This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json) Hash identifier: 4UCq2UdfPveJMXBwbmF9hQDQRAufxKs6qP2jLZ8I8wI= Subject key identifier: 94:DB:14:8E:05:68:DB:33:C9:C2:2A:06:93:2C:E3:6C:E1:A5:CF:AA Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60 Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660 Certificate serial: 019C420F59DB86F08B74BA7C0D0C6AE5448B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft Manifest number: 1237 Signing time: Mon 09 Feb 2026 11:00:27 +0000 Manifest this update: Mon 09 Feb 2026 11:00:27 +0000 Manifest next update: Tue 10 Feb 2026 11:00:27 +0000 Files and hashes: 1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=) 2: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: rnU5gPYR8BClBu6md1mHy9PJp9u6K40Di57tCrdTZ+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:59:db:86:f0:8b:74:ba:7c:0d:0c:6a:e5:44:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660 Validity Not Before: Feb 9 11:00:27 2026 GMT Not After : Feb 10 11:00:27 2026 GMT Subject: CN=94db148e0568db33c9c22a06932ce36ce1a5cfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b2:8a:31:28:3a:4c:cf:66:59:ab:11:da:b8: c3:af:af:e9:39:1a:7b:c7:f4:37:87:75:f3:2e:aa: 0e:f9:1b:cc:f8:36:11:16:66:d6:dc:03:92:d6:c5: f9:31:18:0b:dd:48:24:5c:0a:24:55:5f:f6:91:4e: 79:da:44:ff:88:e4:90:a7:f1:ac:78:89:1e:56:42: c0:e1:15:f6:d5:43:34:25:55:1e:d0:a1:73:a9:b0: 23:67:07:82:0b:1d:10:28:f7:3d:cb:1f:d3:34:d3: d8:78:32:dc:9a:17:69:7f:e4:09:49:37:c3:c9:7d: 40:f7:dd:99:3d:5a:89:eb:ec:99:0d:a2:c5:2d:3a: 60:0d:a9:a8:5a:49:39:13:dc:98:7d:9a:b3:76:f7: 5d:97:3e:c6:80:03:b8:b7:19:29:12:0f:49:f7:c8: 65:bf:1f:32:63:62:57:5a:05:5f:04:f6:71:ee:16: f6:3b:02:ee:37:20:fd:03:a9:96:3e:a4:60:10:e5: 13:f5:14:ac:13:b7:71:1f:fe:24:d4:87:ee:0d:35: 8b:0b:73:88:6c:4e:55:87:df:ed:96:fd:a2:1c:e2: 6b:92:60:aa:fb:f2:00:e4:f5:42:ee:e5:e1:4f:a9: 9d:31:0c:77:19:c2:37:c3:b3:05:d0:3a:10:b8:f0: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:14:8E:05:68:DB:33:C9:C2:2A:06:93:2C:E3:6C:E1:A5:CF:AA X509v3 Authority Key Identifier: keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5b:17:c4:1b:7c:81:87:ee:18:8b:9f:ab:f5:4f:4c:78:f9: 55:f4:95:42:9e:a1:f5:2c:5d:9a:99:d4:bc:ac:28:94:0b:21: 6f:7a:5e:16:18:06:1a:45:bf:b9:3c:22:de:f0:8e:50:71:f6: df:2e:c6:1d:ae:53:99:e2:1f:cd:6f:db:32:3e:94:b2:10:d9: 1e:81:19:e6:60:10:9e:b6:b0:14:2b:f4:76:b9:14:8b:d3:9c: 2f:ee:60:66:e6:ce:16:d5:f2:aa:d1:7e:d5:39:28:9b:a1:c6: f5:b9:12:5d:0d:62:77:1b:d0:90:7f:94:a1:ac:a1:08:c6:ab: 10:d1:bd:6a:91:9c:48:08:0a:cc:a0:05:76:1a:ce:97:49:22: 59:a2:c6:25:1c:45:46:64:fe:7a:91:52:7b:47:5b:b3:0e:d8: 51:dd:b1:c8:33:9b:5d:ea:81:7d:52:d0:ea:fc:00:c0:67:eb: a4:a5:af:bf:d2:07:03:b1:ab:74:20:d9:a3:3c:25:11:bb:2f: 7b:b3:d1:79:65:d5:da:ed:42:39:94:46:2e:7e:9a:f9:b8:a9: 9b:43:3b:99:c5:37:b8:9e:32:d4:63:b2:e1:ea:4b:91:f5:5a: ab:13:e4:29:5b:05:9b:ad:05:d2:03:d2:22:dc:29:aa:cc:bc: 42:fc:c9:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1nbhvCLdLp8DQxq5USLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4 NGQ2NjAwHhcNMjYwMjA5MTEwMDI3WhcNMjYwMjEwMTEwMDI3WjAzMTEwLwYDVQQD Eyg5NGRiMTQ4ZTA1NjhkYjMzYzljMjJhMDY5MzJjZTM2Y2UxYTVjZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rKKMSg6TM9mWasR2rjDr6/pORp7 x/Q3h3XzLqoO+RvM+DYRFmbW3AOS1sX5MRgL3UgkXAokVV/2kU552kT/iOSQp/Gs eIkeVkLA4RX21UM0JVUe0KFzqbAjZweCCx0QKPc9yx/TNNPYeDLcmhdpf+QJSTfD yX1A992ZPVqJ6+yZDaLFLTpgDamoWkk5E9yYfZqzdvddlz7GgAO4txkpEg9J98hl vx8yY2JXWgVfBPZx7hb2OwLuNyD9A6mWPqRgEOUT9RSsE7dxH/4k1IfuDTWLC3OI bE5Vh9/tlv2iHOJrkmCq+/IA5PVC7uXhT6mdMQx3GcI3w7MF0DoQuPDbLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTbFI4FaNszycIqBpMs42zhpc+qMB8GA1UdIwQY MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0 LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVsXxBt8 gYfuGIufq/VPTHj5VfSVQp6h9SxdmpnUvKwolAshb3peFhgGGkW/uTwi3vCOUHH2 3y7GHa5TmeIfzW/bMj6UshDZHoEZ5mAQnrawFCv0drkUi9OcL+5gZubOFtXyqtF+ 1Tkom6HG9bkSXQ1idxvQkH+UoayhCMarENG9apGcSAgKzKAFdhrOl0kiWaLGJRxF RmT+epFSe0dbsw7YUd2xyDObXeqBfVLQ6vwAwGfrpKWvv9IHA7GrdCDZozwlEbsv e7PReWXV2u1COZRGLn6a+bipm0M7mcU3uJ4y1GOy4epLkfVaqxPkKVsFm60F0gPS Itwpqsy8QvzJLA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:36 2026 by rpki-client