This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json) Hash identifier: XHiXKv0AcmnsSlOhurcDK6WoGVsXq+5ErGDckPLFjXc= Subject key identifier: 67:5C:62:7D:A9:71:DE:A5:15:F7:B7:44:0E:8B:B4:30:94:65:C4:40 Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Certificate serial: 019C438FCAD7D10EA0753A0AFB24CF0B7583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft Manifest number: 0B16 Signing time: Mon 09 Feb 2026 18:00:22 +0000 Manifest this update: Mon 09 Feb 2026 18:00:22 +0000 Manifest next update: Tue 10 Feb 2026 18:00:22 +0000 Files and hashes: 1: 0oPMLH66x2tupyD79gAxo26IWME.roa (hash: njcSyASz9ZENYT0bs7NDyB4Uc9vLtka/VRm0UgpzohU=) 2: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: n6u1J5Uy1OiAKfMdH3Q+e9aGmnnruNimyzyChlwIJyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ca:d7:d1:0e:a0:75:3a:0a:fb:24:cf:0b:75:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Validity Not Before: Feb 9 18:00:22 2026 GMT Not After : Feb 10 18:00:22 2026 GMT Subject: CN=675c627da971dea515f7b7440e8bb4309465c440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:ad:fc:b9:cf:cb:b6:d6:91:c7:ff:43:cc: a2:53:6a:c4:51:97:e9:b3:5c:b5:fc:5c:9f:64:cb: 22:7d:72:c6:02:32:a0:71:c9:2a:b6:99:a5:ee:36: 8f:4f:28:c7:72:2b:22:a3:78:fc:bd:14:eb:ea:5c: b6:10:a5:d9:53:05:fb:9c:01:c7:11:c1:ab:28:67: 19:6b:03:7f:0a:84:1f:f8:60:dc:5d:c0:5c:fc:04: 86:e7:52:de:cc:e7:75:1c:53:4d:b6:fd:c8:22:32: 0f:f6:5c:17:d3:d1:99:cb:7a:c2:f5:7d:dd:49:d3: f9:a4:76:b3:ca:2d:95:c8:30:b2:20:e1:bb:7f:38: b7:e4:39:05:84:2d:a8:f9:d0:1c:39:b9:bf:37:66: 0f:41:61:1a:67:56:22:a8:a2:14:e4:74:4a:1b:a9: 68:76:2b:fd:e4:72:5a:ab:4b:a2:0b:40:56:a2:39: e3:25:c9:0b:72:4b:25:16:40:97:5e:d1:86:13:df: dc:61:c8:d2:e7:48:f7:cb:d2:25:32:3f:5b:a5:6c: 38:f1:98:24:44:ba:d0:67:37:52:40:de:5b:6b:73: 60:7c:96:25:18:aa:ab:fd:93:e4:39:c7:7a:06:d8: fb:35:c4:1d:12:7e:fa:91:d9:f8:97:21:a0:6a:25: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5C:62:7D:A9:71:DE:A5:15:F7:B7:44:0E:8B:B4:30:94:65:C4:40 X509v3 Authority Key Identifier: keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:94:29:8a:44:e5:2f:07:4e:27:d9:98:06:53:5e:db:06:6a: 92:84:8e:24:d3:d7:fb:7c:68:da:ec:7e:13:1b:d4:b1:ab:fe: e5:f5:6d:ec:20:61:23:e7:6a:bb:3e:a0:66:56:b7:fd:0a:da: 1b:5d:e8:f4:83:6d:37:41:e7:e9:f3:11:d3:93:5a:20:31:7a: b1:62:9b:53:75:67:dd:9d:26:d2:bb:f9:2b:e1:2e:17:0a:95: 01:ff:c6:f0:8e:92:26:cc:e8:b1:9d:0e:31:23:5b:36:88:18: 3d:27:da:fd:78:b8:8b:8d:70:80:19:2b:b3:8c:a9:62:54:8f: 7b:c2:c1:e6:23:67:48:a5:2f:db:c2:3e:30:5a:09:65:83:1b: 4d:31:22:eb:9a:6b:32:2a:11:a8:c3:9a:ba:08:25:a5:c3:9a: de:72:7a:13:35:89:65:43:7d:ad:74:a5:78:e3:54:8d:4a:bd: 04:a7:66:a8:6c:99:15:ea:99:9f:da:f6:f8:2c:98:d4:10:aa: ed:c6:99:cc:30:1c:fd:be:3e:55:0d:8b:94:34:fc:66:c4:34: 79:5c:d1:98:61:9f:9a:39:12:7c:e6:41:a2:be:bb:92:64:c8: 8d:82:a0:4d:1b:a7:13:b5:f3:3f:78:c8:f3:00:d5:da:5f:38: fd:87:ce:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8rX0Q6gdToK+yTPC3WDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTI5ZmJjYzdhZThmNWI0MDE5ZjA3YTNkNmQyZTE4NDk2 YjVlZTQwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD Eyg2NzVjNjI3ZGE5NzFkZWE1MTVmN2I3NDQwZThiYjQzMDk0NjVjNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcSt/LnPy7bWkcf/Q8yiU2rEUZfp s1y1/FyfZMsifXLGAjKgcckqtpml7jaPTyjHcisio3j8vRTr6ly2EKXZUwX7nAHH EcGrKGcZawN/CoQf+GDcXcBc/ASG51LezOd1HFNNtv3IIjIP9lwX09GZy3rC9X3d SdP5pHazyi2VyDCyIOG7fzi35DkFhC2o+dAcObm/N2YPQWEaZ1YiqKIU5HRKG6lo div95HJaq0uiC0BWojnjJckLckslFkCXXtGGE9/cYcjS50j3y9IlMj9bpWw48Zgk RLrQZzdSQN5ba3NgfJYlGKqr/ZPkOcd6Btj7NcQdEn76kdn4lyGgaiUzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdcYn2pcd6lFfe3RA6LtDCUZcRAMB8GA1UdIwQY MBaAFE4Sn7zHro9bQBnwej1tLhhJa17kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGIt OTFkMmI0ODkwMzY5LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGItOTFkMmI0ODkwMzY5 LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJQpikTl LwdOJ9mYBlNe2wZqkoSOJNPX+3xo2ux+ExvUsav+5fVt7CBhI+dquz6gZla3/Qra G13o9INtN0Hn6fMR05NaIDF6sWKbU3Vn3Z0m0rv5K+EuFwqVAf/G8I6SJszosZ0O MSNbNogYPSfa/Xi4i41wgBkrs4ypYlSPe8LB5iNnSKUv28I+MFoJZYMbTTEi65pr MioRqMOaugglpcOa3nJ6EzWJZUN9rXSleONUjUq9BKdmqGyZFeqZn9r2+CyY1BCq 7caZzDAc/b4+VQ2LlDT8ZsQ0eVzRmGGfmjkSfOZBor67kmTIjYKgTRunE7XzP3jI 8wDV2l84/YfOSw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:52:02 2026 by rpki-client