This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json) Hash identifier: DIbzYjyxHq1zMwukPnPYbF2twbd9iv1qWJWsWu9WifU= Subject key identifier: 78:05:76:45:8F:94:A3:43:9A:B6:BE:8D:50:D9:7D:55:53:36:26:C4 Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07 Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07 Certificate serial: 019C42104F260B804762EDE0824A82FDCFF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 11:01:30 +0000 Manifest this update: Mon 09 Feb 2026 11:01:30 +0000 Manifest next update: Tue 10 Feb 2026 11:01:30 +0000 Files and hashes: 1: 6Ph7OTwTn7R5BOZ8XlW_NErMT_M.roa (hash: Xi80ayzCKRN90pBTc/TWfWw+UkNkUlSPBpPp4lAP3a8=) 2: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: OU33yLtz5WXLhc/Xznzh3tQrcexXTRxozfQVjda06wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:4f:26:0b:80:47:62:ed:e0:82:4a:82:fd:cf:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07 Validity Not Before: Feb 9 11:01:30 2026 GMT Not After : Feb 10 11:01:30 2026 GMT Subject: CN=780576458f94a3439ab6be8d50d97d55533626c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:20:7a:85:66:a2:13:75:26:7f:7a:50:23:91: 23:f8:bc:5e:09:c8:ff:81:28:c1:70:44:1b:8b:e0: 08:67:6d:32:30:2f:d6:e6:87:49:4f:d7:44:2e:f4: 7a:57:87:4a:ab:f0:f4:6b:5b:91:f7:1f:02:05:7a: 76:a8:1d:af:bf:f6:e7:c7:68:c9:ba:0a:2b:99:b2: 04:ce:8e:06:fc:79:16:6f:f5:57:e5:d7:51:9c:65: ab:01:99:d3:4d:10:c1:e1:03:89:b7:0e:98:5c:0f: e8:bb:55:ff:d0:7c:c1:7a:ec:3c:c6:e6:ad:a9:95: ad:08:9d:75:95:70:c7:09:8e:63:83:c0:fa:eb:ff: a9:c3:0b:a2:d8:d6:c8:8b:95:1b:9d:5c:52:6f:74: 7b:9e:ae:e5:b0:31:1f:b9:c7:8a:1e:aa:22:1e:38: e2:5d:2e:aa:09:f8:cc:0a:72:0d:a7:5d:18:ad:83: e7:8d:a4:c0:0f:cd:1a:3b:d9:b4:86:33:e5:4c:5e: 13:ec:ae:ef:f1:7f:a9:42:84:38:c1:b0:d4:3d:58: 7f:91:c3:2c:d9:89:2b:5d:1d:2a:49:ef:40:79:99: 7d:0d:93:d7:7f:51:9a:5e:f6:a0:73:23:7e:c0:38: a7:29:b8:e9:5d:68:30:7e:4c:99:bf:b0:ae:f6:1b: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:05:76:45:8F:94:A3:43:9A:B6:BE:8D:50:D9:7D:55:53:36:26:C4 X509v3 Authority Key Identifier: keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:34:f3:dc:db:b1:f9:38:51:e3:a3:e3:00:7a:44:f4:ed:37: 6e:94:76:fd:d9:e0:ac:35:4b:2b:25:08:b6:0c:cb:f8:38:80: f2:90:67:99:1c:1d:7c:dd:7b:ac:d1:a1:ff:13:6f:e6:4d:29: 5f:a6:19:e8:a3:6e:b3:5e:b2:0d:5b:57:c8:9d:e9:99:ee:1f: bf:e1:d4:8e:0f:30:2b:5f:23:3c:70:71:aa:c7:2b:b9:cd:97: 19:fc:e1:fb:15:44:61:d0:c3:2c:2a:75:a2:65:97:a7:b6:59: 84:c1:b7:8a:7c:43:c2:ec:a9:46:df:3d:44:eb:4d:5b:2d:dd: d4:ad:07:32:f4:c3:36:0a:32:96:21:20:db:3a:3a:34:c5:9e: 90:b9:87:00:ad:91:fc:23:b9:52:3c:46:df:32:25:0e:95:d8: b8:f4:c5:c0:bd:50:3b:37:a9:d0:00:88:e9:02:b1:df:d6:f6: 90:57:a5:34:91:99:70:11:8c:78:00:85:1e:49:9b:c4:38:b4: 8c:5c:06:80:91:a9:e9:50:22:9a:65:d5:02:5f:76:ce:fc:88: 53:36:36:85:5d:3c:79:ee:74:c7:a5:59:5b:dc:78:d3:8b:c6: 4d:a3:1c:74:65:74:4d:f3:7e:fc:f3:ea:53:62:57:63:f5:55: df:06:09:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEE8mC4BHYu3ggkqC/c/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTUwOWIzNTAxMWVkNzE2NjM5NTJiYTBlMGMzYzM4NDU3 ZjlkMDcwHhcNMjYwMjA5MTEwMTMwWhcNMjYwMjEwMTEwMTMwWjAzMTEwLwYDVQQD Eyg3ODA1NzY0NThmOTRhMzQzOWFiNmJlOGQ1MGQ5N2Q1NTUzMzYyNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CB6hWaiE3Umf3pQI5Ej+LxeCcj/ gSjBcEQbi+AIZ20yMC/W5odJT9dELvR6V4dKq/D0a1uR9x8CBXp2qB2vv/bnx2jJ ugormbIEzo4G/HkWb/VX5ddRnGWrAZnTTRDB4QOJtw6YXA/ou1X/0HzBeuw8xuat qZWtCJ11lXDHCY5jg8D66/+pwwui2NbIi5UbnVxSb3R7nq7lsDEfuceKHqoiHjji XS6qCfjMCnINp10YrYPnjaTAD80aO9m0hjPlTF4T7K7v8X+pQoQ4wbDUPVh/kcMs 2YkrXR0qSe9AeZl9DZPXf1GaXvagcyN+wDinKbjpXWgwfkyZv7Cu9hvKUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgFdkWPlKNDmra+jVDZfVVTNibEMB8GA1UdIwQY MBaAFEylCbNQEe1xZjlSug4MPDhFf50HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt MGIwYzEyYjIyYmY5LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5 LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTTz3Nux +ThR46PjAHpE9O03bpR2/dngrDVLKyUItgzL+DiA8pBnmRwdfN17rNGh/xNv5k0p X6YZ6KNus16yDVtXyJ3pme4fv+HUjg8wK18jPHBxqscruc2XGfzh+xVEYdDDLCp1 omWXp7ZZhMG3inxDwuypRt89ROtNWy3d1K0HMvTDNgoyliEg2zo6NMWekLmHAK2R /CO5UjxG3zIlDpXYuPTFwL1QOzep0ACI6QKx39b2kFelNJGZcBGMeACFHkmbxDi0 jFwGgJGp6VAimmXVAl92zvyIUzY2hV08ee50x6VZW9x404vGTaMcdGV0TfN+/PPq U2JXY/VV3wYJFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:29 2026 by rpki-client