This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json) Hash identifier: 4hPW8i9VMKfk4vjFv+eedG30S6VMAPhyeh7Vd3eU6E8= Subject key identifier: 8A:BF:D5:9C:68:25:7D:3A:C2:F9:ED:76:4F:15:E4:3A:BA:E2:77:B7 Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Certificate serial: 019C416A881EE934DF589E7DB84C0CD8F25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 08:00:26 +0000 Manifest this update: Mon 09 Feb 2026 08:00:26 +0000 Manifest next update: Tue 10 Feb 2026 08:00:26 +0000 Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=) 2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: kQj4dr3sOOZ839T+sRkA+4YoIPFXfir8PY1LsTvUTSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:88:1e:e9:34:df:58:9e:7d:b8:4c:0c:d8:f2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Validity Not Before: Feb 9 08:00:26 2026 GMT Not After : Feb 10 08:00:26 2026 GMT Subject: CN=8abfd59c68257d3ac2f9ed764f15e43abae277b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:50:9b:59:08:8b:77:98:06:28:9c:80:e9: e1:f3:b7:c9:c6:11:b6:55:6d:2b:4a:22:71:3d:22: d4:af:4a:a1:38:ba:30:c6:9d:fa:8c:ed:24:2a:7a: 38:84:ba:36:a0:2b:06:ee:9d:60:c7:d8:b7:7c:82: 8e:1e:8f:f2:63:62:2d:9f:ec:ed:93:68:1d:9c:28: f9:7d:c5:cd:53:fe:6c:3d:27:d9:c1:e1:f9:a7:92: 39:3b:b2:66:92:ca:00:d2:12:0d:10:2e:32:10:d9: 4a:3d:f5:f5:0e:d9:cb:53:48:02:08:c6:ed:46:57: 95:29:a5:58:7d:19:d7:e3:fe:12:8f:a2:9b:3f:8b: d9:e6:ea:e1:89:fe:69:5c:93:3d:d1:56:4e:d3:c7: 5d:a5:f4:df:26:a9:12:e7:83:cf:ec:d1:fe:58:bd: 89:5f:4d:e0:ae:00:6b:a2:10:67:89:36:4f:e5:17: bf:92:0a:e3:94:59:d3:a6:ee:d2:6e:ef:65:33:96: 66:5b:51:cf:21:88:3e:75:55:80:2a:bc:fb:c4:36: 4a:9f:7f:fc:34:93:63:4f:aa:21:0f:1b:db:e1:26: 43:77:53:fd:0c:a7:48:87:12:ed:f4:86:84:a5:1b: 0c:94:20:21:c8:87:0d:12:cb:6a:69:b2:c9:52:7e: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:D5:9C:68:25:7D:3A:C2:F9:ED:76:4F:15:E4:3A:BA:E2:77:B7 X509v3 Authority Key Identifier: keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5b:f0:41:05:06:51:fe:ac:10:69:f9:ae:6d:b0:f4:19:30: 6d:3d:a6:ce:44:95:21:a7:57:28:59:36:06:be:f7:27:00:16: 3a:72:be:7e:52:0e:09:d3:b7:97:e8:f7:2b:82:de:50:86:85: a7:16:6f:a4:85:64:82:27:fd:dd:07:64:58:68:81:ad:b0:34: f0:84:53:04:a0:08:ab:6a:94:7a:92:49:af:aa:84:bb:56:44: b3:ab:6e:7c:51:cb:35:33:c6:44:e1:16:dd:23:30:30:1e:6d: 80:10:d4:3e:29:a3:0a:62:4e:43:f8:78:4a:48:6e:24:2b:00: bf:73:e3:0c:db:23:04:b0:fb:58:c2:92:60:f7:03:52:f7:6b: d4:2c:b0:59:13:dd:88:8f:40:aa:8d:78:07:17:3e:cc:91:a5: 48:95:1b:2b:cb:29:20:8a:85:f2:a8:b7:6f:9e:f0:c3:a8:90: 8a:35:1a:93:30:8b:b8:29:b8:09:ac:d7:46:22:f9:2b:64:41: 54:70:fb:ab:fa:09:8e:e2:32:1d:9a:ff:bf:f0:af:28:a0:b0: 4e:b7:f3:12:86:5f:7e:c2:5f:89:34:4a:73:40:8c:02:45:0e: d1:bd:0f:3f:00:a8:56:d4:fc:66:eb:d4:bc:77:fd:c1:f8:c3: c5:fa:d0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBaoge6TTfWJ59uEwM2PJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi ZTJiZDAwHhcNMjYwMjA5MDgwMDI2WhcNMjYwMjEwMDgwMDI2WjAzMTEwLwYDVQQD Eyg4YWJmZDU5YzY4MjU3ZDNhYzJmOWVkNzY0ZjE1ZTQzYWJhZTI3N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBxQm1kIi3eYBiicgOnh87fJxhG2 VW0rSiJxPSLUr0qhOLowxp36jO0kKno4hLo2oCsG7p1gx9i3fIKOHo/yY2Itn+zt k2gdnCj5fcXNU/5sPSfZweH5p5I5O7JmksoA0hINEC4yENlKPfX1DtnLU0gCCMbt RleVKaVYfRnX4/4Sj6KbP4vZ5urhif5pXJM90VZO08ddpfTfJqkS54PP7NH+WL2J X03grgBrohBniTZP5Re/kgrjlFnTpu7Sbu9lM5ZmW1HPIYg+dVWAKrz7xDZKn3/8 NJNjT6ohDxvb4SZDd1P9DKdIhxLt9IaEpRsMlCAhyIcNEstqabLJUn7l4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq/1ZxoJX06wvntdk8V5Dq64ne3MB8GA1UdIwQY MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3 LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1vwQQUG Uf6sEGn5rm2w9BkwbT2mzkSVIadXKFk2Br73JwAWOnK+flIOCdO3l+j3K4LeUIaF pxZvpIVkgif93QdkWGiBrbA08IRTBKAIq2qUepJJr6qEu1ZEs6tufFHLNTPGROEW 3SMwMB5tgBDUPimjCmJOQ/h4SkhuJCsAv3PjDNsjBLD7WMKSYPcDUvdr1CywWRPd iI9Aqo14Bxc+zJGlSJUbK8spIIqF8qi3b57ww6iQijUakzCLuCm4CazXRiL5K2RB VHD7q/oJjuIyHZr/v/CvKKCwTrfzEoZffsJfiTRKc0CMAkUO0b0PPwCoVtT8ZuvU vHf9wfjDxfrQrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:35 2026 by rpki-client