This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json) Hash identifier: ArriBDrLykV0NuNro4zQXqRVRNhmeZwOTTMCDWvo4s4= Subject key identifier: 86:1F:A8:89:66:AB:8F:A9:63:51:82:D5:22:18:9F:3B:69:F2:2F:9B Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Certificate serial: 019C438FEBA86C6F5C8BED02445E73669A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft Manifest number: 16C2 Signing time: Mon 09 Feb 2026 18:00:31 +0000 Manifest this update: Mon 09 Feb 2026 18:00:31 +0000 Manifest next update: Tue 10 Feb 2026 18:00:31 +0000 Files and hashes: 1: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: yIxJxWT+ITvT5JN0JA4SbuaPKYgMoLTTm92136zw6YQ=) 2: w6PRimv4AQwUjZljEFUbn9_lMpE.roa (hash: 1BAWM7GxFGhcr0Nj+ZV21NpmZtGOTmrrpW3/r3X5CNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:eb:a8:6c:6f:5c:8b:ed:02:44:5e:73:66:9a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Validity Not Before: Feb 9 18:00:31 2026 GMT Not After : Feb 10 18:00:31 2026 GMT Subject: CN=861fa88966ab8fa9635182d522189f3b69f22f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:bb:5b:d6:08:a4:7a:70:82:70:13:ce:f3: d3:bd:dd:45:5e:2f:3d:90:de:c9:33:af:6f:a9:5b: 7d:c4:3c:a3:f9:b3:18:40:75:2a:25:76:2f:45:6d: aa:c4:7d:7d:e6:cf:2b:46:a2:2a:34:15:01:ad:aa: 47:02:8f:e4:15:3a:96:83:8f:22:1f:dc:5e:40:cd: 8f:29:bf:fc:a3:a1:4d:92:13:46:69:aa:1a:91:0a: c1:8f:96:68:bc:06:e3:d9:64:2a:bc:7c:e3:96:d9: a2:f4:d9:a8:ec:59:df:f6:e2:42:71:87:63:d0:01: 7a:00:44:9b:7b:30:d2:53:79:da:e6:eb:cd:4f:13: a9:a2:5f:35:04:49:9a:1e:f5:15:d2:ab:fe:b3:08: 7c:3d:2a:92:92:00:97:bb:e7:26:63:3e:73:26:0a: 3f:db:8b:fc:5d:66:69:98:57:a1:ab:a2:a8:57:10: 6a:06:58:42:31:69:25:35:57:1f:b6:fd:84:fb:4f: 0f:f2:bb:50:a9:51:0c:4b:b5:09:c4:8c:8b:79:53: be:bb:b8:47:6b:9b:89:95:ba:53:89:95:5c:c2:73: ac:23:36:96:b5:69:b2:0c:52:3a:29:c7:db:66:3d: c7:2d:3e:0a:7f:55:12:0b:36:19:ce:39:5f:30:4f: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:A8:89:66:AB:8F:A9:63:51:82:D5:22:18:9F:3B:69:F2:2F:9B X509v3 Authority Key Identifier: keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5b:cf:cd:5c:7e:74:25:b8:df:81:15:57:87:1a:d3:c1:ec: 65:df:97:23:73:51:2a:85:70:84:61:3a:7a:a3:2c:79:79:48: d2:a9:35:46:9a:a5:00:e6:49:59:09:ce:35:c2:77:9f:71:00: ba:23:e2:e9:6b:f0:95:06:68:ed:b8:37:16:31:96:5d:cb:ae: 97:de:30:5b:82:f5:0a:3e:6f:c8:88:13:d6:db:4f:45:a5:1b: 3d:0f:6e:9b:6d:46:0a:69:e7:eb:74:82:b3:60:35:98:d4:e7: 8e:cf:db:87:53:e9:fa:a3:00:4c:9a:b9:ef:5c:9b:fc:d5:70: c8:3c:18:8b:15:c0:4d:f7:bc:b8:30:a5:2b:cc:42:22:77:d8: 2b:83:64:ad:74:c6:16:69:5d:4a:1c:da:7b:5c:23:e1:1f:07: 8d:db:89:60:b0:4e:d5:85:5a:3f:7a:60:9a:ff:44:d3:ec:f3: 67:a1:a3:b3:fd:5d:ac:c6:ca:3a:3f:f4:10:81:c9:9f:e7:ed: 0d:07:69:61:41:f8:41:c7:d5:2a:47:9f:d3:6f:89:c5:0a:4d: 38:77:6a:e0:f0:5f:8c:68:b8:7a:29:ba:5f:41:98:79:b7:22: 42:78:bf:db:49:23:5b:63:ab:9e:d0:81:b7:cc:aa:18:f4:84: cd:0b:3b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+uobG9ci+0CRF5zZppxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmYzYmM5OWE3OTUwM2UwOTc1NzQ3N2U4ZWY2NDNlMTE4 ODZjOGIwHhcNMjYwMjA5MTgwMDMxWhcNMjYwMjEwMTgwMDMxWjAzMTEwLwYDVQQD Eyg4NjFmYTg4OTY2YWI4ZmE5NjM1MTgyZDUyMjE4OWYzYjY5ZjIyZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ+7W9YIpHpwgnATzvPTvd1FXi89 kN7JM69vqVt9xDyj+bMYQHUqJXYvRW2qxH195s8rRqIqNBUBrapHAo/kFTqWg48i H9xeQM2PKb/8o6FNkhNGaaoakQrBj5ZovAbj2WQqvHzjltmi9Nmo7Fnf9uJCcYdj 0AF6AESbezDSU3na5uvNTxOpol81BEmaHvUV0qv+swh8PSqSkgCXu+cmYz5zJgo/ 24v8XWZpmFehq6KoVxBqBlhCMWklNVcftv2E+08P8rtQqVEMS7UJxIyLeVO+u7hH a5uJlbpTiZVcwnOsIzaWtWmyDFI6KcfbZj3HLT4Kf1USCzYZzjlfME9cxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYfqIlmq4+pY1GC1SIYnztp8i+bMB8GA1UdIwQY MBaAFE8vO8maeVA+CXV0d+jvZD4RiGyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzct NTFlNGJiYTZiZjViLzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzctNTFlNGJiYTZiZjVi LzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVvPzVx+ dCW434EVV4ca08HsZd+XI3NRKoVwhGE6eqMseXlI0qk1RpqlAOZJWQnONcJ3n3EA uiPi6WvwlQZo7bg3FjGWXcuul94wW4L1Cj5vyIgT1ttPRaUbPQ9um21GCmnn63SC s2A1mNTnjs/bh1Pp+qMATJq571yb/NVwyDwYixXATfe8uDClK8xCInfYK4NkrXTG FmldShzae1wj4R8HjduJYLBO1YVaP3pgmv9E0+zzZ6Gjs/1drMbKOj/0EIHJn+ft DQdpYUH4QcfVKkef02+JxQpNOHdq4PBfjGi4eim6X0GYebciQni/20kjW2OrntCB t8yqGPSEzQs7+A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:19:39 2026 by rpki-client