This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json) Hash identifier: JLnylW/BUTer1ooZWV1j9u1YekoY2mYofbUFOIOx+UE= Subject key identifier: E5:D3:1C:3C:70:68:80:A6:0F:2E:67:18:F8:FF:7E:67:45:7E:9F:C6 Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Certificate serial: 019C41A1D1241B897D95FD578CE79B41EF34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft Manifest number: 0F05 Signing time: Mon 09 Feb 2026 09:00:49 +0000 Manifest this update: Mon 09 Feb 2026 09:00:49 +0000 Manifest next update: Tue 10 Feb 2026 09:00:49 +0000 Files and hashes: 1: 8OxDlCEl3lB-3kIpiJQaHVQ4IyA.roa (hash: JPo/b3U7GJdqKgxMFuML6bnht3EJ1tJ9OiBD+teV5iI=) 2: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: s7VOVadwjBUmc7eW+aeFG1sm0V5wljeuasC/nGxHcq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:d1:24:1b:89:7d:95:fd:57:8c:e7:9b:41:ef:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Validity Not Before: Feb 9 09:00:49 2026 GMT Not After : Feb 10 09:00:49 2026 GMT Subject: CN=e5d31c3c706880a60f2e6718f8ff7e67457e9fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:19:d3:26:85:33:90:4e:82:00:26:b9:2f: 65:75:b6:9c:84:60:c9:ea:72:6b:39:82:e4:4c:88: 3a:4d:9f:8b:2f:c4:c3:39:6a:57:19:84:34:f6:15: 86:74:07:8f:f4:96:2d:08:a2:fe:f0:a0:33:e2:8a: 4b:81:9f:e3:90:60:31:68:e9:49:35:12:35:cc:ff: 1e:83:ee:ec:c7:4e:7d:0a:0e:0a:18:2b:e7:a1:62: 08:8a:8a:21:7e:0f:a3:d2:06:47:48:b9:20:7d:da: 90:10:c3:e6:1d:b0:64:e6:a4:0b:9e:59:1f:5c:80: 63:09:eb:38:92:67:20:83:20:a2:9b:a2:72:c2:59: d1:59:b1:8e:8c:92:96:aa:96:4a:e6:28:46:c1:5e: 90:d3:86:b0:75:d2:8a:7a:42:b3:6c:3d:0c:71:e5: d3:f8:80:7d:13:2c:d5:7e:8f:96:54:99:6d:23:99: 51:4a:2f:d3:f2:fe:6f:65:7a:f2:dd:eb:34:1a:ee: 6a:f7:ab:7e:d4:d1:d8:5d:ae:ae:e8:75:6d:04:4e: 05:ff:1c:f6:fa:7f:ca:1b:1e:06:60:3b:6f:67:ca: 63:f3:e6:d9:64:eb:45:20:b1:3b:da:9d:53:aa:89: a7:60:44:de:88:35:3e:79:db:95:87:cd:b8:f7:54: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D3:1C:3C:70:68:80:A6:0F:2E:67:18:F8:FF:7E:67:45:7E:9F:C6 X509v3 Authority Key Identifier: keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d7:7e:ab:3a:7e:86:43:61:35:44:3e:76:74:1c:94:e5:f0: b7:08:05:6f:a7:21:b8:de:0f:a6:b3:21:18:2b:04:64:b2:5f: 4f:18:91:d9:ae:c8:3f:d9:68:a5:c1:2e:32:19:66:a0:c0:f2: fa:8e:82:75:b8:4e:e0:a6:15:88:95:7c:b4:8d:a3:18:a9:dc: 43:36:78:bf:59:3f:a2:30:40:96:21:84:e9:be:4d:b5:77:ac: f3:e5:cf:a6:16:88:60:3f:86:81:ec:eb:7c:96:94:71:c1:12: 45:4f:72:61:5c:f7:92:83:01:f8:f7:5a:94:e0:43:3f:da:30: 12:8d:cd:cc:f5:8d:d8:d9:26:a2:e5:f9:06:6b:bf:d2:c6:69: 38:68:1f:60:16:33:7e:57:89:4c:69:9b:0e:9c:fe:e4:d8:fc: da:be:05:db:96:1b:69:3c:9f:12:d2:68:e5:1f:d8:b5:dc:f2: 23:0f:5b:c2:5d:79:44:a3:4b:1e:7e:b7:eb:8b:8b:b7:6b:d7: 05:92:48:e6:f7:22:9f:8c:09:94:08:73:59:9a:d2:ad:cb:fb: 7d:ee:82:89:88:24:d9:e8:53:b7:87:42:f2:24:13:22:75:60: d2:61:b3:4a:03:93:77:96:dd:d6:9f:d8:b0:3a:9a:51:c5:70: ba:7b:28:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBodEkG4l9lf1XjOebQe80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDQ3YjhiOGFhOWZiY2NjZmYzZDUwNzgxNGZjNzQ0NjRh MmFiZjAwHhcNMjYwMjA5MDkwMDQ5WhcNMjYwMjEwMDkwMDQ5WjAzMTEwLwYDVQQD EyhlNWQzMWMzYzcwNjg4MGE2MGYyZTY3MThmOGZmN2U2NzQ1N2U5ZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aoZ0yaFM5BOggAmuS9ldbachGDJ 6nJrOYLkTIg6TZ+LL8TDOWpXGYQ09hWGdAeP9JYtCKL+8KAz4opLgZ/jkGAxaOlJ NRI1zP8eg+7sx059Cg4KGCvnoWIIioohfg+j0gZHSLkgfdqQEMPmHbBk5qQLnlkf XIBjCes4kmcggyCim6JywlnRWbGOjJKWqpZK5ihGwV6Q04awddKKekKzbD0MceXT +IB9EyzVfo+WVJltI5lRSi/T8v5vZXry3es0Gu5q96t+1NHYXa6u6HVtBE4F/xz2 +n/KGx4GYDtvZ8pj8+bZZOtFILE72p1TqomnYETeiDU+eduVh82491TMFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXTHDxwaICmDy5nGPj/fmdFfp/GMB8GA1UdIwQY MBaAFEzUe4uKqfvMz/PVB4FPx0RkoqvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5Yzct YmM0OGI0MWY0OThiLzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5YzctYmM0OGI0MWY0OThi LzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9d+qzp+ hkNhNUQ+dnQclOXwtwgFb6chuN4PprMhGCsEZLJfTxiR2a7IP9lopcEuMhlmoMDy +o6CdbhO4KYViJV8tI2jGKncQzZ4v1k/ojBAliGE6b5NtXes8+XPphaIYD+Ggezr fJaUccESRU9yYVz3koMB+PdalOBDP9owEo3NzPWN2NkmouX5Bmu/0sZpOGgfYBYz fleJTGmbDpz+5Nj82r4F25YbaTyfEtJo5R/YtdzyIw9bwl15RKNLHn6364uLt2vX BZJI5vcin4wJlAhzWZrSrcv7fe6CiYgk2ehTt4dC8iQTInVg0mGzSgOTd5bd1p/Y sDqaUcVwunsoww== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:46 2026 by rpki-client