This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json) Hash identifier: VhtEo9LtRYhmmZRl6R3f0i+dPEdXg+gnF5sIJ+QgY2E= Subject key identifier: 12:44:49:82:B5:E6:0C:4E:17:60:F3:FC:24:45:BD:CD:F7:EA:99:07 Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5 Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5 Certificate serial: 019C43C75199E5701B7379FAE91921FFB786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft Manifest number: 0A51 Signing time: Mon 09 Feb 2026 19:01:01 +0000 Manifest this update: Mon 09 Feb 2026 19:01:01 +0000 Manifest next update: Tue 10 Feb 2026 19:01:01 +0000 Files and hashes: 1: TdYAourfzXro8X37Y0IoM8aZBEo.roa (hash: gZYndkQ6uGvgPeqwt5brtKCHj9NVuSxL2FUpX4xFOEs=) 2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: hq6o4aE9+KaJkaRdIvj+U9zGWDDkndF+4VvaoA8pmS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:51:99:e5:70:1b:73:79:fa:e9:19:21:ff:b7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5 Validity Not Before: Feb 9 19:01:01 2026 GMT Not After : Feb 10 19:01:01 2026 GMT Subject: CN=12444982b5e60c4e1760f3fc2445bdcdf7ea9907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:b9:81:dc:fc:e5:05:f4:3b:2f:28:13:77: 53:ce:04:f3:2f:e8:37:1d:c3:66:b0:f1:53:65:57: bd:8a:93:f6:b7:00:de:76:22:7a:ec:8b:28:30:36: 90:81:e3:87:30:d7:23:9b:a0:9f:d3:73:64:c8:72: 2a:24:2e:4e:e5:28:97:44:bf:74:9a:2b:1d:a0:88: 13:5f:c0:7b:ba:d3:a1:fc:03:6d:9b:3a:1c:42:0a: 40:51:3b:03:0c:fd:46:9a:28:4b:9c:f9:27:c3:aa: 3b:05:9a:fa:36:29:4c:1a:38:d5:ac:be:ef:94:d7: e2:e6:93:c9:b0:b1:7d:30:21:ba:dc:07:d9:f1:62: 16:39:31:04:2d:e6:fc:cd:1e:1c:c8:14:28:99:29: 71:96:5f:93:03:4d:f7:97:d4:4d:0a:32:9b:23:c2: a0:42:68:79:1d:d7:41:aa:d8:32:de:75:1b:92:b9: 50:8d:9d:eb:0f:19:8a:e3:42:2b:94:ec:48:00:4c: 93:a0:32:a2:57:09:cd:4f:8f:6b:73:70:ca:e2:42: c3:23:1d:ec:d6:09:26:7f:03:bc:95:cd:d2:c7:09: 47:f1:69:6b:c2:c3:8d:1b:38:c1:b5:f3:2e:40:69: 10:b8:b4:95:78:fc:df:d3:8b:e4:9e:4b:0c:0b:cb: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:49:82:B5:E6:0C:4E:17:60:F3:FC:24:45:BD:CD:F7:EA:99:07 X509v3 Authority Key Identifier: keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:5b:33:48:8a:0c:85:33:4f:e7:a0:c0:7d:aa:39:71:71: 4f:be:3d:52:ad:13:1e:0d:4c:eb:01:b1:75:ef:b6:3b:89:d0: e6:f3:0a:a0:e9:17:cc:ed:ad:7b:76:fa:6c:e1:76:57:3e:78: 8f:61:80:b3:72:00:71:f8:e8:92:9c:f1:33:87:12:d7:06:ff: c7:fd:47:f4:b5:de:5e:f7:98:54:30:f3:1a:37:b8:3d:93:de: bc:87:af:05:a6:3b:8d:80:95:f7:42:33:31:a5:3f:d2:fd:aa: 11:e2:8a:34:be:31:a9:cd:de:33:05:66:4e:50:f0:b4:41:30: 6b:2e:22:cd:fe:5a:20:70:5f:7b:8b:d2:9e:de:9c:b8:c4:04: d6:52:0d:73:81:bf:0a:30:e0:fa:51:bd:1d:5c:f9:9a:a6:96: 6a:3d:b9:d2:be:de:f9:e1:1d:4f:92:9d:85:02:44:a6:33:d2: 64:da:82:94:06:8d:ed:43:56:5f:1f:2c:a7:e4:e6:3d:9a:78: 89:5e:13:fd:91:a6:3b:4b:fe:f7:2e:5a:88:9a:99:56:12:14: 3f:08:9e:b8:c8:99:19:de:cb:8c:20:1a:18:31:84:7d:e9:3e: d4:5b:ff:04:ee:26:3f:f5:21:cc:85:18:0a:5d:ba:17:2c:5e: cf:b2:13:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx1GZ5XAbc3n66Rkh/7eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZGU0YzY1ZDczNWFmNzkyNzdlZDE0ZWI2YzRjZjU0MDRj Nzg4ZDUwHhcNMjYwMjA5MTkwMTAxWhcNMjYwMjEwMTkwMTAxWjAzMTEwLwYDVQQD EygxMjQ0NDk4MmI1ZTYwYzRlMTc2MGYzZmMyNDQ1YmRjZGY3ZWE5OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDG5gdz85QX0Oy8oE3dTzgTzL+g3 HcNmsPFTZVe9ipP2twDediJ67IsoMDaQgeOHMNcjm6Cf03NkyHIqJC5O5SiXRL90 misdoIgTX8B7utOh/ANtmzocQgpAUTsDDP1GmihLnPknw6o7BZr6NilMGjjVrL7v lNfi5pPJsLF9MCG63AfZ8WIWOTEELeb8zR4cyBQomSlxll+TA033l9RNCjKbI8Kg Qmh5HddBqtgy3nUbkrlQjZ3rDxmK40IrlOxIAEyToDKiVwnNT49rc3DK4kLDIx3s 1gkmfwO8lc3SxwlH8WlrwsONGzjBtfMuQGkQuLSVePzf04vknksMC8sxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJESYK15gxOF2Dz/CRFvc336pkHMB8GA1UdIwQY MBaAFE7eTGXXNa95J37RTrbEz1QEx4jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYt N2FhNDliZWNmNDY3LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYtN2FhNDliZWNmNDY3 LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdZbM0iK DIUzT+egwH2qOXFxT749Uq0THg1M6wGxde+2O4nQ5vMKoOkXzO2te3b6bOF2Vz54 j2GAs3IAcfjokpzxM4cS1wb/x/1H9LXeXveYVDDzGje4PZPevIevBaY7jYCV90Iz MaU/0v2qEeKKNL4xqc3eMwVmTlDwtEEway4izf5aIHBfe4vSnt6cuMQE1lINc4G/ CjDg+lG9HVz5mqaWaj250r7e+eEdT5KdhQJEpjPSZNqClAaN7UNWXx8sp+TmPZp4 iV4T/ZGmO0v+9y5aiJqZVhIUPwieuMiZGd7LjCAaGDGEfek+1Fv/BO4mP/UhzIUY Cl26Fyxez7ITuQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:02 2026 by rpki-client