This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json) Hash identifier: MiqGqE191aQ5NIzC4Kp6VUmIUFAWuRJLsS5zL4UmKmE= Subject key identifier: AF:CC:BA:79:72:C8:D8:B4:CE:95:DC:93:1D:B3:8E:35:3E:5B:70:1B Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Certificate serial: 019C435946700D4A4EC66C5B57151245FDF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft Manifest number: 0F0C Signing time: Mon 09 Feb 2026 17:00:50 +0000 Manifest this update: Mon 09 Feb 2026 17:00:50 +0000 Manifest next update: Tue 10 Feb 2026 17:00:50 +0000 Files and hashes: 1: MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa (hash: skXEJp7MsTuCw1bxF6Ss3mHgzce5kN4hSKRqdlY6UhE=) 2: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: 5Z9uBwzRPGMM/4T+kFkj11QOBZHsh2+hm1Xqp9FnPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:46:70:0d:4a:4e:c6:6c:5b:57:15:12:45:fd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Validity Not Before: Feb 9 17:00:50 2026 GMT Not After : Feb 10 17:00:50 2026 GMT Subject: CN=afccba7972c8d8b4ce95dc931db38e353e5b701b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:dd:ee:bd:67:40:44:41:78:30:96:68:87: ea:b8:82:8f:64:8c:c5:d0:8a:a8:76:85:c3:26:31: 44:a9:aa:91:41:77:0d:54:83:00:37:df:98:f4:68: 4e:f7:0c:d7:df:b8:51:f9:b3:36:c7:49:98:3b:40: a6:e6:5a:e5:9d:35:79:03:bf:da:ef:42:98:2a:a4: 82:7e:03:23:fc:5f:a1:42:c9:c6:d9:8d:87:d0:35: 4c:72:a5:8b:98:e8:bf:b6:7a:af:c1:32:a0:05:6c: 4c:b7:ca:bf:b3:db:fc:5b:4e:a6:81:ae:29:21:9d: 1a:3b:43:2e:db:4e:46:a9:fa:ff:9f:d4:ad:97:29: cb:6b:f1:7d:82:43:e5:b7:4f:7d:3f:38:c9:8c:df: 6b:18:13:48:7f:63:f5:68:36:7c:96:a5:ec:52:cb: 9f:f8:f7:32:17:e4:80:9b:b4:1c:c1:6a:63:dc:f7: 20:ee:5b:a4:7b:7b:93:ae:47:c3:20:2c:5b:8b:a2: ce:97:fb:1a:42:65:19:f4:47:0d:29:44:17:34:a5: 3f:c5:a5:6d:96:18:86:78:ac:43:01:9b:6e:27:70: 22:bb:54:72:73:76:d4:7c:f3:38:f9:21:41:d4:33: e6:93:1e:0b:9d:1d:8b:40:72:3e:f9:5e:e5:de:15: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CC:BA:79:72:C8:D8:B4:CE:95:DC:93:1D:B3:8E:35:3E:5B:70:1B X509v3 Authority Key Identifier: keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9d:bd:23:e3:c7:6b:e0:b5:52:64:fc:c9:32:d0:d4:c9:2c: 0a:59:72:eb:1c:a8:6a:a9:26:55:58:ba:c6:df:90:2c:d2:db: 78:ee:94:43:31:6d:88:88:a1:c5:ec:14:a5:a8:95:83:73:38: a3:de:57:9e:6f:c1:22:38:56:26:f5:f5:9a:4f:91:bc:95:0b: 0d:70:73:0a:22:b7:03:35:17:1c:80:b8:8a:90:f9:60:04:84: 8e:63:99:89:ab:e1:2f:f7:51:9e:19:d4:51:50:85:44:d6:98: de:ce:86:f0:4e:e0:c6:35:79:28:6c:80:7c:14:a4:44:be:21: 8e:89:3a:61:97:62:cf:27:17:6e:27:3c:e5:e1:78:ff:0d:b2: cf:23:99:ec:af:02:d8:05:fe:bf:34:fb:02:4a:e7:28:45:bd: dd:37:22:c9:4c:12:bf:18:09:38:52:a0:0d:18:f6:bd:80:de: d7:3d:da:39:3a:83:ff:3e:5b:36:bf:3c:81:c9:99:b5:1b:d7: 31:4e:d5:d9:66:69:13:26:dd:e9:f0:4b:82:8b:02:38:d7:44: 7b:98:f1:b2:1b:6e:d0:c3:03:62:e1:e2:88:ef:07:a2:94:44: 31:1b:f4:ec:04:41:b7:90:a1:a4:a2:42:f0:ad:ec:f7:8a:f3: 8e:b3:23:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUZwDUpOxmxbVxUSRf3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3 YjhiNGYwHhcNMjYwMjA5MTcwMDUwWhcNMjYwMjEwMTcwMDUwWjAzMTEwLwYDVQQD EyhhZmNjYmE3OTcyYzhkOGI0Y2U5NWRjOTMxZGIzOGUzNTNlNWI3MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejd7r1nQERBeDCWaIfquIKPZIzF 0IqodoXDJjFEqaqRQXcNVIMAN9+Y9GhO9wzX37hR+bM2x0mYO0Cm5lrlnTV5A7/a 70KYKqSCfgMj/F+hQsnG2Y2H0DVMcqWLmOi/tnqvwTKgBWxMt8q/s9v8W06mga4p IZ0aO0Mu205Gqfr/n9StlynLa/F9gkPlt099PzjJjN9rGBNIf2P1aDZ8lqXsUsuf +PcyF+SAm7QcwWpj3Pcg7luke3uTrkfDICxbi6LOl/saQmUZ9EcNKUQXNKU/xaVt lhiGeKxDAZtuJ3Aiu1Ryc3bUfPM4+SFB1DPmkx4LnR2LQHI++V7l3hUleQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/MunlyyNi0zpXckx2zjjU+W3AbMB8GA1UdIwQY MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATp29I+PH a+C1UmT8yTLQ1MksClly6xyoaqkmVVi6xt+QLNLbeO6UQzFtiIihxewUpaiVg3M4 o95Xnm/BIjhWJvX1mk+RvJULDXBzCiK3AzUXHIC4ipD5YASEjmOZiavhL/dRnhnU UVCFRNaY3s6G8E7gxjV5KGyAfBSkRL4hjok6YZdizycXbic85eF4/w2yzyOZ7K8C 2AX+vzT7AkrnKEW93TciyUwSvxgJOFKgDRj2vYDe1z3aOTqD/z5bNr88gcmZtRvX MU7V2WZpEybd6fBLgosCONdEe5jxshtu0MMDYuHiiO8HopREMRv07ARBt5ChpKJC 8K3s94rzjrMj8g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:47 2026 by rpki-client