This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json) Hash identifier: KR/uhJEvgHOqxUeRhlVBB2VQaYbymfucTJjTYEvK0Po= Subject key identifier: 06:0D:8E:08:BE:3F:CA:57:B2:17:1E:01:8C:CD:47:79:B6:54:9E:63 Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9 Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9 Certificate serial: 019C41A213C26D6A2EBD7D9205715FC044AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft Manifest number: 0B4E Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: L1Dna3WqvgksYDJQNbFdDGexBLzp+s7oA/4xsaLhi8E=) 2: vDyYxaD_OvQHT43TMjNvoifQbS0.roa (hash: OGyJnll9v3Henpio/RUnMctAX/okbHPj8xqJsYAY++E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:13:c2:6d:6a:2e:bd:7d:92:05:71:5f:c0:44:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9 Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=060d8e08be3fca57b2171e018ccd4779b6549e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:99:68:c7:a4:b9:a1:cc:92:5a:9f:aa:b5: 3a:7f:af:ab:c7:71:d8:33:8b:cf:b6:ac:1b:76:97: 3b:d7:ba:91:d0:1b:bc:87:3a:8c:04:24:dc:8d:c3: bd:b0:af:f3:f7:0d:6a:a8:3c:a9:5d:ad:bd:6f:5b: 52:c0:8a:4b:a1:66:d5:79:5c:1f:40:7f:00:9a:c5: 7e:69:cd:f5:e1:54:65:7b:b4:61:34:30:75:c0:f6: 38:58:ed:0f:67:4f:44:1a:e3:b0:ad:82:54:7b:e7: 42:85:ee:b5:5f:a0:08:bc:30:2f:fe:c5:59:18:99: 11:e8:80:d4:1d:3a:be:c0:16:a1:32:c5:86:45:2b: ec:2b:4c:d5:3d:af:f2:23:1f:03:11:df:1f:0b:57: e0:97:99:dd:73:ad:75:06:fd:22:08:87:aa:6e:dd: a8:dd:c1:be:87:a6:b3:a2:39:f6:e9:d6:41:11:4a: e8:26:74:2e:72:47:fd:88:72:fd:16:d3:0c:a1:8a: 67:f8:6f:cc:51:10:19:d9:30:d2:7e:cf:a4:90:b1: c3:7e:77:60:1b:91:0b:57:f2:2a:81:4b:00:64:03: 45:02:ba:6d:06:c4:cf:ae:93:16:fc:c8:12:32:e0: fd:28:97:db:e0:91:1e:ba:03:75:1e:ec:7d:e2:d6: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0D:8E:08:BE:3F:CA:57:B2:17:1E:01:8C:CD:47:79:B6:54:9E:63 X509v3 Authority Key Identifier: keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ae:7b:ab:fa:af:e6:64:ee:52:e1:d7:10:05:a4:62:62:22: 1c:c5:e9:7f:0a:98:4c:b2:08:9e:3d:82:bc:55:b5:dd:8f:53: ac:b9:a3:05:4b:21:6f:20:35:05:43:20:36:81:3c:0b:76:28: 04:7b:9b:90:4a:4e:69:9f:1b:c1:3b:2a:dc:9a:62:4c:b2:67: a7:ca:e9:7c:94:1f:3a:6d:46:c0:72:b6:44:0b:82:3e:46:27: 00:d0:32:4e:02:ad:b8:88:bd:a4:cd:5d:d9:5d:cb:75:cd:50: 65:eb:fe:3c:b0:d6:fe:fb:4f:25:47:0e:1a:6f:9a:f0:dd:e8: 99:66:b7:d5:6c:9a:80:63:ad:34:49:b8:9d:d3:14:7b:54:64: 2f:10:2f:bb:d0:a3:83:5f:ee:84:e4:38:01:e9:08:d3:26:a0: 95:ce:36:e8:f8:22:8e:2c:52:92:15:33:a6:ff:62:01:e2:58: 7c:2d:ab:11:a9:b3:2d:ed:d1:a1:1d:d8:95:2d:65:b3:ed:3d: 93:6e:fa:f2:d6:af:82:52:a9:d8:f8:61:eb:64:3b:c0:ae:7c: bd:e6:6d:94:30:85:24:3e:d0:65:40:07:29:13:4d:59:30:fa: 41:46:04:de:bc:e7:11:bd:7b:09:1c:5a:68:90:3d:85:8f:ff: f1:fb:0f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohPCbWouvX2SBXFfwESuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm ODg2ZTkwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD EygwNjBkOGUwOGJlM2ZjYTU3YjIxNzFlMDE4Y2NkNDc3OWI2NTQ5ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv52ZaMekuaHMklqfqrU6f6+rx3HY M4vPtqwbdpc717qR0Bu8hzqMBCTcjcO9sK/z9w1qqDypXa29b1tSwIpLoWbVeVwf QH8AmsV+ac314VRle7RhNDB1wPY4WO0PZ09EGuOwrYJUe+dChe61X6AIvDAv/sVZ GJkR6IDUHTq+wBahMsWGRSvsK0zVPa/yIx8DEd8fC1fgl5ndc611Bv0iCIeqbt2o 3cG+h6azojn26dZBEUroJnQuckf9iHL9FtMMoYpn+G/MURAZ2TDSfs+kkLHDfndg G5ELV/IqgUsAZANFArptBsTPrpMW/MgSMuD9KJfb4JEeugN1Hux94tZD+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYNjgi+P8pXshceAYzNR3m2VJ5jMB8GA1UdIwQY MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct MTNkYTc0Y2QzNWE0LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0 LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK57q/qv 5mTuUuHXEAWkYmIiHMXpfwqYTLIInj2CvFW13Y9TrLmjBUshbyA1BUMgNoE8C3Yo BHubkEpOaZ8bwTsq3JpiTLJnp8rpfJQfOm1GwHK2RAuCPkYnANAyTgKtuIi9pM1d 2V3Ldc1QZev+PLDW/vtPJUcOGm+a8N3omWa31WyagGOtNEm4ndMUe1RkLxAvu9Cj g1/uhOQ4AekI0yaglc426PgijixSkhUzpv9iAeJYfC2rEamzLe3RoR3YlS1ls+09 k2768tavglKp2Phh62Q7wK58veZtlDCFJD7QZUAHKRNNWTD6QUYE3rznEb17CRxa aJA9hY//8fsPrw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:28 2026 by rpki-client