This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json) Hash identifier: TiLTIcPWnuJhHqZQZ/eaWBA/j+JwvnDDG6BL1Qx/EgU= Subject key identifier: 8F:90:E4:EC:37:F0:F2:D3:5A:65:63:14:4E:7A:7C:8A:29:BD:D1:A7 Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Certificate serial: 019C37FA61A3E007B55A1FF076725BE7F884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft Manifest number: 1808 Signing time: Sat 07 Feb 2026 12:01:21 +0000 Manifest this update: Sat 07 Feb 2026 12:01:21 +0000 Manifest next update: Sun 08 Feb 2026 12:01:21 +0000 Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=) 2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: +jj1/uRvpPGoUb4LuYUuSHAXiNoqXlDOG22niwjJbpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:fa:61:a3:e0:07:b5:5a:1f:f0:76:72:5b:e7:f8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Validity Not Before: Feb 7 12:01:21 2026 GMT Not After : Feb 8 12:01:21 2026 GMT Subject: CN=8f90e4ec37f0f2d35a6563144e7a7c8a29bdd1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:e0:c6:d5:c4:bb:e5:94:c4:ae:57:60:1e: 41:8c:d4:e9:63:88:f4:28:2e:15:c5:36:5d:87:33: 4e:0a:79:ce:12:37:0e:98:cd:07:17:be:ac:e7:04: 12:89:d4:85:7a:5b:c0:a3:bf:7c:94:fe:b6:e3:79: af:33:c3:53:f6:ea:5b:a8:b9:b2:dd:de:53:b6:96: f3:c3:ad:89:af:3b:28:98:29:70:ce:b9:18:d9:23: ae:3d:76:f8:d1:0e:f0:af:92:b0:8a:3c:f2:23:78: 56:34:3a:b9:7d:80:15:3f:a9:d5:15:fb:d7:ef:69: 0a:05:35:a8:16:29:89:64:e1:af:32:72:28:07:5b: 44:44:43:86:70:df:e8:49:16:ba:7e:c0:22:7d:40: 6b:3f:3b:da:b2:c2:68:6c:99:45:6b:ba:49:90:8f: 2c:88:7b:fa:a8:e3:b5:e5:a9:6e:ad:23:2d:94:4f: 17:d3:65:52:6f:c6:9a:45:84:49:5d:4e:c3:5a:85: e3:9e:87:5b:c7:35:5f:4a:68:01:37:d7:c2:4e:a5: 9d:36:2e:ae:9c:bd:89:8c:6f:6f:6e:b4:d6:32:03: 56:4f:a6:6d:a8:35:e7:a7:7d:3a:22:b4:c7:0d:02: 34:fe:38:c0:be:d3:d7:1c:1f:a7:e5:59:df:c7:89: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:E4:EC:37:F0:F2:D3:5A:65:63:14:4E:7A:7C:8A:29:BD:D1:A7 X509v3 Authority Key Identifier: keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:82:d4:83:93:b6:b1:a7:8c:0b:91:8f:20:d3:f7:19:04:28: e0:e0:33:97:af:9e:f2:cf:41:9e:e9:35:06:90:0e:30:98:cc: ae:be:f3:be:81:37:d4:6d:9e:e4:da:f3:33:2a:5d:fe:58:1f: c1:b5:9c:80:9b:5f:45:15:bf:40:3f:5f:06:2e:c6:37:1b:d3: b3:0b:5c:fc:c3:ff:93:cd:5f:03:fe:17:7b:6e:03:d7:d1:34: 76:91:b8:aa:aa:12:ee:d3:0b:32:41:3f:7e:9a:84:e0:ec:0a: 71:25:5a:21:ff:04:ca:0e:c1:0a:d6:26:9c:98:4d:b0:37:e2: bb:ee:bb:0e:9d:6e:98:3f:7f:e5:de:35:bc:94:41:39:2c:29: 41:01:48:ba:cb:64:bd:71:c1:52:db:67:52:cf:0d:fc:27:e8: 67:7e:0f:e7:4e:47:a1:78:9a:a8:d9:48:c5:f1:e7:f9:41:58: 6b:2c:ba:6e:ee:d6:91:10:b9:eb:32:ec:0a:a3:35:9f:80:6d: d5:b0:bc:b2:f7:99:46:6e:73:c8:88:95:30:93:b1:da:e2:8e: ff:53:0c:6f:ec:78:05:93:0b:fd:34:7f:d5:4a:70:92:2e:13: 98:e4:6d:c5:29:9a:a5:80:ff:2f:a9:21:a6:3e:c2:12:00:fa: 9f:d5:57:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw3+mGj4Ae1Wh/wdnJb5/iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3 ZmUxODkwHhcNMjYwMjA3MTIwMTIxWhcNMjYwMjA4MTIwMTIxWjAzMTEwLwYDVQQD Eyg4ZjkwZTRlYzM3ZjBmMmQzNWE2NTYzMTQ0ZTdhN2M4YTI5YmRkMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78LgxtXEu+WUxK5XYB5BjNTpY4j0 KC4VxTZdhzNOCnnOEjcOmM0HF76s5wQSidSFelvAo798lP6243mvM8NT9upbqLmy 3d5Ttpbzw62JrzsomClwzrkY2SOuPXb40Q7wr5KwijzyI3hWNDq5fYAVP6nVFfvX 72kKBTWoFimJZOGvMnIoB1tEREOGcN/oSRa6fsAifUBrPzvassJobJlFa7pJkI8s iHv6qOO15alurSMtlE8X02VSb8aaRYRJXU7DWoXjnodbxzVfSmgBN9fCTqWdNi6u nL2JjG9vbrTWMgNWT6ZtqDXnp306IrTHDQI0/jjAvtPXHB+n5Vnfx4mgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+Q5Ow38PLTWmVjFE56fIopvdGnMB8GA1UdIwQY MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4LUg5O2 saeMC5GPINP3GQQo4OAzl6+e8s9Bnuk1BpAOMJjMrr7zvoE31G2e5NrzMypd/lgf wbWcgJtfRRW/QD9fBi7GNxvTswtc/MP/k81fA/4Xe24D19E0dpG4qqoS7tMLMkE/ fpqE4OwKcSVaIf8Eyg7BCtYmnJhNsDfiu+67Dp1umD9/5d41vJRBOSwpQQFIustk vXHBUttnUs8N/CfoZ34P505HoXiaqNlIxfHn+UFYayy6bu7WkRC56zLsCqM1n4Bt 1bC8sveZRm5zyIiVMJOx2uKO/1MMb+x4BZML/TR/1Upwki4TmORtxSmapYD/L6kh pj7CEgD6n9VXQw== -----END CERTIFICATE-----Generated at Sat Feb 7 19:18:02 2026 by rpki-client