This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json) Hash identifier: HYSHF+A7w2ndmM7EL6nxbpu2HQPMZlg0bX49uzi4xQw= Subject key identifier: EA:AA:CE:9B:EA:EB:60:75:2E:AA:86:F7:CF:9A:4E:A2:3B:29:E6:6E Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Certificate serial: 019C43FE5B7184B6A90C8A20A33FBBB1EFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 20:01:08 +0000 Manifest this update: Mon 09 Feb 2026 20:01:08 +0000 Manifest next update: Tue 10 Feb 2026 20:01:08 +0000 Files and hashes: 1: jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa (hash: ErKY/69zjGb+XdFCBodBK2CXOv9JRDcTgwXpmXZI5JY=) 2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: FYekokHZ/LT6pSv8FkTVIoXkK0ignkLD+HwAJBJzts8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:5b:71:84:b6:a9:0c:8a:20:a3:3f:bb:b1:ef:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Validity Not Before: Feb 9 20:01:08 2026 GMT Not After : Feb 10 20:01:08 2026 GMT Subject: CN=eaaace9beaeb60752eaa86f7cf9a4ea23b29e66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:26:04:41:9a:68:ce:42:97:3f:92:f2:fe: 4c:28:db:e9:ee:f0:50:7e:9c:30:b2:b6:5d:2b:17: ef:18:01:d1:c7:c3:71:3f:a4:16:fd:3f:de:06:be: bc:50:ac:17:03:05:b1:fa:3d:8b:49:33:ef:8e:ea: 35:25:e2:4a:10:ec:48:50:86:6a:8e:2d:ce:4d:1c: a3:08:a6:a2:ac:40:59:97:28:ba:84:8d:18:97:e9: 5a:af:8f:41:4c:68:a0:4c:99:d4:01:27:57:9b:10: 15:ab:0f:8f:d8:5f:a6:86:fc:96:5d:52:d3:59:25: 29:c5:26:0b:3e:01:f5:95:ef:01:2f:5e:04:91:c4: a4:1e:a6:cf:18:9c:21:7f:cc:ca:7f:1b:1f:8a:d5: fd:08:8b:5b:aa:08:f1:ee:0a:bd:4f:fc:b6:14:aa: 1e:74:73:7a:d0:42:a9:d0:68:f7:a2:57:e6:f7:f0: c5:82:57:aa:dd:1a:b8:5a:35:f3:51:33:d4:f4:92: 11:1a:25:e3:af:a0:0e:c4:cf:d4:14:fc:5c:ba:61: b1:32:2f:07:e3:71:50:e0:94:1c:51:20:f9:a6:f2: 58:4b:f7:24:f7:0c:76:d2:12:d9:d2:ab:71:fe:d3: 7a:04:f1:1c:34:a1:a9:36:13:32:9c:79:16:9b:a7: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:CE:9B:EA:EB:60:75:2E:AA:86:F7:CF:9A:4E:A2:3B:29:E6:6E X509v3 Authority Key Identifier: keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:33:21:57:f7:08:86:9f:ff:b6:9f:10:97:30:2e:f2:20:74: 69:1a:7c:bc:44:45:08:0e:62:59:f1:a7:98:e9:96:c9:b6:cf: e4:f5:84:f2:1e:72:ed:01:9b:1c:b4:c6:a2:b3:d8:b9:da:d7: c8:d1:d3:3c:4d:0f:a8:ff:ee:3a:ea:ac:6e:ce:8a:ee:37:bf: 27:c9:68:4f:33:fb:f0:30:5d:c3:94:2b:ff:9e:04:11:93:6e: 9c:bc:8c:a7:42:23:d8:22:33:5a:3c:23:83:2b:cd:61:ee:8c: 84:58:e7:5a:cb:e4:90:38:0b:57:4e:87:42:e5:03:17:36:63: 9f:92:d2:0e:2e:f1:f6:d8:c1:70:ad:ce:ae:31:3f:94:4b:8b: fe:8d:95:e2:8e:92:de:f6:0d:2f:09:a2:86:cd:0d:1e:39:e3: d5:51:59:d6:53:e9:2f:c2:c0:66:f0:7d:dd:1d:77:41:2c:bb: b9:05:75:b6:a8:fe:63:1b:3b:60:51:84:17:38:96:10:1a:8c: fe:07:b9:b2:17:52:2a:75:89:93:b6:21:81:be:61:8e:11:df: e3:46:98:df:c4:72:18:bf:2e:6b:2c:c1:21:8d:74:8f:78:fc: 7d:d8:cf:03:d6:e4:cd:94:bd:83:80:5a:09:88:33:8e:34:8b: 50:91:2d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ltxhLapDIogoz+7se/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmE0ZDA4MWIzNjg4N2YzZTVjYTY1MzdmNzQ2OWVlZTIx ZDcxYWUwHhcNMjYwMjA5MjAwMTA4WhcNMjYwMjEwMjAwMTA4WjAzMTEwLwYDVQQD EyhlYWFhY2U5YmVhZWI2MDc1MmVhYTg2ZjdjZjlhNGVhMjNiMjllNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqUmBEGaaM5Clz+S8v5MKNvp7vBQ fpwwsrZdKxfvGAHRx8NxP6QW/T/eBr68UKwXAwWx+j2LSTPvjuo1JeJKEOxIUIZq ji3OTRyjCKairEBZlyi6hI0Yl+lar49BTGigTJnUASdXmxAVqw+P2F+mhvyWXVLT WSUpxSYLPgH1le8BL14EkcSkHqbPGJwhf8zKfxsfitX9CItbqgjx7gq9T/y2FKoe dHN60EKp0Gj3olfm9/DFgleq3Rq4WjXzUTPU9JIRGiXjr6AOxM/UFPxcumGxMi8H 43FQ4JQcUSD5pvJYS/ck9wx20hLZ0qtx/tN6BPEcNKGpNhMynHkWm6e/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqqzpvq62B1LqqG98+aTqI7KeZuMB8GA1UdIwQY MBaAFLT6TQgbNoh/PlymU390ae7iHXGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQt ODYzZGFlY2ZjMmU4LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQtODYzZGFlY2ZjMmU4 LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTMhV/cI hp//tp8QlzAu8iB0aRp8vERFCA5iWfGnmOmWybbP5PWE8h5y7QGbHLTGorPYudrX yNHTPE0PqP/uOuqsbs6K7je/J8loTzP78DBdw5Qr/54EEZNunLyMp0Ij2CIzWjwj gyvNYe6MhFjnWsvkkDgLV06HQuUDFzZjn5LSDi7x9tjBcK3OrjE/lEuL/o2V4o6S 3vYNLwmihs0NHjnj1VFZ1lPpL8LAZvB93R13QSy7uQV1tqj+Yxs7YFGEFziWEBqM /ge5shdSKnWJk7Yhgb5hjhHf40aY38RyGL8uayzBIY10j3j8fdjPA9bkzZS9g4Ba CYgzjjSLUJEtrw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:57 2026 by rpki-client