This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json) Hash identifier: Ss5IL8BLsIrZLs8fo5E0zJzzSRbGztIk58fTHYtsBlk= Subject key identifier: 8C:8B:53:57:B0:07:C5:C9:F0:A6:C1:57:F5:1C:08:41:E3:03:9F:05 Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Certificate serial: 019C420F4F927A865C27C57566E4D180DB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=) 2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: pLauUeLDBL2A4h2rPkLDElVbK918+Law9f6umwcfbHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4f:92:7a:86:5c:27:c5:75:66:e4:d1:80:db:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=8c8b5357b007c5c9f0a6c157f51c0841e3039f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:eb:76:8f:7f:c1:21:fa:f8:26:96:88:c0: d3:63:15:19:1a:5a:9e:0d:2a:7c:af:fe:5e:d3:7b: 3a:e4:29:ed:5f:20:3f:47:1b:0d:ba:bb:0c:93:b3: 64:6b:cd:ed:7b:58:5a:58:e4:90:61:46:9f:21:f3: 5c:73:fc:88:a6:77:40:18:c8:b8:03:af:14:ef:fb: 85:bd:66:eb:d6:a2:1a:28:54:0d:a8:7b:f4:57:28: 41:1c:75:84:dd:cb:13:90:21:1f:27:a9:33:fd:c7: 2a:c5:db:74:53:2f:38:9a:23:60:62:3c:9e:f5:bd: 3f:59:25:75:31:74:a0:49:97:b0:56:d3:3e:e0:98: cc:9f:b3:21:85:0f:9e:1f:a5:82:22:82:c0:ee:04: 34:48:78:47:cc:bc:ec:05:e2:2e:d8:c5:24:4b:14: 12:2e:39:fe:66:61:23:c4:54:40:8c:a3:fd:16:f9: c6:1f:2d:d5:93:e7:2a:a1:5d:3c:d2:65:81:52:b9: a6:35:ba:b3:25:b7:e1:f3:14:7c:58:6d:c8:98:2b: eb:72:5a:bc:8b:7c:82:5d:c4:4d:d6:e1:ed:cd:ff: 32:f9:36:5a:23:6b:5a:4c:d3:ae:ca:b8:ec:05:31: 16:34:87:1d:cb:6e:42:e0:26:65:97:44:53:ae:44: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8B:53:57:B0:07:C5:C9:F0:A6:C1:57:F5:1C:08:41:E3:03:9F:05 X509v3 Authority Key Identifier: keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:00:9b:33:ee:15:1e:cb:76:35:2a:d1:40:fe:32:ac:fb:07: 0c:3a:2b:63:a0:00:68:dc:dd:00:34:ce:46:3f:17:ab:e3:63: e9:88:3a:e2:9a:2b:ff:9d:9c:f6:7c:5f:12:e6:d8:79:92:3e: 0e:5a:9a:22:58:4a:26:75:c5:61:47:fe:ad:de:ef:c5:ae:83: 53:e5:e0:3a:e7:d1:f7:71:b1:d8:84:d2:d8:44:cc:01:9d:ed: b0:d6:fb:72:41:61:79:ab:3c:47:20:28:76:c4:a1:19:66:73: c7:00:eb:5a:64:3a:4d:0a:0c:20:fe:4b:61:58:b5:e7:9e:fd: 00:39:66:78:8f:84:c8:4d:06:d2:bd:89:af:65:bb:66:e8:d3: 82:e0:b4:aa:c6:98:02:e5:10:cd:19:5f:22:54:7b:d8:5a:f0: c8:9c:b8:2f:ea:d9:f4:0d:75:b1:67:49:1e:f3:8d:49:49:fc: 8e:39:86:e5:f0:4a:6f:e6:f2:84:22:08:ab:67:f6:83:cf:f1: 92:b2:10:bb:41:da:6a:fb:f1:be:0e:7a:27:2d:26:43:05:3d: 89:4b:ab:a9:c0:6c:44:30:32:de:e6:7f:bb:6f:c0:44:f2:b5: 75:53:21:e1:eb:51:62:9c:50:cd:cf:0a:58:6f:9b:45:2f:72: 53:f6:3b:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0+SeoZcJ8V1ZuTRgNskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx ZmFlZDQwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD Eyg4YzhiNTM1N2IwMDdjNWM5ZjBhNmMxNTdmNTFjMDg0MWUzMDM5ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zzrdo9/wSH6+CaWiMDTYxUZGlqe DSp8r/5e03s65CntXyA/RxsNursMk7Nka83te1haWOSQYUafIfNcc/yIpndAGMi4 A68U7/uFvWbr1qIaKFQNqHv0VyhBHHWE3csTkCEfJ6kz/ccqxdt0Uy84miNgYjye 9b0/WSV1MXSgSZewVtM+4JjMn7MhhQ+eH6WCIoLA7gQ0SHhHzLzsBeIu2MUkSxQS Ljn+ZmEjxFRAjKP9FvnGHy3Vk+cqoV080mWBUrmmNbqzJbfh8xR8WG3ImCvrclq8 i3yCXcRN1uHtzf8y+TZaI2taTNOuyrjsBTEWNIcdy25C4CZll0RTrkQ4gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyLU1ewB8XJ8KbBV/UcCEHjA58FMB8GA1UdIwQY MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4 LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgCbM+4V Hst2NSrRQP4yrPsHDDorY6AAaNzdADTORj8Xq+Nj6Yg64por/52c9nxfEubYeZI+ DlqaIlhKJnXFYUf+rd7vxa6DU+XgOufR93Gx2ITS2ETMAZ3tsNb7ckFheas8RyAo dsShGWZzxwDrWmQ6TQoMIP5LYVi15579ADlmeI+EyE0G0r2Jr2W7ZujTguC0qsaY AuUQzRlfIlR72FrwyJy4L+rZ9A11sWdJHvONSUn8jjmG5fBKb+byhCIIq2f2g8/x krIQu0Haavvxvg56Jy0mQwU9iUurqcBsRDAy3uZ/u2/ARPK1dVMh4etRYpxQzc8K WG+bRS9yU/Y7xQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:46 2026 by rpki-client