This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json) Hash identifier: 0qPrWSHx9QCFZmlHmoWys0r16l/0iNsQkcziOFZU5W4= Subject key identifier: 89:DB:AC:05:6F:53:CC:B8:DA:2F:5E:28:80:BC:CA:33:DC:F5:5F:BB Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Certificate serial: 019C42EB154870611BAA795CA316A5AA3946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft Manifest number: 04DE Signing time: Mon 09 Feb 2026 15:00:28 +0000 Manifest this update: Mon 09 Feb 2026 15:00:28 +0000 Manifest next update: Tue 10 Feb 2026 15:00:28 +0000 Files and hashes: 1: In4EzW4PifpkipDj7qZT5AtFRqI.roa (hash: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA=) 2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: AaxgeZ4f5cADH9aPYw2r+6oYsSmNWe1MMICNBrWYJ8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:15:48:70:61:1b:aa:79:5c:a3:16:a5:aa:39:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Validity Not Before: Feb 9 15:00:28 2026 GMT Not After : Feb 10 15:00:28 2026 GMT Subject: CN=89dbac056f53ccb8da2f5e2880bcca33dcf55fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:1e:26:88:dc:47:cd:48:2c:e3:b4:48:af: b0:ba:d7:7c:7a:de:3b:45:51:78:de:78:e2:d2:9a: c5:a0:d3:cd:3d:84:03:d0:f1:3a:2e:ee:fa:37:69: cb:14:bc:3b:30:3f:1d:5b:28:f0:fd:9a:44:5f:d9: 38:99:9e:4f:08:42:0c:65:24:2f:f5:0c:46:a3:bc: 5b:1e:dd:7b:ed:6f:c1:d1:0e:e4:89:fe:17:43:8b: 4c:36:38:c0:4a:6b:04:d4:ff:d9:75:a6:fa:82:2a: f3:a2:ef:3c:ad:a7:61:87:4a:88:4f:24:a9:29:e6: 30:1d:18:72:da:c4:26:aa:25:36:a9:25:54:86:f4: a3:e7:ed:9e:15:17:be:1b:ff:8a:8c:98:ca:49:29: 2d:9b:88:d1:30:4e:d9:f5:1e:9b:46:2a:9d:78:a1: 89:4a:39:c3:80:f6:24:0d:b2:d3:6f:75:70:55:43: a3:da:1a:35:45:bb:a4:d0:e4:5e:3f:03:7e:e7:ee: 5f:f1:1c:d7:f9:da:91:14:7f:12:c1:fa:e9:50:b7: f7:97:26:d7:22:fd:05:0e:6a:84:77:d6:88:6d:c8: 0c:94:26:72:97:2f:5a:8f:06:a5:b2:c9:bb:d5:02: 0d:7b:22:71:0b:c7:a8:b4:70:79:77:d6:91:a4:85: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DB:AC:05:6F:53:CC:B8:DA:2F:5E:28:80:BC:CA:33:DC:F5:5F:BB X509v3 Authority Key Identifier: keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6b:36:cc:fb:75:28:c0:74:62:68:b0:d7:1f:72:47:ca:12: ef:9d:ab:84:85:06:88:23:e7:76:bf:aa:c6:7b:fd:35:86:13: 30:63:60:3c:2a:c8:52:14:eb:34:2d:71:e2:24:23:68:70:de: d9:94:a9:17:b4:12:08:a5:17:99:b9:7e:fb:46:88:23:b7:51: 81:cb:d3:ee:79:6b:75:bb:e9:40:23:8d:be:9a:63:13:e8:d6: 73:bf:0c:18:cc:8e:df:56:b1:74:df:fd:22:0d:58:df:8b:84: 65:ab:40:d7:f5:17:fb:dd:c8:a7:ee:8a:78:c9:68:af:2f:1d: f4:08:d1:e0:30:3a:83:81:82:b5:42:18:f9:64:9d:52:39:ab: a8:69:5d:b4:e5:02:7b:fe:fb:dd:4e:4e:27:43:ac:c7:8c:3b: 93:ac:b5:4f:9a:b4:a5:ad:e8:2c:1f:4d:dd:dc:39:76:e6:ae: eb:f1:98:23:73:47:7e:7a:9a:86:91:93:a4:db:0d:ad:cb:48: bc:ec:8f:26:02:31:a0:b7:97:3f:2e:a5:19:e3:f2:d9:fc:3a: 4b:22:52:68:56:dc:15:9b:33:9e:63:aa:eb:da:ee:c4:5e:3e: f0:48:79:39:a8:07:05:92:69:75:36:49:78:4a:c2:ed:e9:6d: 07:42:d0:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xVIcGEbqnlcoxalqjlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MWJiMWNkZDViODZiZTc3ODA2ODg5ZDJlMWIyMDJhY2My N2IyMjUwHhcNMjYwMjA5MTUwMDI4WhcNMjYwMjEwMTUwMDI4WjAzMTEwLwYDVQQD Eyg4OWRiYWMwNTZmNTNjY2I4ZGEyZjVlMjg4MGJjY2EzM2RjZjU1ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjIeJojcR81ILOO0SK+wutd8et47 RVF43nji0prFoNPNPYQD0PE6Lu76N2nLFLw7MD8dWyjw/ZpEX9k4mZ5PCEIMZSQv 9QxGo7xbHt177W/B0Q7kif4XQ4tMNjjASmsE1P/Zdab6girzou88radhh0qITySp KeYwHRhy2sQmqiU2qSVUhvSj5+2eFRe+G/+KjJjKSSktm4jRME7Z9R6bRiqdeKGJ SjnDgPYkDbLTb3VwVUOj2ho1Rbuk0ORePwN+5+5f8RzX+dqRFH8SwfrpULf3lybX Iv0FDmqEd9aIbcgMlCZyly9ajwalssm71QINeyJxC8eotHB5d9aRpIVxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInbrAVvU8y42i9eKIC8yjPc9V+7MB8GA1UdIwQY MBaAFLQbsc3VuGvneAaInS4bICrMJ7IlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQt ZGM0ZTc5ODhhMjhhLzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQtZGM0ZTc5ODhhMjhh LzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2s2zPt1 KMB0Ymiw1x9yR8oS752rhIUGiCPndr+qxnv9NYYTMGNgPCrIUhTrNC1x4iQjaHDe 2ZSpF7QSCKUXmbl++0aII7dRgcvT7nlrdbvpQCONvppjE+jWc78MGMyO31axdN/9 Ig1Y34uEZatA1/UX+93Ip+6KeMlory8d9AjR4DA6g4GCtUIY+WSdUjmrqGldtOUC e/773U5OJ0Osx4w7k6y1T5q0pa3oLB9N3dw5duau6/GYI3NHfnqahpGTpNsNrctI vOyPJgIxoLeXPy6lGePy2fw6SyJSaFbcFZsznmOq69ruxF4+8Eh5OagHBZJpdTZJ eErC7eltB0LQug== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:59 2026 by rpki-client