This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json) Hash identifier: sRQGPrLf1pxXGR60XNJR7EVtaPrfqyFau18Z86Ikr80= Subject key identifier: 20:5B:34:80:61:67:79:AE:8B:66:7A:CA:DB:02:75:AF:66:AC:7D:B4 Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9 Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9 Certificate serial: 019C43226B44B67070FC5CF794AF03203117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft Manifest number: 10A7 Signing time: Mon 09 Feb 2026 16:00:54 +0000 Manifest this update: Mon 09 Feb 2026 16:00:54 +0000 Manifest next update: Tue 10 Feb 2026 16:00:54 +0000 Files and hashes: 1: 0dkxclF1U6vYr5lj_eZjUfz7Azc.roa (hash: YJxaOvLCg9PJXa43CpA/uzG5+07fOluR8wxwPEngEDw=) 2: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: Z2AHe+mi0h2tqBAOK5Ld6mPe7uVv7XFNkveAVQkOvrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6b:44:b6:70:70:fc:5c:f7:94:af:03:20:31:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9 Validity Not Before: Feb 9 16:00:54 2026 GMT Not After : Feb 10 16:00:54 2026 GMT Subject: CN=205b3480616779ae8b667acadb0275af66ac7db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:8e:f3:13:67:57:2b:96:77:80:31:fa:b5: 20:e3:a6:69:4d:e5:bd:fb:99:54:04:da:7e:ef:00: 67:46:34:64:ec:4f:46:3e:44:1b:01:f8:07:11:d3: f1:6b:15:e3:dc:db:43:94:c4:13:72:bd:a3:90:41: 69:87:2f:bb:89:f5:a6:79:f2:87:3b:3b:65:31:87: 6c:35:23:ef:aa:02:eb:d7:02:71:88:b5:99:d8:cd: 5b:05:a8:8e:d0:d3:ec:56:0e:c5:bf:06:17:e0:13: f3:f5:39:61:2c:50:5a:b2:33:d3:b1:cb:2e:b3:b0: 7a:9b:c4:3e:d3:ab:6c:31:f3:d0:fe:83:da:99:e7: 50:96:b1:01:3b:25:b4:8f:ce:84:3f:fb:4f:42:76: ad:a5:19:29:d1:bd:d8:60:cc:59:8e:7d:b2:96:2e: 1d:ce:33:4f:a0:8e:84:d8:52:9f:56:ae:3a:06:53: 30:b8:a5:a3:41:cb:45:35:ad:9e:03:62:d4:8b:5a: 4e:44:bd:df:6d:19:24:1e:46:98:69:b4:6b:7f:d1: 4d:c9:25:48:c5:03:3f:9b:8a:b8:15:a2:9e:1a:4a: c8:f3:b1:7a:a2:a5:08:4a:c6:11:24:6d:04:e0:5d: 6c:61:bb:cd:da:7b:57:2f:48:78:ba:05:c1:4c:b5: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5B:34:80:61:67:79:AE:8B:66:7A:CA:DB:02:75:AF:66:AC:7D:B4 X509v3 Authority Key Identifier: keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:7f:37:2d:ae:ea:76:fa:9c:7d:bb:f0:3f:61:18:c6:ba: 9a:3b:a2:16:0e:8c:d7:62:dc:7a:59:0e:2f:88:89:f7:e3:d4: 28:f3:43:bb:53:98:77:00:20:73:f4:db:7d:d0:13:e2:d7:52: 43:8c:d7:51:b9:fa:96:14:3e:e6:15:f5:49:e6:b5:ec:6a:75: df:17:68:d0:4d:95:8c:7b:6b:a4:70:24:2f:7f:f2:af:b2:19: 53:f2:c3:cf:53:6f:e0:56:a2:cb:bd:b3:94:0c:78:3b:3a:68: 36:9e:02:33:0f:5b:b4:95:a6:eb:53:d9:d4:33:37:ef:a1:4a: 9b:8f:90:08:a6:10:86:cb:fb:68:15:d8:b8:8c:5d:07:dc:0c: 3e:9a:1e:75:8a:89:8a:60:92:95:a2:a6:93:42:05:99:93:b7: 0f:45:f0:16:e2:89:e4:99:bc:65:67:47:55:ab:47:e1:95:3c: 87:63:2a:7b:78:6f:15:e6:d6:66:c7:09:b4:f1:d1:aa:cb:df: a4:f3:1f:ca:79:a4:ff:41:cd:41:86:c4:31:38:6f:cc:fb:24: 30:dc:f7:1b:c0:5b:9b:8a:ae:58:ff:4b:3d:fc:e5:01:68:3e: 7f:90:41:c0:eb:41:6d:ec:8e:df:05:ff:90:15:d9:f1:8a:9e: 95:34:9b:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImtEtnBw/Fz3lK8DIDEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1 ZTJmZTkwHhcNMjYwMjA5MTYwMDU0WhcNMjYwMjEwMTYwMDU0WjAzMTEwLwYDVQQD EygyMDViMzQ4MDYxNjc3OWFlOGI2NjdhY2FkYjAyNzVhZjY2YWM3ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6WO8xNnVyuWd4Ax+rUg46ZpTeW9 +5lUBNp+7wBnRjRk7E9GPkQbAfgHEdPxaxXj3NtDlMQTcr2jkEFphy+7ifWmefKH OztlMYdsNSPvqgLr1wJxiLWZ2M1bBaiO0NPsVg7FvwYX4BPz9TlhLFBasjPTscsu s7B6m8Q+06tsMfPQ/oPamedQlrEBOyW0j86EP/tPQnatpRkp0b3YYMxZjn2yli4d zjNPoI6E2FKfVq46BlMwuKWjQctFNa2eA2LUi1pORL3fbRkkHkaYabRrf9FNySVI xQM/m4q4FaKeGkrI87F6oqUISsYRJG0E4F1sYbvN2ntXL0h4ugXBTLUjAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBbNIBhZ3mui2Z6ytsCda9mrH20MB8GA1UdIwQY MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt NTU3OTVjMjZlYWNhLzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbah/Ny2u 6nb6nH278D9hGMa6mjuiFg6M12LcelkOL4iJ9+PUKPNDu1OYdwAgc/TbfdAT4tdS Q4zXUbn6lhQ+5hX1Sea17Gp13xdo0E2VjHtrpHAkL3/yr7IZU/LDz1Nv4Faiy72z lAx4OzpoNp4CMw9btJWm61PZ1DM376FKm4+QCKYQhsv7aBXYuIxdB9wMPpoedYqJ imCSlaKmk0IFmZO3D0XwFuKJ5Jm8ZWdHVatH4ZU8h2Mqe3hvFebWZscJtPHRqsvf pPMfynmk/0HNQYbEMThvzPskMNz3G8Bbm4quWP9LPfzlAWg+f5BBwOtBbeyO3wX/ kBXZ8YqelTSbrg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:09 2026 by rpki-client