This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json) Hash identifier: KhAvDf8mphS8E7bOhcVCbslgx6jb0MKeKJLYZ1kXdVU= Subject key identifier: B8:C1:7E:63:0A:BD:5F:D0:1C:20:82:DB:8F:60:98:8F:8D:71:6E:C4 Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Certificate serial: 019C44A274B8AD278ECE4FFC8C7ECA33C556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft Manifest number: 0C3C Signing time: Mon 09 Feb 2026 23:00:23 +0000 Manifest this update: Mon 09 Feb 2026 23:00:23 +0000 Manifest next update: Tue 10 Feb 2026 23:00:23 +0000 Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: cJ5UtY6VVf2ibXWjZP4kwzjso5UK807xLsun6KXh2AY=) 2: UKP4TUcHQtGrFZOuVGeoJQ7WW6Q.roa (hash: 99B0w3hw/yKL8K1EFcdu+2H+KrVDmHXCwq/A1IUCotg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:74:b8:ad:27:8e:ce:4f:fc:8c:7e:ca:33:c5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Validity Not Before: Feb 9 23:00:23 2026 GMT Not After : Feb 10 23:00:23 2026 GMT Subject: CN=b8c17e630abd5fd01c2082db8f60988f8d716ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:54:38:e0:43:4f:1b:88:ac:a9:4d:b9:38: a1:ce:1f:bd:e6:73:3d:29:4a:b0:2e:b2:80:cf:d7: 49:32:ed:71:e7:1f:ab:7b:ee:cb:45:68:82:3c:b5: 1b:53:32:39:4d:a0:cf:ed:3f:db:cf:ac:59:fa:41: 04:41:fb:01:08:e0:d9:20:38:04:86:3a:3a:24:11: c5:83:85:70:6a:55:a9:5f:5e:06:80:ca:21:49:69: 99:c5:7c:ef:02:76:66:2e:33:20:a0:84:9a:4a:d3: e8:a2:4b:ad:40:42:43:3c:11:b7:0b:51:7f:60:e5: 5c:d4:7d:6d:eb:c0:bb:f2:01:fb:e9:d8:16:4e:96: e3:15:ef:27:85:89:cf:63:dc:26:08:a7:bf:84:35: 4c:ee:fe:78:36:78:bc:fd:dd:0d:aa:3e:82:f2:01: 52:2e:eb:cc:52:3e:de:df:e8:86:06:c2:24:b4:13: 94:ed:f2:b6:c5:fd:66:06:54:63:89:2d:3c:c8:bf: 32:27:fb:85:bf:7d:c8:13:7a:86:f9:60:e5:91:dd: d2:8c:0b:a2:96:24:ea:5b:ce:f0:15:8e:30:a2:6b: 39:1f:35:77:77:18:31:c2:ed:39:28:1b:cf:f5:87: 59:c1:ab:60:85:a1:4e:60:3e:1d:66:66:17:c3:cf: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:7E:63:0A:BD:5F:D0:1C:20:82:DB:8F:60:98:8F:8D:71:6E:C4 X509v3 Authority Key Identifier: keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9d:01:d1:14:cb:55:cd:bf:5b:8d:2f:2b:8c:85:f5:b0:f1: b8:a0:17:17:b8:92:9b:9f:85:5f:6b:d3:69:cc:96:5c:95:bd: 3f:9f:20:1a:81:0c:ec:d5:34:3a:6f:f8:39:5f:f6:44:a3:9a: 25:a2:d1:34:fc:a6:b4:30:ad:c9:bb:db:b6:d3:fc:72:77:e3: 32:5f:96:13:61:44:d8:96:12:0f:95:1e:dd:58:2d:55:89:e6: 94:15:32:dd:97:54:ed:29:a8:5c:75:3f:d2:e9:aa:dc:47:cb: 25:4d:ef:d3:ad:8e:93:e4:e1:29:63:0c:2a:8f:f5:24:16:bd: f7:e6:8e:e5:2a:79:60:77:b2:c7:76:0b:fe:f2:d7:9d:b2:aa: 98:a2:f9:05:92:d3:42:ed:d9:15:ce:15:43:c3:9f:f8:9e:f9: ab:45:8b:2b:2d:1f:8d:4d:5d:b9:12:e3:0a:97:26:0a:65:8e: 68:42:65:ad:06:4d:5f:db:4c:64:80:78:13:56:6b:69:a2:aa: fb:ae:39:93:17:d1:18:de:85:2e:6f:f8:6d:86:08:7b:41:46: 05:54:f4:b9:18:12:b2:c2:de:70:88:ba:20:03:24:91:12:67: 25:f4:72:43:ba:c1:41:ed:c5:34:48:ce:06:d1:7b:8d:5f:df: c1:1d:87:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEonS4rSeOzk/8jH7KM8VWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw MDRmODUwHhcNMjYwMjA5MjMwMDIzWhcNMjYwMjEwMjMwMDIzWjAzMTEwLwYDVQQD EyhiOGMxN2U2MzBhYmQ1ZmQwMWMyMDgyZGI4ZjYwOTg4ZjhkNzE2ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfNUOOBDTxuIrKlNuTihzh+95nM9 KUqwLrKAz9dJMu1x5x+re+7LRWiCPLUbUzI5TaDP7T/bz6xZ+kEEQfsBCODZIDgE hjo6JBHFg4VwalWpX14GgMohSWmZxXzvAnZmLjMgoISaStPookutQEJDPBG3C1F/ YOVc1H1t68C78gH76dgWTpbjFe8nhYnPY9wmCKe/hDVM7v54Nni8/d0Nqj6C8gFS LuvMUj7e3+iGBsIktBOU7fK2xf1mBlRjiS08yL8yJ/uFv33IE3qG+WDlkd3SjAui liTqW87wFY4woms5HzV3dxgxwu05KBvP9YdZwatghaFOYD4dZmYXw8/lqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjBfmMKvV/QHCCC249gmI+NcW7EMB8GA1UdIwQY MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZ0B0RTL Vc2/W40vK4yF9bDxuKAXF7iSm5+FX2vTacyWXJW9P58gGoEM7NU0Om/4OV/2RKOa JaLRNPymtDCtybvbttP8cnfjMl+WE2FE2JYSD5Ue3VgtVYnmlBUy3ZdU7SmoXHU/ 0umq3EfLJU3v062Ok+ThKWMMKo/1JBa99+aO5Sp5YHeyx3YL/vLXnbKqmKL5BZLT Qu3ZFc4VQ8Of+J75q0WLKy0fjU1duRLjCpcmCmWOaEJlrQZNX9tMZIB4E1ZraaKq +645kxfRGN6FLm/4bYYIe0FGBVT0uRgSssLecIi6IAMkkRJnJfRyQ7rBQe3FNEjO BtF7jV/fwR2HMA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:30 2026 by rpki-client