This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json) Hash identifier: V1Ahug7E+gAQsv+7KO0i/hu1XKTqOh3fJGiscPB0+ak= Subject key identifier: 02:2A:4D:DD:E1:E9:34:97:03:5F:B3:7A:77:4D:60:D5:D7:1A:87:BD Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf Certificate serial: 019C41D8B3EDD6555C1985F30E3AD804D936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft Manifest number: 15CB Signing time: Mon 09 Feb 2026 10:00:46 +0000 Manifest this update: Mon 09 Feb 2026 10:00:46 +0000 Manifest next update: Tue 10 Feb 2026 10:00:46 +0000 Files and hashes: 1: KPtch8_0qzZU6CkKEvFkXYq2ViY.roa (hash: ClU8AEytbQIwHPgMAzbIutrvifBxjGRmu/3pZThvLHI=) 2: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: vMr1gV54513kH3Yw/xPN7QErFmKfJVmzVZuiPXKiHYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b3:ed:d6:55:5c:19:85:f3:0e:3a:d8:04:d9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf Validity Not Before: Feb 9 10:00:46 2026 GMT Not After : Feb 10 10:00:46 2026 GMT Subject: CN=022a4ddde1e93497035fb37a774d60d5d71a87bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:35:79:3e:4e:a1:8a:1c:1f:b0:07:bf:7d: 86:c2:5a:a7:71:85:86:d9:0b:ad:ee:31:b9:7b:35: 6c:13:7a:d0:3f:98:db:22:fa:15:ad:75:98:3a:13: 86:95:b0:e3:31:2f:6c:8c:18:94:ff:cd:d8:4d:4c: 91:bb:9f:3a:9d:19:06:05:1f:b1:2f:19:ec:51:8c: d1:33:f7:b3:d2:c8:9c:ef:28:85:6d:1d:7a:6a:24: c3:d0:a8:29:06:b4:0f:42:89:c4:97:ea:c4:4b:85: 65:f4:20:73:0b:46:59:93:95:bf:4e:22:de:9e:41: 48:36:b9:8e:aa:b0:76:c9:9e:15:28:23:85:18:14: 51:28:83:05:50:34:4b:a6:e6:e1:64:d0:0d:ef:3c: 78:95:04:a6:3b:a6:6b:ea:0d:79:9e:ba:25:cb:c3: 6d:e2:b4:eb:33:f3:17:0d:57:c7:4f:2b:43:94:93: 29:88:7c:be:50:27:c2:56:a2:73:43:85:a2:00:98: b0:fc:d4:9f:35:2b:ab:d5:b0:39:ea:6c:a3:41:15: 46:ba:40:77:18:f9:fd:f1:2f:05:42:c8:9d:fc:ae: 5c:ee:59:69:f3:ed:7e:38:da:b3:e0:8b:a0:d0:74: 54:e8:a5:cf:81:50:66:2f:1c:5f:a6:8d:d4:0b:06: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2A:4D:DD:E1:E9:34:97:03:5F:B3:7A:77:4D:60:D5:D7:1A:87:BD X509v3 Authority Key Identifier: keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:23:72:27:72:cd:7c:09:54:2f:56:1c:3c:44:b2:00:1a:2c: 56:20:9c:82:77:23:15:9c:b9:87:d5:a0:08:57:ca:d2:19:13: 98:79:00:05:6a:83:0e:b8:cf:8a:ed:9e:8e:a8:db:e5:27:2d: 2a:f2:7e:37:22:78:ab:bf:9e:1f:eb:34:78:b1:b2:bc:b5:68: 77:2f:31:7a:b8:63:3a:14:6d:7c:9e:2e:7a:f1:cb:54:9e:6f: 94:66:1e:80:f7:32:93:77:8d:44:88:25:df:a9:bb:05:ba:fb: bb:43:66:8a:d9:7d:a8:21:bc:67:88:d6:67:a2:8d:f0:14:5a: ee:b4:f9:39:55:f0:90:d0:07:ec:58:11:a5:61:27:f3:42:83: 8f:8c:2e:de:8a:4a:ed:d0:37:25:cf:ea:75:9b:33:35:12:66: 74:19:fa:27:2c:ee:d7:a6:aa:40:9b:61:a1:bb:d9:23:97:60: 08:fb:d4:50:66:b5:a4:99:19:3c:da:6d:8f:e5:b3:c0:69:b5: 06:ea:b2:22:c0:3d:b8:b2:6b:f2:77:02:17:d2:ea:3e:ca:a5: 84:62:2a:8f:ac:04:57:2c:67:58:59:b9:b3:81:cc:43:58:65: 23:06:1e:ab:14:b2:c1:ea:a5:db:34:36:c0:99:21:fd:c8:a6: a9:46:f6:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LPt1lVcGYXzDjrYBNk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTQwYzVmOGUzYzdiYzI0YTFhZDRjODQwNjQxNTI2M2Vi NmJhYmYwHhcNMjYwMjA5MTAwMDQ2WhcNMjYwMjEwMTAwMDQ2WjAzMTEwLwYDVQQD EygwMjJhNGRkZGUxZTkzNDk3MDM1ZmIzN2E3NzRkNjBkNWQ3MWE4N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArok1eT5OoYocH7AHv32GwlqncYWG 2Qut7jG5ezVsE3rQP5jbIvoVrXWYOhOGlbDjMS9sjBiU/83YTUyRu586nRkGBR+x LxnsUYzRM/ez0sic7yiFbR16aiTD0KgpBrQPQonEl+rES4Vl9CBzC0ZZk5W/TiLe nkFINrmOqrB2yZ4VKCOFGBRRKIMFUDRLpubhZNAN7zx4lQSmO6Zr6g15nroly8Nt 4rTrM/MXDVfHTytDlJMpiHy+UCfCVqJzQ4WiAJiw/NSfNSur1bA56myjQRVGukB3 GPn98S8FQsid/K5c7llp8+1+ONqz4Iug0HRU6KXPgVBmLxxfpo3UCwaVzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIqTd3h6TSXA1+zendNYNXXGoe9MB8GA1UdIwQY MBaAFLUUDF+OPHvCShrUyEBkFSY+trq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQt Y2RjMjQ5MDM5M2E2LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQtY2RjMjQ5MDM5M2E2 LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiNyJ3LN fAlUL1YcPESyABosViCcgncjFZy5h9WgCFfK0hkTmHkABWqDDrjPiu2ejqjb5Sct KvJ+NyJ4q7+eH+s0eLGyvLVody8xerhjOhRtfJ4uevHLVJ5vlGYegPcyk3eNRIgl 36m7Bbr7u0Nmitl9qCG8Z4jWZ6KN8BRa7rT5OVXwkNAH7FgRpWEn80KDj4wu3opK 7dA3Jc/qdZszNRJmdBn6Jyzu16aqQJthobvZI5dgCPvUUGa1pJkZPNptj+WzwGm1 BuqyIsA9uLJr8ncCF9LqPsqlhGIqj6wEVyxnWFm5s4HMQ1hlIwYeqxSyweql2zQ2 wJkh/cimqUb2TQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:34 2026 by rpki-client