This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json) Hash identifier: hKHFYI+/00GiUeoK6+FUvBz3lgt1vVYP0EmLZLol6Ig= Subject key identifier: 68:CC:4D:2C:54:22:38:28:74:22:69:99:C8:98:08:FF:F7:10:1E:DA Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad Certificate serial: 019C4322A5B85CA2F25D27DB9D3E1EAB3C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 16:01:09 +0000 Manifest this update: Mon 09 Feb 2026 16:01:09 +0000 Manifest next update: Tue 10 Feb 2026 16:01:09 +0000 Files and hashes: 1: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: PgxX5X9S0oVudYkaNNqJ9ag+WsE9fzxHZcjxfnnuvYE=) 2: kFN2JA4wyXnX-X3t1ScNXsaC0ps.roa (hash: pFO8WJK2IpmyD0BiUSZgYwNmBI+Ty3QLefXtzLAgFO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a5:b8:5c:a2:f2:5d:27:db:9d:3e:1e:ab:3c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad Validity Not Before: Feb 9 16:01:09 2026 GMT Not After : Feb 10 16:01:09 2026 GMT Subject: CN=68cc4d2c5422382874226999c89808fff7101eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:d0:e4:a7:bd:66:e4:6f:76:db:21:e2:1b: 7f:ad:cb:2c:79:0d:ad:5d:60:d1:58:06:db:60:61: 7f:a7:1d:88:9a:fe:aa:f1:c7:4a:d0:c6:ab:3d:d0: 15:c1:7a:dd:ec:37:02:7c:63:85:d0:f9:07:c2:80: 83:34:87:ea:98:c0:05:b5:41:01:c4:ae:9a:02:d4: 14:16:80:d8:9c:27:fc:57:ce:9e:e3:a7:e5:9a:0a: db:77:12:c1:24:1b:f9:62:58:7a:09:13:b5:32:ac: 1c:69:02:f2:0b:0d:f6:ad:45:e6:8f:e6:e5:a1:d9: 7d:47:11:5a:2c:7e:b5:34:a4:52:69:83:8d:1d:d0: 36:9e:ef:01:81:0d:92:7d:df:df:3e:36:a3:29:21: eb:d8:0c:b3:54:22:19:6d:8f:16:d4:07:52:4a:0a: 20:1b:22:79:8f:01:63:8c:82:6d:62:7f:71:64:50: d5:71:f7:36:99:d8:a0:0f:0d:d0:0e:58:f0:21:a4: 11:80:45:c3:4d:c9:87:f3:b5:0d:f0:33:8d:66:f3: 1c:0e:60:6e:af:7e:a9:38:41:9e:2d:12:fa:cf:7b: 17:c6:bd:17:9b:e2:3e:f2:2f:ca:72:5f:12:e0:f7: e0:36:72:49:ae:5d:81:c1:1b:49:5d:1a:34:70:92: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:4D:2C:54:22:38:28:74:22:69:99:C8:98:08:FF:F7:10:1E:DA X509v3 Authority Key Identifier: keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:63:06:da:62:08:b4:1b:d9:5a:af:b8:96:e5:69:64:7c:4a: e7:50:9d:d4:b6:ce:31:35:fc:60:c4:d3:ee:90:7b:85:ec:f2: 93:51:fa:9f:95:eb:c4:63:3c:10:cf:b2:2c:50:f2:71:5c:3b: b2:a7:b3:96:56:31:8f:05:5d:0a:e5:3b:36:a4:92:58:46:e9: 35:04:00:6f:1f:8f:a2:a9:be:b6:ba:21:9c:c5:dc:df:07:f2: 3f:ad:ee:72:9d:23:f0:2d:33:92:67:2d:b5:46:77:11:75:3d: 2e:ef:9e:8a:6f:16:ae:fb:b3:93:7c:ed:48:f7:3d:e7:0a:42: 73:be:ad:fd:29:52:86:0e:25:75:02:03:e2:b0:0e:00:2a:1a: 26:35:a2:84:4c:ea:f5:b5:6a:3b:f4:71:40:3d:fa:de:05:c8: 03:8b:51:04:df:a4:64:78:55:f9:96:cf:6b:5d:f4:9c:4e:b3: ff:fb:b1:0b:da:b7:fd:a5:eb:11:9b:30:28:ff:e4:ae:7a:29: 6c:9e:24:3e:89:8f:ea:ec:8d:10:86:d5:26:9d:d8:dd:9b:5e: e7:2a:e4:c5:11:d2:da:03:ef:07:6d:43:e4:fa:ab:ac:07:29: 44:b6:24:ba:65:e3:a3:b7:6f:00:79:6e:07:62:4c:f3:5b:18: c0:f7:af:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqW4XKLyXSfbnT4eqzwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzU5NGIwMjE0MjY0ZjA2Njc3NjA5YmI0YWE0Nzc5ZWIx ZWVjYWQwHhcNMjYwMjA5MTYwMTA5WhcNMjYwMjEwMTYwMTA5WjAzMTEwLwYDVQQD Eyg2OGNjNGQyYzU0MjIzODI4NzQyMjY5OTljODk4MDhmZmY3MTAxZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfDQ5Ke9ZuRvdtsh4ht/rcsseQ2t XWDRWAbbYGF/px2Imv6q8cdK0MarPdAVwXrd7DcCfGOF0PkHwoCDNIfqmMAFtUEB xK6aAtQUFoDYnCf8V86e46flmgrbdxLBJBv5Ylh6CRO1MqwcaQLyCw32rUXmj+bl odl9RxFaLH61NKRSaYONHdA2nu8BgQ2Sfd/fPjajKSHr2AyzVCIZbY8W1AdSSgog GyJ5jwFjjIJtYn9xZFDVcfc2mdigDw3QDljwIaQRgEXDTcmH87UN8DONZvMcDmBu r36pOEGeLRL6z3sXxr0Xm+I+8i/Kcl8S4PfgNnJJrl2BwRtJXRo0cJJ/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjMTSxUIjgodCJpmciYCP/3EB7aMB8GA1UdIwQY MBaAFEx1lLAhQmTwZndgm7SqR3nrHuytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYt YjEzMGJmNzZmZTEwLzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYtYjEzMGJmNzZmZTEw LzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmMG2mII tBvZWq+4luVpZHxK51Cd1LbOMTX8YMTT7pB7hezyk1H6n5XrxGM8EM+yLFDycVw7 sqezllYxjwVdCuU7NqSSWEbpNQQAbx+Poqm+trohnMXc3wfyP63ucp0j8C0zkmct tUZ3EXU9Lu+eim8Wrvuzk3ztSPc95wpCc76t/SlShg4ldQID4rAOACoaJjWihEzq 9bVqO/RxQD363gXIA4tRBN+kZHhV+ZbPa130nE6z//uxC9q3/aXrEZswKP/krnop bJ4kPomP6uyNEIbVJp3Y3Zte5yrkxRHS2gPvB21D5PqrrAcpRLYkumXjo7dvAHlu B2JM81sYwPevHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:53 2026 by rpki-client