This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json) Hash identifier: MvKMKJMX1e7S8MME5xiYEIvYeIrxN3cq128zq7erJv8= Subject key identifier: D9:1D:FF:F2:85:3F:AE:5F:65:51:24:18:DF:1F:2D:4E:88:E0:03:AA Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Certificate serial: 019C41A1D5F6199768CAEBF8A00C650E93A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft Manifest number: 153B Signing time: Mon 09 Feb 2026 09:00:50 +0000 Manifest this update: Mon 09 Feb 2026 09:00:50 +0000 Manifest next update: Tue 10 Feb 2026 09:00:50 +0000 Files and hashes: 1: QE8bcggi0VZyHRPBfYdhoFDqJM8.roa (hash: wboN+pw+KvvkFtiFgOQIE2+tkc1MrMcN64l5TflOk5g=) 2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: BDCXvvQEPuXG2WYklfAg85VGemPqhmGZqFTdmvsU380=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:d5:f6:19:97:68:ca:eb:f8:a0:0c:65:0e:93:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Validity Not Before: Feb 9 09:00:50 2026 GMT Not After : Feb 10 09:00:50 2026 GMT Subject: CN=d91dfff2853fae5f65512418df1f2d4e88e003aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:b9:b9:b6:46:1b:5f:b5:4f:18:d0:92:40: 79:40:df:12:4c:5c:1a:45:6c:08:5b:b4:a8:4a:6c: ce:53:5c:97:1f:87:c5:31:43:26:8a:37:d0:26:69: 1b:79:0f:32:cb:2d:17:b0:f0:35:b9:b3:25:39:fd: b0:16:8a:8d:b2:23:dc:63:0f:07:25:ed:52:b1:8e: 37:6f:30:66:6d:26:21:64:a9:cb:fe:4b:ea:78:1f: 17:fb:ad:63:06:d2:f0:ad:66:74:46:d4:86:92:82: cc:66:65:70:bc:e8:17:9f:95:23:45:8a:ad:53:04: f0:f1:17:47:fd:1b:4b:58:5d:e0:a1:97:e8:e2:f5: f8:59:51:5b:78:91:3c:8b:96:2d:43:6c:6e:92:76: 30:0d:ed:5f:3c:05:78:69:f6:92:37:35:69:0c:6e: c3:2a:3f:61:e0:da:96:35:93:b5:55:f8:40:0c:5e: bd:26:b3:fb:49:7e:b1:39:eb:8c:3f:fd:1c:91:3c: e6:51:38:b1:0c:0f:7e:97:18:80:f5:37:99:48:1a: cd:dc:e9:6c:3d:5a:8c:93:f6:28:09:ea:16:7c:ba: 5f:14:15:c2:f0:9e:ce:b1:e9:2a:2d:33:45:86:7b: b4:04:65:20:1c:42:41:e9:5b:86:2b:67:38:ac:5d: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1D:FF:F2:85:3F:AE:5F:65:51:24:18:DF:1F:2D:4E:88:E0:03:AA X509v3 Authority Key Identifier: keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:57:7e:96:78:cb:51:c6:ce:c1:44:e4:5d:55:2a:df:66:0b: 97:67:f9:40:2e:f6:90:f5:d0:a5:a4:76:e2:c0:3e:07:be:f8: ed:78:d8:e0:fc:b5:7e:ac:2a:70:21:ab:6a:0d:25:82:f0:66: a5:de:8a:37:71:1f:44:53:5b:a0:12:d8:91:3c:dd:76:d5:43: 34:ee:ea:f3:1c:c1:38:ca:e6:3f:86:34:42:23:cf:74:dc:51: 22:4a:60:92:8f:ca:26:55:25:56:0b:fe:37:a3:5e:37:94:65: 4b:52:06:4b:b0:9f:a6:bb:8b:93:db:f3:96:5b:e6:89:01:12: d6:de:cb:53:18:8e:8e:0c:8d:c6:92:1e:2f:e2:3c:f7:c2:f1: 89:e5:14:9c:8e:e4:2b:e9:1a:95:9e:ce:eb:50:7b:fc:6e:1b: ad:3b:33:95:bf:ba:2d:be:50:6c:62:e7:a3:82:e7:de:88:9a: 0b:5a:8e:a5:5d:f0:b1:76:91:95:fe:c8:a2:7e:65:37:7f:e0: fc:73:47:1c:52:b6:06:3f:b6:69:cf:37:2e:45:f0:e6:dc:4a: 37:50:20:16:43:5e:01:47:68:9b:7f:70:23:04:fa:43:29:3b: 21:c6:32:bc:bb:ab:5a:2e:ef:8c:c4:e9:b3:3c:72:30:f6:4d: 8d:b5:c7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBodX2GZdoyuv4oAxlDpOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl MzNmNDcwHhcNMjYwMjA5MDkwMDUwWhcNMjYwMjEwMDkwMDUwWjAzMTEwLwYDVQQD EyhkOTFkZmZmMjg1M2ZhZTVmNjU1MTI0MThkZjFmMmQ0ZTg4ZTAwM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgu5ubZGG1+1TxjQkkB5QN8STFwa RWwIW7SoSmzOU1yXH4fFMUMmijfQJmkbeQ8yyy0XsPA1ubMlOf2wFoqNsiPcYw8H Je1SsY43bzBmbSYhZKnL/kvqeB8X+61jBtLwrWZ0RtSGkoLMZmVwvOgXn5UjRYqt UwTw8RdH/RtLWF3goZfo4vX4WVFbeJE8i5YtQ2xuknYwDe1fPAV4afaSNzVpDG7D Kj9h4NqWNZO1VfhADF69JrP7SX6xOeuMP/0ckTzmUTixDA9+lxiA9TeZSBrN3Ols PVqMk/YoCeoWfLpfFBXC8J7OsekqLTNFhnu0BGUgHEJB6VuGK2c4rF1SGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkd//KFP65fZVEkGN8fLU6I4AOqMB8GA1UdIwQY MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt MzBjNDMwYTM5OGU2LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2 LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFd+lnjL UcbOwUTkXVUq32YLl2f5QC72kPXQpaR24sA+B7747XjY4Py1fqwqcCGrag0lgvBm pd6KN3EfRFNboBLYkTzddtVDNO7q8xzBOMrmP4Y0QiPPdNxRIkpgko/KJlUlVgv+ N6NeN5RlS1IGS7CfpruLk9vzllvmiQES1t7LUxiOjgyNxpIeL+I898LxieUUnI7k K+kalZ7O61B7/G4brTszlb+6Lb5QbGLno4Ln3oiaC1qOpV3wsXaRlf7Ion5lN3/g /HNHHFK2Bj+2ac83LkXw5txKN1AgFkNeAUdom39wIwT6Qyk7IcYyvLurWi7vjMTp szxyMPZNjbXH4g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:38 2026 by rpki-client