This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json) Hash identifier: sI2hFuccmMkSSTwiFN67W2iuNf93BiU7QwvWG3JxcLo= Subject key identifier: 8F:C7:84:39:CA:BD:9D:17:C2:C5:89:18:0A:32:1F:17:E8:02:18:72 Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed Certificate serial: 019C41A22B3099A9673F1B9A4C9861EC77A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 09:01:12 +0000 Manifest this update: Mon 09 Feb 2026 09:01:12 +0000 Manifest next update: Tue 10 Feb 2026 09:01:12 +0000 Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: /GdSPFQ07nnCtRQsp6/q6wGMk/4jBa2950yoKjnwCuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:2b:30:99:a9:67:3f:1b:9a:4c:98:61:ec:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed Validity Not Before: Feb 9 09:01:12 2026 GMT Not After : Feb 10 09:01:12 2026 GMT Subject: CN=8fc78439cabd9d17c2c589180a321f17e8021872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:b9:96:82:1e:79:ca:59:28:41:26:90:7b: 42:c0:df:5f:1a:73:39:e7:70:28:d5:ec:c2:5d:a5: 8a:83:5b:64:ed:0c:cc:1f:7c:be:83:5f:99:87:6a: 95:5f:67:1f:db:96:65:96:b8:ca:3b:df:62:02:5c: 8b:77:4e:9b:db:8e:07:50:dc:a7:a1:49:fd:bd:af: ef:da:d4:c5:6b:dc:c4:38:25:e7:30:af:f0:24:83: 63:d1:97:9e:40:44:ee:05:b9:7c:3d:a6:61:07:9c: a5:d0:95:b2:9b:38:1a:44:fb:99:01:76:19:6f:9b: 78:71:7f:43:23:46:c4:a8:d1:34:dc:0e:26:01:97: ac:4e:5e:26:d4:a4:18:e2:96:dd:12:06:50:c3:77: b2:80:48:8b:06:08:c8:9b:2d:a7:bb:8e:74:17:76: ad:0d:12:fa:ed:9a:31:9d:19:f5:60:50:73:07:07: b1:a8:ab:ae:53:e7:82:b0:be:e9:20:42:5d:ee:8a: 6d:96:be:7d:9f:31:95:ab:3f:05:3e:03:de:07:00: f2:38:46:9c:87:2a:62:96:00:cf:5b:7a:bd:c2:8a: af:d2:1d:5f:81:7b:58:2c:e4:5c:3e:22:b4:6c:3e: 6b:4f:78:fa:b4:88:b0:1b:77:9c:c8:f1:e5:00:7c: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:84:39:CA:BD:9D:17:C2:C5:89:18:0A:32:1F:17:E8:02:18:72 X509v3 Authority Key Identifier: keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a6:a6:24:fd:47:b8:b4:28:a5:96:05:eb:6a:bd:8a:4d:91: 50:15:e7:61:42:56:f8:e4:e3:69:6b:12:ea:0b:dd:72:00:df: 4e:01:2d:98:9c:27:78:fe:4f:d9:f5:2d:3c:62:7c:9a:1a:d4: 95:29:28:e5:a8:46:48:d5:ca:8d:80:7a:17:56:e6:46:19:d2: e9:8e:16:d5:7f:f3:d4:7a:fb:38:4a:39:fa:fa:c1:c8:67:db: bc:ed:6f:d8:aa:01:0a:61:b9:f9:eb:4e:77:06:d2:17:6b:cf: 87:0e:ee:79:5d:4c:98:e7:94:ad:73:c6:0c:c3:99:8f:ba:cd: 04:d1:05:39:13:02:f0:16:11:75:6d:ea:7b:ef:d2:bb:ae:86: b6:11:a1:1e:d7:23:8d:c3:ca:e9:9e:52:9e:3f:6f:b0:4d:6d: d8:ef:9e:03:3a:14:65:24:35:bb:49:f7:d2:30:88:90:43:fe: 51:53:05:7f:42:f6:9e:d7:1e:30:b5:40:26:38:32:00:fc:8e: c8:3c:64:d8:b5:46:82:f1:f3:29:c5:6a:c8:d0:9b:50:7e:49: 8b:fc:d0:d8:59:8c:b7:2f:db:bf:27:34:c0:99:a2:5a:a2:03: 6a:18:09:cc:f9:59:a6:17:b6:5c:fb:5b:4f:4a:ab:f3:38:c3: f9:10:77:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiswmalnPxuaTJhh7HegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDYxZjgzNzg2OGNiZWFjYTE3YWVmNDg2Nzg0ZjYxZjQ5 MjQzZWQwHhcNMjYwMjA5MDkwMTEyWhcNMjYwMjEwMDkwMTEyWjAzMTEwLwYDVQQD Eyg4ZmM3ODQzOWNhYmQ5ZDE3YzJjNTg5MTgwYTMyMWYxN2U4MDIxODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopC5loIeecpZKEEmkHtCwN9fGnM5 53Ao1ezCXaWKg1tk7QzMH3y+g1+Zh2qVX2cf25ZllrjKO99iAlyLd06b244HUNyn oUn9va/v2tTFa9zEOCXnMK/wJINj0ZeeQETuBbl8PaZhB5yl0JWymzgaRPuZAXYZ b5t4cX9DI0bEqNE03A4mAZesTl4m1KQY4pbdEgZQw3eygEiLBgjImy2nu450F3at DRL67ZoxnRn1YFBzBwexqKuuU+eCsL7pIEJd7optlr59nzGVqz8FPgPeBwDyOEac hypilgDPW3q9woqv0h1fgXtYLORcPiK0bD5rT3j6tIiwG3ecyPHlAHz7ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/HhDnKvZ0XwsWJGAoyHxfoAhhyMB8GA1UdIwQY MBaAFExGH4N4aMvqyheu9IZ4T2H0kkPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmIt ZjlkMDk2NTI0YzEzLzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmItZjlkMDk2NTI0YzEz LzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaamJP1H uLQopZYF62q9ik2RUBXnYUJW+OTjaWsS6gvdcgDfTgEtmJwneP5P2fUtPGJ8mhrU lSko5ahGSNXKjYB6F1bmRhnS6Y4W1X/z1Hr7OEo5+vrByGfbvO1v2KoBCmG5+etO dwbSF2vPhw7ueV1MmOeUrXPGDMOZj7rNBNEFORMC8BYRdW3qe+/Su66GthGhHtcj jcPK6Z5Snj9vsE1t2O+eAzoUZSQ1u0n30jCIkEP+UVMFf0L2ntceMLVAJjgyAPyO yDxk2LVGgvHzKcVqyNCbUH5Ji/zQ2FmMty/bvyc0wJmiWqIDahgJzPlZphe2XPtb T0qr8zjD+RB3Xw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:32 2026 by rpki-client