This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json) Hash identifier: jELJ6vew3Yh8RvCgcYT2KZm6cdU0fiBQOZp7w+4Bm5Y= Subject key identifier: AD:C3:F8:AE:6B:F0:EC:81:BF:E5:D4:EF:C1:5A:E4:17:70:D2:CD:3C Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2 Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2 Certificate serial: 019C44D9F59C9A2D2150259998103B2371F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft Manifest number: 10AF Signing time: Tue 10 Feb 2026 00:01:00 +0000 Manifest this update: Tue 10 Feb 2026 00:01:00 +0000 Manifest next update: Wed 11 Feb 2026 00:01:00 +0000 Files and hashes: 1: a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa (hash: UhcGtGUN3kq4pMX0CPL4BxWxePj3w7wSJak+OWjA2w4=) 2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: uGiSsHupyZgj5f02s72jm5HiLdoGJbO/MVSQLRnLu9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:f5:9c:9a:2d:21:50:25:99:98:10:3b:23:71:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2 Validity Not Before: Feb 10 00:01:00 2026 GMT Not After : Feb 11 00:01:00 2026 GMT Subject: CN=adc3f8ae6bf0ec81bfe5d4efc15ae41770d2cd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:4f:ce:06:cd:6f:0f:18:34:6f:ec:2a:ef: 9d:56:86:ee:c6:fd:08:cb:0a:78:bf:21:bc:e9:07: bb:eb:b6:12:b2:c8:3e:eb:7e:59:c4:c8:54:29:22: f9:92:f3:cf:e3:74:d6:b6:34:b6:30:6a:61:1a:45: 3a:5c:64:a8:54:65:b0:c5:81:36:c3:a2:c8:1a:86: 09:56:a6:01:59:d7:21:37:24:e4:80:02:a5:9d:70: 92:dc:35:c2:49:50:5b:a4:25:b1:b9:65:e4:5d:91: d4:90:b9:be:0e:3c:69:fc:d1:01:b2:ba:2a:e3:a0: 9a:0b:51:78:d1:33:24:80:c2:e0:11:b7:88:9c:04: 4b:d0:71:0a:ec:d0:38:ab:d6:cd:e9:41:dc:da:9f: 62:f2:c6:da:7e:e7:23:28:41:1e:c8:f1:43:f0:56: 45:0d:97:c7:dc:4e:e5:20:99:b3:cf:2c:b1:0f:6f: 93:9d:8e:c2:e5:3e:08:55:fd:90:e2:28:c6:da:7c: 95:c5:18:3e:11:fc:e1:e1:e7:8e:66:a9:ee:92:7a: e3:6c:80:be:1b:1e:c7:18:39:bd:a1:6a:6d:81:1c: 0d:b7:19:22:b1:29:c9:50:57:6c:6c:6f:45:05:78: ae:78:07:85:9a:02:ba:69:cc:6f:d0:f7:a0:32:d0: 56:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C3:F8:AE:6B:F0:EC:81:BF:E5:D4:EF:C1:5A:E4:17:70:D2:CD:3C X509v3 Authority Key Identifier: keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:ab:b7:48:b8:7a:90:7d:5e:e1:d0:b0:7d:0d:43:09:85: 51:50:b2:99:05:16:9c:35:56:60:3e:21:52:06:4c:cd:d5:b6: 0e:03:76:ff:b5:6e:0f:12:a4:5a:d2:a7:6e:1b:d0:54:41:03: 17:38:8c:0e:64:c5:c5:43:21:e9:3b:c9:70:c1:65:43:ce:60: f2:c6:9b:86:cd:ef:e8:5c:78:2f:4f:b7:f5:2c:cb:55:a0:07: a4:59:2d:24:32:96:89:7e:9f:77:b4:0a:bb:22:30:7b:82:6e: ab:a8:ef:9a:6f:60:3d:b4:ed:9c:b2:fd:07:ec:4f:80:55:28: bc:62:5f:a4:20:d2:03:59:fc:f4:8f:0b:08:ad:c1:7d:83:4f: ea:3f:bd:fd:e7:07:da:61:b8:e5:be:d1:e8:b1:6b:d3:0f:77: b7:b8:03:87:d2:07:89:81:eb:6a:91:0e:80:4f:e0:c8:76:bb: 67:5c:d8:fd:3e:78:d1:44:a9:db:b6:a4:b8:48:fb:ce:6a:3d: 32:f0:dc:79:96:7d:aa:a1:21:21:3b:59:01:0e:41:e8:13:52: b8:c2:58:df:1e:67:ff:16:ac:90:bb:fb:e9:67:a3:09:50:42: 29:e0:2c:cd:6b:6b:43:1c:72:79:a1:10:60:ac:09:0a:89:53: 98:d8:11:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2fWcmi0hUCWZmBA7I3H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDAwYjgxZTllZDRiMmE3MDJhMWVmNWY4NTJlMGU3Njll ZTEwZTIwHhcNMjYwMjEwMDAwMTAwWhcNMjYwMjExMDAwMTAwWjAzMTEwLwYDVQQD EyhhZGMzZjhhZTZiZjBlYzgxYmZlNWQ0ZWZjMTVhZTQxNzcwZDJjZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHxPzgbNbw8YNG/sKu+dVobuxv0I ywp4vyG86Qe767YSssg+635ZxMhUKSL5kvPP43TWtjS2MGphGkU6XGSoVGWwxYE2 w6LIGoYJVqYBWdchNyTkgAKlnXCS3DXCSVBbpCWxuWXkXZHUkLm+Djxp/NEBsroq 46CaC1F40TMkgMLgEbeInARL0HEK7NA4q9bN6UHc2p9i8sbafucjKEEeyPFD8FZF DZfH3E7lIJmzzyyxD2+TnY7C5T4IVf2Q4ijG2nyVxRg+Efzh4eeOZqnuknrjbIC+ Gx7HGDm9oWptgRwNtxkisSnJUFdsbG9FBXiueAeFmgK6acxv0PegMtBW3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3D+K5r8OyBv+XU78Fa5Bdw0s08MB8GA1UdIwQY MBaAFLUAC4Hp7UsqcCoe9fhS4Odp7hDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wZGY3ZjMtYTQ5Mi00ZDZmLWIzNmYt ZDQxZTAzNTkyMzM1LzEvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wZGY3ZjMtYTQ5Mi00ZDZmLWIzNmYtZDQxZTAzNTkyMzM1 LzEvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoart0i4 epB9XuHQsH0NQwmFUVCymQUWnDVWYD4hUgZMzdW2DgN2/7VuDxKkWtKnbhvQVEED FziMDmTFxUMh6TvJcMFlQ85g8sabhs3v6Fx4L0+39SzLVaAHpFktJDKWiX6fd7QK uyIwe4Juq6jvmm9gPbTtnLL9B+xPgFUovGJfpCDSA1n89I8LCK3BfYNP6j+9/ecH 2mG45b7R6LFr0w93t7gDh9IHiYHrapEOgE/gyHa7Z1zY/T540USp27akuEj7zmo9 MvDceZZ9qqEhITtZAQ5B6BNSuMJY3x5n/xaskLv76WejCVBCKeAszWtrQxxyeaEQ YKwJColTmNgRRw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:22:31 2026 by rpki-client