This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json) Hash identifier: X3PqiJ0iWtO9SUmAl0n01m6TBHoIrPI44liQRsYTpBI= Subject key identifier: 8E:3F:AF:04:AD:93:D0:5D:59:C1:F0:D1:8B:C5:51:B7:D6:25:57:47 Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93 Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193 Certificate serial: 019C438FCD53F700285468B49FBB799C259E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 18:00:23 +0000 Manifest this update: Mon 09 Feb 2026 18:00:23 +0000 Manifest next update: Tue 10 Feb 2026 18:00:23 +0000 Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=) 2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: 9iI26dttzrPZ2wO3WU/KeSGPSmZtjAqdx9eZGX4NMUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:cd:53:f7:00:28:54:68:b4:9f:bb:79:9c:25:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193 Validity Not Before: Feb 9 18:00:23 2026 GMT Not After : Feb 10 18:00:23 2026 GMT Subject: CN=8e3faf04ad93d05d59c1f0d18bc551b7d6255747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:5d:88:0c:e5:ce:99:93:c5:eb:dd:70:0b: 5c:e4:49:04:ee:64:c3:82:b0:7e:a1:ad:9e:4c:85: c8:e7:ee:bc:e4:90:18:de:4b:25:04:3a:3d:f6:53: 06:bd:00:52:a3:ec:d3:ff:bc:9b:d8:71:13:37:2e: ba:dc:98:c7:dd:4c:ff:cb:b8:56:fc:26:0a:c1:14: a0:6b:e8:94:4c:63:aa:9b:ce:3c:1b:d4:b8:93:ab: d0:a1:ec:7e:1a:ed:e8:d6:3c:28:c0:9a:49:fb:fb: 46:d5:ba:17:72:f8:05:f8:f1:78:75:5f:29:e8:71: 62:1a:3d:c5:c3:98:50:47:b6:9b:a0:80:07:6b:54: c8:8e:c0:5a:a5:e0:be:7d:d0:a0:20:8c:26:cc:64: 99:c7:96:b5:f8:56:e2:ef:7a:80:65:bb:e4:ef:86: 69:c1:16:9b:fd:43:bb:47:ba:31:b4:1e:44:dd:ff: 58:ef:6f:b5:ee:32:c1:a9:b5:d3:a6:a8:b0:eb:b0: 20:e1:e6:a2:da:d9:c2:eb:7b:39:14:43:85:0c:e5: a5:5e:3d:23:a5:10:e0:5c:99:5e:53:70:3d:09:e0: a6:16:9b:0c:78:88:f5:f8:f7:60:23:d7:a8:dc:39: 32:de:22:4f:15:3e:cf:26:18:d0:18:ff:bb:82:61: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:AF:04:AD:93:D0:5D:59:C1:F0:D1:8B:C5:51:B7:D6:25:57:47 X509v3 Authority Key Identifier: keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:61:62:2c:0c:73:ef:a7:2a:d5:6d:09:78:b9:18:74:28: bf:be:72:78:89:73:cd:65:24:9a:f7:33:a6:14:11:44:fe:80: 19:04:8f:25:25:d9:1f:97:c4:d6:77:66:ae:9b:e6:26:ee:f6: c2:36:46:75:7f:c1:26:5e:b7:ba:de:16:de:17:4c:4e:2d:3f: f7:fe:07:2b:43:ed:d8:d5:5f:97:a3:0e:28:3f:79:d5:4a:ab: d4:df:78:b5:8c:e2:3f:56:99:f6:18:53:fa:6e:a3:0c:51:e6: 57:cf:ff:6c:78:8b:36:fa:10:c6:3c:ef:ae:83:d5:38:93:5c: 1c:e7:0b:b9:f5:1d:7e:39:38:49:18:af:4b:c3:dd:69:7c:8c: 2b:c1:0f:fb:5a:d2:b5:63:5d:c6:b4:fc:ab:a7:da:63:aa:02: 97:f6:8f:56:bf:72:1a:02:ee:bb:29:4b:39:41:ba:44:a6:ea: 15:94:23:7c:c1:70:bf:64:0d:81:2a:b7:34:59:ea:96:13:c3: 09:ef:1c:7f:4e:98:56:5e:0a:c8:1e:50:c2:95:d5:5b:b3:60: 4b:7a:2d:c0:c3:a5:bc:95:83:81:8f:31:1c:42:c0:b7:3a:e5: fe:7d:ad:cf:fc:3c:38:0e:70:f8:94:be:63:e8:c9:de:cc:56: 75:e7:3d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj81T9wAoVGi0n7t5nCWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm YjYxOTMwHhcNMjYwMjA5MTgwMDIzWhcNMjYwMjEwMTgwMDIzWjAzMTEwLwYDVQQD Eyg4ZTNmYWYwNGFkOTNkMDVkNTljMWYwZDE4YmM1NTFiN2Q2MjU1NzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlRdiAzlzpmTxevdcAtc5EkE7mTD grB+oa2eTIXI5+685JAY3kslBDo99lMGvQBSo+zT/7yb2HETNy663JjH3Uz/y7hW /CYKwRSga+iUTGOqm848G9S4k6vQoex+Gu3o1jwowJpJ+/tG1boXcvgF+PF4dV8p 6HFiGj3Fw5hQR7aboIAHa1TIjsBapeC+fdCgIIwmzGSZx5a1+Fbi73qAZbvk74Zp wRab/UO7R7oxtB5E3f9Y72+17jLBqbXTpqiw67Ag4eai2tnC63s5FEOFDOWlXj0j pRDgXJleU3A9CeCmFpsMeIj1+PdgI9eo3Dky3iJPFT7PJhjQGP+7gmE62wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4/rwStk9BdWcHw0YvFUbfWJVdHMB8GA1UdIwQY MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4 LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitthYiwM c++nKtVtCXi5GHQov75yeIlzzWUkmvczphQRRP6AGQSPJSXZH5fE1ndmrpvmJu72 wjZGdX/BJl63ut4W3hdMTi0/9/4HK0Pt2NVfl6MOKD951Uqr1N94tYziP1aZ9hhT +m6jDFHmV8//bHiLNvoQxjzvroPVOJNcHOcLufUdfjk4SRivS8PdaXyMK8EP+1rS tWNdxrT8q6faY6oCl/aPVr9yGgLuuylLOUG6RKbqFZQjfMFwv2QNgSq3NFnqlhPD Ce8cf06YVl4KyB5QwpXVW7NgS3otwMOlvJWDgY8xHELAtzrl/n2tz/w8OA5w+JS+ Y+jJ3sxWdec9HQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:02 2026 by rpki-client