This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft File: tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft (raw, json) Hash identifier: s6gmQm/UrBnzupk1tZ1foI27fn9GEJeY4MxzsO2nN58= Subject key identifier: B0:E5:BA:2B:E7:AB:4B:F7:8C:F0:6A:CE:F1:D8:D8:EF:E4:EA:70:16 Authority key identifier: B5:0E:CD:A8:B2:AE:FE:AD:59:4F:4D:AF:3C:A5:02:1B:0F:31:E6:CE Certificate issuer: /CN=b50ecda8b2aefead594f4daf3ca5021b0f31e6ce Certificate serial: 019C416A97881DE304611CB6F9FBA11B0B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft Manifest number: 0D Signing time: Mon 09 Feb 2026 08:00:30 +0000 Manifest this update: Mon 09 Feb 2026 08:00:30 +0000 Manifest next update: Tue 10 Feb 2026 08:00:30 +0000 Files and hashes: 1: EhxIXI0XnkOGUXg4FgywC-j7kfM.asa (hash: 0+ZksVAMIwmmN/gmxafjprn+omjy9onqP+qL2WNNf8g=) 2: tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl (hash: TOZaMJpp4NWyXc61xJFHWYgQ+SCOTLs2t1UkZ2qb/A8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:97:88:1d:e3:04:61:1c:b6:f9:fb:a1:1b:0b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50ecda8b2aefead594f4daf3ca5021b0f31e6ce Validity Not Before: Feb 9 08:00:30 2026 GMT Not After : Feb 10 08:00:30 2026 GMT Subject: CN=b0e5ba2be7ab4bf78cf06acef1d8d8efe4ea7016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:9d:6c:f7:a1:ee:6d:f1:8c:8c:f1:29:7b: de:db:12:76:b0:77:b8:91:07:13:ca:1f:ab:e9:c5: 23:43:c6:83:d3:6c:50:2f:bb:42:bd:a8:f8:be:8d: eb:73:25:c8:d4:1f:b9:76:fd:d2:25:f3:5f:ba:11: f6:55:75:43:ae:c4:b0:95:79:10:2b:5a:aa:a3:51: ed:24:15:12:53:76:2e:bc:07:a6:ef:1e:4b:3f:68: ff:ef:b0:7e:93:01:c7:bc:9d:0b:58:1e:ff:24:22: 55:fb:25:0c:c2:c6:b7:79:72:90:4b:2d:91:c0:a2: 6d:d6:c0:aa:93:49:fa:ea:b6:39:56:43:68:c2:11: a2:92:12:ad:e7:05:12:c8:1b:94:5f:08:fc:4f:ca: f6:69:04:28:6c:2c:5c:51:2e:0e:f4:b2:0f:ea:e8: cc:f8:30:da:08:92:d9:b0:35:7d:db:56:72:3a:ca: a1:a1:00:5f:b9:07:e6:e4:eb:2e:86:e6:76:50:40: 21:87:e0:f4:8c:7e:ec:68:71:cf:cb:93:d1:a4:b7: 90:19:cf:95:1f:9b:7b:85:16:fb:b8:85:47:cf:20: 2c:6b:82:e7:4f:59:cb:c0:3b:95:a0:55:a8:eb:77: 3d:d2:de:8e:dc:e7:f1:27:b8:88:9e:5d:9e:09:10: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E5:BA:2B:E7:AB:4B:F7:8C:F0:6A:CE:F1:D8:D8:EF:E4:EA:70:16 X509v3 Authority Key Identifier: keyid:B5:0E:CD:A8:B2:AE:FE:AD:59:4F:4D:AF:3C:A5:02:1B:0F:31:E6:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5f:92:fb:ba:d4:6e:fa:06:3d:5f:ed:5e:fb:97:2e:09:b5: 