This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json) Hash identifier: RuC2FnODO3u0qJyYecnl5y1O39zPmuJCE1VTTB3a7Yw= Subject key identifier: B3:A7:64:D0:08:D0:1B:C3:85:76:9D:AF:87:D8:D5:5B:27:1E:06:22 Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Certificate serial: 019C42102E64D912BBC5CDBF3357070DBCB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft Manifest number: 0DD5 Signing time: Mon 09 Feb 2026 11:01:22 +0000 Manifest this update: Mon 09 Feb 2026 11:01:22 +0000 Manifest next update: Tue 10 Feb 2026 11:01:22 +0000 Files and hashes: 1: CCbPnsaraqAntkcEPLIKeh2owBA.roa (hash: lDC1/eX7jtqUQJvtcDT0bJoM6udb8V374OopJffpxoU=) 2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: 9ca0I0uujb9Rh4HKoOnaWu/Qiai2UlozunYvPz8NKUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:2e:64:d9:12:bb:c5:cd:bf:33:57:07:0d:bc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c Validity Not Before: Feb 9 11:01:22 2026 GMT Not After : Feb 10 11:01:22 2026 GMT Subject: CN=b3a764d008d01bc385769daf87d8d55b271e0622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:87:f0:1f:d7:e2:00:ec:75:37:47:d7:50: 9f:07:27:3d:83:14:4d:d1:29:7a:33:d0:41:7d:f1: 58:2a:7c:2a:a6:2f:77:ad:1b:3c:5f:9f:b1:41:51: aa:b5:8b:2a:aa:98:87:cc:2c:d3:49:0a:d2:a8:27: fd:05:9f:0c:35:ab:f2:ce:47:2d:00:45:5b:cd:47: e8:79:1e:ac:cb:64:8e:3c:07:9f:85:d8:f7:5a:fd: d3:ab:83:42:c5:77:31:3c:e6:06:8c:cf:de:8e:e1: 58:36:28:33:8f:b3:79:ea:df:81:be:1e:44:61:0e: e6:20:c8:67:50:4a:8b:9d:99:6e:cd:9e:5f:76:70: df:92:50:23:ed:09:9a:44:33:8e:2e:1b:02:bd:8f: d0:e6:4e:ff:9f:eb:2b:77:81:54:31:01:a3:d6:c1: 3d:fb:cf:d9:0c:f1:23:25:68:46:e9:5e:22:15:4e: ae:50:79:9a:00:46:65:ac:fc:f6:7c:53:d3:4d:0b: eb:89:99:ed:6f:5a:c6:d2:4e:a5:08:68:4e:c4:00: 91:61:a4:54:6e:16:0d:80:13:bc:95:64:aa:eb:7c: 89:81:02:4d:21:0c:50:95:9f:cd:7c:f1:f7:6e:3a: 95:24:9d:cb:fa:f2:45:c2:5e:77:1e:5a:9a:c0:3a: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A7:64:D0:08:D0:1B:C3:85:76:9D:AF:87:D8:D5:5B:27:1E:06:22 X509v3 Authority Key Identifier: keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:29:2b:dc:9c:fa:17:fb:94:bc:e7:8b:60:44:33:4b:10:86: 04:c4:f1:00:ed:e6:e0:8d:a7:d2:cd:79:03:eb:8d:96:89:a7: fc:44:12:7d:de:a7:23:2e:f9:38:f8:26:1b:b9:d7:96:2a:84: 20:74:1a:71:b7:5c:02:2d:72:cd:35:54:66:66:33:95:45:7d: ca:57:f1:f1:5b:ed:b7:23:e9:23:b4:dd:61:5b:ad:db:29:c8: b8:4c:8e:09:00:09:f4:f6:5b:74:d3:3a:15:aa:07:2e:b2:6c: 14:25:16:f7:09:ee:0f:b0:69:d2:ae:e5:3a:de:31:ae:d3:57: 65:13:09:06:8a:ef:7a:5b:6c:cb:98:81:27:a3:e5:8c:c3:53: 83:9f:3f:d6:bc:96:47:4c:98:75:ac:3e:c4:d8:08:9f:fe:fb: 91:66:2d:62:a8:06:08:0a:db:7d:78:04:c4:14:e3:2c:ab:34: 04:a7:bd:44:04:ee:ba:b6:d1:a8:c2:18:e1:b4:f9:fa:c1:7c: d3:10:36:96:f7:b5:aa:94:cb:c5:d7:97:c7:3f:b6:e1:a9:a5: c7:6b:17:44:ff:fc:8d:58:2b:9c:df:4b:bf:04:44:45:ac:71: 66:52:43:1e:96:6f:5c:c0:d5:fe:99:95:2c:ea:4b:e8:05:b2: 6c:0e:b2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEC5k2RK7xc2/M1cHDby4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3 MDM5OGMwHhcNMjYwMjA5MTEwMTIyWhcNMjYwMjEwMTEwMTIyWjAzMTEwLwYDVQQD EyhiM2E3NjRkMDA4ZDAxYmMzODU3NjlkYWY4N2Q4ZDU1YjI3MWUwNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCiH8B/X4gDsdTdH11CfByc9gxRN 0Sl6M9BBffFYKnwqpi93rRs8X5+xQVGqtYsqqpiHzCzTSQrSqCf9BZ8MNavyzkct AEVbzUfoeR6sy2SOPAefhdj3Wv3Tq4NCxXcxPOYGjM/ejuFYNigzj7N56t+Bvh5E YQ7mIMhnUEqLnZluzZ5fdnDfklAj7QmaRDOOLhsCvY/Q5k7/n+srd4FUMQGj1sE9 +8/ZDPEjJWhG6V4iFU6uUHmaAEZlrPz2fFPTTQvriZntb1rG0k6lCGhOxACRYaRU bhYNgBO8lWSq63yJgQJNIQxQlZ/NfPH3bjqVJJ3L+vJFwl53HlqawDoocQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOnZNAI0BvDhXadr4fY1VsnHgYiMB8GA1UdIwQY MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4 LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlykr3Jz6 F/uUvOeLYEQzSxCGBMTxAO3m4I2n0s15A+uNlomn/EQSfd6nIy75OPgmG7nXliqE IHQacbdcAi1yzTVUZmYzlUV9ylfx8VvttyPpI7TdYVut2ynIuEyOCQAJ9PZbdNM6 FaoHLrJsFCUW9wnuD7Bp0q7lOt4xrtNXZRMJBorveltsy5iBJ6PljMNTg58/1ryW R0yYdaw+xNgIn/77kWYtYqgGCArbfXgExBTjLKs0BKe9RATuurbRqMIY4bT5+sF8 0xA2lve1qpTLxdeXxz+24amlx2sXRP/8jVgrnN9LvwRERaxxZlJDHpZvXMDV/pmV LOpL6AWybA6yxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:20 2026 by rpki-client