This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json) Hash identifier: pJCywngnNH0ZAdgZHi1hdjjCq562YRCgwO2cGGhB9uw= Subject key identifier: AC:A7:61:86:15:33:7D:5C:50:BB:61:63:45:DF:0E:05:60:F3:A5:A4 Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc Certificate serial: 019C427D87066E689E899331F6AD39D2B645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft Manifest number: 118F Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: cCAZG1ywI3zWBR7BggOYUrvkqk9T73unZE2qgg3IPgI=) 2: YVsXJWPnPlqWMFeltxgBZhUCs4Q.roa (hash: q9sjXMHf5vLLJ+Iss0xTQC2tfqQnUkneeNz0HcAGC9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:87:06:6e:68:9e:89:93:31:f6:ad:39:d2:b6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=aca7618615337d5c50bb616345df0e0560f3a5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:fe:44:29:5a:ce:33:41:e9:ff:73:f9:e5: 3e:f8:ed:fc:6c:e1:ee:31:6b:e3:b8:66:d9:b2:12: 58:7b:47:35:46:57:87:bd:c5:8a:10:79:90:3a:2f: b9:0a:15:18:54:93:4b:93:93:59:68:57:e6:47:55: 29:93:7e:1a:33:28:10:40:00:41:6a:44:95:e3:08: 64:9e:5e:87:cd:15:fb:0d:d9:e1:30:30:41:e8:06: d0:71:da:c5:93:75:d2:24:5b:ac:01:6d:b5:19:ee: bf:c7:b5:33:03:a7:5f:4e:7a:67:1c:36:69:17:22: 23:e2:92:bd:3d:fb:ba:88:b7:05:59:e8:72:b3:21: ab:3f:c1:32:2a:55:ba:31:74:c5:a1:7a:fe:9c:e6: 9a:ef:27:99:72:92:50:2a:db:11:1c:ba:bb:d0:aa: 7e:19:e2:ae:81:6f:66:f6:47:5e:01:c3:6c:c2:7d: ba:1c:f8:55:6e:35:1a:27:d5:66:df:76:99:8d:28: 81:a7:b2:28:98:48:f9:c0:d3:a3:22:1f:8f:a2:77: 96:68:6b:e5:30:a0:1a:eb:11:19:7d:96:1a:85:c6: 29:24:ea:11:32:4b:8b:0b:b5:00:c6:59:50:b3:02: e5:c3:cf:0f:a6:f0:cd:16:d1:a2:16:51:c4:ac:d3: c4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:61:86:15:33:7D:5C:50:BB:61:63:45:DF:0E:05:60:F3:A5:A4 X509v3 Authority Key Identifier: keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fd:ab:0c:46:49:69:88:42:b9:a8:29:c5:31:6f:f6:7c:58: 0c:f3:e7:13:89:c8:7f:e3:42:4f:79:49:20:f6:fe:3c:23:c7: 73:e3:e2:38:13:cf:fb:2c:08:f0:e1:ff:f2:02:91:ed:05:8b: 8d:4e:1a:a1:00:90:5e:51:d2:5a:d1:57:35:3b:8e:97:bf:26: 0c:8c:65:4b:fc:90:5d:34:6d:89:af:9b:7c:42:68:cb:89:b1: fb:7e:79:60:98:7b:18:5f:4b:74:5b:af:5a:fb:65:00:bd:f9: 6a:4a:25:11:e2:c6:ad:e2:92:3b:e6:2e:fc:4f:04:cf:9b:86: 02:d3:e0:00:3f:85:27:15:6e:57:1f:aa:77:c2:a8:53:60:71: 66:4b:6a:35:0c:15:fb:3f:af:8e:d7:b8:1f:4f:7e:1e:30:bb: 8f:ae:6e:cb:2e:8b:4b:6d:20:41:0a:aa:e4:2d:87:01:13:fd: 8f:00:79:58:d0:32:8f:65:15:1a:62:a1:42:38:fc:85:96:3f: 28:11:ca:85:75:1f:a7:c3:ed:3e:d3:9e:f1:12:23:94:76:f8: 49:97:93:b6:04:f7:d6:c3:e1:f0:80:43:a3:0c:bb:5b:9f:5c: fb:a7:6b:84:65:6c:6c:be:58:34:e3:46:26:33:65:d1:9b:79: d0:b7:8e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYcGbmieiZMx9q050rZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMTc0MGNlZjk3NDlkYzJiMGY1Zjg4Y2RmMTAzNGRhODFk NjA2ZGMwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD EyhhY2E3NjE4NjE1MzM3ZDVjNTBiYjYxNjM0NWRmMGUwNTYwZjNhNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiv+RClazjNB6f9z+eU++O38bOHu MWvjuGbZshJYe0c1RleHvcWKEHmQOi+5ChUYVJNLk5NZaFfmR1Upk34aMygQQABB akSV4whknl6HzRX7DdnhMDBB6AbQcdrFk3XSJFusAW21Ge6/x7UzA6dfTnpnHDZp FyIj4pK9Pfu6iLcFWehysyGrP8EyKlW6MXTFoXr+nOaa7yeZcpJQKtsRHLq70Kp+ GeKugW9m9kdeAcNswn26HPhVbjUaJ9Vm33aZjSiBp7IomEj5wNOjIh+PoneWaGvl MKAa6xEZfZYahcYpJOoRMkuLC7UAxllQswLlw88PpvDNFtGiFlHErNPEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKynYYYVM31cULthY0XfDgVg86WkMB8GA1UdIwQY MBaAFEwXQM75dJ3CsPX4jN8QNNqB1gbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xYTE1ZmEtYWNlNi00NjRkLTg5Njkt ZTQ5MjgxODAwMzNjLzEvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xYTE1ZmEtYWNlNi00NjRkLTg5NjktZTQ5MjgxODAwMzNj LzEvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv2rDEZJ aYhCuagpxTFv9nxYDPPnE4nIf+NCT3lJIPb+PCPHc+PiOBPP+ywI8OH/8gKR7QWL jU4aoQCQXlHSWtFXNTuOl78mDIxlS/yQXTRtia+bfEJoy4mx+355YJh7GF9LdFuv WvtlAL35akolEeLGreKSO+Yu/E8Ez5uGAtPgAD+FJxVuVx+qd8KoU2BxZktqNQwV +z+vjte4H09+HjC7j65uyy6LS20gQQqq5C2HARP9jwB5WNAyj2UVGmKhQjj8hZY/ KBHKhXUfp8PtPtOe8RIjlHb4SZeTtgT31sPh8IBDowy7W59c+6drhGVsbL5YNONG JjNl0Zt50LeOjg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:30 2026 by rpki-client