This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json) Hash identifier: NC7N43cusEJLO1/0zwekBDVbeh53naN8Lx9YqvzpBFU= Subject key identifier: 9F:03:2A:3B:5C:DB:C6:FB:2E:52:46:19:15:50:3C:A8:86:B2:82:86 Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Certificate serial: 019C438FD574F2BD8FAE12C63ECFCE91CB1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft Manifest number: 0418 Signing time: Mon 09 Feb 2026 18:00:25 +0000 Manifest this update: Mon 09 Feb 2026 18:00:25 +0000 Manifest next update: Tue 10 Feb 2026 18:00:25 +0000 Files and hashes: 1: 0BsOVzhVk1MKdipne8qaIMaKsew.roa (hash: GWXgVGFzyZitQdapoQ6ExT2SefdF2ctk1Wka/DqT424=) 2: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: kuZQW19rPJrClHL5VdaeNYAjFOwHlwyBUrL6WcNDXrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d5:74:f2:bd:8f:ae:12:c6:3e:cf:ce:91:cb:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Validity Not Before: Feb 9 18:00:25 2026 GMT Not After : Feb 10 18:00:25 2026 GMT Subject: CN=9f032a3b5cdbc6fb2e52461915503ca886b28286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:da:25:a2:f7:16:c4:80:b1:50:e2:a8:7e: d6:fe:b4:c6:ab:b9:14:ab:95:71:d7:9f:79:c6:6f: cc:a7:02:d7:b1:68:5d:78:e2:5d:7b:55:00:3f:f3: 56:dc:c0:30:38:7a:93:d6:d1:a3:43:ff:a6:bb:77: 2c:e0:2f:b5:29:85:3a:b8:96:4b:98:32:6c:e9:8a: 43:67:fa:e9:8c:76:f0:c7:d5:6e:98:c6:11:95:21: 8a:30:54:86:cc:48:0f:95:3c:cb:fa:db:c8:61:1c: 8e:f0:19:52:4a:a0:d0:f0:52:f6:2a:d3:94:09:2c: be:24:95:a3:5c:5e:a0:70:a3:e7:de:cc:71:4f:97: e3:56:42:92:4e:6f:7a:fa:0d:53:c1:b6:68:60:b5: f8:65:7c:c7:95:fe:28:c0:05:d8:96:ab:d6:07:b0: 28:88:b2:77:71:88:7c:9c:dc:57:cd:1c:97:3e:cd: d8:30:2c:6a:50:01:0f:44:e3:c3:fd:11:1a:d8:c4: c6:54:2a:7e:34:ff:6f:b4:9c:0b:a4:08:d0:99:1d: d6:21:d0:bd:61:80:6f:f5:d3:d8:f9:7e:5e:de:da: 40:0f:87:37:f3:5d:2d:68:19:83:fe:5d:b2:6c:2b: 07:6b:48:5b:8e:0f:b8:66:70:fe:ee:cc:87:14:49: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:2A:3B:5C:DB:C6:FB:2E:52:46:19:15:50:3C:A8:86:B2:82:86 X509v3 Authority Key Identifier: keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8a:7c:d9:a0:df:2e:17:6b:78:ff:40:85:d6:be:ab:8f:2b: 57:c2:02:bb:51:58:65:cd:95:a4:3a:ad:fe:30:ba:8c:da:24: 6e:47:4e:1c:67:54:ce:53:79:41:cd:84:bf:7d:29:2d:65:d5: f0:2b:05:7c:a4:7c:7c:2c:13:d6:4e:01:33:c3:ad:78:f4:44: 16:df:6c:20:53:41:0f:4f:90:4b:75:73:0d:9b:a9:0f:d2:85: ac:35:ff:47:bf:5d:35:5c:30:4c:c1:7c:98:d0:32:3b:5d:49: c5:47:28:2f:a2:e2:20:e8:3f:80:58:68:b0:47:f8:10:1f:e1: a5:68:a6:bb:c5:78:4f:0d:80:f8:77:c7:b2:fd:53:3a:fd:86: 01:5b:fd:5c:b8:1c:73:b4:ee:a4:02:37:9b:7c:91:6e:52:76: 34:eb:07:36:e5:45:6e:93:b0:0e:af:5a:fb:51:05:c9:c4:b9: 14:c1:35:ee:8e:2e:08:60:2e:dd:5b:d6:ce:6e:b7:0d:a5:8f: 60:d0:22:de:75:6e:e9:e3:b2:e7:36:2e:5a:40:c8:73:3d:ad: 8d:d9:e0:1d:10:81:a8:bc:24:69:6f:76:65:8d:d8:5d:ee:bd: 20:1d:2a:0a:9b:f0:d1:18:fb:e7:b7:7f:b6:92:f6:f6:9b:e9: 05:c5:b6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9V08r2PrhLGPs/OkcsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3 MDVmNTgwHhcNMjYwMjA5MTgwMDI1WhcNMjYwMjEwMTgwMDI1WjAzMTEwLwYDVQQD Eyg5ZjAzMmEzYjVjZGJjNmZiMmU1MjQ2MTkxNTUwM2NhODg2YjI4Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdnaJaL3FsSAsVDiqH7W/rTGq7kU q5Vx1595xm/MpwLXsWhdeOJde1UAP/NW3MAwOHqT1tGjQ/+mu3cs4C+1KYU6uJZL mDJs6YpDZ/rpjHbwx9VumMYRlSGKMFSGzEgPlTzL+tvIYRyO8BlSSqDQ8FL2KtOU CSy+JJWjXF6gcKPn3sxxT5fjVkKSTm96+g1TwbZoYLX4ZXzHlf4owAXYlqvWB7Ao iLJ3cYh8nNxXzRyXPs3YMCxqUAEPROPD/REa2MTGVCp+NP9vtJwLpAjQmR3WIdC9 YYBv9dPY+X5e3tpAD4c3810taBmD/l2ybCsHa0hbjg+4ZnD+7syHFElr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8DKjtc28b7LlJGGRVQPKiGsoKGMB8GA1UdIwQY MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt MDZmYWYxNDk2NjkzLzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4p82aDf LhdreP9Ahda+q48rV8ICu1FYZc2VpDqt/jC6jNokbkdOHGdUzlN5Qc2Ev30pLWXV 8CsFfKR8fCwT1k4BM8OtePREFt9sIFNBD0+QS3VzDZupD9KFrDX/R79dNVwwTMF8 mNAyO11JxUcoL6LiIOg/gFhosEf4EB/hpWimu8V4Tw2A+HfHsv1TOv2GAVv9XLgc c7TupAI3m3yRblJ2NOsHNuVFbpOwDq9a+1EFycS5FME17o4uCGAu3VvWzm63DaWP YNAi3nVu6eOy5zYuWkDIcz2tjdngHRCBqLwkaW92ZY3YXe69IB0qCpvw0Rj757d/ tpL29pvpBcW2hw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:01 2026 by rpki-client