This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json) Hash identifier: KnCnb7Trpjgl4cU5Ckr5/7gLxbIVRCPheoioB3PsThY= Subject key identifier: DE:84:E1:B0:3E:1E:9B:75:2E:72:51:08:D9:79:29:32:58:54:E4:2E Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Certificate serial: 019C4321D0920C18A6422621DF3199FB66D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:00:15 +0000 Manifest this update: Mon 09 Feb 2026 16:00:15 +0000 Manifest next update: Tue 10 Feb 2026 16:00:15 +0000 Files and hashes: 1: 3s9WMYEcQ2eeR7WmEF0cPyYnnoc.roa (hash: I5I/yKJ6+N12F+Oii5+qZSRYetGEm6Nazf/isv9EOH0=) 2: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: S+5hmArTeBWT/0zXYfNM4GjZDA13INKUXXXaq5z5tq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d0:92:0c:18:a6:42:26:21:df:31:99:fb:66:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Validity Not Before: Feb 9 16:00:15 2026 GMT Not After : Feb 10 16:00:15 2026 GMT Subject: CN=de84e1b03e1e9b752e725108d97929325854e42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:88:94:22:9d:c2:a8:fb:8b:ec:63:2e:4a: f8:e2:54:99:02:39:cf:94:cf:54:78:a1:e8:41:e3: d4:49:91:7e:3c:19:b3:90:4a:af:21:16:f6:29:36: fa:a8:86:5a:ce:2f:30:35:b7:c8:6a:c1:3e:36:6c: a1:ae:2b:54:92:98:40:08:e2:e2:db:d4:a3:93:43: 24:55:7f:2f:32:61:6d:3c:2c:be:be:7a:c7:25:f8: 0a:a3:48:20:9b:b4:16:22:66:21:78:64:3c:a2:fc: 1a:a1:c0:0e:68:38:e2:cd:8c:9d:7d:6a:45:ca:b6: d9:36:a9:55:14:d5:f1:42:4a:9b:a2:6c:0d:37:67: ab:34:0c:ee:a4:2b:58:35:7e:c6:57:d4:de:56:29: e1:7f:c8:73:a1:aa:11:46:ae:27:16:b4:be:23:1d: f7:4f:4c:6b:9c:29:f3:67:8a:ab:8a:03:fb:d4:b2: 26:f2:17:9e:38:0f:e6:12:2c:23:de:41:06:46:80: 13:a2:bb:e1:f0:b6:e1:15:2f:7f:f6:d0:66:9e:68: 5d:55:38:1d:81:d9:9a:ef:48:d0:69:2c:c8:d5:b2: 3c:65:9c:09:a8:24:e4:e3:35:c6:67:34:df:f1:21: 73:a0:57:51:7e:1f:33:ab:97:05:31:cd:06:8e:af: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:84:E1:B0:3E:1E:9B:75:2E:72:51:08:D9:79:29:32:58:54:E4:2E X509v3 Authority Key Identifier: keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:75:46:18:95:f3:19:80:27:b3:df:61:07:6f:b8:25:5a:40: a2:1b:d2:73:aa:fb:d2:bc:48:95:8e:5d:eb:4d:29:b9:bd:df: 3e:d7:da:5a:95:6d:25:81:aa:bc:fe:e6:a3:0c:88:72:a8:3d: 57:4a:4d:1f:8b:1a:30:f2:a9:54:0d:ea:a3:3b:34:f5:09:da: 65:0e:04:1a:0b:63:e5:e4:ae:45:5c:56:b4:e9:13:a8:d8:e9: 2b:53:fc:7c:76:a1:06:d9:df:a6:0e:d6:12:e0:20:8b:65:65: 68:5b:dd:2e:5a:39:33:81:aa:63:e6:a1:97:b9:57:c2:72:77: 08:67:93:23:ea:53:d1:c3:76:95:96:28:1c:57:2b:8f:6e:db: ae:e0:7a:b0:c9:18:21:e4:cd:3e:91:7e:e2:70:0e:54:cc:d1: 57:18:b0:f6:b0:2d:06:c6:e4:e5:fb:92:67:e1:e8:10:28:46: 5a:91:3f:18:77:4c:8e:30:ac:a3:fe:fb:da:8a:97:a6:99:fe: ee:55:8b:e9:32:2c:50:db:c2:db:cd:87:61:3d:60:64:8f:1f: 15:49:a4:c3:43:5b:12:6a:92:a8:c1:80:48:aa:b8:57:39:2d: 7c:75:58:55:5b:3e:bc:a8:c9:e7:79:0e:47:5e:4a:da:b9:c7: 79:24:d3:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdCSDBimQiYh3zGZ+2bQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl OGE1MjAwHhcNMjYwMjA5MTYwMDE1WhcNMjYwMjEwMTYwMDE1WjAzMTEwLwYDVQQD EyhkZTg0ZTFiMDNlMWU5Yjc1MmU3MjUxMDhkOTc5MjkzMjU4NTRlNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRGIlCKdwqj7i+xjLkr44lSZAjnP lM9UeKHoQePUSZF+PBmzkEqvIRb2KTb6qIZazi8wNbfIasE+NmyhritUkphACOLi 29Sjk0MkVX8vMmFtPCy+vnrHJfgKo0ggm7QWImYheGQ8ovwaocAOaDjizYydfWpF yrbZNqlVFNXxQkqbomwNN2erNAzupCtYNX7GV9TeVinhf8hzoaoRRq4nFrS+Ix33 T0xrnCnzZ4qrigP71LIm8heeOA/mEiwj3kEGRoATorvh8LbhFS9/9tBmnmhdVTgd gdma70jQaSzI1bI8ZZwJqCTk4zXGZzTf8SFzoFdRfh8zq5cFMc0Gjq8pWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6E4bA+Hpt1LnJRCNl5KTJYVOQuMB8GA1UdIwQY MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt MDNmNjA0MzI0ZmNmLzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3VGGJXz GYAns99hB2+4JVpAohvSc6r70rxIlY5d600pub3fPtfaWpVtJYGqvP7mowyIcqg9 V0pNH4saMPKpVA3qozs09QnaZQ4EGgtj5eSuRVxWtOkTqNjpK1P8fHahBtnfpg7W EuAgi2VlaFvdLlo5M4GqY+ahl7lXwnJ3CGeTI+pT0cN2lZYoHFcrj27bruB6sMkY IeTNPpF+4nAOVMzRVxiw9rAtBsbk5fuSZ+HoEChGWpE/GHdMjjCso/772oqXppn+ 7lWL6TIsUNvC282HYT1gZI8fFUmkw0NbEmqSqMGASKq4VzktfHVYVVs+vKjJ53kO R15K2rnHeSTTQw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:09 2026 by rpki-client