This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json) Hash identifier: mKz88jYGbjsZEbi3IhrkvxQlpYUEm//4EAn4nSiJWq4= Subject key identifier: 75:B9:D8:8F:23:B3:BA:42:7C:D5:CA:2F:38:41:1B:77:9F:C5:E9:FE Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93 Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93 Certificate serial: 019C41D8F5423ED3079C8303EAD4A50C51E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft Manifest number: 08E0 Signing time: Mon 09 Feb 2026 10:01:03 +0000 Manifest this update: Mon 09 Feb 2026 10:01:03 +0000 Manifest next update: Tue 10 Feb 2026 10:01:03 +0000 Files and hashes: 1: Ipu1qUGfEU4g8Xm4HjOemR3yWWY.roa (hash: R0D/+J37ZrEsRH10sv5tmqRZhv8lgKjFyvvf+xRetHk=) 2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: PEI5fCIMg0owkUbLjp3EcjcwFu7ITCVo3dw/HEjDDi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f5:42:3e:d3:07:9c:83:03:ea:d4:a5:0c:51:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93 Validity Not Before: Feb 9 10:01:03 2026 GMT Not After : Feb 10 10:01:03 2026 GMT Subject: CN=75b9d88f23b3ba427cd5ca2f38411b779fc5e9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:f1:b5:22:0d:29:95:98:d8:a7:18:57:d2: ea:93:6c:bf:b7:a0:44:53:cf:37:e6:67:82:aa:14: 5d:93:85:e1:97:ad:93:31:82:9c:74:6c:62:46:bf: 87:68:d9:7f:4c:bc:ca:7c:8a:f6:6e:8a:69:28:92: 80:c4:27:d9:39:64:89:01:a1:29:0a:d7:83:ab:f8: d8:98:63:c0:c1:b5:8f:76:53:cd:4c:ec:c4:b6:84: ae:46:7a:22:74:7c:f1:5b:45:c0:ba:32:ef:20:0a: 0a:19:71:2e:7a:56:8f:cc:dd:2a:cd:69:57:34:e9: 59:04:a4:75:49:d9:4e:2d:4f:5f:28:a8:dc:7a:c2: 82:8c:ae:85:9e:13:43:7a:a8:30:e2:62:b0:eb:77: e9:33:dd:a2:a4:f4:1c:cf:05:bc:18:73:27:dc:9a: bb:c2:f7:7c:31:00:eb:1e:b8:09:d1:20:3f:38:a1: 95:b6:cd:72:a0:12:64:fa:f9:e5:9b:3e:25:69:24: a7:af:83:3d:c4:ce:3d:01:d9:a3:b8:1a:dd:01:33: 4e:17:48:b5:54:70:02:fe:92:36:bf:a8:ac:fe:39: b0:ef:b3:89:68:e5:13:58:79:4c:a6:2e:32:1b:fc: b1:a3:88:fa:97:ac:90:30:b8:c4:fd:b6:75:70:86: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B9:D8:8F:23:B3:BA:42:7C:D5:CA:2F:38:41:1B:77:9F:C5:E9:FE X509v3 Authority Key Identifier: keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ac:83:46:76:4e:45:ba:73:1a:89:8d:56:39:ed:e9:df:7f: 1f:1e:e9:31:77:b4:0a:36:29:13:1e:16:7c:69:94:fc:3b:dc: 66:47:c3:4a:79:4b:09:7b:13:7b:05:64:09:a4:dd:6d:9c:b0: bf:31:1e:cc:df:04:1c:34:30:f1:bb:60:1a:4f:bb:71:dc:d9: 65:0f:32:3b:5a:ba:42:4d:43:6e:e7:72:54:79:92:ca:41:56: be:83:a1:b6:86:37:b4:42:23:ca:15:f8:6f:4e:25:e8:c8:ed: 60:cd:bf:98:05:62:c4:6b:7b:45:55:21:59:f8:c4:c1:76:2e: 21:e4:a7:a9:20:b9:7a:94:de:99:93:8b:53:e8:95:45:3a:95: f3:5c:7e:e8:27:e4:b0:29:77:4c:37:2c:49:58:e3:88:62:e4: 36:6a:8e:7f:5b:24:0a:6e:b1:b0:20:1f:a2:89:a1:50:5f:19: 49:04:53:6c:30:07:62:2c:22:0e:8a:8b:7e:29:a9:69:e1:a8: c0:d5:8c:41:7e:5b:c2:64:69:50:5b:40:b7:e8:7d:97:e4:45: 20:33:90:a0:ca:7a:94:bb:8e:a6:a4:66:8f:7a:df:da:50:37: 1b:33:7d:a5:79:28:6a:de:65:04:b6:a9:74:75:01:79:cf:56: dc:3f:11:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PVCPtMHnIMD6tSlDFHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjU3NzFmOTkyZmQ3NGRmYjA3MzZlNjk1YWViNTljNmFm NjdlOTMwHhcNMjYwMjA5MTAwMTAzWhcNMjYwMjEwMTAwMTAzWjAzMTEwLwYDVQQD Eyg3NWI5ZDg4ZjIzYjNiYTQyN2NkNWNhMmYzODQxMWI3NzlmYzVlOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIvxtSINKZWY2KcYV9Lqk2y/t6BE U8835meCqhRdk4Xhl62TMYKcdGxiRr+HaNl/TLzKfIr2boppKJKAxCfZOWSJAaEp CteDq/jYmGPAwbWPdlPNTOzEtoSuRnoidHzxW0XAujLvIAoKGXEuelaPzN0qzWlX NOlZBKR1SdlOLU9fKKjcesKCjK6FnhNDeqgw4mKw63fpM92ipPQczwW8GHMn3Jq7 wvd8MQDrHrgJ0SA/OKGVts1yoBJk+vnlmz4laSSnr4M9xM49AdmjuBrdATNOF0i1 VHAC/pI2v6is/jmw77OJaOUTWHlMpi4yG/yxo4j6l6yQMLjE/bZ1cIaEbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW52I8js7pCfNXKLzhBG3efxen+MB8GA1UdIwQY MBaAFLQldx+ZL9dN+wc25pWutZxq9n6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAt OGE4NTY0YmEzYzhjLzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAtOGE4NTY0YmEzYzhj LzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqyDRnZO RbpzGomNVjnt6d9/Hx7pMXe0CjYpEx4WfGmU/DvcZkfDSnlLCXsTewVkCaTdbZyw vzEezN8EHDQw8btgGk+7cdzZZQ8yO1q6Qk1DbudyVHmSykFWvoOhtoY3tEIjyhX4 b04l6MjtYM2/mAVixGt7RVUhWfjEwXYuIeSnqSC5epTemZOLU+iVRTqV81x+6Cfk sCl3TDcsSVjjiGLkNmqOf1skCm6xsCAfoomhUF8ZSQRTbDAHYiwiDoqLfimpaeGo wNWMQX5bwmRpUFtAt+h9l+RFIDOQoMp6lLuOpqRmj3rf2lA3GzN9pXkoat5lBLap dHUBec9W3D8RIg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:21 2026 by rpki-client