This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft File: tSU8JVLUQD9DuDwl52IjjfEtroE.mft (raw, json) Hash identifier: MX0qR4z0PQfu4lq/y0l9Ts7GMvgwh6MB+eqDXuQtrKU= Subject key identifier: 73:F6:81:DE:4E:7A:89:FC:46:79:5E:DB:66:AC:00:E3:5B:24:B3:E7 Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81 Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81 Certificate serial: 019C4390A67D30F3EAD2AE3DF3E365FC3114 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 18:01:19 +0000 Manifest this update: Mon 09 Feb 2026 18:01:19 +0000 Manifest next update: Tue 10 Feb 2026 18:01:19 +0000 Files and hashes: 1: A7blUAR8M2twO1WZriuysPCl_Ns.roa (hash: LBRnuKsEeUakJqD77ZNf+zyWsZ1gWUpfDWeWrVr+1Oc=) 2: tSU8JVLUQD9DuDwl52IjjfEtroE.crl (hash: CQ4vM80mqRS8YVIVdcvI6is+YIXSJT0j4TtGxQTbhKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a6:7d:30:f3:ea:d2:ae:3d:f3:e3:65:fc:31:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81 Validity Not Before: Feb 9 18:01:19 2026 GMT Not After : Feb 10 18:01:19 2026 GMT Subject: CN=73f681de4e7a89fc46795edb66ac00e35b24b3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:8a:8d:78:0c:cb:67:f1:91:4b:c0:e4:9e: d4:88:b4:97:a4:c9:f7:b4:1a:a7:fa:15:0d:bb:dc: a1:93:9c:3a:c5:56:5c:62:ac:7c:56:3f:2c:6b:d6: 92:36:7b:19:e6:8b:4c:61:75:e7:6c:8d:db:e8:28: 8f:3b:3e:12:a6:11:d6:dd:30:a7:fc:76:02:cd:84: 47:c5:db:08:bd:ea:98:07:85:b5:09:98:8d:f6:cf: 8e:61:22:19:ae:a2:ee:3a:9e:14:fd:88:01:6f:8f: ca:2c:1d:90:b7:c2:e8:6e:b5:61:e8:b1:08:5c:5d: be:d9:3f:aa:5e:a6:c4:ff:36:fd:e0:96:c0:5a:64: a7:7f:c8:e1:4e:e6:9f:30:13:55:fa:f7:86:9b:48: c9:cc:41:fb:ca:30:02:7e:10:9b:51:10:7a:a6:98: c9:87:1b:8d:d4:bb:a5:16:e4:3a:17:6c:32:ab:38: 41:d8:12:98:c5:8b:00:77:11:73:8e:cf:8b:d5:1e: 6b:34:b4:70:fa:29:21:8d:e1:a5:a3:22:0f:1f:2f: 18:f4:bd:9a:74:cd:81:d7:68:39:0f:9f:bb:26:d0: 35:d0:92:d3:cf:24:79:7f:e9:73:34:64:2f:27:4d: c8:56:3f:8c:c8:b0:82:c7:32:d9:65:42:f1:47:20: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F6:81:DE:4E:7A:89:FC:46:79:5E:DB:66:AC:00:E3:5B:24:B3:E7 X509v3 Authority Key Identifier: keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:db:50:e2:bd:ab:e4:e4:68:4b:c0:0a:27:28:64:c6:26: 2a:b2:8b:63:e5:d5:be:2b:54:dc:ce:67:5a:e7:fe:6d:aa:46: 52:36:ef:04:39:9f:21:17:65:b1:35:89:30:b1:3f:9c:17:cf: 