This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json) Hash identifier: Et5xwgoOpavGCwfsWVY+ny1Bj656wB8VN2OL7MvlR9U= Subject key identifier: C2:AF:FF:99:0D:90:40:F8:F4:D1:84:C2:CF:9E:FE:2B:58:B9:96:05 Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Certificate serial: 019C42B42DD1030C6E4D44685BEEAFCD7A2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (hash: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48=) 2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: mR1A0qQ9RmJQDi2isGO6hV1vPVN5fCKHWsScXvQgKxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2d:d1:03:0c:6e:4d:44:68:5b:ee:af:cd:7a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=c2afff990d9040f8f4d184c2cf9efe2b58b99605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:34:5a:3a:8b:1d:2c:bd:32:5e:1d:50:e7:e6: de:2d:4d:b3:0a:de:00:61:64:59:9a:00:da:00:e0: 5d:67:02:18:2e:b5:0e:63:84:f5:95:05:01:64:90: 71:09:60:5a:5b:17:7a:c5:6f:85:b7:6f:69:96:22: 2e:63:aa:0b:c2:ad:29:21:9d:aa:ae:57:e8:d7:d1: c1:aa:19:77:e2:93:36:42:a2:46:a5:41:bd:b6:4e: e4:c9:3b:f2:31:0c:cc:35:7d:52:7b:f8:a6:e3:5d: e4:6e:a4:e0:60:dc:6b:dd:01:a0:5d:22:0c:c3:58: 40:05:2c:62:0c:d5:50:1b:e9:c6:4f:9c:e4:6d:8d: ab:ef:6f:6f:2c:8b:83:92:9c:1e:73:8c:18:23:c3: 7d:a9:7f:ce:1a:54:03:54:d8:20:90:4c:80:17:a9: 70:ab:51:52:b3:d8:08:2f:4e:55:55:6a:49:8a:1f: 7d:be:13:a2:5e:72:89:41:6f:c7:d2:3b:69:4a:e9: 7e:a7:f3:9b:62:41:c2:36:66:18:bb:5e:35:67:11: 31:b1:99:cc:97:f3:3e:df:c1:06:83:ee:15:c3:08: 4b:b8:36:45:4a:1e:f4:2c:57:f7:c8:bf:12:6e:0e: a3:8a:78:95:dc:6c:f8:67:77:f8:f2:c3:32:11:fc: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AF:FF:99:0D:90:40:F8:F4:D1:84:C2:CF:9E:FE:2B:58:B9:96:05 X509v3 Authority Key Identifier: keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:2b:1d:24:a7:c7:d4:49:38:47:57:95:b9:9c:88:73:c2: 63:10:15:52:28:33:5b:63:ee:44:29:0b:d4:66:95:84:3d:9f: 20:7b:86:ea:68:95:ff:52:9a:c6:4b:b4:1f:e9:9d:db:08:d6: 3d:5e:52:b3:46:df:48:a6:7c:90:b0:67:b5:14:1d:85:e1:45: a0:43:8c:2d:90:6b:10:39:2d:ec:f1:1d:15:fc:d8:3e:df:de: e8:c5:84:92:ec:49:9d:3e:03:98:29:01:8c:ba:b7:44:94:76: b4:8c:2d:00:15:0e:55:b8:fd:33:ae:bd:17:d7:cc:0f:83:bf: 08:09:e0:eb:58:6c:18:ce:a2:42:9a:4a:67:0e:47:9b:19:16: 49:27:21:d3:13:c1:8d:fa:1b:65:f2:61:12:67:d2:8d:20:d6: 98:44:ee:1c:d2:06:ae:1a:26:c6:ea:9e:9c:fb:e6:35:57:b5: 7a:1d:1f:e0:56:37:9a:cb:8a:6d:0c:01:85:72:de:41:b2:a5: a6:77:46:f8:da:98:d7:5f:78:8d:2c:20:87:50:73:5c:ef:b7: 21:53:5b:c6:ea:e0:a9:13:a2:a5:23:a7:6f:da:84:6a:f7:c5: a7:ad:d1:f9:90:8f:f0:70:96:c7:f3:0f:f0:e3:1a:ec:35:08: fd:c1:b9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC3RAwxuTURoW+6vzXotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1 N2NmMGYwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EyhjMmFmZmY5OTBkOTA0MGY4ZjRkMTg0YzJjZjllZmUyYjU4Yjk5NjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+zRaOosdLL0yXh1Q5+beLU2zCt4A YWRZmgDaAOBdZwIYLrUOY4T1lQUBZJBxCWBaWxd6xW+Ft29pliIuY6oLwq0pIZ2q rlfo19HBqhl34pM2QqJGpUG9tk7kyTvyMQzMNX1Se/im413kbqTgYNxr3QGgXSIM w1hABSxiDNVQG+nGT5zkbY2r729vLIuDkpwec4wYI8N9qX/OGlQDVNggkEyAF6lw q1FSs9gIL05VVWpJih99vhOiXnKJQW/H0jtpSul+p/ObYkHCNmYYu141ZxExsZnM l/M+38EGg+4VwwhLuDZFSh70LFf3yL8Sbg6jiniV3Gz4Z3f48sMyEfz5wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKv/5kNkED49NGEws+e/itYuZYFMB8GA1UdIwQY MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4krHSSn x9RJOEdXlbmciHPCYxAVUigzW2PuRCkL1GaVhD2fIHuG6miV/1Kaxku0H+md2wjW PV5Ss0bfSKZ8kLBntRQdheFFoEOMLZBrEDkt7PEdFfzYPt/e6MWEkuxJnT4DmCkB jLq3RJR2tIwtABUOVbj9M669F9fMD4O/CAng61hsGM6iQppKZw5HmxkWSSch0xPB jfobZfJhEmfSjSDWmETuHNIGrhomxuqenPvmNVe1eh0f4FY3msuKbQwBhXLeQbKl pndG+NqY1194jSwgh1BzXO+3IVNbxurgqROipSOnb9qEavfFp63R+ZCP8HCWx/MP 8OMa7DUI/cG5PQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:38:56 2026 by rpki-client