This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json) Hash identifier: Eh/MfeyRoZtSQpGiVjtlz/IOqPye2x0SL7znT5cTWjE= Subject key identifier: DF:4A:C3:4E:90:D8:2F:4A:8F:EA:7B:D8:61:D7:77:44:C3:D3:87:A8 Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Certificate serial: 019C4322495D14745385573F77EC2509559B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft Manifest number: 130E Signing time: Mon 09 Feb 2026 16:00:46 +0000 Manifest this update: Mon 09 Feb 2026 16:00:46 +0000 Manifest next update: Tue 10 Feb 2026 16:00:46 +0000 Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: 4xeo8HSPrv6hvbsy64m7y2/SVe7txJTlP+woD0B+SXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:49:5d:14:74:53:85:57:3f:77:ec:25:09:55:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Validity Not Before: Feb 9 16:00:46 2026 GMT Not After : Feb 10 16:00:46 2026 GMT Subject: CN=df4ac34e90d82f4a8fea7bd861d77744c3d387a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:1f:6f:9c:56:d6:75:4a:e7:4b:fe:57:32: 0a:57:7c:9f:de:a3:22:d1:a8:b1:03:10:4e:97:f0: 4b:af:8c:b6:5e:48:7a:1e:ce:b1:60:7f:fd:01:3e: 69:cd:e5:21:4b:57:4e:5e:34:a4:4b:8c:ed:59:9a: a1:4c:b0:38:bf:74:7a:2f:11:32:a9:ad:1c:c3:84: 1a:a0:ff:65:05:2d:87:b0:ba:e9:1f:03:41:7d:af: aa:5d:fc:4f:b3:51:a5:6d:90:d2:92:54:8f:eb:f6: 39:52:88:0b:26:60:17:20:26:dc:b8:b1:8c:98:4a: 99:1f:d1:3c:50:ca:ae:d6:95:c2:97:c1:28:ce:d8: 62:8e:a8:93:41:1c:d0:2a:4d:d7:c6:70:c6:29:5d: a7:a0:71:1c:7d:1f:42:3d:68:11:2a:24:12:1d:7e: 60:23:f6:a3:7f:2f:05:8d:7d:77:ab:b0:e6:c4:b6: e3:bf:42:d3:7f:1c:43:92:22:30:41:fe:98:a2:78: 9a:0c:8d:d5:50:39:ef:56:e5:9e:89:c2:98:40:9d: 90:c9:8d:65:f9:23:cf:d9:9b:ee:89:ac:44:46:01: d8:e1:aa:f7:e2:dd:59:3d:2e:07:81:90:e8:0c:35: 65:a0:d2:c1:98:7a:44:a2:c0:48:5a:95:6d:45:5b: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4A:C3:4E:90:D8:2F:4A:8F:EA:7B:D8:61:D7:77:44:C3:D3:87:A8 X509v3 Authority Key Identifier: keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:96:fa:f0:6f:61:a5:47:b9:ac:93:f2:e3:52:e0:36:db:11: 66:02:c0:55:cf:15:66:60:48:a2:56:14:f1:f5:a4:e4:30:db: dc:d0:30:81:d5:94:da:51:a7:fc:c3:f7:4c:53:7b:5d:45:c1: 52:a6:dc:28:28:77:0d:8a:43:7c:80:a9:79:3f:6c:98:1d:32: 17:2f:ef:fe:cd:b4:40:ff:d9:e7:7f:f7:1f:24:2f:02:35:95: c1:a7:ff:7c:b3:26:42:c6:01:6b:54:c1:c0:0e:5d:2a:33:b6: 8d:59:40:87:51:86:46:4d:7c:bf:db:0b:7c:fb:25:fb:db:a6: 14:34:31:2f:af:6a:2d:e4:ce:cb:7b:10:dc:c7:5d:07:e3:a3: 1c:e0:fb:1e:fc:b6:1e:e3:55:f3:f1:31:49:ec:36:75:4f:16: 44:91:c5:2e:61:4c:98:b5:21:da:5d:85:f7:2b:8d:18:16:d3: f1:c2:62:c4:e5:f5:f3:67:cc:6b:c5:49:f8:be:f3:af:b4:da: 30:b7:e0:2b:3b:d7:c0:50:a7:39:29:da:da:5c:f4:3e:22:07: b5:0a:20:07:8e:08:9a:be:1b:eb:5b:31:fd:46:0e:e3:be:4a: 11:42:6c:ad:1f:cd:44:20:5b:c9:28:f2:90:a3:c2:36:fb:78: 01:f4:31:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkldFHRThVc/d+wlCVWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3 MWQ5NzYwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD EyhkZjRhYzM0ZTkwZDgyZjRhOGZlYTdiZDg2MWQ3Nzc0NGMzZDM4N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDofb5xW1nVK50v+VzIKV3yf3qMi 0aixAxBOl/BLr4y2Xkh6Hs6xYH/9AT5pzeUhS1dOXjSkS4ztWZqhTLA4v3R6LxEy qa0cw4QaoP9lBS2HsLrpHwNBfa+qXfxPs1GlbZDSklSP6/Y5UogLJmAXICbcuLGM mEqZH9E8UMqu1pXCl8EozthijqiTQRzQKk3XxnDGKV2noHEcfR9CPWgRKiQSHX5g I/ajfy8FjX13q7DmxLbjv0LTfxxDkiIwQf6YoniaDI3VUDnvVuWeicKYQJ2QyY1l +SPP2ZvuiaxERgHY4ar34t1ZPS4HgZDoDDVloNLBmHpEosBIWpVtRVsqPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9Kw06Q2C9Kj+p72GHXd0TD04eoMB8GA1UdIwQY MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpb68G9h pUe5rJPy41LgNtsRZgLAVc8VZmBIolYU8fWk5DDb3NAwgdWU2lGn/MP3TFN7XUXB UqbcKCh3DYpDfICpeT9smB0yFy/v/s20QP/Z53/3HyQvAjWVwaf/fLMmQsYBa1TB wA5dKjO2jVlAh1GGRk18v9sLfPsl+9umFDQxL69qLeTOy3sQ3MddB+OjHOD7Hvy2 HuNV8/ExSew2dU8WRJHFLmFMmLUh2l2F9yuNGBbT8cJixOX182fMa8VJ+L7zr7Ta MLfgKzvXwFCnOSna2lz0PiIHtQogB44Imr4b61sx/UYO475KEUJsrR/NRCBbySjy kKPCNvt4AfQx2A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:51 2026 by rpki-client