This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft File: tRFbXBJF3DDhIwQHnslKNe1SfGY.mft (raw, json) Hash identifier: LgezYF7hyLYjITjbB5bXi2PbVGtRIUFNNAM2v2R0jLQ= Subject key identifier: 84:75:1B:B3:93:5B:B9:3C:0A:98:09:76:77:E3:0A:43:FD:E3:87:A3 Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66 Certificate issuer: /CN=b5115b5c1245dc30e12304079ec94a35ed527c66 Certificate serial: 019C4390531011B3DCBFF8718942536B150E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft Manifest number: 01D2 Signing time: Mon 09 Feb 2026 18:00:57 +0000 Manifest this update: Mon 09 Feb 2026 18:00:57 +0000 Manifest next update: Tue 10 Feb 2026 18:00:57 +0000 Files and hashes: 1: VwLAIV5D66a6FPS07LFDWIQS-_0.roa (hash: T9H++z3WO1CHzgCbp0BP6ZLUx+OwVcmGlNY7g9M8Uf4=) 2: tRFbXBJF3DDhIwQHnslKNe1SfGY.crl (hash: KNLdIGELSmNRw5Glc3xmj9k634oMDzl1jejucdezZkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:53:10:11:b3:dc:bf:f8:71:89:42:53:6b:15:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66 Validity Not Before: Feb 9 18:00:57 2026 GMT Not After : Feb 10 18:00:57 2026 GMT Subject: CN=84751bb3935bb93c0a98097677e30a43fde387a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9d:42:bc:49:6c:98:56:e4:1a:4e:b9:9a:8e: 76:be:c5:d1:1c:f5:04:5f:77:41:fc:27:d7:fd:c4: 7b:67:2d:fe:24:9f:ef:e7:14:16:b5:90:46:7e:83: 9c:3f:1c:65:93:47:d8:a8:6b:a3:11:38:03:e2:8d: bd:7a:61:ba:76:cb:65:28:7e:37:57:8e:8e:a9:68: 4b:9a:0d:8d:10:78:77:69:de:53:9b:62:16:64:65: 27:8e:6c:d6:4f:67:9d:91:d9:f2:2e:86:28:b7:2f: 63:88:af:c6:d6:50:4b:74:01:d0:6d:b8:03:c3:4e: a8:e8:83:75:4e:f5:62:22:f2:bd:3a:e5:5c:ea:65: 64:54:a2:af:c1:66:d2:f7:8d:57:53:6b:00:54:bb: 23:18:5e:4f:69:02:63:d1:db:af:26:00:f0:f6:1e: 81:4e:a8:c5:1c:91:0b:18:e4:b3:2d:e8:7e:1c:8e: 02:7d:e6:14:5a:2a:e7:65:f2:e3:6b:de:57:dd:bf: 8d:39:dc:0b:78:40:c4:29:ae:a2:f7:66:34:0a:7b: 9f:70:7d:7b:2d:d3:f2:aa:6d:53:8d:cd:7f:d4:27: 62:5d:ee:e6:60:5a:a9:db:31:0a:40:87:74:b0:91: aa:75:75:67:8a:a1:1d:c1:b2:c2:67:c7:1e:7f:04: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:1B:B3:93:5B:B9:3C:0A:98:09:76:77:E3:0A:43:FD:E3:87:A3 X509v3 Authority Key Identifier: keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:2b:8d:49:b1:b7:c8:42:a4:23:13:be:15:14:56:92:55:c9: 44:17:30:81:69:76:c2:9f:fb:ea:60:43:f3:8d:b5:42:0c:35: