This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json) Hash identifier: X8NwxHgw1rL6rXsvsYIrq9ytCq5vfdEQ7ox3Yhhr4bQ= Subject key identifier: 57:82:98:AC:62:D5:EE:0D:C9:30:D0:98:69:BE:7F:71:DC:DD:2A:63 Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33 Certificate serial: 019C420F3BDD67E5F21FF4D6D64C8CA85510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft Manifest number: 05AB Signing time: Mon 09 Feb 2026 11:00:20 +0000 Manifest this update: Mon 09 Feb 2026 11:00:20 +0000 Manifest next update: Tue 10 Feb 2026 11:00:20 +0000 Files and hashes: 1: 6QKPReqPPvM-G5eDtotQxkQu3rg.roa (hash: +zfD9kQLYj/Bi7oedLx+ydKYavDQjQhsfviUHiEJA58=) 2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: budfsyjFIWfzc03GqKrlVOjFhYTgTtr21aiZ0xlPBr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:3b:dd:67:e5:f2:1f:f4:d6:d6:4c:8c:a8:55:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33 Validity Not Before: Feb 9 11:00:20 2026 GMT Not After : Feb 10 11:00:20 2026 GMT Subject: CN=578298ac62d5ee0dc930d09869be7f71dcdd2a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:7e:7a:a0:1e:cf:83:a3:f2:71:6e:52:a7: 2e:6a:c1:81:a0:a4:cc:ea:61:b8:1a:ae:db:83:1f: 24:4c:3b:d7:d8:c2:57:c0:9c:8f:97:7b:51:41:2f: 03:ad:ed:5f:71:21:b6:bf:d3:60:84:2b:a7:21:b9: 23:1c:03:54:86:cf:e8:ea:41:1a:69:0f:ab:fb:9b: 07:b9:92:c9:ce:05:59:cb:7a:1f:e7:05:fa:10:69: 97:d8:84:0c:4a:2f:30:ea:9f:95:ef:86:02:2d:02: a9:79:42:7c:e9:bf:0e:12:87:15:ae:9f:57:1f:bc: db:3d:47:79:5c:38:cc:3d:02:bd:f0:51:a5:d1:67: be:a5:f6:7e:b6:89:e3:4b:e9:a3:98:d5:76:3d:77: f7:ef:6e:9f:c1:85:d8:0a:67:45:3f:f9:00:ba:98: 62:6d:0c:66:ed:7b:31:10:85:25:10:e8:4c:b5:55: 02:fe:d7:43:1d:e9:13:52:a0:68:a9:ea:0d:57:10: 69:01:60:c1:2e:2b:3e:32:78:6e:13:2d:04:7f:fb: 98:d4:30:ce:28:40:9a:27:86:c4:7a:86:c5:a7:f0: f9:fd:27:5b:ab:62:36:2f:e7:98:c9:ed:60:51:f4: 2f:78:98:6b:24:d8:69:28:63:5b:8b:98:6b:05:3d: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:82:98:AC:62:D5:EE:0D:C9:30:D0:98:69:BE:7F:71:DC:DD:2A:63 X509v3 Authority Key Identifier: keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:91:4c:c6:f9:2a:de:33:4a:21:76:9f:20:88:a6:61:37:cd: d7:d6:08:b7:2e:b4:a8:eb:e4:d4:e4:26:68:74:65:f8:f8:05: 5e:3a:4d:53:8e:c9:a9:15:7d:fc:56:44:d6:56:fe:3b:08:4d: 19:89:fe:cb:33:a3:df:8b:5e:8e:e9:9b:a6:32:cd:ff:67:30: d5:e0:a4:d8:3d:0b:de:af:bd:7e:59:0c:de:74:7a:9c:38:ea: d2:53:1d:61:ec:76:87:53:f2:ba:22:8f:c3:96:b2:81:99:35: b1:8e:22:ae:dc:83:91:c6:21:15:ea:45:f7:02:f7:05:a7:ca: 3c:cf:cf:33:35:ac:72:26:33:b4:94:20:6b:4a:b4:64:3e:fd: 92:e6:0e:99:4d:26:51:18:9c:87:ab:9f:66:77:db:21:4f:9a: 2e:c5:65:49:ca:1b:0a:b7:20:da:63:de:84:c7:a4:63:23:4a: a2:be:3c:da:84:e2:03:8d:b9:a5:84:e5:ab:34:4e:94:3e:6a: 64:d9:48:21:6d:08:3b:2d:e2:c9:3d:b4:9d:6d:ba:25:40:26: be:fb:02:8f:1d:3b:95:38:08:f8:50:6d:c6:9d:10:8b:a3:dd: bf:e3:23:62:0a:47:f9:03:46:8a:90:8d:b9:4f:7c:42:45:da: c8:29:58:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzvdZ+XyH/TW1kyMqFUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZDg3ZmRjMjcyYWUwNTg2MTg3ODZlNzQxNzA3NTU3YmY0 ZTFhMzMwHhcNMjYwMjA5MTEwMDIwWhcNMjYwMjEwMTEwMDIwWjAzMTEwLwYDVQQD Eyg1NzgyOThhYzYyZDVlZTBkYzkzMGQwOTg2OWJlN2Y3MWRjZGQyYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1V+eqAez4Oj8nFuUqcuasGBoKTM 6mG4Gq7bgx8kTDvX2MJXwJyPl3tRQS8Dre1fcSG2v9NghCunIbkjHANUhs/o6kEa aQ+r+5sHuZLJzgVZy3of5wX6EGmX2IQMSi8w6p+V74YCLQKpeUJ86b8OEocVrp9X H7zbPUd5XDjMPQK98FGl0We+pfZ+tonjS+mjmNV2PXf3726fwYXYCmdFP/kAuphi bQxm7XsxEIUlEOhMtVUC/tdDHekTUqBoqeoNVxBpAWDBLis+MnhuEy0Ef/uY1DDO KECaJ4bEeobFp/D5/Sdbq2I2L+eYye1gUfQveJhrJNhpKGNbi5hrBT0bLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeCmKxi1e4NyTDQmGm+f3Hc3SpjMB8GA1UdIwQY MBaAFLXYf9wnKuBYYYeG50FwdVe/ThozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYt MTU2ZWRhMmI1NWI2LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYtMTU2ZWRhMmI1NWI2 LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZFMxvkq 3jNKIXafIIimYTfN19YIty60qOvk1OQmaHRl+PgFXjpNU47JqRV9/FZE1lb+OwhN GYn+yzOj34tejumbpjLN/2cw1eCk2D0L3q+9flkM3nR6nDjq0lMdYex2h1PyuiKP w5aygZk1sY4irtyDkcYhFepF9wL3BafKPM/PMzWsciYztJQga0q0ZD79kuYOmU0m URich6ufZnfbIU+aLsVlScobCrcg2mPehMekYyNKor482oTiA425pYTlqzROlD5q ZNlIIW0IOy3iyT20nW26JUAmvvsCjx07lTgI+FBtxp0Qi6Pdv+MjYgpH+QNGipCN uU98QkXayClY7g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:44 2026 by rpki-client