This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json) Hash identifier: 8l7fIi09KhQj/jqjWKmmHNzdLpTLh3DpLVPRbb//rv8= Subject key identifier: E5:A8:32:A6:D7:E0:1D:49:9F:CC:16:CE:25:4C:29:0F:A4:FD:DC:97 Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4 Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4 Certificate serial: 019C438FF463F5A4733ADBBE9E978F2FF914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 18:00:33 +0000 Manifest this update: Mon 09 Feb 2026 18:00:33 +0000 Manifest next update: Tue 10 Feb 2026 18:00:33 +0000 Files and hashes: 1: UqqJVc2LmDSoG37tyF_Y4rZTJNo.roa (hash: 3t/K9ONoo6YmeusIuo36eGNhkP5aHMKXreL77QnBjxI=) 2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: qKnWAhLLHvkyl71VRoMeGRITYBmvLKKGxgLnrhp+Rq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f4:63:f5:a4:73:3a:db:be:9e:97:8f:2f:f9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4 Validity Not Before: Feb 9 18:00:33 2026 GMT Not After : Feb 10 18:00:33 2026 GMT Subject: CN=e5a832a6d7e01d499fcc16ce254c290fa4fddc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:6d:96:49:82:e6:84:df:89:2d:00:ca:e1: 7e:00:42:0b:79:8c:54:1a:43:3c:68:c8:3d:c6:b1: 06:9b:a1:92:4b:6b:e7:bc:06:1d:3b:50:01:b9:e3: e4:fd:6f:7c:d9:44:d5:c7:25:95:a1:22:6e:18:64: 81:a0:05:a3:e8:f1:50:ce:0d:38:26:8f:16:f5:74: b9:a5:5f:37:2e:d6:fa:8e:ae:c7:20:26:a5:97:8a: c2:2d:11:99:6d:df:c9:62:82:7d:68:92:13:cd:54: 66:71:75:cf:72:24:54:cd:86:55:d7:d7:32:ff:7c: 79:ee:80:dd:33:7a:20:4a:48:b1:78:37:34:ca:9c: 83:e8:0d:e5:38:f9:d8:18:1a:ca:67:03:8c:67:57: 58:3a:a3:7c:5f:ea:e9:73:34:09:50:4e:5a:c0:9e: e5:33:00:b8:a0:90:61:61:40:75:b1:4b:25:cb:43: 7e:06:4d:de:28:a2:94:9e:87:cb:ab:a1:60:b6:a1: cc:c3:80:8d:0b:65:c0:eb:92:8b:ec:b8:90:c4:99: 0d:3d:d5:d9:51:7e:a3:4c:11:1a:0f:41:d4:b1:f6: 21:94:8e:cc:fd:40:ba:e8:41:af:b8:42:7f:44:30: eb:d6:35:27:81:da:32:b9:67:88:3d:78:f5:58:42: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A8:32:A6:D7:E0:1D:49:9F:CC:16:CE:25:4C:29:0F:A4:FD:DC:97 X509v3 Authority Key Identifier: keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4b:ff:c6:48:04:37:03:9a:fe:29:f0:7a:b1:fb:c2:cb:37: a7:64:2b:48:fe:58:28:da:8b:bc:75:32:ab:3d:4f:9e:9e:83: 60:2e:06:a8:f6:35:ef:a2:8a:35:ba:6a:ab:21:28:26:b6:e1: c2:46:cf:56:44:29:88:6e:ea:b4:1d:33:15:2c:b5:36:f9:c9: 85:f8:c3:24:39:34:67:3f:ab:66:f3:8f:3b:79:5a:97:ce:63: 56:30:64:17:97:fd:80:9d:ab:92:9e:aa:77:c3:8e:4f:11:f7: 7e:c9:26:33:aa:8e:fe:c6:cb:4c:5d:d5:59:6f:62:d0:52:5f: 42:14:d7:70:b4:38:1c:b2:8b:7f:b0:28:a7:9a:4e:d6:7a:35: 94:28:c7:f8:e4:fc:b0:13:44:d5:31:46:39:4a:c2:cd:f4:33: 53:39:83:8d:79:40:24:49:ca:de:16:61:5a:01:f1:75:fe:61: e4:b9:9c:ee:01:d5:f0:2c:fe:89:ee:7e:6b:63:e1:36:ad:f5: 02:d7:59:92:67:b2:62:41:93:5a:7f:ff:3a:61:d9:12:92:da: 75:3e:84:3c:86:5b:08:f9:24:9a:82:e7:01:e9:9f:d8:b4:a7: 07:1e:8b:09:81:46:27:71:da:f0:76:4d:b9:f0:bc:2b:27:ec: ef:73:9f:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/Rj9aRzOtu+npePL/kUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzM0MmYxN2Q1NGE4YTNkYTBjZTRkMzE4YjNiNGMzZmEw NTkzZTQwHhcNMjYwMjA5MTgwMDMzWhcNMjYwMjEwMTgwMDMzWjAzMTEwLwYDVQQD EyhlNWE4MzJhNmQ3ZTAxZDQ5OWZjYzE2Y2UyNTRjMjkwZmE0ZmRkYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQNtlkmC5oTfiS0AyuF+AEILeYxU GkM8aMg9xrEGm6GSS2vnvAYdO1ABuePk/W982UTVxyWVoSJuGGSBoAWj6PFQzg04 Jo8W9XS5pV83Ltb6jq7HICall4rCLRGZbd/JYoJ9aJITzVRmcXXPciRUzYZV19cy /3x57oDdM3ogSkixeDc0ypyD6A3lOPnYGBrKZwOMZ1dYOqN8X+rpczQJUE5awJ7l MwC4oJBhYUB1sUsly0N+Bk3eKKKUnofLq6FgtqHMw4CNC2XA65KL7LiQxJkNPdXZ UX6jTBEaD0HUsfYhlI7M/UC66EGvuEJ/RDDr1jUngdoyuWeIPXj1WEIstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWoMqbX4B1Jn8wWziVMKQ+k/dyXMB8GA1UdIwQY MBaAFLQzQvF9VKij2gzk0xiztMP6BZPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMt MzY3NGE5MDEwZWZkLzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMtMzY3NGE5MDEwZWZk LzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUv/xkgE NwOa/inwerH7wss3p2QrSP5YKNqLvHUyqz1Pnp6DYC4GqPY176KKNbpqqyEoJrbh wkbPVkQpiG7qtB0zFSy1NvnJhfjDJDk0Zz+rZvOPO3lal85jVjBkF5f9gJ2rkp6q d8OOTxH3fskmM6qO/sbLTF3VWW9i0FJfQhTXcLQ4HLKLf7Aop5pO1no1lCjH+OT8 sBNE1TFGOUrCzfQzUzmDjXlAJEnK3hZhWgHxdf5h5Lmc7gHV8Cz+ie5+a2PhNq31 AtdZkmeyYkGTWn//OmHZEpLadT6EPIZbCPkkmoLnAemf2LSnBx6LCYFGJ3Ha8HZN ufC8Kyfs73Ofzg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:17 2026 by rpki-client