This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft File: TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json) Hash identifier: dfx8FaEds8RBlJumQGO3K8zGOHHWqP3NuH07/9auMIg= Subject key identifier: 3C:4C:55:7D:26:5F:12:EC:FC:90:9C:D2:AC:99:4C:6B:A8:6D:55:DF Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04 Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804 Certificate serial: 019C43902A48E3E337DD51F0E815EC34FE6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft Manifest number: 02B7 Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: j/rycfvwiTP4lsQFpDYMo5zK/OPB6rWKuTn7oNJ4QM8=) 2: m5RDqHDFlBLjo148wswkFX3AtM4.roa (hash: dGxmPGKQpIMe6i+11VC0Vb8f16IMacqv1zMOqCrB+SQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2a:48:e3:e3:37:dd:51:f0:e8:15:ec:34:fe:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804 Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=3c4c557d265f12ecfc909cd2ac994c6ba86d55df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:10:b5:eb:da:e3:3a:3e:ca:2a:c2:40:18: 98:87:55:a5:5d:01:91:f7:c0:12:87:71:34:9e:24: 09:7f:73:42:78:62:37:ef:60:4c:57:29:ef:1b:1e: e3:ab:70:9d:62:52:58:0d:6f:54:86:ce:52:bd:c6: aa:71:75:ca:ec:d0:24:9f:72:b5:3c:d1:a1:1e:01: c1:bd:a8:80:19:1e:09:c9:6b:d8:b5:7e:04:fa:69: c3:22:02:9d:d8:e5:b1:95:96:5a:d4:c2:a1:44:99: 73:f7:a0:9b:1d:4e:30:4a:ca:ac:35:05:e3:64:a1: c8:53:80:07:23:17:fd:47:89:9a:f6:f2:79:df:1f: 46:2b:5f:08:c0:83:40:08:29:b0:a6:0c:65:54:ee: 4b:de:9f:08:98:da:2a:3f:d9:08:ce:77:20:21:92: 5c:2a:ff:64:f5:64:76:ea:0d:52:fd:67:e3:46:76: 2d:1a:95:1c:60:57:ad:43:27:e2:aa:a2:a5:0d:b8: 74:d7:fa:b6:a8:78:56:18:0f:85:e8:37:fc:5d:87: 7b:ff:11:ed:ad:df:0a:34:94:35:ee:48:06:1a:c5: a0:72:46:e9:30:9b:20:5b:38:ff:78:08:3e:6b:b4: 64:d4:d1:69:1e:ab:f7:20:f2:02:ba:8a:ca:a9:0b: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:55:7D:26:5F:12:EC:FC:90:9C:D2:AC:99:4C:6B:A8:6D:55:DF X509v3 Authority Key Identifier: keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2d:c3:27:25:d7:c5:a4:53:86:56:07:6d:89:ae:a0:68:7d: 33:36:2f:ed:63:59:ae:4b:9d:37:2c:0c:6a:dd:d0:5e:1e:0f: 98:48:07:e0:8c:6a:1d:e4:51:54:aa:89:7d:5f:aa:7a:5c:fb: a6:f8:18:56:87:48:8e:23:63:3f:cd:78:12:68:b4:e3:e7:05: 83:aa:bf:2a:ac:30:ae:18:11:a7:06:6c:ae:a6:82:77:3f:02: 73:5d:88:6e:8c:68:a3:1a:05:df:9a:d3:12:96:92:94:98:b5: da:37:d1:5e:c8:eb:dd:e3:4a:34:e7:90:55:51:4c:19:b5:83: 40:47:64:2f:47:5e:49:f6:45:75:fd:d4:e8:f3:0a:e5:84:ec: 27:9d:d7:76:0a:ff:37:81:ce:4b:a1:e7:ce:41:8e:34:d5:29: 8b:d9:f1:a8:90:55:6e:f5:c5:73:17:c1:1e:e8:76:86:f0:3b: c5:5d:31:7f:6f:25:53:c5:39:c9:7b:4e:e9:a3:ea:e5:74:d1: 71:68:a8:07:0b:54:c1:a8:76:72:f9:3f:2b:7a:73:fe:54:a7: 44:6f:3d:10:4a:0e:41:39:d0:d4:0a:6d:c3:f1:59:1d:92:9f: 09:78:0f:2b:55:5a:30:1c:de:01:8e:ea:93:63:de:9f:ae:5b: 3e:27:be:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCpI4+M33VHw6BXsNP5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzg1NmQyOTU1ODA5MzY5MTZhNTUzZmI5YmZiNTlmM2Ex NzY4MDQwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD EygzYzRjNTU3ZDI2NWYxMmVjZmM5MDljZDJhYzk5NGM2YmE4NmQ1NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U0Qteva4zo+yirCQBiYh1WlXQGR 98ASh3E0niQJf3NCeGI372BMVynvGx7jq3CdYlJYDW9Uhs5SvcaqcXXK7NAkn3K1 PNGhHgHBvaiAGR4JyWvYtX4E+mnDIgKd2OWxlZZa1MKhRJlz96CbHU4wSsqsNQXj ZKHIU4AHIxf9R4ma9vJ53x9GK18IwINACCmwpgxlVO5L3p8ImNoqP9kIzncgIZJc Kv9k9WR26g1S/WfjRnYtGpUcYFetQyfiqqKlDbh01/q2qHhWGA+F6Df8XYd7/xHt rd8KNJQ17kgGGsWgckbpMJsgWzj/eAg+a7Rk1NFpHqv3IPICuorKqQtPgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxMVX0mXxLs/JCc0qyZTGuobVXfMB8GA1UdIwQY MBaAFE54VtKVWAk2kWpVP7m/tZ86F2gEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83ZjliZTEtYjcyYi00NTg1LWEyYmQt ZTRkYThhYzJiM2RiLzEvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83ZjliZTEtYjcyYi00NTg1LWEyYmQtZTRkYThhYzJiM2Ri LzEvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS3DJyXX xaRThlYHbYmuoGh9MzYv7WNZrkudNywMat3QXh4PmEgH4IxqHeRRVKqJfV+qelz7 pvgYVodIjiNjP814Emi04+cFg6q/KqwwrhgRpwZsrqaCdz8Cc12IboxooxoF35rT EpaSlJi12jfRXsjr3eNKNOeQVVFMGbWDQEdkL0deSfZFdf3U6PMK5YTsJ53Xdgr/ N4HOS6HnzkGONNUpi9nxqJBVbvXFcxfBHuh2hvA7xV0xf28lU8U5yXtO6aPq5XTR cWioBwtUwah2cvk/K3pz/lSnRG89EEoOQTnQ1Aptw/FZHZKfCXgPK1VaMBzeAY7q k2Pen65bPie+Qw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:22 2026 by rpki-client