This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json) Hash identifier: 4lno+nu+JkXgkca59WCCgb7PxCs9mfdTmqBucGyCtZs= Subject key identifier: F7:B1:F2:96:A5:CC:BB:7C:90:9B:E4:BC:23:9A:9C:8A:CD:24:2C:F5 Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Certificate serial: 019C42469FC7F993C4ADDB6A4AD49F2657BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft Manifest number: E3 Signing time: Mon 09 Feb 2026 12:00:50 +0000 Manifest this update: Mon 09 Feb 2026 12:00:50 +0000 Manifest next update: Tue 10 Feb 2026 12:00:50 +0000 Files and hashes: 1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=) 2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: v1hcZgPf8pbMGhsYPigP7+blbiY4R+cvoFAR2ND+GnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9f:c7:f9:93:c4:ad:db:6a:4a:d4:9f:26:57:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Validity Not Before: Feb 9 12:00:50 2026 GMT Not After : Feb 10 12:00:50 2026 GMT Subject: CN=f7b1f296a5ccbb7c909be4bc239a9c8acd242cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:9f:6b:21:58:4e:e8:b7:1d:71:59:66:08: a4:dc:00:32:a9:d1:19:26:86:53:b5:35:60:1a:12: 3e:52:10:7e:9b:88:cd:67:ea:e6:99:61:db:b0:01: c0:b5:3a:f1:30:68:fa:76:94:42:98:76:9b:f0:92: c6:77:78:2e:e5:b3:5b:bc:25:c9:f9:ec:85:75:b7: 1c:a2:87:0b:b9:45:a6:d3:e0:d6:cd:45:a9:82:95: d9:07:5b:cc:fd:ba:6b:5b:9e:d8:df:54:86:1b:f4: bb:f0:31:67:29:39:5a:2b:8a:ca:56:54:ce:5f:6d: 09:8d:66:7c:7e:25:d3:6f:0c:43:24:d0:27:aa:66: 9a:af:cd:51:0c:9f:e8:7e:24:0b:a8:dc:ed:ff:de: 41:49:67:b2:ee:fe:3b:b5:49:22:d0:9a:ec:ba:11: d0:7a:13:20:4a:57:9a:c9:e6:27:03:85:15:17:bb: 28:eb:db:ed:8c:fc:c6:09:86:16:72:50:f5:dd:a8: 3a:23:ae:94:16:8e:b6:13:4a:59:90:29:90:b4:99: 05:54:28:5b:1a:fd:a0:64:8b:ad:72:ba:0c:ef:60: 75:d9:91:16:2f:71:c5:81:25:86:1a:78:3a:d7:a3: 17:51:83:c6:0e:4c:5d:0e:e4:cf:77:5f:19:3f:21: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:F2:96:A5:CC:BB:7C:90:9B:E4:BC:23:9A:9C:8A:CD:24:2C:F5 X509v3 Authority Key Identifier: keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f5:f4:1e:2e:5a:2d:68:38:5e:97:59:0d:2d:0f:e2:35:0c: 87:21:17:76:08:1a:cf:02:3e:52:f7:8d:cb:db:62:a5:80:6e: 8a:66:f6:00:97:4c:e5:95:bb:b1:83:5e:80:f9:f1:77:7f:72: 9c:0c:5a:be:35:51:f0:89:ce:95:4b:e7:6f:ed:ba:5f:83:88: 4b:db:fe:5a:b1:f2:bb:35:0e:b6:89:09:79:33:94:79:0c:38: 53:f2:5b:84:30:7f:d4:b6:92:a7:09:16:94:14:a1:44:bb:c1: 02:65:a5:b4:b4:38:53:d7:c2:ab:69:45:48:ba:a8:81:40:ad: 77:cf:50:a6:84:19:02:68:97:bb:fa:3e:d9:a4:fb:c9:fb:11: a1:bb:5a:9c:0d:14:6c:84:f1:2c:99:66:25:8d:74:84:8c:eb: 36:13:e3:bc:a9:71:57:5d:3e:fd:7f:c4:52:8a:99:29:b3:e2: a2:c1:9c:cb:97:47:46:10:36:3e:e9:1e:15:41:87:95:c8:a1: 40:22:2d:f0:99:c5:98:5c:c1:77:83:d3:23:68:2f:0f:fd:45: a0:19:1d:6a:fb:05:c6:3e:c7:f9:f7:50:db:7f:c0:26:36:7c: 07:8d:63:a1:26:80:88:f6:37:d4:f3:93:c9:2e:c0:66:e2:e3: b2:94:0a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRp/H+ZPErdtqStSfJle9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDMxYmQ3M2UwYTdmMDM3ZGViOTdkODJkMWE5NWZjZDY3 MTA1MWMwHhcNMjYwMjA5MTIwMDUwWhcNMjYwMjEwMTIwMDUwWjAzMTEwLwYDVQQD EyhmN2IxZjI5NmE1Y2NiYjdjOTA5YmU0YmMyMzlhOWM4YWNkMjQyY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqefayFYTui3HXFZZgik3AAyqdEZ JoZTtTVgGhI+UhB+m4jNZ+rmmWHbsAHAtTrxMGj6dpRCmHab8JLGd3gu5bNbvCXJ +eyFdbccoocLuUWm0+DWzUWpgpXZB1vM/bprW57Y31SGG/S78DFnKTlaK4rKVlTO X20JjWZ8fiXTbwxDJNAnqmaar81RDJ/ofiQLqNzt/95BSWey7v47tUki0JrsuhHQ ehMgSleayeYnA4UVF7so69vtjPzGCYYWclD13ag6I66UFo62E0pZkCmQtJkFVChb Gv2gZIutcroM72B12ZEWL3HFgSWGGng616MXUYPGDkxdDuTPd18ZPyEl2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPex8palzLt8kJvkvCOanIrNJCz1MB8GA1UdIwQY MBaAFLVDG9c+Cn8DfeuX2C0alfzWcQUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzIt MWZkOWYyYzk4OTU2LzEvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzItMWZkOWYyYzk4OTU2 LzEvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfX0Hi5a LWg4XpdZDS0P4jUMhyEXdggazwI+UveNy9tipYBuimb2AJdM5ZW7sYNegPnxd39y nAxavjVR8InOlUvnb+26X4OIS9v+WrHyuzUOtokJeTOUeQw4U/JbhDB/1LaSpwkW lBShRLvBAmWltLQ4U9fCq2lFSLqogUCtd89QpoQZAmiXu/o+2aT7yfsRobtanA0U bITxLJlmJY10hIzrNhPjvKlxV10+/X/EUoqZKbPiosGcy5dHRhA2PukeFUGHlcih QCIt8JnFmFzBd4PTI2gvD/1FoBkdavsFxj7H+fdQ23/AJjZ8B41joSaAiPY31POT yS7AZuLjspQKCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:41 2026 by rpki-client