This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft File: tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json) Hash identifier: XvkfONzvMpihUrUlGKpnnsdGF7BUuYVHWVovmnayMz8= Subject key identifier: 1C:1E:0A:BD:49:E3:64:86:65:A6:28:C4:2D:D1:4B:86:C6:2D:2A:8A Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F Certificate issuer: /CN=b71eaeab508391a15f95c42913fa005a16c23c0f Certificate serial: 019C4321FA26CD50DB50F6194A6DC9707346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft Manifest number: 1013 Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: jMfVrkkfEhG2pvUa9ONQFAhZgOlPqHNoFmLJWJGgA54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fa:26:cd:50:db:50:f6:19:4a:6d:c9:70:73:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=1c1e0abd49e3648665a628c42dd14b86c62d2a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:3a:9e:e6:7a:00:f8:1c:47:65:b5:ad:7e: 73:5f:38:b1:92:34:07:70:ff:e2:f8:39:ae:91:6c: 3b:e2:60:a4:86:45:1d:cf:e2:48:96:d5:c9:74:60: a0:b0:cb:72:65:60:be:4c:6e:70:02:a8:d6:98:68: 64:77:21:38:34:a9:1c:4c:8e:83:0c:33:f0:bf:50: f8:f9:f4:2d:c7:13:39:7e:b9:64:a3:68:f5:c0:11: b2:ca:4f:ab:73:a3:a5:48:0b:65:9b:c4:4b:08:6a: 66:27:9b:cc:38:8f:94:3e:39:8b:a5:d7:55:40:0b: 05:9d:4c:04:27:c2:93:55:a2:f4:2a:4e:60:67:03: 1c:87:19:d3:d4:e5:16:09:c1:7b:12:b9:4b:00:14: f0:ed:90:69:be:00:c7:8e:0f:65:24:49:fd:eb:49: 90:4c:40:ae:a4:a4:8d:80:72:86:ba:61:3e:6b:c6: 34:e0:0d:2a:ef:2a:89:8a:2f:c4:20:e6:7b:51:27: 32:2f:14:05:3a:63:07:1d:ba:13:6b:d5:52:3d:84: 48:31:6a:05:20:ed:32:0e:cd:40:12:23:27:f2:86: 58:54:9e:66:55:59:ab:62:fe:6b:58:74:b9:ea:5d: 53:27:45:31:21:43:cd:63:2d:1a:db:e6:f9:09:30: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1E:0A:BD:49:E3:64:86:65:A6:28:C4:2D:D1:4B:86:C6:2D:2A:8A X509v3 Authority Key Identifier: keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:41:5c:74:14:4a:23:2f:22:c2:16:6b:c5:4d:6e:74:ea:a8: de:71:d6:4c:b0:bf:e5:f5:67:71:32:0c:f6:17:87:2a:0b:8e: 71:42:ab:b3:4b:04:a7:a2:f3:bd:f7:8c:6f:34:d7:8e:41:10: 19:27:76:98:16:22:fe:10:62:bb:ee:d9:ae:f9:61:35:23:a8: 39:d0:ef:c3:69:6c:6c:13:c8:67:11:f3:8b:64:e1:0f:f5:26: 50:38:3e:ed:d2:15:c4:50:20:c2:0d:57:c2:52:52:c1:56:d7: 3f:4a:b4:2e:57:3e:3a:4a:7b:82:51:85:81:06:ac:54:0c:5a: 42:b3:76:b8:a7:d3:ba:2a:3a:82:5f:ff:1c:8c:07:9e:24:aa: b0:46:02:b1:c8:f1:ff:58:09:eb:83:7f:29:0e:0f:9d:e0:94: 67:d1:d8:78:f5:c3:0d:56:eb:55:3d:40:65:3a:9b:bc:ca:a1: 47:17:f5:0c:a4:85:09:af:86:37:5c:dc:bc:2f:40:04:37:ca: 0a:28:b5:ef:6b:34:02:81:ec:7c:f5:d3:c7:ea:5f:07:bd:9c: 0d:a5:fb:ae:b5:f5:94:74:0b:21:cb:59:41:e3:06:ea:6a:c7: d6:6c:ba:9b:4e:0c:04:fd:34:3d:5e:02:b0:3c:10:c5:45:c1: a3:b7:20:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfomzVDbUPYZSm3JcHNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MWVhZWFiNTA4MzkxYTE1Zjk1YzQyOTEzZmEwMDVhMTZj MjNjMGYwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD EygxYzFlMGFiZDQ5ZTM2NDg2NjVhNjI4YzQyZGQxNGI4NmM2MmQyYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVc6nuZ6APgcR2W1rX5zXzixkjQH cP/i+DmukWw74mCkhkUdz+JIltXJdGCgsMtyZWC+TG5wAqjWmGhkdyE4NKkcTI6D DDPwv1D4+fQtxxM5frlko2j1wBGyyk+rc6OlSAtlm8RLCGpmJ5vMOI+UPjmLpddV QAsFnUwEJ8KTVaL0Kk5gZwMchxnT1OUWCcF7ErlLABTw7ZBpvgDHjg9lJEn960mQ TECupKSNgHKGumE+a8Y04A0q7yqJii/EIOZ7UScyLxQFOmMHHboTa9VSPYRIMWoF IO0yDs1AEiMn8oZYVJ5mVVmrYv5rWHS56l1TJ0UxIUPNYy0a2+b5CTCY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBweCr1J42SGZaYoxC3RS4bGLSqKMB8GA1UdIwQY MBaAFLcerqtQg5GhX5XEKRP6AFoWwjwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgt YmVlNGQ2YzBiMDFlLzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgtYmVlNGQ2YzBiMDFl LzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUFcdBRK Iy8iwhZrxU1udOqo3nHWTLC/5fVncTIM9heHKguOcUKrs0sEp6LzvfeMbzTXjkEQ GSd2mBYi/hBiu+7ZrvlhNSOoOdDvw2lsbBPIZxHzi2ThD/UmUDg+7dIVxFAgwg1X wlJSwVbXP0q0Llc+Okp7glGFgQasVAxaQrN2uKfTuio6gl//HIwHniSqsEYCscjx /1gJ64N/KQ4PneCUZ9HYePXDDVbrVT1AZTqbvMqhRxf1DKSFCa+GN1zcvC9ABDfK Cii172s0AoHsfPXTx+pfB72cDaX7rrX1lHQLIctZQeMG6mrH1my6m04MBP00PV4C sDwQxUXBo7cgyQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:43 2026 by rpki-client