This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json) Hash identifier: FyXJl1YoFPInPf2OhYxXlY9/hlRg0sISmVZvHQ63g+A= Subject key identifier: 08:5C:91:C8:46:50:18:B2:C7:11:32:EC:8D:A8:3E:4F:CC:E2:C0:28 Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc Certificate serial: 019C420F2F15D2FCD9F53FF90BF412CE45D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft Manifest number: 040E Signing time: Mon 09 Feb 2026 11:00:17 +0000 Manifest this update: Mon 09 Feb 2026 11:00:17 +0000 Manifest next update: Tue 10 Feb 2026 11:00:17 +0000 Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: HL5pbJRhgotedQiGfU5y7+h/58sZAGnRPeioMKo9bzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:2f:15:d2:fc:d9:f5:3f:f9:0b:f4:12:ce:45:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc Validity Not Before: Feb 9 11:00:17 2026 GMT Not After : Feb 10 11:00:17 2026 GMT Subject: CN=085c91c8465018b2c71132ec8da83e4fcce2c028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:53:a2:33:fd:62:5b:48:81:a5:db:cb:89: 11:df:5e:af:ca:41:f3:bc:81:b4:85:9a:5c:14:12: c1:b1:c8:d0:7f:78:39:fe:7e:ec:9d:34:ec:33:0d: d9:a7:6b:2b:8b:99:63:9b:df:6b:bd:c7:12:f9:cf: 94:32:a9:e6:21:ad:9f:81:49:87:63:27:b9:36:2f: 3c:f0:25:06:58:a5:13:24:dc:ce:92:91:c0:fa:e1: f1:ea:11:73:f7:d7:15:17:a8:34:3c:98:2f:7f:19: 2e:ba:07:38:4e:3f:26:40:e1:90:9a:87:6b:ee:47: b3:5a:9d:d7:50:76:09:dd:bc:5c:dd:74:89:4d:70: 36:f9:cf:ec:f0:59:57:32:45:db:44:07:98:ec:59: b3:80:4b:e9:18:76:09:88:2f:49:c1:da:0a:f4:eb: bb:bc:f8:08:33:09:97:74:15:1b:91:cf:19:cf:54: c2:19:37:4a:6f:5e:fb:5a:b2:01:d5:e7:78:1c:8a: ec:ab:ee:82:ab:37:12:63:f0:01:a6:6e:23:39:6d: 86:71:8d:ac:97:4f:88:df:38:4b:a7:ca:b3:ea:2f: ce:23:40:38:76:28:cf:d7:d4:e4:d3:75:f9:fe:5f: d2:1d:51:ef:7e:4d:a1:78:73:8f:6b:c6:3c:ee:2f: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:91:C8:46:50:18:B2:C7:11:32:EC:8D:A8:3E:4F:CC:E2:C0:28 X509v3 Authority Key Identifier: keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:00:c1:bc:aa:6b:af:d9:1c:f5:6f:23:80:40:9d:45:78:8d: 09:1f:e7:3a:87:0f:4c:f7:e3:54:06:d7:00:dd:61:98:5b:38: a2:b7:28:fd:8d:83:8d:98:10:e0:c2:4e:b2:57:4d:46:8e:f0: 61:10:11:12:eb:d9:9e:5a:9f:0a:7e:3d:60:01:07:6a:a2:45: c9:be:cf:a3:ea:9b:c9:36:85:f0:8b:ac:fa:80:71:9d:b4:87: 89:e8:4d:e4:75:4a:c7:2b:f4:b2:ac:dc:66:7d:1f:6b:f6:92: ac:2d:c0:85:70:35:cf:0a:33:4f:83:89:92:7a:57:8b:66:c0: 3f:1e:65:95:78:f3:e0:ba:1e:ac:7c:f4:97:79:70:ec:79:ae: 5f:55:4a:34:61:55:19:e0:1a:e2:a3:01:58:e5:b0:b6:dd:70: d8:f8:dd:cc:15:2f:cb:85:c5:8e:75:9e:9b:35:d5:f9:4e:b6: 5f:bb:f2:b4:03:a6:82:7d:1b:e8:24:77:65:da:2b:95:de:58: 2a:05:5b:ba:9b:87:fd:29:2f:71:ac:f4:86:16:7d:3e:46:bc: 3e:a8:04:b6:3d:01:65:30:26:f8:c0:59:75:f3:8f:1a:24:6e: 31:8a:d2:75:e0:db:f4:39:f0:6b:90:55:11:3f:2c:8f:aa:5a: 14:e2:04:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDy8V0vzZ9T/5C/QSzkXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2FjYTM2ODQ2ZDJkMzAyMzY0OGVhYzU4MWM3ZDliNjMx N2VlZGMwHhcNMjYwMjA5MTEwMDE3WhcNMjYwMjEwMTEwMDE3WjAzMTEwLwYDVQQD EygwODVjOTFjODQ2NTAxOGIyYzcxMTMyZWM4ZGE4M2U0ZmNjZTJjMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPVTojP9YltIgaXby4kR316vykHz vIG0hZpcFBLBscjQf3g5/n7snTTsMw3Zp2sri5ljm99rvccS+c+UMqnmIa2fgUmH Yye5Ni888CUGWKUTJNzOkpHA+uHx6hFz99cVF6g0PJgvfxkuugc4Tj8mQOGQmodr 7kezWp3XUHYJ3bxc3XSJTXA2+c/s8FlXMkXbRAeY7FmzgEvpGHYJiC9JwdoK9Ou7 vPgIMwmXdBUbkc8Zz1TCGTdKb177WrIB1ed4HIrsq+6CqzcSY/ABpm4jOW2GcY2s l0+I3zhLp8qz6i/OI0A4dijP19Tk03X5/l/SHVHvfk2heHOPa8Y87i+eBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhckchGUBiyxxEy7I2oPk/M4sAoMB8GA1UdIwQY MBaAFLU6yjaEbS0wI2SOrFgcfZtjF+7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMt NGJiMzdiMThiOWZlLzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMtNGJiMzdiMThiOWZl LzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQDBvKpr r9kc9W8jgECdRXiNCR/nOocPTPfjVAbXAN1hmFs4orco/Y2DjZgQ4MJOsldNRo7w YRAREuvZnlqfCn49YAEHaqJFyb7Po+qbyTaF8Ius+oBxnbSHiehN5HVKxyv0sqzc Zn0fa/aSrC3AhXA1zwozT4OJknpXi2bAPx5llXjz4LoerHz0l3lw7HmuX1VKNGFV GeAa4qMBWOWwtt1w2PjdzBUvy4XFjnWemzXV+U62X7vytAOmgn0b6CR3Zdorld5Y KgVbupuH/Skvcaz0hhZ9Pka8PqgEtj0BZTAm+MBZdfOPGiRuMYrSdeDb9Dnwa5BV ET8sj6paFOIEgA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:04 2026 by rpki-client