This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json) Hash identifier: FKLA6EoMqH9R60xwxAhwjhrytcJicNmWQjc3Sccge40= Subject key identifier: E1:44:CE:13:D0:1F:6B:42:E3:F1:E4:8B:98:A5:FE:2D:EB:EC:3C:BA Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e Certificate serial: 019C41A180A000AC4A87D4A6853716A59378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft Manifest number: 0900 Signing time: Mon 09 Feb 2026 09:00:29 +0000 Manifest this update: Mon 09 Feb 2026 09:00:29 +0000 Manifest next update: Tue 10 Feb 2026 09:00:29 +0000 Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: 9Iu1wRSshi4asnHmQU/ajW2NXT90v+oBpKl/lT45p/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:80:a0:00:ac:4a:87:d4:a6:85:37:16:a5:93:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e Validity Not Before: Feb 9 09:00:29 2026 GMT Not After : Feb 10 09:00:29 2026 GMT Subject: CN=e144ce13d01f6b42e3f1e48b98a5fe2debec3cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:14:f6:b0:c5:48:ab:d0:fa:30:48:32:f6: e0:57:3f:c5:49:91:87:c8:3c:a8:24:62:bc:a7:6c: 6a:cf:79:e8:7b:18:ad:af:5e:c3:2e:7a:7a:ac:ca: bd:ee:37:54:5c:86:74:f7:d2:05:af:21:2c:a2:d1: 51:9a:10:80:6a:22:1f:6c:8d:48:6e:b9:aa:cd:e4: 5e:77:d4:39:d6:e5:4d:95:dd:59:4b:f7:f0:89:66: fc:cc:ee:5f:06:97:16:4c:2b:17:a4:b4:4f:78:ce: 47:9e:44:a9:4f:ad:04:70:f7:4e:d8:8b:41:30:d6: 4d:41:c1:a3:8b:f6:2c:7c:16:98:19:9c:b6:d5:e9: b1:61:57:94:56:e1:0c:1d:d7:9b:da:e9:aa:89:c1: 31:d7:1d:28:de:f7:f8:60:cc:4b:12:da:62:43:3c: 00:09:88:31:31:4c:1b:85:94:7c:70:5f:8e:fa:a5: f3:10:e3:03:c3:2d:01:2b:dc:8b:4b:c5:41:5e:ee: 8b:f5:ac:f8:7a:69:6f:c9:92:73:2b:e9:36:4b:4b: ba:85:3d:16:85:0a:8c:3e:49:8c:48:ab:18:21:83: 6b:0d:c6:29:87:e9:ab:b9:f3:2c:f1:9e:54:6d:20: 7c:13:41:78:17:e2:f2:3c:86:db:d1:a3:d0:cf:e9: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:44:CE:13:D0:1F:6B:42:E3:F1:E4:8B:98:A5:FE:2D:EB:EC:3C:BA X509v3 Authority Key Identifier: keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d6:cd:4a:10:0a:6b:09:c0:32:73:27:60:d3:a7:a1:46:9d: e9:b4:b9:fe:f3:ce:0f:7f:d3:b9:00:10:29:1e:5b:83:0f:36: 14:32:7d:94:3c:cf:80:ca:35:42:d1:9b:28:fc:55:d9:d1:b0: cf:51:82:97:a4:5c:36:6a:85:86:94:27:76:18:f7:9a:72:87: a6:b2:e8:f3:0d:93:cb:53:1a:48:bb:4c:a3:ae:b8:77:f8:00: ed:0d:9d:62:4a:51:cd:f7:fe:cf:52:f9:f3:a2:9d:c8:9d:c6: 6e:ff:b0:2b:76:cb:13:f2:9d:fb:39:ee:85:01:2a:0f:f0:12: bd:62:cd:39:2e:cd:39:6f:13:57:3b:52:7e:55:fe:d0:de:a9: 1e:15:c5:9e:3d:6d:20:02:88:8a:49:2d:51:93:6c:4b:8b:87: c5:63:c8:32:68:84:c4:37:98:d0:fa:1e:9e:7c:44:f5:06:e1: 12:d9:e1:06:2c:b7:3f:05:ae:ad:3d:c2:8f:9c:36:8b:af:19: 00:88:b7:b0:77:0b:0a:c0:7e:19:bc:da:99:6d:c5:06:70:cd: 78:2d:d7:a1:35:98:cc:29:fc:81:e2:bc:5e:55:ee:54:7f:18: 4e:e6:29:75:9a:15:ec:39:cb:df:9e:d1:42:3e:f0:ab:f0:41: 1e:83:6a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYCgAKxKh9SmhTcWpZN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOGRlYTA0ZGU2ZTM3YjE5MDM1NWUwM2NkMjYwMGM0NzIx MmUxOGUwHhcNMjYwMjA5MDkwMDI5WhcNMjYwMjEwMDkwMDI5WjAzMTEwLwYDVQQD EyhlMTQ0Y2UxM2QwMWY2YjQyZTNmMWU0OGI5OGE1ZmUyZGViZWMzY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2kU9rDFSKvQ+jBIMvbgVz/FSZGH yDyoJGK8p2xqz3noexitr17DLnp6rMq97jdUXIZ099IFryEsotFRmhCAaiIfbI1I brmqzeRed9Q51uVNld1ZS/fwiWb8zO5fBpcWTCsXpLRPeM5HnkSpT60EcPdO2ItB MNZNQcGji/YsfBaYGZy21emxYVeUVuEMHdeb2umqicEx1x0o3vf4YMxLEtpiQzwA CYgxMUwbhZR8cF+O+qXzEOMDwy0BK9yLS8VBXu6L9az4emlvyZJzK+k2S0u6hT0W hQqMPkmMSKsYIYNrDcYph+mrufMs8Z5UbSB8E0F4F+LyPIbb0aPQz+kX3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFEzhPQH2tC4/Hki5il/i3r7Dy6MB8GA1UdIwQY MBaAFEyN6gTebjexkDVeA80mAMRyEuGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODU5MDMtNzU3NC00YWIzLWI0NDEt NTI2N2Q3MTZlNGNlLzEvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lODU5MDMtNzU3NC00YWIzLWI0NDEtNTI2N2Q3MTZlNGNl LzEvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNbNShAK awnAMnMnYNOnoUad6bS5/vPOD3/TuQAQKR5bgw82FDJ9lDzPgMo1QtGbKPxV2dGw z1GCl6RcNmqFhpQndhj3mnKHprLo8w2Ty1MaSLtMo664d/gA7Q2dYkpRzff+z1L5 86KdyJ3Gbv+wK3bLE/Kd+znuhQEqD/ASvWLNOS7NOW8TVztSflX+0N6pHhXFnj1t IAKIikktUZNsS4uHxWPIMmiExDeY0PoennxE9QbhEtnhBiy3PwWurT3Cj5w2i68Z AIi3sHcLCsB+GbzamW3FBnDNeC3XoTWYzCn8geK8XlXuVH8YTuYpdZoV7DnL357R Qj7wq/BBHoNqJg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:23 2026 by rpki-client