This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json) Hash identifier: TfANb+UKmTywF4pYUyNTsbeWVEelo85mIpf1lvh9cfs= Subject key identifier: D0:2A:33:95:EF:AD:0B:7E:BB:C3:86:55:89:79:56:DC:F7:A7:89:63 Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71 Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71 Certificate serial: 019C420F8EC216C838E1A14817ECCA8EE852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:41 +0000 Manifest this update: Mon 09 Feb 2026 11:00:41 +0000 Manifest next update: Tue 10 Feb 2026 11:00:41 +0000 Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=) 2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: OEfyaxnrsjuide/ZmRAI8Z35xgwKu43FID7X+/1W4oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:8e:c2:16:c8:38:e1:a1:48:17:ec:ca:8e:e8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71 Validity Not Before: Feb 9 11:00:41 2026 GMT Not After : Feb 10 11:00:41 2026 GMT Subject: CN=d02a3395efad0b7ebbc38655897956dcf7a78963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:54:e9:03:94:09:50:a8:76:01:fb:9c:7b: 1b:19:22:79:c1:fe:24:5b:75:6b:4c:5a:53:0e:7c: 04:84:c2:bd:ee:ac:65:d5:8d:1c:e6:7e:55:b6:7c: 48:16:1c:5e:57:5a:f7:9e:1f:f9:2a:71:62:60:0a: a3:3b:06:f8:51:75:fa:6a:a4:7a:49:73:41:ae:d5: 5a:70:1b:b8:2e:20:d5:88:ba:69:0b:a9:7e:1b:a2: 5a:63:6f:64:ef:d2:a1:6c:ed:38:ec:e5:88:7b:cc: bb:0d:31:ec:b8:7c:0f:3f:ed:df:f1:75:0a:2d:46: ef:71:db:e6:98:0d:ce:99:77:76:77:ac:26:89:07: 22:82:d4:7a:44:a7:00:d2:d2:bd:eb:11:8d:c3:fe: 13:ef:f4:d1:e6:1c:73:29:b3:60:7f:7e:49:79:16: c2:d2:12:18:2c:06:51:88:ec:32:c5:c9:ca:46:e5: f2:c8:1a:94:9d:f2:48:eb:84:53:e9:e5:c1:56:3f: b5:eb:48:e5:38:40:d9:50:33:b2:d0:1b:c6:aa:9a: a2:c1:14:f7:53:3a:67:6e:ff:66:9e:59:0f:c7:61: 60:71:9b:60:dd:90:b3:76:61:a6:01:0c:d3:b3:e6: 64:5a:44:cb:d1:dd:44:81:83:73:3f:1f:a5:cd:e3: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2A:33:95:EF:AD:0B:7E:BB:C3:86:55:89:79:56:DC:F7:A7:89:63 X509v3 Authority Key Identifier: keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2f:a9:4c:61:ab:77:7b:ea:34:a8:92:c7:30:77:b5:13:d6: 55:df:ba:c6:2c:76:83:bf:63:a6:02:ab:69:13:8d:69:1f:59: 14:24:94:31:8c:e3:11:d2:97:8a:1d:19:d9:10:f8:c6:a8:db: 55:e9:95:8d:a2:cf:f4:bf:1c:54:01:e5:69:9d:9d:a0:ff:c0: a9:93:7c:6d:ff:63:1f:7f:c6:11:d8:70:d0:c0:d0:80:6b:ec: 12:95:fd:37:5e:26:70:d6:ee:f9:11:83:2f:2a:bc:42:56:e6: af:fa:52:7d:5e:b3:3a:4d:a5:3b:ea:6c:8a:75:f7:54:6f:9f: 51:f6:f4:d9:0d:34:8b:e9:35:3a:34:6c:47:b7:fd:fc:f9:8a: 01:6c:25:9a:ea:37:03:72:d1:99:0f:93:77:b9:d0:e4:14:d5: 7e:5d:86:5f:31:b2:f8:19:43:4c:db:99:00:0c:81:05:da:8b: e4:77:02:0f:c2:e7:26:61:4f:8c:56:48:d9:ed:1e:c9:39:4d: 6f:a5:5f:ee:66:d2:27:49:d6:aa:39:96:7b:cf:2f:5d:1f:f1: d0:3c:8a:86:99:0a:24:f1:38:c1:5a:e7:0a:da:3b:ae:83:36: 8f:c5:74:a0:8f:2f:93:bd:54:e3:41:f7:c3:4a:3c:f9:a4:49: 1f:33:45:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD47CFsg44aFIF+zKjuhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWU2ZjUyNGVlZDBmNzNjODQ5YjA2NDM4MjdiODBlMzdj NDZjNzEwHhcNMjYwMjA5MTEwMDQxWhcNMjYwMjEwMTEwMDQxWjAzMTEwLwYDVQQD EyhkMDJhMzM5NWVmYWQwYjdlYmJjMzg2NTU4OTc5NTZkY2Y3YTc4OTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1U6QOUCVCodgH7nHsbGSJ5wf4k W3VrTFpTDnwEhMK97qxl1Y0c5n5VtnxIFhxeV1r3nh/5KnFiYAqjOwb4UXX6aqR6 SXNBrtVacBu4LiDViLppC6l+G6JaY29k79KhbO047OWIe8y7DTHsuHwPP+3f8XUK LUbvcdvmmA3OmXd2d6wmiQcigtR6RKcA0tK96xGNw/4T7/TR5hxzKbNgf35JeRbC 0hIYLAZRiOwyxcnKRuXyyBqUnfJI64RT6eXBVj+160jlOEDZUDOy0BvGqpqiwRT3 Uzpnbv9mnlkPx2FgcZtg3ZCzdmGmAQzTs+ZkWkTL0d1EgYNzPx+lzeOxCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAqM5XvrQt+u8OGVYl5Vtz3p4ljMB8GA1UdIwQY MBaAFE6ub1JO7Q9zyEmwZDgnuA43xGxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzct M2JiMmNkODBhMmM5LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzctM2JiMmNkODBhMmM5 LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy+pTGGr d3vqNKiSxzB3tRPWVd+6xix2g79jpgKraRONaR9ZFCSUMYzjEdKXih0Z2RD4xqjb VemVjaLP9L8cVAHlaZ2doP/AqZN8bf9jH3/GEdhw0MDQgGvsEpX9N14mcNbu+RGD Lyq8Qlbmr/pSfV6zOk2lO+psinX3VG+fUfb02Q00i+k1OjRsR7f9/PmKAWwlmuo3 A3LRmQ+Td7nQ5BTVfl2GXzGy+BlDTNuZAAyBBdqL5HcCD8LnJmFPjFZI2e0eyTlN b6Vf7mbSJ0nWqjmWe88vXR/x0DyKhpkKJPE4wVrnCto7roM2j8V0oI8vk71U40H3 w0o8+aRJHzNFXg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:57 2026 by rpki-client