This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json) Hash identifier: H2nGh3FVXD7qg+McoByY1AfJq9unj6bKZDv/OrDkdtA= Subject key identifier: 96:D8:5D:E7:CC:B3:98:D7:A4:4F:85:85:D0:80:BA:EE:9F:A0:5B:BE Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Certificate serial: 019C42B428411CD9739B2C6C657B676352D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft Manifest number: 13C5 Signing time: Mon 09 Feb 2026 14:00:28 +0000 Manifest this update: Mon 09 Feb 2026 14:00:28 +0000 Manifest next update: Tue 10 Feb 2026 14:00:28 +0000 Files and hashes: 1: HMo_pRRnRqJZqr644LvLDKbEvF0.roa (hash: iH4M3snvNj6PFU+GFjuRkofzdO0jGEo8rVExACKxHtk=) 2: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: KMSG0rzGH3LKilwaDgzcRJJfphNRM4j5sfqXy7NAKL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:28:41:1c:d9:73:9b:2c:6c:65:7b:67:63:52:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Validity Not Before: Feb 9 14:00:28 2026 GMT Not After : Feb 10 14:00:28 2026 GMT Subject: CN=96d85de7ccb398d7a44f8585d080baee9fa05bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:c3:8e:9b:d4:60:c8:b8:d2:ca:d8:3e:8c: a8:8f:bf:83:98:75:04:a9:fe:ec:aa:f2:8d:8c:2a: e2:c4:ca:2c:07:79:37:2a:3c:53:65:0f:15:f1:59: 93:b7:3d:a3:f1:c5:f9:2d:38:5a:5d:f4:ba:40:ae: 72:3b:6a:08:b1:b1:5b:9f:21:52:f4:da:53:30:0a: d3:13:e5:3f:f6:e3:2c:6e:f3:28:2a:44:05:b2:f0: ef:a8:c1:47:7a:85:96:36:90:0a:5e:ac:75:c0:d9: ba:48:4c:8d:60:39:05:66:c0:4b:e3:ae:28:33:82: 00:ea:89:f6:22:28:34:06:e6:51:11:01:e0:92:e1: 1d:b8:40:bc:7a:65:6a:d5:47:a9:15:87:54:ff:98: 56:cd:a6:e3:ab:58:4f:5e:8e:6d:d9:cc:d3:42:7e: 31:0f:fc:03:3f:77:d2:29:40:98:c3:33:9c:ca:73: 2b:33:4b:d9:5e:eb:70:b3:c2:ea:4d:0a:71:5d:17: ba:01:a5:72:e1:ae:3b:04:af:12:2e:22:2d:d8:47: 39:b7:eb:df:85:e5:67:82:58:7f:a7:c2:e8:11:64: f9:84:16:05:04:5f:81:82:8b:e7:9e:23:e5:5b:05: 96:29:7f:a1:df:84:3c:7a:2c:15:15:e7:1e:99:1a: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D8:5D:E7:CC:B3:98:D7:A4:4F:85:85:D0:80:BA:EE:9F:A0:5B:BE X509v3 Authority Key Identifier: keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ce:ce:c9:d2:48:4e:a6:6e:9b:7d:7a:f8:90:e8:e4:9b:73: d0:41:60:98:05:8b:ed:64:2b:16:15:fb:ed:00:d3:71:75:c1: 49:20:45:69:b7:67:c9:62:b4:01:a8:22:ea:90:43:b7:6f:0f: 58:ac:15:11:2a:79:68:0a:1f:84:ec:a9:aa:d6:37:ab:b4:4a: 24:76:ec:15:91:61:ce:82:64:44:c2:4b:1a:62:ce:df:de:30: e7:37:14:90:2e:be:85:08:da:1f:9d:88:a8:d4:a1:94:55:1d: f9:a6:d1:f8:da:f2:83:bd:43:c6:42:ab:cb:19:da:d5:a2:b8: f0:b4:13:f9:ee:65:b5:3a:90:9d:9c:a9:11:e6:58:ec:01:cb: 96:8a:43:82:5a:50:33:12:23:54:5f:a6:83:65:a4:0b:60:10: fe:bb:66:d4:23:8d:9c:32:6a:79:5a:eb:6c:09:cb:75:30:cb: fb:58:40:71:0c:3f:f6:63:02:e7:6c:6c:07:fa:95:df:30:7b: 3b:fb:3b:28:55:fa:58:c5:42:c4:ec:89:66:47:0c:b7:d3:9e: 79:bf:1c:65:ab:14:09:fc:17:cc:71:eb:9c:0f:bd:dc:f9:38: 4b:ae:c3:72:26:22:b1:09:73:c3:70:df:10:b9:74:ce:52:40: e3:39:71:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtChBHNlzmyxsZXtnY1LXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjkzMmJjNjBlOWZkMTE4NmY4ZmE2YmQ3MTNjMjA3Mjlh ZTczZWUwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD Eyg5NmQ4NWRlN2NjYjM5OGQ3YTQ0Zjg1ODVkMDgwYmFlZTlmYTA1YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKPDjpvUYMi40srYPoyoj7+DmHUE qf7sqvKNjCrixMosB3k3KjxTZQ8V8VmTtz2j8cX5LThaXfS6QK5yO2oIsbFbnyFS 9NpTMArTE+U/9uMsbvMoKkQFsvDvqMFHeoWWNpAKXqx1wNm6SEyNYDkFZsBL464o M4IA6on2Iig0BuZREQHgkuEduEC8emVq1UepFYdU/5hWzabjq1hPXo5t2czTQn4x D/wDP3fSKUCYwzOcynMrM0vZXutws8LqTQpxXRe6AaVy4a47BK8SLiIt2Ec5t+vf heVnglh/p8LoEWT5hBYFBF+BgovnniPlWwWWKX+h34Q8eiwVFecemRoemQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbYXefMs5jXpE+FhdCAuu6foFu+MB8GA1UdIwQY MBaAFEy5Mrxg6f0Rhvj6a9cTwgcprnPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYt MWUwZDdjNDJkYTc2LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYtMWUwZDdjNDJkYTc2 LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAus7OydJI TqZum316+JDo5Jtz0EFgmAWL7WQrFhX77QDTcXXBSSBFabdnyWK0Aagi6pBDt28P WKwVESp5aAofhOypqtY3q7RKJHbsFZFhzoJkRMJLGmLO394w5zcUkC6+hQjaH52I qNShlFUd+abR+Nryg71DxkKryxna1aK48LQT+e5ltTqQnZypEeZY7AHLlopDglpQ MxIjVF+mg2WkC2AQ/rtm1CONnDJqeVrrbAnLdTDL+1hAcQw/9mMC52xsB/qV3zB7 O/s7KFX6WMVCxOyJZkcMt9Oeeb8cZasUCfwXzHHrnA+93Pk4S67DciYisQlzw3Df ELl0zlJA4zlx0w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:33 2026 by rpki-client