This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json) Hash identifier: 7nnaBXQeqOZ6rIFlApTCTecbUhuVycmMyV/infGcS7Q= Subject key identifier: 9D:E8:50:7A:A9:8D:06:A3:24:D7:A3:5F:A6:69:B8:3D:F2:37:5A:AF Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a Certificate serial: 019C432288C876B2F65DD70365D321980E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft Manifest number: 13B9 Signing time: Mon 09 Feb 2026 16:01:02 +0000 Manifest this update: Mon 09 Feb 2026 16:01:02 +0000 Manifest next update: Tue 10 Feb 2026 16:01:02 +0000 Files and hashes: 1: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: HogfQnmOJpgCJ7PYB/85I8kfgChCu435V256swE34Qw=) 2: xqMEiaPGgAlIQo3TzS_5VB2M2OQ.roa (hash: Y2eUYtTDjf9bWENJZhOD8HXOBzywjtXZMecCETD0P0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:88:c8:76:b2:f6:5d:d7:03:65:d3:21:98:0e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a Validity Not Before: Feb 9 16:01:02 2026 GMT Not After : Feb 10 16:01:02 2026 GMT Subject: CN=9de8507aa98d06a324d7a35fa669b83df2375aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:6d:03:ad:aa:5c:81:5b:52:29:6a:ce:ce: ba:42:b5:b0:12:cf:67:dd:ee:e1:98:ad:67:65:00: 2c:9c:0b:4f:97:31:fe:03:56:4a:aa:d1:7e:eb:0b: 76:8b:16:b2:7e:52:ba:43:10:00:b9:2e:85:4f:eb: 54:c0:54:2f:90:29:40:00:77:6f:fc:3d:98:4a:f8: 87:00:d8:31:9c:0b:90:8d:1b:32:6f:9c:7e:b3:86: 09:c6:25:07:af:71:f6:71:53:ff:24:34:15:bd:c2: be:8d:64:c5:5a:74:d6:14:2b:d8:20:51:a1:25:45: 53:b8:aa:4f:12:dd:4d:87:fe:67:86:7c:e6:3a:f3: ae:d0:e8:d5:a3:36:dd:60:09:01:87:21:d9:27:4d: 75:f4:bf:e5:5f:67:46:5d:fb:f2:3c:f5:c7:78:3c: fb:2d:06:06:31:e3:d8:65:cb:e1:e3:38:9c:47:79: a5:6c:bb:5a:ae:7d:58:72:78:da:f2:b0:ec:85:90: ed:93:68:e5:b8:af:24:64:a7:ce:1b:4b:5a:60:7d: 5c:10:f3:44:d8:29:d3:3a:e0:b6:de:d5:59:ec:71: ae:a0:d9:9c:8b:08:06:84:8f:82:09:c0:db:c6:77: b6:d5:ca:e1:40:5a:69:69:4c:1d:4a:00:e3:bc:5b: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E8:50:7A:A9:8D:06:A3:24:D7:A3:5F:A6:69:B8:3D:F2:37:5A:AF X509v3 Authority Key Identifier: keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9d:3c:f4:7c:e9:ac:0b:bb:ca:ea:61:e5:16:f1:31:fc:f3: 58:e7:e9:ed:b9:a9:48:d2:79:c9:97:76:aa:b7:34:36:0e:ae: b6:04:fe:bd:da:8a:bb:cb:34:fa:38:a9:22:45:5e:e0:b8:d0: 87:56:7c:eb:c3:33:76:6a:4b:8a:2c:db:cb:22:c2:ee:5c:37: e5:fa:67:47:69:5d:ab:5b:5f:d8:6f:57:2c:49:22:23:7f:48: 9b:a1:e8:50:56:23:94:e1:b5:64:91:b6:6e:f9:e1:49:29:07: 31:25:22:da:71:a5:0b:6a:ea:5b:3d:3a:13:18:fc:03:ed:34: 1f:91:a6:80:4e:2d:dd:a5:73:d4:fe:4e:d9:cc:8a:b7:69:ea: b7:ad:fd:26:67:c5:91:2a:58:c9:27:0b:58:5e:f0:eb:36:42: 0c:17:d4:43:a4:78:c6:b0:1f:71:9f:97:6a:0a:db:20:6b:ab: 19:a3:c4:30:90:16:5b:bc:b7:d9:24:b6:4d:db:12:e2:dc:31: af:ff:37:c4:e0:f6:09:f3:19:bd:55:da:7d:d8:8c:1b:1a:15: 09:f5:85:80:60:fe:46:f2:ea:f5:69:3c:92:d3:62:62:7f:c6: fc:c4:cb:45:10:ce:af:63:e6:a0:18:8a:94:83:7c:e2:4c:7d: f6:78:3a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIojIdrL2XdcDZdMhmA4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZDhiMjdhYWE1NWU1MWEzNDVmNmE0NTE5ZTM2Nzk1NTA0 NmMzMGEwHhcNMjYwMjA5MTYwMTAyWhcNMjYwMjEwMTYwMTAyWjAzMTEwLwYDVQQD Eyg5ZGU4NTA3YWE5OGQwNmEzMjRkN2EzNWZhNjY5YjgzZGYyMzc1YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm5tA62qXIFbUilqzs66QrWwEs9n 3e7hmK1nZQAsnAtPlzH+A1ZKqtF+6wt2ixayflK6QxAAuS6FT+tUwFQvkClAAHdv /D2YSviHANgxnAuQjRsyb5x+s4YJxiUHr3H2cVP/JDQVvcK+jWTFWnTWFCvYIFGh JUVTuKpPEt1Nh/5nhnzmOvOu0OjVozbdYAkBhyHZJ0119L/lX2dGXfvyPPXHeDz7 LQYGMePYZcvh4zicR3mlbLtarn1Ycnja8rDshZDtk2jluK8kZKfOG0taYH1cEPNE 2CnTOuC23tVZ7HGuoNmciwgGhI+CCcDbxne21crhQFppaUwdSgDjvFtx/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3oUHqpjQajJNejX6ZpuD3yN1qvMB8GA1UdIwQY MBaAFLTYsnqqVeUaNF9qRRnjZ5VQRsMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMt Yzc1ODYyODJmZTEzLzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kM2MxZDUtZTkyMy00ODMxLTgwNGMtYzc1ODYyODJmZTEz LzEvdE5peWVxcFY1Um8wWDJwRkdlTm5sVkJHd3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ089Hzp rAu7yuph5RbxMfzzWOfp7bmpSNJ5yZd2qrc0Ng6utgT+vdqKu8s0+jipIkVe4LjQ h1Z868MzdmpLiizbyyLC7lw35fpnR2ldq1tf2G9XLEkiI39Im6HoUFYjlOG1ZJG2 bvnhSSkHMSUi2nGlC2rqWz06Exj8A+00H5GmgE4t3aVz1P5O2cyKt2nqt639JmfF kSpYyScLWF7w6zZCDBfUQ6R4xrAfcZ+XagrbIGurGaPEMJAWW7y32SS2TdsS4twx r/83xOD2CfMZvVXafdiMGxoVCfWFgGD+RvLq9Wk8ktNiYn/G/MTLRRDOr2PmoBiK lIN84kx99ng6Ag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:32 2026 by rpki-client