This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json) Hash identifier: /wGqJq48EvqWZre9Q4p8CVQ6+RmmFC48bi2gp3y0S74= Subject key identifier: B5:37:0C:96:4D:B9:31:4D:B1:10:9F:46:CA:19:91:2B:FB:79:17:2E Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Certificate serial: 019C42B42E1318A9FD6EE1F923B0DE3BA37C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: C5Z-09c-UNKANhS9Y8455wChPaI.roa (hash: kwkm/1oRmvGWA+6dVE+pHfwpAhyhTdzdAoLVyPCKLrg=) 2: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: j5D6MF1Q4dfI+kF1Asi1HTLIvjXw6UncfSZUZSAsGDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2e:13:18:a9:fd:6e:e1:f9:23:b0:de:3b:a3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=b5370c964db9314db1109f46ca19912bfb79172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:45:e0:67:f4:c5:79:44:99:56:42:5e:fd: 05:de:da:c8:f5:a0:6d:cb:3d:2e:70:67:df:48:92: 6c:38:1e:4a:12:e2:d6:6a:a3:38:1b:a9:a9:3c:79: bd:66:5f:19:df:01:0e:03:26:68:08:52:28:97:db: b6:f5:24:4a:30:ab:1f:35:77:08:12:bc:6f:ad:6a: 5b:1a:e9:51:cc:4e:3e:14:93:a8:35:11:32:43:86: cd:20:23:ab:0f:65:1c:7e:30:39:f5:cc:a6:c4:db: fe:24:5b:2b:ea:0c:a5:85:0b:a8:c0:b6:32:e2:f0: 02:99:ba:0c:1a:12:e3:25:98:66:ce:bb:a4:79:7b: da:ab:87:67:3f:b3:70:05:29:17:5e:95:f9:b5:7f: 7c:ea:3c:a4:1a:9d:76:95:69:a1:e8:4c:30:fb:aa: 3e:38:d2:80:c4:35:1a:94:da:b8:b0:7e:44:b8:e8: 3d:d1:0a:dd:15:34:cd:15:d6:b7:22:d0:ab:ec:aa: a2:f8:b3:53:06:1a:43:d1:30:12:00:4e:ed:82:5a: d6:16:d7:fd:e2:86:bb:1a:b3:98:f9:03:fb:35:61: bb:36:c7:17:c8:77:d0:90:5c:e0:6a:ad:83:01:32: 22:8b:75:18:40:b8:37:19:13:4b:ae:3a:24:31:29: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:0C:96:4D:B9:31:4D:B1:10:9F:46:CA:19:91:2B:FB:79:17:2E X509v3 Authority Key Identifier: keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:72:0f:a5:09:e2:fe:e9:bc:0c:a7:11:8f:8f:7e:3d:c8:ff: e4:bd:e8:2f:b3:3b:d6:60:88:35:d3:77:a7:38:38:00:7b:db: a3:66:01:2e:ad:01:1e:bd:09:a2:91:1f:d6:12:72:9b:f8:0f: fe:56:7e:7f:05:8b:c8:1f:37:80:d3:48:ab:4a:ac:95:bd:bf: 26:2d:1a:e7:fd:a6:d8:58:34:ce:f3:1b:fe:f5:f1:00:fc:93: fa:bf:da:44:16:ae:8c:f9:89:21:4b:89:34:f0:ab:73:5e:50: 8a:5b:c1:79:26:21:ff:8b:ec:ad:8d:6a:1c:87:d3:7c:27:18: 44:76:b7:5e:57:50:d1:bc:c2:22:5f:d4:51:b9:f7:f2:5b:ef: a8:af:c3:0b:e4:8c:42:1f:27:a3:e4:5f:b5:e0:b8:12:67:9f: c7:e6:2f:a0:df:93:28:d5:b8:78:3f:4b:83:45:34:2d:89:d6: 53:4f:41:63:ea:1e:28:33:e5:13:d2:69:50:5f:da:1a:03:ef: 5f:96:55:f8:64:33:ef:57:84:0b:8f:e1:fa:08:eb:2d:23:19: 1f:43:5a:76:38:8a:88:ad:29:cc:ac:60:3b:0f:e1:cb:60:9c: b4:9b:d3:0a:fb:d9:84:5d:30:41:5c:d3:f8:55:43:66:a6:f2: 03:41:5b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC4TGKn9buH5I7DeO6N8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTk4NjA2YmM5YTVkNDQwNzRmZjhjYmVkY2JkYmNmYzM1 ZjA1NjIwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EyhiNTM3MGM5NjRkYjkzMTRkYjExMDlmNDZjYTE5OTEyYmZiNzkxNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9hF4Gf0xXlEmVZCXv0F3trI9aBt yz0ucGffSJJsOB5KEuLWaqM4G6mpPHm9Zl8Z3wEOAyZoCFIol9u29SRKMKsfNXcI ErxvrWpbGulRzE4+FJOoNREyQ4bNICOrD2UcfjA59cymxNv+JFsr6gylhQuowLYy 4vACmboMGhLjJZhmzrukeXvaq4dnP7NwBSkXXpX5tX986jykGp12lWmh6Eww+6o+ ONKAxDUalNq4sH5EuOg90QrdFTTNFda3ItCr7Kqi+LNTBhpD0TASAE7tglrWFtf9 4oa7GrOY+QP7NWG7NscXyHfQkFzgaq2DATIii3UYQLg3GRNLrjokMSnC6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU3DJZNuTFNsRCfRsoZkSv7eRcuMB8GA1UdIwQY MBaAFEzphga8ml1EB0/4y+3L28/DXwViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTct ODhkZjEyNWJhNjYzLzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTctODhkZjEyNWJhNjYz LzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3IPpQni /um8DKcRj49+Pcj/5L3oL7M71mCINdN3pzg4AHvbo2YBLq0BHr0JopEf1hJym/gP /lZ+fwWLyB83gNNIq0qslb2/Ji0a5/2m2Fg0zvMb/vXxAPyT+r/aRBaujPmJIUuJ NPCrc15QilvBeSYh/4vsrY1qHIfTfCcYRHa3XldQ0bzCIl/UUbn38lvvqK/DC+SM Qh8no+RfteC4Emefx+YvoN+TKNW4eD9Lg0U0LYnWU09BY+oeKDPlE9JpUF/aGgPv X5ZV+GQz71eEC4/h+gjrLSMZH0NadjiKiK0pzKxgOw/hy2CctJvTCvvZhF0wQVzT +FVDZqbyA0Fb4A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:26 2026 by rpki-client