This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json) Hash identifier: tjWA26yTGDpCfke5FbJd/Z5f2a7PjTnBoB+kEdCJrbM= Subject key identifier: 50:1D:A7:A2:D5:DC:EC:F4:84:FC:47:C9:8E:76:95:6F:EF:3B:E0:19 Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14 Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14 Certificate serial: 019C42EB034D6CB95A037AEB90886C12592E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=) 2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: PpzA7bx3pVEpk0JjhYxGB6w4CJ8LuX6WzsaG540EIs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:03:4d:6c:b9:5a:03:7a:eb:90:88:6c:12:59:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14 Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=501da7a2d5dcecf484fc47c98e76956fef3be019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:c0:95:19:48:36:b2:6e:2a:23:f0:0c:b7: 5e:95:d5:4b:54:02:4f:78:fa:f0:38:b8:f9:f8:83: 05:c2:18:c1:19:ae:33:5c:f4:43:85:51:51:4d:82: 8f:ec:f2:ea:df:0f:57:7c:ed:ed:b0:0e:c9:2a:fb: 3b:ca:30:06:70:a2:30:91:ba:89:d4:67:aa:0b:1e: 27:f7:95:01:a5:2b:ca:48:63:85:9e:58:55:88:f9: 91:d7:b5:b5:ef:50:bf:d3:b5:c5:6b:2c:c3:39:25: 67:d3:2c:e1:71:25:9d:f4:05:d4:1b:be:67:c8:6d: a3:2a:f5:53:f5:b6:d9:a9:8d:c9:e0:eb:71:ec:0d: 4a:d0:4c:1e:4b:fb:a5:1c:0a:28:37:0f:e3:62:1e: 8b:98:07:dc:5b:18:f1:58:6c:58:2f:0f:e4:6d:ba: 85:fb:bc:27:1f:23:c1:6f:69:69:c2:56:f4:d8:b6: e3:ba:46:6c:d4:b5:c1:51:a2:81:7e:68:d1:36:de: 76:66:2b:64:a4:35:2a:41:e2:30:1c:b9:29:0d:6b: 94:3b:26:0e:12:c8:88:52:2f:cc:76:fd:54:21:69: 1c:c6:59:f4:9a:5e:9d:d8:15:d0:2e:0b:b5:0c:59: cd:59:8b:ae:2d:ac:50:28:74:47:5b:a7:89:96:47: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1D:A7:A2:D5:DC:EC:F4:84:FC:47:C9:8E:76:95:6F:EF:3B:E0:19 X509v3 Authority Key Identifier: keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ce:bf:d5:bf:b7:a7:8c:3e:30:35:c9:2e:a1:d6:f4:44:00: 89:34:23:b4:a0:38:98:c8:59:8e:20:af:ae:24:d3:f7:96:5f: b3:35:15:3a:31:1e:29:1e:1c:cc:d7:cb:e9:45:8e:ac:75:86: 53:4c:1e:29:e6:99:04:97:7a:89:5a:e1:3e:af:1d:2c:f3:01: ab:7d:7a:4f:0c:cd:ad:2f:08:0b:bd:d3:21:20:20:e3:10:75: aa:01:83:88:43:32:9f:02:83:2d:4b:28:27:1e:b0:6c:2e:80: e4:de:08:3c:00:e6:cb:fe:d0:98:85:fb:87:58:b5:90:0e:a0: c3:3d:26:73:c4:50:1a:2b:72:e0:fa:3c:0b:fc:73:b4:65:c5: b7:74:1d:b4:6b:58:c8:67:e6:e7:88:69:21:6c:d1:27:f3:49: ff:f1:b6:64:af:a9:3f:98:02:d1:85:6e:31:7b:31:b9:b5:89: 48:77:5b:a4:90:60:3c:44:94:0a:a9:fe:f5:4b:0e:40:5a:2d: 90:5e:6d:c8:3b:45:29:a9:c5:6c:1e:f1:80:0f:f9:8c:82:16: 43:92:6b:8c:b5:57:64:63:07:85:42:70:04:2a:8c:f1:de:a5: f7:7b:21:c5:04:d5:c6:d1:06:53:30:e0:7d:24:48:b1:6c:f0: 65:f5:09:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wNNbLlaA3rrkIhsElkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGE5OTRlNDJlNjBkYTRmNGE1NDc1YjE1ZjVlMjc1MTZj N2NmMTQwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD Eyg1MDFkYTdhMmQ1ZGNlY2Y0ODRmYzQ3Yzk4ZTc2OTU2ZmVmM2JlMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH/AlRlINrJuKiPwDLdeldVLVAJP ePrwOLj5+IMFwhjBGa4zXPRDhVFRTYKP7PLq3w9XfO3tsA7JKvs7yjAGcKIwkbqJ 1GeqCx4n95UBpSvKSGOFnlhViPmR17W171C/07XFayzDOSVn0yzhcSWd9AXUG75n yG2jKvVT9bbZqY3J4Otx7A1K0EweS/ulHAooNw/jYh6LmAfcWxjxWGxYLw/kbbqF +7wnHyPBb2lpwlb02LbjukZs1LXBUaKBfmjRNt52ZitkpDUqQeIwHLkpDWuUOyYO EsiIUi/Mdv1UIWkcxln0ml6d2BXQLgu1DFnNWYuuLaxQKHRHW6eJlkfkxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAdp6LV3Oz0hPxHyY52lW/vO+AZMB8GA1UdIwQY MBaAFLaKmU5C5g2k9KVHWxX14nUWx88UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUt YmQzYmViY2RkZWIzLzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUtYmQzYmViY2RkZWIz LzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM6/1b+3 p4w+MDXJLqHW9EQAiTQjtKA4mMhZjiCvriTT95ZfszUVOjEeKR4czNfL6UWOrHWG U0weKeaZBJd6iVrhPq8dLPMBq316TwzNrS8IC73TISAg4xB1qgGDiEMynwKDLUso Jx6wbC6A5N4IPADmy/7QmIX7h1i1kA6gwz0mc8RQGity4Po8C/xztGXFt3QdtGtY yGfm54hpIWzRJ/NJ//G2ZK+pP5gC0YVuMXsxubWJSHdbpJBgPESUCqn+9UsOQFot kF5tyDtFKanFbB7xgA/5jIIWQ5JrjLVXZGMHhUJwBCqM8d6l93shxQTVxtEGUzDg fSRIsWzwZfUJQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:53 2026 by rpki-client