This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json) Hash identifier: ot3XCD1axU7Pyq+Hlf9sQ3z5zPcY0KfAjDPdAlRAYbg= Subject key identifier: 95:3E:BB:8D:D1:1D:89:80:3E:5A:52:67:71:DA:88:41:A5:BC:6B:04 Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94 Certificate serial: 019C43229DB816AF7966D26ED29DC2F0201D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: 1-uapFsJGKC_fK5bX4vidKDJn0HE.roa (hash: GOVn0PIk7Y5SfmSrA/v+/c91vfTOsMUpyn3e33Mi8Rk=) 2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: UpgO1cSgGjy/lMqOVI9ZNcavqsU4Mq9F1mZus9mHC30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9d:b8:16:af:79:66:d2:6e:d2:9d:c2:f0:20:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=953ebb8dd11d89803e5a526771da8841a5bc6b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:cd:a6:56:00:a0:1d:4a:51:56:45:0b:3b: 19:96:4e:91:02:b5:c6:f7:c6:f8:30:ae:eb:20:bb: 56:e9:43:71:60:dd:04:b3:25:9b:d1:1d:01:06:ac: 6a:5f:58:a4:45:3a:44:75:01:77:a1:48:e6:46:e3: 6c:9c:2c:76:f7:2f:1a:95:2a:35:2c:85:44:23:93: e0:93:70:5b:76:97:86:3b:cc:7c:43:8a:c5:55:38: ad:1c:3a:cd:15:1b:96:21:97:75:78:3d:76:73:15: bc:54:a7:22:bc:c8:e5:48:9c:97:0d:c9:a3:17:db: 89:66:f1:02:6f:9d:f0:28:c5:cc:db:10:85:9f:a2: 79:e1:ab:f1:f7:9f:f4:96:33:d7:b7:e2:58:8d:04: fc:ea:a4:72:bf:30:c1:9a:84:b6:47:c5:d4:ee:a8: 68:1c:2d:05:b2:2b:41:d8:31:2d:45:19:39:b2:92: 15:73:3a:80:b6:80:61:82:2d:f0:fd:33:91:84:29: 60:6b:72:fe:2e:24:cf:ad:96:d2:77:65:c3:3e:4e: 2d:16:5a:3e:9a:10:9a:e1:40:ed:ac:88:c4:1d:81: d8:68:71:b1:cb:d0:79:04:79:30:c8:48:46:eb:01: dd:9d:e0:03:35:74:ea:1b:7d:17:a8:e1:48:5e:15: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:BB:8D:D1:1D:89:80:3E:5A:52:67:71:DA:88:41:A5:BC:6B:04 X509v3 Authority Key Identifier: keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d4:42:d9:3d:59:c4:47:30:b0:14:5e:e3:37:e0:2a:31:bd: 7e:f2:8a:d0:fc:af:00:e0:3b:b2:28:7e:ca:3f:58:bc:e6:8f: 18:4a:b5:f1:c6:4c:a3:6c:ac:58:68:b4:44:f4:26:70:7b:35: 64:52:61:2e:1a:48:97:ea:d9:99:88:e2:83:b6:2f:4b:80:d4: 87:a4:dd:c8:f8:98:b2:ba:81:7c:c8:58:bd:58:1a:72:87:af: 47:8b:1b:d7:ed:25:7f:29:b0:79:0a:9b:71:ce:53:74:5e:23: 8c:60:a3:47:28:5d:89:69:3f:9b:ef:df:64:1d:ff:5d:62:51: 47:5f:69:40:c3:c3:74:f4:51:4d:69:1f:b5:52:e8:81:50:06: 08:8a:1e:be:e1:48:9e:1a:cd:99:0f:f9:0e:c1:45:bf:1e:0d: 3b:d2:2b:19:d2:d8:6d:7a:70:03:15:8f:b5:2c:45:f1:de:a6: ce:5d:ce:d0:6f:d1:a3:93:08:68:1d:5a:ef:82:35:29:1b:46: fa:9d:7c:62:8c:9b:b3:8f:0c:f9:42:46:51:59:49:ed:09:91: ba:8b:ee:d2:61:03:bd:08:6d:2d:a3:b6:a8:67:05:2d:be:7c: 7f:c1:8a:f9:d6:45:4e:19:52:66:d8:f2:59:70:24:40:a7:d8: 84:ea:23:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp24Fq95ZtJu0p3C8CAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4 NWRlOTQwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD Eyg5NTNlYmI4ZGQxMWQ4OTgwM2U1YTUyNjc3MWRhODg0MWE1YmM2YjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3NplYAoB1KUVZFCzsZlk6RArXG 98b4MK7rILtW6UNxYN0EsyWb0R0BBqxqX1ikRTpEdQF3oUjmRuNsnCx29y8alSo1 LIVEI5Pgk3BbdpeGO8x8Q4rFVTitHDrNFRuWIZd1eD12cxW8VKcivMjlSJyXDcmj F9uJZvECb53wKMXM2xCFn6J54avx95/0ljPXt+JYjQT86qRyvzDBmoS2R8XU7qho HC0FsitB2DEtRRk5spIVczqAtoBhgi3w/TORhClga3L+LiTPrZbSd2XDPk4tFlo+ mhCa4UDtrIjEHYHYaHGxy9B5BHkwyEhG6wHdneADNXTqG30XqOFIXhWiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU+u43RHYmAPlpSZ3HaiEGlvGsEMB8GA1UdIwQY MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtRC2T1Z xEcwsBRe4zfgKjG9fvKK0PyvAOA7sih+yj9YvOaPGEq18cZMo2ysWGi0RPQmcHs1 ZFJhLhpIl+rZmYjig7YvS4DUh6TdyPiYsrqBfMhYvVgacoevR4sb1+0lfymweQqb cc5TdF4jjGCjRyhdiWk/m+/fZB3/XWJRR19pQMPDdPRRTWkftVLogVAGCIoevuFI nhrNmQ/5DsFFvx4NO9IrGdLYbXpwAxWPtSxF8d6mzl3O0G/Ro5MIaB1a74I1KRtG +p18Yoybs48M+UJGUVlJ7QmRuovu0mEDvQhtLaO2qGcFLb58f8GK+dZFThlSZtjy WXAkQKfYhOojXQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:40 2026 by rpki-client