This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json) Hash identifier: leBaS2NC9xKFauxP0aQyfGb4LTywUKoxKeQuu1TUQEs= Subject key identifier: A0:48:64:95:25:47:74:34:93:F1:EF:C3:EE:20:42:23:C7:34:E6:BB Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9 Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9 Certificate serial: 019C420FA3DC99AE15463F76500DD01E1E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft Manifest number: 1263 Signing time: Mon 09 Feb 2026 11:00:47 +0000 Manifest this update: Mon 09 Feb 2026 11:00:47 +0000 Manifest next update: Tue 10 Feb 2026 11:00:47 +0000 Files and hashes: 1: 0hNitkHNxqHDc_18OnXBaZgItKQ.roa (hash: NObu/X6pwO5Ig/Stu2qJfJzgTwRgKUDuC69hOBPSYtc=) 2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: Y6L5/yrxFye8Tr2VOAFa5a+VqSXyl7XrshPWvioGrrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a3:dc:99:ae:15:46:3f:76:50:0d:d0:1e:1e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9 Validity Not Before: Feb 9 11:00:47 2026 GMT Not After : Feb 10 11:00:47 2026 GMT Subject: CN=a04864952547743493f1efc3ee204223c734e6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:56:d5:d6:75:eb:b9:bc:4a:f1:db:cb:1e: 8a:0e:4d:3c:11:00:d9:2e:dd:38:a4:6c:35:41:14: 53:c1:2c:45:63:75:a3:7d:67:28:43:d8:e8:65:70: b7:5c:1b:6f:dd:b1:84:e9:6f:23:46:fa:78:a6:04: 53:f0:2f:f6:ef:b4:80:15:c8:38:e8:b8:95:4f:f9: 01:9a:8d:e7:d9:71:06:76:27:04:f7:12:84:84:6d: 69:2a:c7:73:b3:e7:fd:28:e5:be:26:f6:f4:a9:a7: e3:0f:40:f9:a3:8b:59:29:db:83:b3:cc:a6:d2:d6: 1e:d7:52:d7:66:5d:56:47:dc:13:38:a0:c2:5c:9e: 1d:f3:a2:17:0b:41:23:98:19:ec:15:9d:8d:03:a2: 51:7a:d1:86:14:0d:60:90:e5:10:ac:10:a8:ec:b6: a1:8f:5c:5f:d3:20:f3:fd:d8:1d:a7:1c:9e:e5:6a: 2e:a4:9f:e4:f7:6b:f6:be:c9:b3:f1:8a:34:49:93: 1f:74:8a:c0:5c:09:78:77:78:da:a6:c8:bd:aa:98: b1:c3:39:d4:f7:a9:8e:ef:6c:30:9c:c3:d5:be:92: 62:80:62:0f:5e:b5:ed:56:df:c4:66:2e:f3:7d:a2: 54:73:c1:de:7f:61:24:4a:3c:dd:03:5d:3d:ac:0b: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:64:95:25:47:74:34:93:F1:EF:C3:EE:20:42:23:C7:34:E6:BB X509v3 Authority Key Identifier: keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:20:d9:35:c7:e5:12:fe:c0:9e:fd:bd:0f:dd:1f:87:8b:1d: 6d:16:a6:35:9e:e0:ed:79:c6:3f:0f:28:a9:53:ec:03:c1:be: 60:60:66:fb:06:60:8d:48:23:17:61:bf:7a:10:22:06:d3:0c: 4f:4f:1c:2f:bd:95:ce:6b:97:ab:9e:52:05:cf:93:fe:19:cc: b0:bc:be:d8:bb:8c:73:e0:e2:42:f5:e4:86:0f:c6:b9:33:df: 2b:5f:da:11:13:cb:55:c8:cc:08:8d:8d:81:06:79:86:1f:a2: bb:94:22:9f:fa:6e:17:86:fe:6b:b5:52:3a:9c:4c:e8:e8:fd: 8c:49:d8:95:0f:e2:06:c7:09:59:79:f3:46:4e:79:ca:de:a0: 9f:6d:8a:8b:6e:f3:2e:92:f3:0a:69:c9:2c:4a:2d:9f:b9:4d: ab:14:55:72:e9:9d:e8:30:33:2d:d9:65:9d:c8:f7:23:09:ee: af:34:a4:9e:3b:07:c0:4e:94:34:af:81:3c:5a:05:ca:c3:25: 57:df:69:ff:52:29:c4:07:d8:2d:7d:36:d0:ad:69:e8:09:db: e7:1a:f5:1d:30:93:40:a2:8f:5a:ae:3f:4e:7b:d4:07:88:da: 8b:15:1c:51:ef:ff:ad:74:61:2d:c9:2d:e5:e8:57:23:f2:7b: 46:1a:28:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6Pcma4VRj92UA3QHh4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWI3OTc0ZTk3YWI5Mzc5MTI0MDczNGExOWZiOWFlNzQ0 NWNiZDkwHhcNMjYwMjA5MTEwMDQ3WhcNMjYwMjEwMTEwMDQ3WjAzMTEwLwYDVQQD EyhhMDQ4NjQ5NTI1NDc3NDM0OTNmMWVmYzNlZTIwNDIyM2M3MzRlNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucRW1dZ167m8SvHbyx6KDk08EQDZ Lt04pGw1QRRTwSxFY3WjfWcoQ9joZXC3XBtv3bGE6W8jRvp4pgRT8C/277SAFcg4 6LiVT/kBmo3n2XEGdicE9xKEhG1pKsdzs+f9KOW+Jvb0qafjD0D5o4tZKduDs8ym 0tYe11LXZl1WR9wTOKDCXJ4d86IXC0EjmBnsFZ2NA6JRetGGFA1gkOUQrBCo7Lah j1xf0yDz/dgdpxye5WoupJ/k92v2vsmz8Yo0SZMfdIrAXAl4d3japsi9qpixwznU 96mO72wwnMPVvpJigGIPXrXtVt/EZi7zfaJUc8Hef2EkSjzdA109rAsCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBIZJUlR3Q0k/Hvw+4gQiPHNOa7MB8GA1UdIwQY MBaAFLYbeXTperk3kSQHNKGfua50RcvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2Mt ZTcyNjM3NDMzMGNlLzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2MtZTcyNjM3NDMzMGNl LzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyDZNcfl Ev7Anv29D90fh4sdbRamNZ7g7XnGPw8oqVPsA8G+YGBm+wZgjUgjF2G/ehAiBtMM T08cL72VzmuXq55SBc+T/hnMsLy+2LuMc+DiQvXkhg/GuTPfK1/aERPLVcjMCI2N gQZ5hh+iu5Qin/puF4b+a7VSOpxM6Oj9jEnYlQ/iBscJWXnzRk55yt6gn22Ki27z LpLzCmnJLEotn7lNqxRVcumd6DAzLdllncj3IwnurzSknjsHwE6UNK+BPFoFysMl V99p/1IpxAfYLX020K1p6Anb5xr1HTCTQKKPWq4/TnvUB4jaixUcUe//rXRhLckt 5ehXI/J7RhooOw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:50 2026 by rpki-client