This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json) Hash identifier: BZkxb2imDfuxhFKk/4A190nY1yD8Mq3AkWpofFliVDE= Subject key identifier: 04:F6:6B:B1:C5:15:54:8F:C6:1C:3F:A1:DB:C3:15:E9:69:25:85:FF Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Certificate serial: 019C44348EF5A5CA716D9608E5E2DB75F612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft Manifest number: 0F37 Signing time: Mon 09 Feb 2026 21:00:21 +0000 Manifest this update: Mon 09 Feb 2026 21:00:21 +0000 Manifest next update: Tue 10 Feb 2026 21:00:21 +0000 Files and hashes: 1: 8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa (hash: 2r6wcq8Rpn3z2tzFav+stYWE1p2kymIXK4N4fPkqcPo=) 2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: yWJsaHvR2ffaQu4Dtn7T6jFskRYyMse3Qz9L9wbFmr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:8e:f5:a5:ca:71:6d:96:08:e5:e2:db:75:f6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Validity Not Before: Feb 9 21:00:21 2026 GMT Not After : Feb 10 21:00:21 2026 GMT Subject: CN=04f66bb1c515548fc61c3fa1dbc315e9692585ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:71:12:54:c1:49:58:9e:82:35:09:27:68: 2a:96:35:96:83:61:35:63:79:55:63:3b:87:e3:5e: 95:1f:de:5f:10:ee:8d:7d:de:d4:92:a0:50:2c:a4: 55:df:00:cc:72:61:65:83:08:82:4b:3c:65:36:5f: 50:0a:0e:b6:60:d9:47:76:b1:11:3c:03:62:7a:57: 9d:2c:6b:78:cf:35:24:4f:6c:c7:b3:5e:0c:b5:03: 09:c2:27:c8:88:4e:53:70:7a:fc:5f:d6:73:b7:b2: af:cf:1a:c7:23:97:56:dd:65:64:e7:78:53:cb:8b: 53:70:f4:c8:de:fd:ce:75:bd:db:c0:0d:7b:f9:b7: 66:d3:07:60:82:62:31:26:81:e3:36:9d:8d:02:4f: 56:1d:04:d8:45:a1:a4:ce:18:fa:4e:37:39:94:de: 63:57:4b:24:2a:65:34:09:c8:a0:62:10:86:0a:61: 38:37:8e:a4:f8:3f:b8:57:16:29:84:24:3d:80:37: 46:2e:41:17:25:c4:1c:5b:21:c2:cf:85:a4:7a:46: 2f:97:13:aa:1a:34:3d:19:21:89:1e:0b:e9:73:4c: 96:b1:76:c2:4c:47:e6:ed:fc:55:22:f0:c6:bf:57: f1:37:96:13:0d:a1:be:b9:6d:27:e8:c1:7f:ff:ec: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:6B:B1:C5:15:54:8F:C6:1C:3F:A1:DB:C3:15:E9:69:25:85:FF X509v3 Authority Key Identifier: keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1a:39:f4:76:53:05:8e:1b:36:5c:71:85:02:2d:42:c0:ae: 58:6a:5c:6c:61:1d:6d:77:15:5b:1d:7d:56:90:65:78:ab:c7: 94:29:03:b6:9e:f2:6c:eb:57:f3:e7:fb:aa:a3:86:d5:34:01: e3:a8:7c:7c:8f:74:c6:a4:5a:49:13:c2:24:32:ad:d6:12:82: 7b:ff:76:b0:93:89:6d:7c:83:08:ff:f1:63:dd:af:8f:21:96: d0:1d:34:71:d8:cb:29:ec:46:fb:ab:95:5f:a9:07:b5:1c:db: 54:49:6d:50:dd:db:2c:2b:62:ae:44:94:bb:86:7e:00:67:fe: b5:df:b9:d5:4c:9e:79:f8:78:43:e7:cd:8f:6d:71:86:04:8a: fd:0c:16:39:11:a2:59:da:b1:49:ec:9e:21:85:48:c2:73:a2: f2:bb:e2:a7:2b:0b:22:d7:3f:76:a0:d0:9f:22:84:15:e3:3a: f9:ee:44:9e:f4:3e:03:70:0f:33:6d:7b:d1:ac:05:13:3f:d7: 3a:64:68:85:d9:d9:08:6a:2e:11:10:3f:89:ce:d6:10:ba:74: 50:02:8a:90:bc:e2:9b:9e:f0:c1:f1:a8:27:c7:28:42:01:c6: e1:58:a6:66:82:14:40:b6:c6:2e:63:ff:b3:af:6e:c9:8b:49: 14:61:48:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENI71pcpxbZYI5eLbdfYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDFjNTZlYTA2OWVlN2IxYzFkZjY2ODZiZDM2ZTBlMTQ1 MjhhMjAwHhcNMjYwMjA5MjEwMDIxWhcNMjYwMjEwMjEwMDIxWjAzMTEwLwYDVQQD EygwNGY2NmJiMWM1MTU1NDhmYzYxYzNmYTFkYmMzMTVlOTY5MjU4NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4hxElTBSViegjUJJ2gqljWWg2E1 Y3lVYzuH416VH95fEO6Nfd7UkqBQLKRV3wDMcmFlgwiCSzxlNl9QCg62YNlHdrER PANieledLGt4zzUkT2zHs14MtQMJwifIiE5TcHr8X9Zzt7KvzxrHI5dW3WVk53hT y4tTcPTI3v3Odb3bwA17+bdm0wdggmIxJoHjNp2NAk9WHQTYRaGkzhj6Tjc5lN5j V0skKmU0CcigYhCGCmE4N46k+D+4VxYphCQ9gDdGLkEXJcQcWyHCz4WkekYvlxOq GjQ9GSGJHgvpc0yWsXbCTEfm7fxVIvDGv1fxN5YTDaG+uW0n6MF//+xEMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT2a7HFFVSPxhw/odvDFelpJYX/MB8GA1UdIwQY MBaAFE9BxW6gae57HB32aGvTbg4UUoogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEt ZDY3YjlhY2E2NDE3LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEtZDY3YjlhY2E2NDE3 LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxo59HZT BY4bNlxxhQItQsCuWGpcbGEdbXcVWx19VpBleKvHlCkDtp7ybOtX8+f7qqOG1TQB 46h8fI90xqRaSRPCJDKt1hKCe/92sJOJbXyDCP/xY92vjyGW0B00cdjLKexG+6uV X6kHtRzbVEltUN3bLCtirkSUu4Z+AGf+td+51Uyeefh4Q+fNj21xhgSK/QwWORGi WdqxSeyeIYVIwnOi8rvipysLItc/dqDQnyKEFeM6+e5EnvQ+A3APM2170awFEz/X OmRohdnZCGouERA/ic7WELp0UAKKkLzim57wwfGoJ8coQgHG4VimZoIUQLbGLmP/ s69uyYtJFGFI9w== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:49 2026 by rpki-client