This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json) Hash identifier: 9gx2n+q3DGMJNhYndmQfF9qBxiV2Et7KwlBKYGeTjFs= Subject key identifier: DC:3C:53:FB:8D:AC:FE:F1:84:F8:A6:06:9D:28:9C:E2:D8:C5:BE:98 Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Certificate serial: 019C41A14AA1B50974DF72E84F9B923B761B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft Manifest number: 0DFC Signing time: Mon 09 Feb 2026 09:00:15 +0000 Manifest this update: Mon 09 Feb 2026 09:00:15 +0000 Manifest next update: Tue 10 Feb 2026 09:00:15 +0000 Files and hashes: 1: 5DPQKVh7BOyXWi6HVipGuI-DbKI.roa (hash: 7niXhQfcaYijhdxK0OqWBqiveT28StizLbsME/eXTCM=) 2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: H60K8oYxq9Vy4mvxHHoWKy+lByB7aDrNOlhZaW4XtdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:4a:a1:b5:09:74:df:72:e8:4f:9b:92:3b:76:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Validity Not Before: Feb 9 09:00:15 2026 GMT Not After : Feb 10 09:00:15 2026 GMT Subject: CN=dc3c53fb8dacfef184f8a6069d289ce2d8c5be98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:98:4b:98:11:21:17:fd:49:1c:02:f8:a1: f2:73:0c:69:4c:30:fa:f9:e3:9b:5a:fa:8f:d7:2d: c5:10:25:22:06:5f:90:e3:37:d5:4e:8b:30:e9:ef: 66:ec:d8:46:e4:35:4d:4e:5d:8b:03:bb:73:57:bb: e8:13:3d:c7:53:71:0d:99:cd:35:00:4a:fd:c3:64: b0:53:c3:d9:f0:6e:06:99:d5:df:9d:ce:f5:55:3d: d0:1a:b2:ef:ac:2e:ff:4e:4b:be:0b:72:ec:66:69: 39:75:3f:41:b2:bb:c2:b3:54:33:f2:19:b0:42:40: 46:e4:8c:2d:3a:ca:e7:5f:ae:5f:d6:7a:3d:40:b8: 7b:a0:8f:00:f2:f0:69:d6:f3:18:6b:bb:d4:7c:6c: e2:46:74:7b:ef:4e:89:79:02:3f:38:44:0f:51:91: 55:11:a1:a8:b9:2c:7c:97:c3:16:b0:bf:b5:11:b7: 5d:f6:44:ca:92:c6:9d:47:e5:ef:07:f9:a9:da:f7: 7b:a4:0d:df:21:db:52:c1:06:0a:2e:15:d3:ad:76: 39:b5:91:1c:41:d3:d3:a0:f9:1c:05:45:11:87:1c: c4:3f:6e:39:69:7e:36:87:b1:b9:66:06:84:6b:22: 2c:86:ff:5b:3d:7c:a3:3b:9b:05:61:ed:c7:b7:d6: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3C:53:FB:8D:AC:FE:F1:84:F8:A6:06:9D:28:9C:E2:D8:C5:BE:98 X509v3 Authority Key Identifier: keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:78:0a:e2:4f:21:6e:d1:0a:c3:06:7c:7c:af:b3:a4:50: fb:c7:29:cc:6a:4b:90:46:67:a9:f0:95:4c:09:e4:a8:0c:22: 04:61:43:fe:ef:d1:15:27:41:34:a2:73:28:ee:a7:f2:47:09: c7:c0:e6:2e:31:21:ab:98:e0:e3:68:a0:48:8c:1b:27:c9:b3: a7:0d:18:aa:ec:ed:be:57:02:9d:8a:8d:ce:91:26:c1:17:78: 6b:11:72:d5:08:fb:a0:cb:7e:74:e2:98:73:7c:9c:87:d1:73: 1e:96:66:da:14:23:8a:3e:dd:be:9a:64:ae:2a:54:e3:7d:03: a9:b0:01:e6:e8:b5:10:2c:8d:e7:6d:4d:b5:67:1d:2b:09:4c: 6d:f5:a0:9b:e4:b4:1b:16:22:7a:36:2f:15:49:ca:73:66:19: d9:5f:b7:fa:6f:33:e6:19:a4:ca:1a:4b:43:c2:1e:6a:24:47: 6b:c8:b2:d6:8e:71:a9:b0:05:76:c9:f5:c0:bb:2a:92:cf:d2: f1:2a:4d:aa:be:ee:6d:57:21:4b:69:82:1a:8a:cf:fa:1c:07: b1:7d:95:d7:f4:f7:04:fc:57:7c:d8:6e:79:73:fd:a2:a0:54: 99:d9:03:e0:65:48:16:ff:2c:d9:9a:52:8b:cc:18:79:a2:19: ba:b2:fe:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUqhtQl033LoT5uSO3YbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDJiYzBkOGNjMjhmNTU4NjE1ZWQzZmFlNTNjYWNlNGE2 ZWYwODEwHhcNMjYwMjA5MDkwMDE1WhcNMjYwMjEwMDkwMDE1WjAzMTEwLwYDVQQD EyhkYzNjNTNmYjhkYWNmZWYxODRmOGE2MDY5ZDI4OWNlMmQ4YzViZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUqYS5gRIRf9SRwC+KHycwxpTDD6 +eObWvqP1y3FECUiBl+Q4zfVTosw6e9m7NhG5DVNTl2LA7tzV7voEz3HU3ENmc01 AEr9w2SwU8PZ8G4GmdXfnc71VT3QGrLvrC7/Tku+C3LsZmk5dT9BsrvCs1Qz8hmw QkBG5IwtOsrnX65f1no9QLh7oI8A8vBp1vMYa7vUfGziRnR7706JeQI/OEQPUZFV EaGouSx8l8MWsL+1Ebdd9kTKksadR+XvB/mp2vd7pA3fIdtSwQYKLhXTrXY5tZEc QdPToPkcBUURhxzEP245aX42h7G5ZgaEayIshv9bPXyjO5sFYe3Ht9bCuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNw8U/uNrP7xhPimBp0onOLYxb6YMB8GA1UdIwQY MBaAFLVCvA2Mwo9VhhXtP65Tys5KbvCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUt N2Y2ZTQ5MzBmMjVhLzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUtN2Y2ZTQ5MzBmMjVh LzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLh4CuJP IW7RCsMGfHyvs6RQ+8cpzGpLkEZnqfCVTAnkqAwiBGFD/u/RFSdBNKJzKO6n8kcJ x8DmLjEhq5jg42igSIwbJ8mzpw0YquztvlcCnYqNzpEmwRd4axFy1Qj7oMt+dOKY c3ych9FzHpZm2hQjij7dvppkripU430DqbAB5ui1ECyN521NtWcdKwlMbfWgm+S0 GxYiejYvFUnKc2YZ2V+3+m8z5hmkyhpLQ8IeaiRHa8iy1o5xqbAFdsn1wLsqks/S 8SpNqr7ubVchS2mCGorP+hwHsX2V1/T3BPxXfNhueXP9oqBUmdkD4GVIFv8s2ZpS i8wYeaIZurL+6A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:02 2026 by rpki-client