This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json) Hash identifier: OWAW8brQlNHVCIF5OmAcF4nWlM2n74GAzOjMJBAIzHE= Subject key identifier: 5D:AF:B1:1B:10:A7:1D:48:52:0D:AB:BD:B5:0C:DB:C9:33:FF:BF:0E Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe Certificate serial: 019C4246AB6F789818A472B697E997398BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:53 +0000 Manifest this update: Mon 09 Feb 2026 12:00:53 +0000 Manifest next update: Tue 10 Feb 2026 12:00:53 +0000 Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=) 2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: upel41s9kIzDUcp8qJ7QiKfnGhHKDwgXvy5p/2L9cqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:ab:6f:78:98:18:a4:72:b6:97:e9:97:39:8b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe Validity Not Before: Feb 9 12:00:53 2026 GMT Not After : Feb 10 12:00:53 2026 GMT Subject: CN=5dafb11b10a71d48520dabbdb50cdbc933ffbf0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:6e:63:d5:3e:f2:0c:c8:b7:b3:d9:42:94: 54:4b:56:fb:79:6f:91:47:e3:03:f4:bc:7e:5b:9b: 75:98:4b:27:6c:17:d5:27:fe:ed:2f:56:33:2d:66: 37:fe:69:75:3d:9c:9a:c3:b7:dc:db:e7:c4:c8:50: e8:84:65:c8:90:c6:a5:3c:c1:ed:9c:21:ba:87:96: 56:41:48:09:55:7b:a4:28:da:67:74:2d:64:4f:d5: 72:6f:d3:18:d4:7d:98:07:98:f2:ad:b6:00:12:46: a4:7f:02:f7:5e:79:df:4b:36:9a:51:8b:87:d7:45: c9:78:98:9d:71:c0:51:65:10:0d:fe:93:9d:72:f5: e7:16:1d:c8:37:d5:54:75:d6:dd:33:d5:21:ab:8e: c7:36:cf:f9:6e:56:99:ed:82:55:e0:f5:6a:a9:a5: be:87:8e:b5:b9:6c:21:ed:d4:e2:b6:29:c8:1c:52: a6:09:2c:02:e9:86:3e:8e:49:72:26:cc:5c:42:56: 46:54:ec:21:50:d8:da:26:b5:50:1a:b1:52:33:b9: 01:a3:a7:f0:73:6c:73:be:e5:33:29:80:5a:4d:54: 02:e9:00:e2:60:43:09:de:55:71:dc:a7:03:33:66: fa:3e:32:50:e1:04:26:66:60:62:86:fe:0c:68:86: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:B1:1B:10:A7:1D:48:52:0D:AB:BD:B5:0C:DB:C9:33:FF:BF:0E X509v3 Authority Key Identifier: keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:17:0d:08:d3:60:24:94:ed:90:cc:f5:2e:e3:0f:f2:25: 61:e8:27:38:ea:68:01:4f:e6:43:74:c8:11:7a:71:52:0d:06: 76:67:6e:68:43:56:b7:21:8d:96:5c:7f:b4:18:e1:58:04:c6: 4b:f5:0b:07:2e:f6:3f:b1:5c:42:0e:6a:dc:9a:67:be:b1:7e: 34:d0:e5:43:b5:14:ac:9f:e3:0c:af:a0:93:90:4b:37:9d:6d: 98:bf:c7:30:57:8a:0d:0f:2b:39:bd:59:91:7a:1e:ae:00:38: bf:d8:67:81:ff:34:63:d7:2a:4a:db:d9:19:c2:c2:c9:57:f9: 95:60:36:37:ae:10:b4:e3:a1:4a:54:4e:a9:23:3c:9f:65:7f: 4a:7a:57:25:75:06:18:d9:c7:bc:35:3e:c0:6a:11:0b:f1:3c: 00:9a:d9:95:04:25:3b:3a:2e:d8:63:b4:d0:d1:4d:6d:b6:20: 35:e6:e1:c4:8e:1a:65:f2:f8:f9:1f:03:29:02:51:64:90:28: 0d:9d:1d:cc:5a:71:fd:84:9f:b5:43:f3:a0:1d:ec:e7:b6:ce: d5:af:a4:5d:2e:b0:b9:0e:4f:8f:76:e3:79:57:fb:1a:b9:33: eb:ce:8a:ee:9f:4d:a4:04:c0:8d:53:9c:8f:c9:65:0c:bb:da: be:0e:36:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqtveJgYpHK2l+mXOYvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4 MjcyZmUwHhcNMjYwMjA5MTIwMDUzWhcNMjYwMjEwMTIwMDUzWjAzMTEwLwYDVQQD Eyg1ZGFmYjExYjEwYTcxZDQ4NTIwZGFiYmRiNTBjZGJjOTMzZmZiZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzxuY9U+8gzIt7PZQpRUS1b7eW+R R+MD9Lx+W5t1mEsnbBfVJ/7tL1YzLWY3/ml1PZyaw7fc2+fEyFDohGXIkMalPMHt nCG6h5ZWQUgJVXukKNpndC1kT9Vyb9MY1H2YB5jyrbYAEkakfwL3XnnfSzaaUYuH 10XJeJidccBRZRAN/pOdcvXnFh3IN9VUddbdM9Uhq47HNs/5blaZ7YJV4PVqqaW+ h461uWwh7dTitinIHFKmCSwC6YY+jklyJsxcQlZGVOwhUNjaJrVQGrFSM7kBo6fw c2xzvuUzKYBaTVQC6QDiYEMJ3lVx3KcDM2b6PjJQ4QQmZmBihv4MaIYeXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2vsRsQpx1IUg2rvbUM28kz/78OMB8GA1UdIwQY MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5 LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknUXDQjT YCSU7ZDM9S7jD/IlYegnOOpoAU/mQ3TIEXpxUg0GdmduaENWtyGNllx/tBjhWATG S/ULBy72P7FcQg5q3JpnvrF+NNDlQ7UUrJ/jDK+gk5BLN51tmL/HMFeKDQ8rOb1Z kXoergA4v9hngf80Y9cqStvZGcLCyVf5lWA2N64QtOOhSlROqSM8n2V/SnpXJXUG GNnHvDU+wGoRC/E8AJrZlQQlOzou2GO00NFNbbYgNebhxI4aZfL4+R8DKQJRZJAo DZ0dzFpx/YSftUPzoB3s57bO1a+kXS6wuQ5Pj3bjeVf7Grkz686K7p9NpATAjVOc j8llDLvavg42Og== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:25 2026 by rpki-client