This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json) Hash identifier: S41XO+PJDUKvyQ7HBIOeZVk+/s2/qglwrfBiio6pbXo= Subject key identifier: 27:E8:51:2F:10:C4:A5:C3:CD:9E:07:DC:0F:36:47:03:BC:E6:0E:06 Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Certificate serial: 019C4358E8DF7A45B2F05A1B47CC9340F751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft Manifest number: 14FC Signing time: Mon 09 Feb 2026 17:00:26 +0000 Manifest this update: Mon 09 Feb 2026 17:00:26 +0000 Manifest next update: Tue 10 Feb 2026 17:00:26 +0000 Files and hashes: 1: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: dFpRIyX0GmYwvmNIk7uzM5fYYak9xmDNzR+p1zP3cGo=) 2: qhbgvCCuTYLs-T9K9IfIIvF38MQ.roa (hash: WdrjO4xvUh7bWyfHcWR8FrUXBHsQMBxvR3LgVLProrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e8:df:7a:45:b2:f0:5a:1b:47:cc:93:40:f7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Validity Not Before: Feb 9 17:00:26 2026 GMT Not After : Feb 10 17:00:26 2026 GMT Subject: CN=27e8512f10c4a5c3cd9e07dc0f364703bce60e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:d8:a6:64:53:9a:be:d5:15:41:d8:57:5d: 26:75:93:f2:a1:4e:e1:a0:98:e1:f3:d8:b4:59:da: 33:43:22:df:16:c5:26:0f:17:84:5b:1c:b8:1f:34: c5:85:d1:d9:fd:e7:68:42:9b:74:ee:41:29:9e:b0: d4:75:d7:99:95:44:b5:d6:e2:79:79:06:d2:eb:af: c6:d2:d0:b0:61:e4:ef:4d:fe:e9:5f:54:5e:7f:ef: e5:8e:7a:ab:f6:91:98:64:19:1c:29:6d:29:3d:1a: 27:38:36:e1:1e:da:cd:39:46:fd:c9:5d:b9:48:6d: 43:af:73:95:c7:6f:8b:dc:e8:4c:72:bc:c6:b4:41: 65:72:45:0e:a0:47:2b:c0:3b:f3:93:75:29:8c:d1: ee:d1:07:ae:57:f9:19:4e:0c:ef:36:ef:c0:8b:db: f8:16:c4:3a:1d:a6:81:55:8d:07:89:94:b4:95:95: 67:7a:a2:db:17:96:bf:6f:e0:f3:53:6d:c2:95:74: 04:27:b7:ed:24:44:46:58:05:5b:52:1f:ce:fa:d4: 1f:f1:67:79:66:8a:9a:7a:2e:4b:a0:cc:33:61:d2: 1f:b3:c2:6e:71:a8:a6:a2:ca:ac:37:24:4f:96:c3: a6:27:57:57:34:0b:dc:0a:45:02:5d:2a:78:e8:7d: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E8:51:2F:10:C4:A5:C3:CD:9E:07:DC:0F:36:47:03:BC:E6:0E:06 X509v3 Authority Key Identifier: keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:66:62:8c:04:01:7c:dd:aa:17:ff:a9:1d:a2:dd:24:c3:cf: 86:e0:6f:e1:f5:89:f9:70:fc:9a:25:6d:f3:8e:ae:cc:57:81: e2:c8:aa:ad:8d:5a:38:8d:62:2a:23:76:db:f0:e4:cf:4b:fc: 25:67:99:b4:05:bf:72:17:84:dd:d9:78:60:c4:8a:22:b8:1f: 4d:e3:53:47:c9:2d:fc:c8:6c:ac:fc:d0:29:66:5d:60:09:33: c9:38:53:a7:bf:2e:7d:00:75:59:5d:67:87:42:a7:6a:bf:63: 35:3d:10:b8:64:b3:b1:3e:18:18:65:db:b7:7e:10:a6:56:57: c8:8b:0d:6c:d3:e9:97:bf:24:bf:a2:68:a5:31:a3:95:e8:5f: 07:a7:62:0d:8a:1d:5c:1f:bc:22:5f:91:cd:86:6b:b7:b0:04: d1:f0:cf:cc:3d:54:0a:80:24:af:c5:2c:a1:cd:b2:fe:ee:9b: f5:fd:6a:74:d2:ad:d5:af:0f:59:c5:e5:b4:d2:40:59:78:a1: ee:64:bd:8a:37:e6:bc:07:06:60:66:d1:53:6d:5b:51:db:8b: 29:c7:06:d4:b3:43:46:3b:18:f1:75:87:24:7a:18:d7:07:1d: 9a:52:82:11:b3:85:63:f7:bb:50:61:e2:37:d0:2c:42:1d:6e: 9a:90:68:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOjfekWy8FobR8yTQPdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDcxZjVhMDA1MGY4YWU2NDQ0YzYzODc2OWJhMzc1ZmRk YmNlMTkwHhcNMjYwMjA5MTcwMDI2WhcNMjYwMjEwMTcwMDI2WjAzMTEwLwYDVQQD EygyN2U4NTEyZjEwYzRhNWMzY2Q5ZTA3ZGMwZjM2NDcwM2JjZTYwZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6vYpmRTmr7VFUHYV10mdZPyoU7h oJjh89i0WdozQyLfFsUmDxeEWxy4HzTFhdHZ/edoQpt07kEpnrDUddeZlUS11uJ5 eQbS66/G0tCwYeTvTf7pX1Ref+/ljnqr9pGYZBkcKW0pPRonODbhHtrNOUb9yV25 SG1Dr3OVx2+L3OhMcrzGtEFlckUOoEcrwDvzk3UpjNHu0QeuV/kZTgzvNu/Ai9v4 FsQ6HaaBVY0HiZS0lZVneqLbF5a/b+DzU23ClXQEJ7ftJERGWAVbUh/O+tQf8Wd5 Zoqaei5LoMwzYdIfs8JucaimosqsNyRPlsOmJ1dXNAvcCkUCXSp46H2niwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfoUS8QxKXDzZ4H3A82RwO85g4GMB8GA1UdIwQY MBaAFEzXH1oAUPiuZETGOHabo3X9284ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAt NzNhMDFhZTVkZThmLzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAtNzNhMDFhZTVkZThm LzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmZijAQB fN2qF/+pHaLdJMPPhuBv4fWJ+XD8miVt846uzFeB4siqrY1aOI1iKiN22/Dkz0v8 JWeZtAW/cheE3dl4YMSKIrgfTeNTR8kt/MhsrPzQKWZdYAkzyThTp78ufQB1WV1n h0Knar9jNT0QuGSzsT4YGGXbt34QplZXyIsNbNPpl78kv6JopTGjlehfB6diDYod XB+8Il+RzYZrt7AE0fDPzD1UCoAkr8Usoc2y/u6b9f1qdNKt1a8PWcXltNJAWXih 7mS9ijfmvAcGYGbRU21bUduLKccG1LNDRjsY8XWHJHoY1wcdmlKCEbOFY/e7UGHi N9AsQh1umpBoYw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:05 2026 by rpki-client