03:5d:76:f3: b9:6f:58:6f:7e:06:de:49:b1:d8:6d:96:af:f1:21: 62:f3:3e:74:80:21:84:b2:37:3e:17:21:55:17:a1: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:99:70:94:03:BD:01:7B:21:37:1E:F0:FA:DB:2E:73:E3:10:87 X509v3 Authority Key Identifier: keyid:4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:59:23:1a:45:e8:88:65:17:e3:b9:70:1d:47:7c:b9:2b:6d: ed:c1:11:d8:f6:0a:e1:26:3d:be:e1:6b:d7:01:5d:a0:a9:95: e1:dd:47:40:58:36:46:9c:48:36:b1:68:8c:2e:1d:af:99:9f: 38:2b:66:f2:7f:63:a2:72:a5:99:27:86:8e:e3:e5:23:c0:8b: 80:30:27:2b:cb:52:fc:c4:bd:ce:c0:43:76:c5:c1:bf:bd:17: dd:24:0a:ec:2f:ce:a5:38:18:d8:3c:77:a6:64:9e:33:7f:86: 61:2c:6e:20:8c:d1:9e:69:74:1b:54:0a:1c:80:8e:5a:03:83: 8f:bd:3d:8d:a9:0c:f0:1c:cd:ec:a0:a4:bf:f4:1e:a8:73:74: ca:73:1e:3b:50:65:1f:de:00:a4:a3:7d:c7:ad:4e:9d:41:66: 06:90:1a:ab:ab:73:df:39:95:b0:0a:aa:1f:95:75:ec:ba:4f: 8a:ef:87:ab:c1:d7:25:a7:ee:bb:1f:be:17:bf:ac:f2:4e:b7: 58:6d:f5:5e:dd:68:e2:06:75:7d:c6:76:c3:16:b9:ee:73:72: 6d:48:60:48:65:f2:04:53:db:91:2d:6e:20:d1:bb:8d:4b:f0: ae:3b:d9:27:1d:0a:64:76:c0:9d:af:bd:08:d9:ed:33:f7:e3: fa:11:5a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhqPZPNjndpj0l0Zm2qGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3NjdhNDA1NGY0ODY4ZGUwYmQ5ZmIyM2E1Y2M3Njkw ZmZlZDUwHhcNMjYwMjA5MTIwMDE2WhcNMjYwMjEwMTIwMDE2WjAzMTEwLwYDVQQD Eyg5OGExOTk3MDk0MDNiZDAxN2IyMTM3MWVmMGZhZGIyZTczZTMxMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNybkmBQFIvj4mwMwYGOwTYScvE9 +NAluCQPiPm9tcbkr9bRYaFl3ZxPiOs/BIgqLumfAzLY9VCAywLHPLIspz5wztbB IC3GklluDlBfmmtFt3vR82UpbUoC/iBpUPxczQma6ciBUWCmQ/s/ZenP2byrzEXR 0OtJIIuOVoWb55BlbQzNz+L1m/zqNlh66aisYy6+XZRy5i/TyCtOfdyxKD7QtGpI TYVz8Miv5uli88djA9y1wcNbvAt99LC99nRxQwz578+3iOSpLwaFCfP0+knE3h4Y YiRargyxQwNddvO5b1hvfgbeSbHYbZav8SFi8z50gCGEsjc+FyFVF6HzJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJihmXCUA70BeyE3HvD62y5z4xCHMB8GA1UdIwQY MBaAFEzjdnpAVPSGjeC9n7I6XMdpD/7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mN2JhZjQtZDI2Ni00ZmU1LWE2ZmYt YTAwNjY3ZjRjZjcxLzEvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mN2JhZjQtZDI2Ni00ZmU1LWE2ZmYtYTAwNjY3ZjRjZjcx LzEvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFkjGkXo iGUX47lwHUd8uStt7cER2PYK4SY9vuFr1wFdoKmV4d1HQFg2RpxINrFojC4dr5mf OCtm8n9jonKlmSeGjuPlI8CLgDAnK8tS/MS9zsBDdsXBv70X3SQK7C/OpTgY2Dx3 pmSeM3+GYSxuIIzRnml0G1QKHICOWgODj709jakM8BzN7KCkv/QeqHN0ynMeO1Bl H94ApKN9x61OnUFmBpAaq6tz3zmVsAqqH5V17LpPiu+Hq8HXJafuux++F7+s8k63 WG31Xt1o4gZ1fcZ2wxa57nNybUhgSGXyBFPbkS1uING7jUvwrjvZJx0KZHbAna+9 CNntM/fj+hFanQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:09 2026 by rpki-client