This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json) Hash identifier: DymbgKSfdG7opYXhQyNgwJusUCDGrP2CFL9ajKD7nRs= Subject key identifier: 2B:B4:A2:A8:BB:10:8B:9E:D3:1B:61:3A:5D:55:9A:97:C0:D3:B9:5B Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75 Certificate issuer: /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75 Certificate serial: 019C43227A4548A004572B0CD5AF4D8B18BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft Manifest number: 0B98 Signing time: Mon 09 Feb 2026 16:00:58 +0000 Manifest this update: Mon 09 Feb 2026 16:00:58 +0000 Manifest next update: Tue 10 Feb 2026 16:00:58 +0000 Files and hashes: 1: 0IfBuJKTc-ZAapBVoo09IVcjirw.roa (hash: DTT3atnBIKRsyqC7V02d68tnwY+R6xQKAabUDXEqKAI=) 2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: z/GwVp8RrSm8w0lsPCtuKw77CHXWfQ0LtkTcKJlBN9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7a:45:48:a0:04:57:2b:0c:d5:af:4d:8b:18:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75 Validity Not Before: Feb 9 16:00:58 2026 GMT Not After : Feb 10 16:00:58 2026 GMT Subject: CN=2bb4a2a8bb108b9ed31b613a5d559a97c0d3b95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:72:dd:d0:2d:cc:1f:59:e6:b1:5c:83:d9: 0f:b7:50:c5:b1:c6:56:39:d0:09:af:c7:fa:c1:72: 7d:82:a6:c1:8b:76:a6:db:63:17:d5:45:68:2f:73: b8:b7:c8:16:65:2c:b6:df:12:1d:43:8c:28:85:76: aa:f6:8b:30:c0:1d:3a:a7:64:d3:ed:33:94:1c:c7: bd:5a:0b:ce:b4:b0:65:14:9e:ec:08:f9:7a:36:d7: 2b:76:97:e2:87:22:34:1b:d3:5d:e8:17:ba:ee:c0: 38:b7:10:b9:f4:d2:85:bf:00:cb:f5:ae:7d:b1:04: 9a:bb:4b:9a:07:d6:92:1e:69:52:64:36:43:cb:0b: d4:35:f0:3f:d1:f7:0d:96:6e:64:85:73:c2:04:d1: 73:fc:02:28:ec:7b:61:66:3d:53:ef:7e:de:03:74: 1e:a3:16:b7:6e:61:86:10:88:76:07:3e:e2:f0:d8: 9d:dc:d9:98:f7:dd:7a:a3:ac:39:bf:ef:49:5f:a0: c6:76:82:90:3a:50:ec:0f:01:3b:4c:a2:c3:b4:58: b9:98:45:5e:26:c0:ba:31:9f:ea:41:5f:c0:af:27: 06:95:8e:e1:db:f3:38:04:43:81:77:82:20:5a:7a: b7:78:be:36:05:d7:b7:a3:84:cc:00:83:54:6b:66: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B4:A2:A8:BB:10:8B:9E:D3:1B:61:3A:5D:55:9A:97:C0:D3:B9:5B X509v3 Authority Key Identifier: keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:db:42:e4:0a:ab:a6:ea:1d:56:d6:40:90:01:47:63:53:f2: f4:2c:11:73:9a:e0:75:0a:87:ec:00:cb:50:0c:5f:19:16:03: dc:36:df:cc:b2:18:4e:07:67:3c:03:a5:0c:46:9e:64:72:a4: 37:25:a0:05:15:d1:3f:60:3a:ae:f3:40:9d:6e:ba:ed:21:97: b2:20:5f:42:6c:bc:81:be:d3:ed:48:18:5b:ad:8c:3c:c2:af: 8a:92:f8:b8:f9:46:79:e3:10:c4:64:af:4d:86:98:83:18:75: 5e:85:46:20:8b:87:22:07:80:73:20:bd:dd:1e:cc:73:de:22: 39:14:49:e4:1e:30:13:9d:3b:a4:c1:a4:1a:81:cb:df:e8:c1: 05:f1:c6:38:04:70:2f:dd:ad:8a:82:1e:87:be:cf:25:cb:12: 3e:f6:f6:cf:f7:6f:bb:4e:ad:90:2d:be:3f:2a:e8:5e:04:78: d4:09:88:6c:05:19:88:92:f4:6d:82:67:49:c0:a7:a0:9a:85: a8:53:ea:81:73:4b:79:81:92:e9:ee:c4:42:9f:b4:1b:34:fa: ca:85:aa:1a:32:14:48:9a:94:85:21:98:12:e2:07:3b:bd:78: c7:46:78:e7:d5:53:54:81:22:0f:81:45:a4:d8:44:52:86:37: 64:ee:4f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInpFSKAEVysM1a9Nixi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY0ZDEwOGFjMTg0YmQxYjUzMmZmODhmYzY2NDRhZGUx NmRhNzUwHhcNMjYwMjA5MTYwMDU4WhcNMjYwMjEwMTYwMDU4WjAzMTEwLwYDVQQD EygyYmI0YTJhOGJiMTA4YjllZDMxYjYxM2E1ZDU1OWE5N2MwZDNiOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj1y3dAtzB9Z5rFcg9kPt1DFscZW OdAJr8f6wXJ9gqbBi3am22MX1UVoL3O4t8gWZSy23xIdQ4wohXaq9oswwB06p2TT 7TOUHMe9WgvOtLBlFJ7sCPl6NtcrdpfihyI0G9Nd6Be67sA4txC59NKFvwDL9a59 sQSau0uaB9aSHmlSZDZDywvUNfA/0fcNlm5khXPCBNFz/AIo7HthZj1T737eA3Qe oxa3bmGGEIh2Bz7i8Nid3NmY9916o6w5v+9JX6DGdoKQOlDsDwE7TKLDtFi5mEVe JsC6MZ/qQV/ArycGlY7h2/M4BEOBd4IgWnq3eL42Bde3o4TMAINUa2YtZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu0oqi7EIue0xthOl1VmpfA07lbMB8GA1UdIwQY MBaAFE0vTRCKwYS9G1Mv+I/GZEreFtp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFM5TkVJckJoTDBiVXlfNGo4WmtTdDRXMm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81OWJjMGMtMTRmNC00YmM0LTgwZTQt YjYzMDg1M2U5NDkzLzEvVFM5TkVJckJoTDBiVXlfNGo4WmtTdDRXMm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81OWJjMGMtMTRmNC00YmM0LTgwZTQtYjYzMDg1M2U5NDkz LzEvVFM5TkVJckJoTDBiVXlfNGo4WmtTdDRXMm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdtC5Aqr puodVtZAkAFHY1Py9CwRc5rgdQqH7ADLUAxfGRYD3DbfzLIYTgdnPAOlDEaeZHKk NyWgBRXRP2A6rvNAnW667SGXsiBfQmy8gb7T7UgYW62MPMKvipL4uPlGeeMQxGSv TYaYgxh1XoVGIIuHIgeAcyC93R7Mc94iORRJ5B4wE507pMGkGoHL3+jBBfHGOARw L92tioIeh77PJcsSPvb2z/dvu06tkC2+PyroXgR41AmIbAUZiJL0bYJnScCnoJqF qFPqgXNLeYGS6e7EQp+0GzT6yoWqGjIUSJqUhSGYEuIHO714x0Z459VTVIEiD4FF pNhEUoY3ZO5PLg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:12:30 2026 by rpki-client