This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json) Hash identifier: XerLyiR6MszfwoGK0KnRPLGlDVuayB6CnAvMcW3T03U= Subject key identifier: 5C:87:40:8C:FC:7D:68:F0:8C:66:25:3E:19:FE:9F:B7:AD:84:5A:91 Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32 Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32 Certificate serial: 019C4390019A87AF463CB86C7C4703121A4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft Manifest number: 0E8A Signing time: Mon 09 Feb 2026 18:00:36 +0000 Manifest this update: Mon 09 Feb 2026 18:00:36 +0000 Manifest next update: Tue 10 Feb 2026 18:00:36 +0000 Files and hashes: 1: 6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa (hash: YcDjRze4iyKPM9dw93kDNAJsoNt848x2xiKGlnWWZSI=) 2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: AhztbP+iGuCuIypSIP2D0fgkygjU8pnkswaYDO3Czrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:01:9a:87:af:46:3c:b8:6c:7c:47:03:12:1a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32 Validity Not Before: Feb 9 18:00:36 2026 GMT Not After : Feb 10 18:00:36 2026 GMT Subject: CN=5c87408cfc7d68f08c66253e19fe9fb7ad845a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:10:c3:90:3d:6d:9a:ec:ee:49:6e:2f:bf: cd:b4:44:2d:cc:19:42:1b:c2:d4:15:51:89:51:aa: 27:de:bd:e6:f5:45:2e:5f:c7:1d:b1:97:28:7b:23: 57:e0:a8:0a:f2:82:32:02:3e:42:8c:20:3d:55:4e: 9c:a7:86:20:62:69:5d:63:81:11:c4:60:09:82:70: 74:4a:b0:f3:e1:1e:80:18:e8:99:96:6e:82:f2:dc: ef:0d:5f:3b:c7:3e:4b:b6:05:d4:37:67:c3:0a:22: ed:4e:0a:d2:c3:ef:b6:07:60:fc:1d:d6:2f:9a:c2: 8e:a7:d2:8a:e2:5e:e1:52:60:f8:8b:ed:ac:0c:97: 22:bb:46:a6:77:69:89:5d:65:94:46:6b:1b:43:fe: b4:23:37:f8:6c:59:fe:2a:1d:3f:ac:15:88:8c:cc: b1:00:40:78:23:30:b3:77:76:a7:2f:32:4a:41:6b: b8:12:73:bb:2b:b8:fc:7a:93:57:6b:86:10:3a:fe: 58:cf:cb:4f:c6:a5:d8:db:46:0e:bf:b0:dd:f8:21: 25:f4:b5:5d:6c:0c:d0:ef:b5:cd:14:44:62:4c:0d: d2:c4:e4:fb:9d:0d:0f:e9:49:71:97:b2:4b:5b:43: 9e:b1:ad:6f:da:ed:fc:e2:98:23:c7:90:6f:92:e2: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:87:40:8C:FC:7D:68:F0:8C:66:25:3E:19:FE:9F:B7:AD:84:5A:91 X509v3 Authority Key Identifier: keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:da:13:fc:d7:af:79:b5:94:75:20:f8:3c:ef:2d:b0:a8:31: 10:01:1b:6a:88:76:f8:c2:77:fa:7a:85:db:75:6b:e8:3f:1c: 1d:a0:cb:9c:b0:34:e3:c1:66:2e:f2:6b:98:af:98:10:c2:2c: 88:a1:92:71:08:ad:f9:7c:47:b8:07:e4:06:6b:76:be:76:f1: 6a:b1:a1:bb:38:2d:67:67:ae:72:92:83:e2:92:bd:df:84:16: e0:a9:e8:1b:08:30:6d:3b:06:b0:93:d7:9c:0c:7f:4b:48:e4: f7:b2:05:a1:34:35:5e:93:40:3e:30:d6:45:11:e5:cf:0b:37: 70:ec:95:bd:10:d6:60:c8:8b:02:74:5f:50:a6:4f:3e:12:81: 86:9e:3f:42:58:a2:2f:bb:df:37:12:db:a5:ae:74:ba:71:12: 04:d7:52:e2:8f:38:c8:3c:7a:ee:3a:74:21:a5:a9:6c:b2:52: 38:a3:22:40:e8:3c:7b:46:ed:e1:3b:78:a1:4d:ce:24:d8:58: 5e:93:6c:2d:70:2d:50:65:fe:23:97:42:82:d1:3e:13:13:f5: 5f:5f:e6:46:d7:55:3e:c2:32:d1:7b:48:48:f1:5a:a1:4c:04: 85:e6:2a:5f:6b:34:1c:a0:bb:87:4c:c6:df:d0:df:96:a3:08: 13:02:5f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkAGah69GPLhsfEcDEhpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOGE5ODc1ZDdkMGQxMmJjNDdhNzBiN2VkZTlhM2NhNjRk ODJkMzIwHhcNMjYwMjA5MTgwMDM2WhcNMjYwMjEwMTgwMDM2WjAzMTEwLwYDVQQD Eyg1Yzg3NDA4Y2ZjN2Q2OGYwOGM2NjI1M2UxOWZlOWZiN2FkODQ1YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYYQw5A9bZrs7kluL7/NtEQtzBlC G8LUFVGJUaon3r3m9UUuX8cdsZcoeyNX4KgK8oIyAj5CjCA9VU6cp4YgYmldY4ER xGAJgnB0SrDz4R6AGOiZlm6C8tzvDV87xz5LtgXUN2fDCiLtTgrSw++2B2D8HdYv msKOp9KK4l7hUmD4i+2sDJciu0amd2mJXWWURmsbQ/60Izf4bFn+Kh0/rBWIjMyx AEB4IzCzd3anLzJKQWu4EnO7K7j8epNXa4YQOv5Yz8tPxqXY20YOv7Dd+CEl9LVd bAzQ77XNFERiTA3SxOT7nQ0P6Ulxl7JLW0Oesa1v2u384pgjx5BvkuLl5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyHQIz8fWjwjGYlPhn+n7ethFqRMB8GA1UdIwQY MBaAFE2KmHXX0NErxHpwt+3po8pk2C0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUt NDU0NTk5YTRkMjJjLzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUtNDU0NTk5YTRkMjJj LzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNoT/Nev ebWUdSD4PO8tsKgxEAEbaoh2+MJ3+nqF23Vr6D8cHaDLnLA048FmLvJrmK+YEMIs iKGScQit+XxHuAfkBmt2vnbxarGhuzgtZ2eucpKD4pK934QW4KnoGwgwbTsGsJPX nAx/S0jk97IFoTQ1XpNAPjDWRRHlzws3cOyVvRDWYMiLAnRfUKZPPhKBhp4/Qlii L7vfNxLbpa50unESBNdS4o84yDx67jp0IaWpbLJSOKMiQOg8e0bt4Tt4oU3OJNhY XpNsLXAtUGX+I5dCgtE+ExP1X1/mRtdVPsIy0XtISPFaoUwEheYqX2s0HKC7h0zG 39DflqMIEwJfsg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:51 2026 by rpki-client