This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json) Hash identifier: mw9dKfk2ZaY1doUIfHaoAQq0S49vjRGn+Yg+dlCfSYE= Subject key identifier: 5A:07:F5:67:77:83:2B:85:8D:F6:30:88:6A:75:DC:33:85:FC:77:94 Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Certificate serial: 019C41A25533A595A5B10F63DD2B037336B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft Manifest number: 04AE Signing time: Mon 09 Feb 2026 09:01:23 +0000 Manifest this update: Mon 09 Feb 2026 09:01:23 +0000 Manifest next update: Tue 10 Feb 2026 09:01:23 +0000 Files and hashes: 1: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=) 2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: nBnKcKAObJ6cbu1VGEMgnZmLkvfsfgR0z440NVTYjpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:55:33:a5:95:a5:b1:0f:63:dd:2b:03:73:36:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Validity Not Before: Feb 9 09:01:23 2026 GMT Not After : Feb 10 09:01:23 2026 GMT Subject: CN=5a07f56777832b858df630886a75dc3385fc7794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:55:a3:6d:5c:4d:57:33:34:6e:8b:d2:4f: 78:ab:e5:6f:9d:e5:6f:f4:c5:87:96:91:d1:8b:bf: 58:da:00:bf:9e:d6:82:61:3a:ed:c3:26:93:38:73: 7b:ee:74:47:f1:b8:7e:f5:35:ab:25:89:c1:0a:a9: 3b:c6:af:54:29:cc:74:f3:5b:6d:51:99:f6:4f:9f: 0f:1b:62:e9:e3:a3:d8:1b:e8:41:f0:c1:b0:29:25: c4:0e:c9:74:10:0b:82:b6:ab:13:cc:e0:38:fe:a7: 48:b6:a3:a0:36:a2:33:16:de:8a:02:95:70:6f:5c: ea:96:e1:a5:49:75:f5:36:d9:d2:37:94:5e:19:1e: 54:54:a3:43:52:5d:71:5f:11:e6:ac:60:88:ca:ed: c3:83:2a:f0:18:d8:c9:de:dc:04:1a:e2:10:f3:bf: b7:6d:16:21:61:7d:43:0b:f3:3b:ab:a3:00:d2:2d: 6a:55:2b:23:6b:f3:c6:74:25:50:d2:ba:c3:6f:88: 0e:0a:5b:a4:31:0d:e1:30:2f:b1:be:46:17:b6:d6: 13:9e:33:cb:87:7a:84:89:54:6b:39:54:d2:53:a6: d1:34:d0:a1:c9:57:5f:6a:f1:b9:d1:99:c4:c3:45: b0:96:57:3e:70:52:dd:f4:b2:8e:30:ce:28:81:6b: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:07:F5:67:77:83:2B:85:8D:F6:30:88:6A:75:DC:33:85:FC:77:94 X509v3 Authority Key Identifier: keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ec:5e:2e:48:3d:4b:53:d1:75:b2:b1:93:16:ab:59:86:7b: ea:22:2e:b5:b5:3e:52:48:0e:94:d0:bd:f1:7c:7d:9c:dd:7b: fb:d5:77:f9:b0:c5:c6:9b:33:49:62:f2:05:eb:b4:75:d4:b7: 15:11:f6:ec:e4:2a:ea:36:b1:f9:62:a7:4a:bb:8a:28:29:34: 10:10:1a:af:00:c6:79:e4:47:dc:23:c3:43:32:fb:86:94:a8: a7:57:11:92:c4:6c:a0:1a:b7:1f:e0:bb:b9:94:0b:ec:51:cf: 2f:2c:4d:28:a0:3c:a5:4c:71:32:d1:57:11:3e:82:89:6c:1d: 84:8b:7d:2c:7d:1f:80:b1:9e:35:3e:9d:b5:10:0d:ea:5c:a8: bd:51:ca:48:d2:49:fc:53:7a:27:ab:12:d5:cf:fe:c1:3f:fe: 60:40:59:16:f4:a4:98:a2:43:6c:12:9e:7e:0e:fd:8f:b1:01: 23:06:1d:a0:a7:87:78:6e:b0:29:df:51:17:7b:df:95:51:75: b4:48:d8:3b:ce:7c:4c:f0:d2:c6:15:24:27:c0:15:3a:65:2a: 5b:78:7a:98:1e:19:ae:92:98:40:9b:fe:84:a1:d1:8e:aa:98: 34:bb:e0:d7:01:2c:08:72:65:90:e7:b2:2d:21:40:cd:b1:f4: e3:91:9f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBolUzpZWlsQ9j3SsDcza3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzI4OGU5NjNlMGU5ZjgyZDFjNmE3ZmQ4NGVjNWFhMzQw YWJhOGYwHhcNMjYwMjA5MDkwMTIzWhcNMjYwMjEwMDkwMTIzWjAzMTEwLwYDVQQD Eyg1YTA3ZjU2Nzc3ODMyYjg1OGRmNjMwODg2YTc1ZGMzMzg1ZmM3Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UtVo21cTVczNG6L0k94q+VvneVv 9MWHlpHRi79Y2gC/ntaCYTrtwyaTOHN77nRH8bh+9TWrJYnBCqk7xq9UKcx081tt UZn2T58PG2Lp46PYG+hB8MGwKSXEDsl0EAuCtqsTzOA4/qdItqOgNqIzFt6KApVw b1zqluGlSXX1NtnSN5ReGR5UVKNDUl1xXxHmrGCIyu3DgyrwGNjJ3twEGuIQ87+3 bRYhYX1DC/M7q6MA0i1qVSsja/PGdCVQ0rrDb4gOClukMQ3hMC+xvkYXttYTnjPL h3qEiVRrOVTSU6bRNNChyVdfavG50ZnEw0Wwllc+cFLd9LKOMM4ogWvteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoH9Wd3gyuFjfYwiGp13DOF/HeUMB8GA1UdIwQY MBaAFLXCiOlj4On4LRxqf9hOxao0CrqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTct Y2M3ZTlhYjA5ZmI4LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTctY2M3ZTlhYjA5ZmI4 LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+xeLkg9 S1PRdbKxkxarWYZ76iIutbU+UkgOlNC98Xx9nN17+9V3+bDFxpszSWLyBeu0ddS3 FRH27OQq6jax+WKnSruKKCk0EBAarwDGeeRH3CPDQzL7hpSop1cRksRsoBq3H+C7 uZQL7FHPLyxNKKA8pUxxMtFXET6CiWwdhIt9LH0fgLGeNT6dtRAN6lyovVHKSNJJ /FN6J6sS1c/+wT/+YEBZFvSkmKJDbBKefg79j7EBIwYdoKeHeG6wKd9RF3vflVF1 tEjYO858TPDSxhUkJ8AVOmUqW3h6mB4ZrpKYQJv+hKHRjqqYNLvg1wEsCHJlkOey LSFAzbH045GfXA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:34 2026 by rpki-client