8f:b0:0a:de:82:de:7b:8b:e8:c7:24:67:97:9d:db:a5:61:b1: 9d:b1:3c:2d:e2:ab:3f:bc:51:f7:0a:a6:e5:41:8a:8a:33:5d: 98:1b:a8:ea:2c:6f:41:b8:c8:25:49:1e:da:26:e6:f0:4d:94: a6:91:9f:bf:37:1a:41:cf:4d:16:b3:87:f4:6b:c1:cc:a3:a6: 86:9e:dc:3e:d7:ee:93:f6:51:1e:65:0f:a9:b7:6a:c9:ed:c1: 9f:e9:be:14:d2:39:ad:11:42:8a:01:12:1f:4c:e1:76:4a:be: 94:44:58:9e:ba:f2:e3:c4:ba:bc:28:b3:ec:63:44:fa:73:80: 0a:b6:58:6f:0a:28:ed:6e:3c:36:6f:a1:bb:54:d7:67:dd:dc: ed:42:82:3f:e0:5b:92:af:82:11:00:f9:d4:c8:60:41:31:56: 22:ca:41:b9:52:f8:f7:d4:ff:e0:6e:da:4f:93:e6:0a:da:77: 24:7c:f5:b2:ec:65:a1:c4:aa:ae:c3:e9:6f:7d:36:c9:72:10: db:79:41:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKZ9MPPq0q498+Nl/DEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjUzYzI1NTJkNDQwM2Y0M2I4M2MyNWU3NjIyMzhkZjEy ZGFlODEwHhcNMjYwMjA5MTgwMTE5WhcNMjYwMjEwMTgwMTE5WjAzMTEwLwYDVQQD Eyg3M2Y2ODFkZTRlN2E4OWZjNDY3OTVlZGI2NmFjMDBlMzViMjRiM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutiKjXgMy2fxkUvA5J7UiLSXpMn3 tBqn+hUNu9yhk5w6xVZcYqx8Vj8sa9aSNnsZ5otMYXXnbI3b6CiPOz4SphHW3TCn /HYCzYRHxdsIveqYB4W1CZiN9s+OYSIZrqLuOp4U/YgBb4/KLB2Qt8LobrVh6LEI XF2+2T+qXqbE/zb94JbAWmSnf8jhTuafMBNV+veGm0jJzEH7yjACfhCbURB6ppjJ hxuN1LulFuQ6F2wyqzhB2BKYxYsAdxFzjs+L1R5rNLRw+ikhjeGloyIPHy8Y9L2a dM2B12g5D5+7JtA10JLTzyR5f+lzNGQvJ03IVj+MyLCCxzLZZULxRyBbPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP2gd5Oeon8Rnle22asAONbJLPnMB8GA1UdIwQY MBaAFLUlPCVS1EA/Q7g8JediI43xLa6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNVOEpWTFVRRDlEdUR3bDUySWpqZkV0cm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84MjA5OGItMGM1My00ZGYyLThhMzIt ZmJjMWUzZjdlOTJiLzEvdFNVOEpWTFVRRDlEdUR3bDUySWpqZkV0cm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84MjA5OGItMGM1My00ZGYyLThhMzItZmJjMWUzZjdlOTJi LzEvdFNVOEpWTFVRRDlEdUR3bDUySWpqZkV0cm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApADbUOK9 q+TkaEvACicoZMYmKrKLY+XVvitU3M5nWuf+bapGUjbvBDmfIRdlsTWJMLE/nBfP j7AK3oLee4voxyRnl53bpWGxnbE8LeKrP7xR9wqm5UGKijNdmBuo6ixvQbjIJUke 2ibm8E2UppGfvzcaQc9NFrOH9GvBzKOmhp7cPtfuk/ZRHmUPqbdqye3Bn+m+FNI5 rRFCigESH0zhdkq+lERYnrry48S6vCiz7GNE+nOACrZYbwoo7W48Nm+hu1TXZ93c 7UKCP+Bbkq+CEQD51MhgQTFWIspBuVL499T/4G7aT5PmCtp3JHz1suxlocSqrsPp b302yXIQ23lBqw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:47 2026 by rpki-client