48:11:20:94:b3:6f:f2:d3:57:15:70:72:79:e0:cd:f9:0a:7e: f9:2f:f5:35:f3:bc:f0:a8:1b:34:e8:dd:d3:77:42:ba:15:da: 3a:47:2b:d8:8e:e9:d5:ea:54:6c:5e:28:29:6d:16:bc:26:b8: 5c:8a:dc:7f:dd:47:64:a6:b6:21:6c:3e:1d:21:a1:a8:6e:03: c3:6a:30:0b:a9:f0:24:9c:10:43:0d:c8:a5:79:f2:5f:59:cc: ec:34:1c:9f:67:f3:2b:41:38:a4:0b:20:27:6d:12:1c:21:34: 9f:3b:29:04:b9:2b:d9:27:d9:57:5c:e6:34:a8:f3:52:a9:26: 62:50:93:fd:b0:92:af:5e:2f:01:9d:60:3e:87:36:7a:3d:3b: 8f:de:ec:86:e0:6e:98:c7:98:85:4c:51:a5:16:dc:9e:56:b5: ce:ae:31:f5:a6:e4:7c:71:0f:79:d0:59:ba:de:0b:3b:ec:f8: f1:ff:1d:18:be:0c:b5:21:24:9e:c6:a0:81:7f:23:7f:37:a3: 2c:c9:20:a8:a4:43:3f:e6:56:1a:34:2e:d7:7f:1f:f6:4e:60: d1:bb:26:58:07:61:c7:99:ab:3b:ab:c5:03:02:b1:d6:d6:51: 2e:74:d3:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBapeIHeMEYRy2+fuhGwtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MGVjZGE4YjJhZWZlYWQ1OTRmNGRhZjNjYTUwMjFiMGYz MWU2Y2UwHhcNMjYwMjA5MDgwMDMwWhcNMjYwMjEwMDgwMDMwWjAzMTEwLwYDVQQD EyhiMGU1YmEyYmU3YWI0YmY3OGNmMDZhY2VmMWQ4ZDhlZmU0ZWE3MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseedbPeh7m3xjIzxKXve2xJ2sHe4 kQcTyh+r6cUjQ8aD02xQL7tCvaj4vo3rcyXI1B+5dv3SJfNfuhH2VXVDrsSwlXkQ K1qqo1HtJBUSU3YuvAem7x5LP2j/77B+kwHHvJ0LWB7/JCJV+yUMwsa3eXKQSy2R wKJt1sCqk0n66rY5VkNowhGikhKt5wUSyBuUXwj8T8r2aQQobCxcUS4O9LIP6ujM +DDaCJLZsDV921ZyOsqhoQBfuQfm5OsuhuZ2UEAhh+D0jH7saHHPy5PRpLeQGc+V H5t7hRb7uIVHzyAsa4LnT1nLwDuVoFWo63c90t6O3OfxJ7iInl2eCRDdqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDluivnq0v3jPBqzvHY2O/k6nAWMB8GA1UdIwQY MBaAFLUOzaiyrv6tWU9NrzylAhsPMebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFE3TnFMS3VfcTFaVDAydlBLVUNHdzh4NXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wOTdkZTYtZTM5Ni00ZTBlLTk1YTEt NTExMzNkOTA2YWUwLzEvdFE3TnFMS3VfcTFaVDAydlBLVUNHdzh4NXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8wOTdkZTYtZTM5Ni00ZTBlLTk1YTEtNTExMzNkOTA2YWUw LzEvdFE3TnFMS3VfcTFaVDAydlBLVUNHdzh4NXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1+S+7rU bvoGPV/tXvuXLgm1SBEglLNv8tNXFXByeeDN+Qp++S/1NfO88KgbNOjd03dCuhXa Okcr2I7p1epUbF4oKW0WvCa4XIrcf91HZKa2IWw+HSGhqG4Dw2owC6nwJJwQQw3I pXnyX1nM7DQcn2fzK0E4pAsgJ20SHCE0nzspBLkr2SfZV1zmNKjzUqkmYlCT/bCS r14vAZ1gPoc2ej07j97shuBumMeYhUxRpRbcnla1zq4x9abkfHEPedBZut4LO+z4 8f8dGL4MtSEknsaggX8jfzejLMkgqKRDP+ZWGjQu138f9k5g0bsmWAdhx5mrO6vF AwKx1tZRLnTT4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:13 2026 by rpki-client