This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json) Hash identifier: PPy84YecAlqnHuDBTbQOKValh4BH8iXKEkwfJjdVZ3U= Subject key identifier: 83:F7:74:BF:8E:D2:65:83:F4:29:F6:3C:75:79:26:56:CF:96:47:1A Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71 Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71 Certificate serial: 019C4390B95BEFFC7D93208E528008A373AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft Manifest number: 0B3D Signing time: Mon 09 Feb 2026 18:01:23 +0000 Manifest this update: Mon 09 Feb 2026 18:01:23 +0000 Manifest next update: Tue 10 Feb 2026 18:01:23 +0000 Files and hashes: 1: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: b/kGHNX9vKGtidzrMCMpQWL3QUgmBxe0sKYChViZgCo=) 2: rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa (hash: DObC6epbAV4/cO0FstWBi+3TiGPf6vSxTLwzr5V99So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:b9:5b:ef:fc:7d:93:20:8e:52:80:08:a3:73:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71 Validity Not Before: Feb 9 18:01:23 2026 GMT Not After : Feb 10 18:01:23 2026 GMT Subject: CN=83f774bf8ed26583f429f63c75792656cf96471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:b7:07:96:da:06:c8:1b:c5:9a:07:9b:7d: a7:fa:1a:26:1b:ea:7e:00:ce:95:30:34:98:cb:0b: 5d:58:0e:a3:65:34:81:a6:15:1e:b9:41:0b:93:f5: c5:63:4b:3a:86:8e:76:35:c1:f6:42:a4:c7:1a:36: 5e:83:68:20:b3:86:ab:24:4a:b0:61:4e:cb:f7:d6: b1:74:b5:f6:80:9c:4d:1e:74:4d:3b:3a:8b:60:08: 88:d8:cd:83:ca:e8:98:9b:22:d8:e4:1b:f1:53:d4: ea:70:32:81:54:7c:1a:1d:1c:7e:77:0b:7d:95:a5: 93:4e:fc:d6:29:bf:64:94:10:1f:2a:4e:3c:28:4a: 4b:7e:2e:98:ad:c9:ac:98:23:b4:ca:02:ea:2b:e4: 09:82:b2:3a:4a:d2:e4:84:ed:4f:81:80:d1:33:ce: 5d:6e:d7:01:4d:4d:e7:1f:f9:67:27:0f:9d:a4:31: 33:4c:34:8a:07:35:98:22:87:4b:9e:93:dc:37:72: 76:4f:db:1c:c8:c9:b7:72:11:eb:1b:ae:af:a5:98: ff:8d:a5:b0:4e:9d:50:81:3a:af:d3:ae:d7:64:40: 57:51:1d:b0:e3:04:d4:5b:6a:1c:dc:64:69:b7:3e: 95:ab:34:6d:51:d4:b2:4b:ec:65:00:ad:a7:42:2f: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:74:BF:8E:D2:65:83:F4:29:F6:3C:75:79:26:56:CF:96:47:1A X509v3 Authority Key Identifier: keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:68:48:af:d9:ac:67:b3:d8:e2:89:2e:19:de:a7:15:e4:9e: 27:91:fd:70:94:55:0b:c1:9a:35:e3:01:bc:c6:b8:85:90:8e: 8d:1b:56:79:ea:8b:43:2e:5e:99:19:08:5d:dc:c6:6a:e7:52: de:ff:74:18:8a:bc:bf:ad:24:5e:57:7d:4e:1d:f8:7d:6c:78: d8:08:0e:75:a6:ae:c9:b1:2b:7c:a2:bf:e8:77:64:78:24:b6: eb:e4:bb:98:ec:0e:0e:57:74:6e:64:17:a9:1a:9b:f2:d1:6d: ec:81:05:e6:06:3a:ec:09:ec:0f:3b:f6:f0:41:c5:66:89:15: eb:cc:46:04:3c:65:e0:40:c8:ca:30:8f:d7:62:71:6a:21:52: 63:e6:74:ca:3b:02:cf:59:57:db:f4:05:35:d1:63:75:c8:ba: 8e:b7:a7:49:61:9f:29:88:7c:a2:1d:14:84:ad:de:fb:32:75: 78:32:a9:58:0d:8e:2d:48:8e:b7:da:47:84:b0:af:05:43:e1: ef:50:59:d3:ac:7d:32:e2:f5:8c:6e:2d:94:29:26:fe:69:78: fe:7b:93:c5:8f:91:0e:25:4e:2f:e8:d6:fe:a0:2b:69:be:61: 5e:37:18:8d:1f:1a:c3:43:34:1a:e4:c9:78:f5:17:3c:38:31: b4:0f:e2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkLlb7/x9kyCOUoAIo3OtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzQwMTg3YzBmY2U1ZmZmMDM3Y2VkOWE2NTA4MjQzZTQw NGRhNzEwHhcNMjYwMjA5MTgwMTIzWhcNMjYwMjEwMTgwMTIzWjAzMTEwLwYDVQQD Eyg4M2Y3NzRiZjhlZDI2NTgzZjQyOWY2M2M3NTc5MjY1NmNmOTY0NzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtri3B5baBsgbxZoHm32n+homG+p+ AM6VMDSYywtdWA6jZTSBphUeuUELk/XFY0s6ho52NcH2QqTHGjZeg2ggs4arJEqw YU7L99axdLX2gJxNHnRNOzqLYAiI2M2DyuiYmyLY5BvxU9TqcDKBVHwaHRx+dwt9 laWTTvzWKb9klBAfKk48KEpLfi6YrcmsmCO0ygLqK+QJgrI6StLkhO1PgYDRM85d btcBTU3nH/lnJw+dpDEzTDSKBzWYIodLnpPcN3J2T9scyMm3chHrG66vpZj/jaWw Tp1QgTqv067XZEBXUR2w4wTUW2oc3GRptz6VqzRtUdSyS+xlAK2nQi9P4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP3dL+O0mWD9Cn2PHV5JlbPlkcaMB8GA1UdIwQY MBaAFE40AYfA/OX/8DfO2aZQgkPkBNpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85NjFmNjQtODM3Yy00ODExLWFhNDIt NThmMjE1YmNhNTNhLzEvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85NjFmNjQtODM3Yy00ODExLWFhNDItNThmMjE1YmNhNTNh LzEvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmhIr9ms Z7PY4okuGd6nFeSeJ5H9cJRVC8GaNeMBvMa4hZCOjRtWeeqLQy5emRkIXdzGaudS 3v90GIq8v60kXld9Th34fWx42AgOdaauybErfKK/6HdkeCS26+S7mOwODld0bmQX qRqb8tFt7IEF5gY67AnsDzv28EHFZokV68xGBDxl4EDIyjCP12JxaiFSY+Z0yjsC z1lX2/QFNdFjdci6jrenSWGfKYh8oh0UhK3e+zJ1eDKpWA2OLUiOt9pHhLCvBUPh 71BZ06x9MuL1jG4tlCkm/ml4/nuTxY+RDiVOL+jW/qArab5hXjcYjR8aw0M0GuTJ ePUXPDgxtA/ixQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:17 2026 by rpki-client