This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json) Hash identifier: zzfkjLY+nOyQM/z+x5b/eirqmo0Kt6WdUNKpZTPMwAI= Subject key identifier: 3B:14:C8:2D:02:81:A6:BC:75:BF:9A:9D:16:A7:74:2F:F6:DB:F9:12 Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16 Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016 Certificate serial: 019C4390A31178337797256DABD95431E819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 18:01:18 +0000 Manifest this update: Mon 09 Feb 2026 18:01:18 +0000 Manifest next update: Tue 10 Feb 2026 18:01:18 +0000 Files and hashes: 1: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (hash: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=) 2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: KwT8zQbpeKeQgFZctiY/g98fgFmuSIBr6ioFcbaUo/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a3:11:78:33:77:97:25:6d:ab:d9:54:31:e8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016 Validity Not Before: Feb 9 18:01:18 2026 GMT Not After : Feb 10 18:01:18 2026 GMT Subject: CN=3b14c82d0281a6bc75bf9a9d16a7742ff6dbf912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:08:a3:11:d7:c4:33:f4:90:8a:f1:79:9b: 33:e9:35:c9:cd:31:a7:ad:32:4c:c6:40:23:f9:af: c6:00:1c:71:93:37:8b:1a:0a:b2:00:e7:b5:95:f8: af:c9:5b:63:a3:11:75:b8:a5:cf:ea:16:32:87:80: 31:74:ec:83:6d:a1:22:8e:f0:a2:80:9b:4b:2f:f5: 31:6b:22:1a:32:7d:1b:fc:81:7e:91:f1:c1:02:2e: e0:d7:c6:c4:5c:a5:f2:04:d3:24:08:a6:4c:9d:87: 3d:9b:6b:74:b9:3c:ac:67:e4:57:17:06:ac:f2:ac: 06:7b:bd:b7:1b:c4:7b:63:ae:c5:a5:11:7a:4a:54: 4f:14:bf:2f:3e:e9:c9:c3:b3:35:59:d7:74:5c:b8: 98:cb:95:f7:43:be:db:67:82:59:6f:16:83:df:65: ba:05:09:52:97:88:9b:97:d2:70:69:89:29:4b:5a: 73:d4:d5:d4:fd:a2:bc:98:ac:4c:fc:e7:4b:78:3d: 15:97:b3:23:bc:c3:8d:1c:8e:2f:e4:10:f0:b4:0d: 39:c8:11:1a:83:b1:75:9d:f9:d8:55:55:e8:4a:32: 6c:96:7c:57:25:71:c8:d4:22:01:44:31:e1:5c:33: 2c:8d:1d:1e:28:a9:fa:81:01:d1:ee:b8:e2:cf:2a: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:C8:2D:02:81:A6:BC:75:BF:9A:9D:16:A7:74:2F:F6:DB:F9:12 X509v3 Authority Key Identifier: keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:47:4d:17:8f:04:00:20:36:40:cb:05:80:a5:d2:7c:89:59: c0:24:ba:41:7e:23:db:8b:80:47:6f:8b:c9:cd:d3:fd:3b:2e: 03:fb:f2:3f:28:4f:de:82:73:db:47:a8:04:b8:5c:49:99:9e: 46:16:d1:3c:10:c6:62:d8:33:73:dc:4e:96:5d:88:95:2d:94: db:80:93:be:88:8f:4e:8f:9d:fc:c5:4b:01:0b:b5:7a:81:25: f7:5b:fa:a3:ea:b0:04:d8:ba:fa:1b:e5:f6:2c:e7:4c:98:85: 03:70:26:6a:72:a7:d7:7c:bf:9a:1a:16:72:4a:ab:7c:bd:4d: 7a:42:17:9a:51:60:43:2e:55:97:4a:69:8f:29:40:06:ea:5a: b8:2f:e2:12:f5:55:af:03:df:9a:90:c7:55:5e:c8:07:13:15: 6f:f0:23:81:9a:fd:82:37:6b:45:52:3e:87:b0:10:df:92:9d: ea:d8:fa:25:e4:4d:a5:10:20:2d:26:9f:bb:16:33:2f:8e:a5: d3:64:82:ba:2c:ba:c6:3d:d9:21:9c:10:57:60:27:1a:f9:f1: 7c:15:f4:7a:31:ba:a3:f6:82:7c:78:61:33:28:60:ec:f1:5f: 40:ad:9c:98:da:1a:e1:b5:a7:3a:07:5e:ca:55:bf:48:bd:3e: 18:c7:6c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKMReDN3lyVtq9lUMegZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDg5Zjg0NDgzMDU3YWMzNjQ2NDdjODBhMWIyM2M5NzZi OTMwMTYwHhcNMjYwMjA5MTgwMTE4WhcNMjYwMjEwMTgwMTE4WjAzMTEwLwYDVQQD EygzYjE0YzgyZDAyODFhNmJjNzViZjlhOWQxNmE3NzQyZmY2ZGJmOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJsIoxHXxDP0kIrxeZsz6TXJzTGn rTJMxkAj+a/GABxxkzeLGgqyAOe1lfivyVtjoxF1uKXP6hYyh4AxdOyDbaEijvCi gJtLL/UxayIaMn0b/IF+kfHBAi7g18bEXKXyBNMkCKZMnYc9m2t0uTysZ+RXFwas 8qwGe723G8R7Y67FpRF6SlRPFL8vPunJw7M1Wdd0XLiYy5X3Q77bZ4JZbxaD32W6 BQlSl4ibl9JwaYkpS1pz1NXU/aK8mKxM/OdLeD0Vl7MjvMONHI4v5BDwtA05yBEa g7F1nfnYVVXoSjJslnxXJXHI1CIBRDHhXDMsjR0eKKn6gQHR7rjizyoeZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsUyC0Cgaa8db+anRandC/22/kSMB8GA1UdIwQY MBaAFLQIn4RIMFesNkZHyAobI8l2uTAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUt MWY4Nzk3NjEzN2EwLzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUtMWY4Nzk3NjEzN2Ew LzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUdNF48E ACA2QMsFgKXSfIlZwCS6QX4j24uAR2+Lyc3T/TsuA/vyPyhP3oJz20eoBLhcSZme RhbRPBDGYtgzc9xOll2IlS2U24CTvoiPTo+d/MVLAQu1eoEl91v6o+qwBNi6+hvl 9iznTJiFA3AmanKn13y/mhoWckqrfL1NekIXmlFgQy5Vl0ppjylABupauC/iEvVV rwPfmpDHVV7IBxMVb/AjgZr9gjdrRVI+h7AQ35Kd6tj6JeRNpRAgLSafuxYzL46l 02SCuiy6xj3ZIZwQV2AnGvnxfBX0ejG6o/aCfHhhMyhg7PFfQK2cmNoa4bWnOgde ylW/SL0+GMdswA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:36 2026 by rpki-client