ba:ca:cf:51:d3:ac:a8:8c:f8:83:b2:81:74:11:6c:25:47:9a: dc:48:c8:e6:5d:99:db:a5:a8:e8:57:32:65:82:da:5d:71:12: 7f:cf:22:c0:9e:ee:6b:66:b5:23:7a:0e:f6:a7:cc:27:51:66: ab:ea:86:5e:23:52:ec:82:7b:19:70:35:3a:70:38:86:74:69: 3b:05:3b:7b:fc:2f:8b:f5:7e:38:98:3e:22:fb:ed:4d:73:a5: 65:6b:31:b3:02:02:8e:f8:95:1e:2e:0a:e4:75:47:b1:a9:e7: 61:a2:c5:ef:dd:7d:c9:8d:ae:f8:64:88:77:c4:90:3b:6c:0b: 82:65:33:c3:07:e4:c9:eb:25:10:f7:4d:07:dc:8c:5d:2a:4e: 1b:2f:b3:9f:28:2d:7f:21:06:7f:a8:1c:e8:c2:f9:17:b1:f3: f0:63:b7:90:5b:8c:49:f2:8e:c3:c5:7c:d2:92:8d:73:a4:53: 51:a1:03:89:72:8b:37:ba:e9:aa:6f:c8:d0:a6:38:28:bb:ed: 61:1e:d0:15:78:aa:e9:01:ae:4e:72:eb:44:f3:94:a7:42:c3: b4:42:ae:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFMQEbPcv/hxiUJTaxUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTE1YjVjMTI0NWRjMzBlMTIzMDQwNzllYzk0YTM1ZWQ1 MjdjNjYwHhcNMjYwMjA5MTgwMDU3WhcNMjYwMjEwMTgwMDU3WjAzMTEwLwYDVQQD Eyg4NDc1MWJiMzkzNWJiOTNjMGE5ODA5NzY3N2UzMGE0M2ZkZTM4N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z1CvElsmFbkGk65mo52vsXRHPUE X3dB/CfX/cR7Zy3+JJ/v5xQWtZBGfoOcPxxlk0fYqGujETgD4o29emG6dstlKH43 V46OqWhLmg2NEHh3ad5Tm2IWZGUnjmzWT2edkdnyLoYoty9jiK/G1lBLdAHQbbgD w06o6IN1TvViIvK9OuVc6mVkVKKvwWbS941XU2sAVLsjGF5PaQJj0duvJgDw9h6B TqjFHJELGOSzLeh+HI4CfeYUWirnZfLja95X3b+NOdwLeEDEKa6i92Y0CnufcH17 LdPyqm1Tjc1/1CdiXe7mYFqp2zEKQId0sJGqdXVniqEdwbLCZ8cefwSkdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR1G7OTW7k8CpgJdnfjCkP944ejMB8GA1UdIwQY MBaAFLURW1wSRdww4SMEB57JSjXtUnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJGYlhCSkYzRERoSXdRSG5zbEtOZTFTZkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hMzZhNjctNTQyYi00ZjhlLTgxZjAt NmUyZGE2MGUyODM0LzEvdFJGYlhCSkYzRERoSXdRSG5zbEtOZTFTZkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9hMzZhNjctNTQyYi00ZjhlLTgxZjAtNmUyZGE2MGUyODM0 LzEvdFJGYlhCSkYzRERoSXdRSG5zbEtOZTFTZkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiuNSbG3 yEKkIxO+FRRWklXJRBcwgWl2wp/76mBD8421Qgw1usrPUdOsqIz4g7KBdBFsJUea 3EjI5l2Z26Wo6FcyZYLaXXESf88iwJ7ua2a1I3oO9qfMJ1Fmq+qGXiNS7IJ7GXA1 OnA4hnRpOwU7e/wvi/V+OJg+IvvtTXOlZWsxswICjviVHi4K5HVHsannYaLF7919 yY2u+GSId8SQO2wLgmUzwwfkyeslEPdNB9yMXSpOGy+znygtfyEGf6gc6ML5F7Hz 8GO3kFuMSfKOw8V80pKNc6RTUaEDiXKLN7rpqm/I0KY4KLvtYR7QFXiq6QGuTnLr RPOUp0LDtEKuew== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:12 2026 by rpki-client