This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json) Hash identifier: ktyks/uSjVq9H8BRoV/M3uCuy//ffn7ESxoyV0rVUBA= Subject key identifier: 70:A0:FC:F5:7B:4E:FD:1C:FD:FE:92:F5:79:76:2C:B7:0B:D6:0E:80 Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5 Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5 Certificate serial: 019C43FE36C2244794760A4E53B194E34A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 20:00:59 +0000 Manifest this update: Mon 09 Feb 2026 20:00:59 +0000 Manifest next update: Tue 10 Feb 2026 20:00:59 +0000 Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: ba1DFgttYMvXvi6PctCgo8iNmcHHseBJdgCYibAo3q4=) 2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:36:c2:24:47:94:76:0a:4e:53:b1:94:e3:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5 Validity Not Before: Feb 9 20:00:59 2026 GMT Not After : Feb 10 20:00:59 2026 GMT Subject: CN=70a0fcf57b4efd1cfdfe92f579762cb70bd60e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7d:cc:68:e5:52:e5:31:9a:c4:dc:85:9b:3d: 2e:ba:87:01:d6:82:b7:0d:33:d6:4f:cf:68:96:6e: e4:a3:4b:b5:38:3c:d1:3e:0a:79:d1:a4:7e:24:e8: f5:33:ec:7d:e2:b8:4f:e9:b9:66:0d:ac:3c:44:cb: ad:56:4f:30:9a:03:8f:0e:cd:65:95:d1:de:4a:89: f2:5c:c3:47:0d:97:21:f2:39:32:ac:62:c2:02:2b: 85:de:fe:99:fd:75:df:c4:77:0c:78:6c:f2:ae:9a: 17:c8:14:7c:08:bc:c9:d6:81:bc:1d:49:43:9c:09: f8:40:ad:2d:22:c9:7e:ad:92:e4:f3:9c:b5:c6:3b: f2:dd:ae:53:b1:46:78:19:b3:c5:e2:90:7e:e5:7d: 7f:d7:62:12:6d:6e:da:63:4e:f4:90:0d:08:08:11: 2b:7b:a4:2e:11:4b:76:e7:de:a3:1c:36:86:7f:81: 42:ae:cf:a1:db:ee:f9:5e:8b:cc:1d:fb:17:c3:10: d2:e2:bd:15:97:b1:f1:bf:ea:fa:c3:fa:b8:c0:7c: 4c:6f:be:89:16:ba:41:e4:f8:5f:fb:c8:d6:80:1c: 72:59:38:d6:1e:9d:da:dd:2e:c3:10:d6:d2:dd:ff: 51:9c:c6:7e:ee:08:73:ea:c7:ab:44:14:8f:fd:0e: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:FC:F5:7B:4E:FD:1C:FD:FE:92:F5:79:76:2C:B7:0B:D6:0E:80 X509v3 Authority Key Identifier: keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:83:a4:3a:4c:2d:05:30:2b:90:02:23:1f:99:29:7a:e4:34: a7:b9:4a:43:6f:8a:f6:fb:b8:04:7f:f5:0a:05:cc:24:f5:c0: 46:2a:ed:e8:ee:84:50:0d:b9:96:80:51:fa:8d:6d:79:82:d4: e1:4f:c6:9d:4d:7e:ea:8b:de:e4:6c:c8:83:bd:7e:59:98:3d: 81:e3:06:dc:e2:16:51:2b:75:25:ab:a1:c1:c0:55:f7:7c:34: a7:b7:44:ab:0c:40:16:e0:75:3a:08:3e:f2:45:61:e7:1b:78: 0b:dc:88:8d:57:ea:9e:ad:94:d3:ad:d6:ef:30:36:32:f7:96: 7c:dc:54:7d:10:bc:f6:bb:20:29:d1:26:e1:23:3b:92:52:92: 94:11:13:7d:f6:0e:ec:dc:65:f6:20:1f:02:a9:b2:fb:f7:f9: 21:04:6c:7a:16:82:26:ce:53:c0:26:09:01:1e:c6:62:de:23: f1:24:dc:74:5f:a7:20:34:38:50:10:f1:03:b7:94:ec:04:1d: 32:2a:60:20:71:c3:b6:64:e3:c7:c2:5e:4f:80:87:ba:8c:c8: 15:13:bf:9c:5b:36:c1:8b:c7:68:29:f8:40:c1:ca:d5:f5:f9: 84:4a:62:c4:ea:b7:1d:dd:f9:c1:f3:5d:79:70:22:36:b6:29: 11:2f:64:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/jbCJEeUdgpOU7GU40qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZDdmODE3ZDdlNmRlZDU2ZWRlZGM0NDQ4OGNkNDFjMDUy YTBkYzUwHhcNMjYwMjA5MjAwMDU5WhcNMjYwMjEwMjAwMDU5WjAzMTEwLwYDVQQD Eyg3MGEwZmNmNTdiNGVmZDFjZmRmZTkyZjU3OTc2MmNiNzBiZDYwZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA533MaOVS5TGaxNyFmz0uuocB1oK3 DTPWT89olm7ko0u1ODzRPgp50aR+JOj1M+x94rhP6blmDaw8RMutVk8wmgOPDs1l ldHeSonyXMNHDZch8jkyrGLCAiuF3v6Z/XXfxHcMeGzyrpoXyBR8CLzJ1oG8HUlD nAn4QK0tIsl+rZLk85y1xjvy3a5TsUZ4GbPF4pB+5X1/12ISbW7aY070kA0ICBEr e6QuEUt2596jHDaGf4FCrs+h2+75XovMHfsXwxDS4r0Vl7Hxv+r6w/q4wHxMb76J FrpB5Phf+8jWgBxyWTjWHp3a3S7DENbS3f9RnMZ+7ghz6serRBSP/Q7cVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCg/PV7Tv0c/f6S9Xl2LLcL1g6AMB8GA1UdIwQY MBaAFP7X+BfX5t7Vbt7cREiM1BwFKg3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMt N2NmOWE1ZmI2YTljLzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMtN2NmOWE1ZmI2YTlj LzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIOkOkwt BTArkAIjH5kpeuQ0p7lKQ2+K9vu4BH/1CgXMJPXARirt6O6EUA25loBR+o1teYLU 4U/GnU1+6ove5GzIg71+WZg9geMG3OIWUSt1JauhwcBV93w0p7dEqwxAFuB1Ogg+ 8kVh5xt4C9yIjVfqnq2U063W7zA2MveWfNxUfRC89rsgKdEm4SM7klKSlBETffYO 7Nxl9iAfAqmy+/f5IQRsehaCJs5TwCYJAR7GYt4j8STcdF+nIDQ4UBDxA7eU7AQd MipgIHHDtmTjx8JeT4CHuozIFRO/nFs2wYvHaCn4QMHK1fX5hEpixOq3Hd35wfNd eXAiNrYpES9kng== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:10 2026 by rpki-client