This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json) Hash identifier: /qtkbz2H0bMS/ZeBaMjILeBOMp1pgtIkaEdP0JVEZ2I= Subject key identifier: 72:3B:57:A2:30:F4:E6:B8:FA:33:7F:AF:31:5B:F9:0C:27:A5:86:C2 Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Certificate serial: 019C42B41D45778435A4D5E60B4097F86D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft Manifest number: 0F6C Signing time: Mon 09 Feb 2026 14:00:26 +0000 Manifest this update: Mon 09 Feb 2026 14:00:26 +0000 Manifest next update: Tue 10 Feb 2026 14:00:26 +0000 Files and hashes: 1: 5shtjSwYY1wV6rWlUfcIKGn6yqo.roa (hash: VOmUNnvEDlqDrfQ2raf9GqtN9WB6Ae56gIOAstRWDXQ=) 2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: 6r1KbPosnpVabBr4mh3+yieASlrD4Vf1GXtyly97zSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1d:45:77:84:35:a4:d5:e6:0b:40:97:f8:6d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Validity Not Before: Feb 9 14:00:26 2026 GMT Not After : Feb 10 14:00:26 2026 GMT Subject: CN=723b57a230f4e6b8fa337faf315bf90c27a586c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:c2:00:ab:d4:d8:8d:7f:70:c4:fc:4b:85: 67:be:31:e6:0f:62:5f:f0:0c:b5:41:42:ef:c5:d5: 3a:4a:87:bf:05:b0:55:ad:ef:1c:76:5f:f0:83:24: 48:70:18:0f:93:93:98:29:51:f1:e6:f6:5e:9d:fd: e6:32:53:28:33:97:1c:ea:64:e2:cc:cd:a7:d2:c7: 22:a3:86:de:c2:cf:79:49:8f:74:e6:42:c3:28:d4: 46:2c:35:e6:ff:9d:00:39:00:46:46:12:27:70:73: c8:90:85:84:99:3b:cd:d8:98:2b:82:08:01:47:7e: 5e:4b:65:05:ba:d2:eb:6f:ad:a1:8b:8a:f2:2f:79: c2:a7:26:24:7d:d6:d7:d9:bd:98:bd:85:f4:ad:84: a9:ac:bf:10:6f:6a:8b:39:97:a7:87:2a:a8:74:16: 54:2b:d2:15:4a:71:44:40:fa:9f:cb:3a:16:f1:87: 21:ae:b0:9d:be:57:4b:38:db:6b:d7:e9:10:53:9f: 6c:15:72:18:50:74:8f:51:35:76:61:c5:93:36:2c: 59:e5:c3:36:6b:77:be:a4:aa:67:5a:2c:8e:ab:f6: 6d:f9:8c:67:d1:42:d2:eb:ca:53:5a:6a:c4:f9:aa: ab:59:80:85:e0:1e:20:94:6e:79:5f:05:89:f0:03: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:57:A2:30:F4:E6:B8:FA:33:7F:AF:31:5B:F9:0C:27:A5:86:C2 X509v3 Authority Key Identifier: keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1f:0a:56:b2:fc:db:cb:1f:6b:b1:8e:80:07:d3:f8:1d:76: 28:64:2d:c6:5f:1b:42:d5:c6:c8:33:4b:fb:70:ac:8b:ce:88: 35:35:5f:fd:8e:d0:31:c5:0f:c2:61:65:4e:0f:7b:fe:dc:5f: 2b:35:30:9f:6b:b9:31:d9:7f:9a:8e:9f:2f:36:c9:94:e0:52: 33:c4:52:1c:7f:3e:d0:1e:c1:74:c3:76:c1:a3:08:e8:0f:40: ba:85:eb:56:4a:46:1a:11:93:ec:08:0e:2b:86:a9:5e:60:ba: f7:13:51:73:83:cb:cd:a8:e8:6b:e9:3b:db:64:26:e6:c6:e3: b2:43:f7:41:89:e9:0d:2e:67:17:dd:f4:fe:7a:08:06:01:b7: 7e:29:b6:9a:3f:6b:61:d3:ec:26:21:86:c4:5f:d0:ac:04:93: e5:fe:27:11:78:6c:65:af:f6:d4:9b:c1:2e:96:c6:a8:9a:a5: 07:52:2e:e1:a9:a7:6f:f7:68:0a:3c:21:b7:65:be:87:96:60: db:02:72:95:79:c5:b2:07:fe:f2:dd:d0:e2:cb:20:3e:71:2a: 09:72:e0:3e:54:99:fe:8c:cf:10:70:07:51:7e:f1:74:79:1a: 37:cd:94:92:78:92:3b:34:de:9a:03:d3:c0:58:25:4d:ad:37: 7d:40:02:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtB1Fd4Q1pNXmC0CX+G0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGYyZWU3NzYyMWVhMjVjMjgxOWQ0ZWFjOTVjNTgxODc3 ZTMwY2QwHhcNMjYwMjA5MTQwMDI2WhcNMjYwMjEwMTQwMDI2WjAzMTEwLwYDVQQD Eyg3MjNiNTdhMjMwZjRlNmI4ZmEzMzdmYWYzMTViZjkwYzI3YTU4NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyrCAKvU2I1/cMT8S4VnvjHmD2Jf 8Ay1QULvxdU6Soe/BbBVre8cdl/wgyRIcBgPk5OYKVHx5vZenf3mMlMoM5cc6mTi zM2n0scio4bews95SY905kLDKNRGLDXm/50AOQBGRhIncHPIkIWEmTvN2JgrgggB R35eS2UFutLrb62hi4ryL3nCpyYkfdbX2b2YvYX0rYSprL8Qb2qLOZenhyqodBZU K9IVSnFEQPqfyzoW8YchrrCdvldLONtr1+kQU59sFXIYUHSPUTV2YcWTNixZ5cM2 a3e+pKpnWiyOq/Zt+Yxn0ULS68pTWmrE+aqrWYCF4B4glG55XwWJ8AMBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI7V6Iw9Oa4+jN/rzFb+QwnpYbCMB8GA1UdIwQY MBaAFE0PLud2IeolwoGdTqyVxYGHfjDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lODI4YjctYjFkOC00ZjQwLWJkMzAt N2MwNDk3OTEzYWYwLzEvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lODI4YjctYjFkOC00ZjQwLWJkMzAtN2MwNDk3OTEzYWYw LzEvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB8KVrL8 28sfa7GOgAfT+B12KGQtxl8bQtXGyDNL+3Csi86INTVf/Y7QMcUPwmFlTg97/txf KzUwn2u5Mdl/mo6fLzbJlOBSM8RSHH8+0B7BdMN2waMI6A9AuoXrVkpGGhGT7AgO K4apXmC69xNRc4PLzajoa+k722Qm5sbjskP3QYnpDS5nF930/noIBgG3fim2mj9r YdPsJiGGxF/QrAST5f4nEXhsZa/21JvBLpbGqJqlB1Iu4amnb/doCjwht2W+h5Zg 2wJylXnFsgf+8t3Q4ssgPnEqCXLgPlSZ/ozPEHAHUX7xdHkaN82UkniSOzTemgPT wFglTa03fUAC9w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:34 2026 by rpki-client