This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json) Hash identifier: iaCLEe6dU7bdu/w9M6YgW8540C7+YDyzkB4DgPuD6ps= Subject key identifier: 07:E4:D7:86:7F:8D:B8:6D:24:A2:8D:0A:57:4C:83:3B:76:90:AE:BA Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Certificate serial: 019BF83F38E430D3325743C38358A44ACFD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft Manifest number: 05E3 Signing time: Mon 26 Jan 2026 03:00:51 +0000 Manifest this update: Mon 26 Jan 2026 03:00:51 +0000 Manifest next update: Tue 27 Jan 2026 03:00:51 +0000 Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: oeSKKRjqHGONvtwM5pVLgqg1sI2q+k+kUrdylCNYzb4=) 2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:38:e4:30:d3:32:57:43:c3:83:58:a4:4a:cf:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Validity Not Before: Jan 26 03:00:51 2026 GMT Not After : Jan 27 03:00:51 2026 GMT Subject: CN=07e4d7867f8db86d24a28d0a574c833b7690aeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:ae:49:68:f2:48:3d:3a:17:a4:dd:b4:b1: fc:e1:cc:68:fe:79:63:63:77:81:74:99:83:d5:55: 84:5f:40:a5:70:f9:4c:a8:31:cc:47:d9:81:ec:9b: 94:e7:32:74:46:fd:b0:a3:be:02:08:1e:f0:ac:51: f4:8b:e9:25:d7:8b:87:95:8a:94:56:2b:60:0d:82: 9a:8f:6c:9b:b8:ff:e2:08:97:46:80:76:2c:f2:01: 24:d1:c7:e2:90:55:04:1b:d7:3a:cf:85:93:ae:5c: 46:f0:b9:4d:da:c2:83:9a:f8:df:05:38:e2:33:5d: 41:8f:40:7f:69:69:e4:1f:eb:a0:34:c5:74:b6:ad: d1:2c:9f:05:d9:c8:46:d2:20:84:8f:42:93:72:62: 16:7d:bf:88:66:e1:e3:61:d0:a2:68:97:15:eb:de: 34:bb:4f:15:bc:c0:91:f2:85:99:ba:75:9d:a3:81: 26:ed:87:d0:2d:02:04:f4:27:61:40:b3:a7:e9:bd: 1a:af:d8:7d:c8:95:a4:f0:ec:f5:8e:63:29:16:1e: 8c:34:3f:d1:72:eb:b2:7f:54:b5:b6:f6:f4:18:0f: 48:e4:b6:12:4b:81:96:85:08:39:b5:28:34:e7:d8: 6d:ed:a9:7f:cc:0c:09:20:73:0b:d9:9c:99:5a:2e: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E4:D7:86:7F:8D:B8:6D:24:A2:8D:0A:57:4C:83:3B:76:90:AE:BA X509v3 Authority Key Identifier: keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:00:99:d9:a6:0f:fe:5a:0a:22:cc:71:d4:5e:22:63:77:88: 11:63:09:42:ea:e3:ba:a2:21:4d:3e:7b:5d:dc:10:c7:cd:13: 9b:cc:8a:29:c1:c3:4f:cc:0a:75:dc:15:b7:64:c5:f0:83:ce: 83:a5:3a:52:bf:e2:2c:35:7d:4c:4e:2b:2b:4e:10:cc:04:6c: 3d:87:12:85:63:45:35:59:91:85:05:0f:62:9c:4f:6b:c7:10: e5:a8:79:46:86:cb:34:a9:c3:2c:cf:ad:b2:2e:51:ea:83:1a: 5a:57:89:88:09:8e:d2:fc:9e:5b:de:a8:ab:ee:9b:98:f2:9c: e3:f8:fb:fe:06:0d:c7:b2:9b:87:6a:cc:dd:28:e6:71:45:22: e7:fc:66:22:67:de:fd:33:4c:fa:29:47:da:fe:f6:9e:9e:6e: 31:63:15:df:f0:5d:42:88:1d:e3:de:17:47:70:7c:42:a3:c5: 2d:f3:84:be:5a:5b:e6:9f:79:e3:86:95:55:92:8b:92:56:72: d1:0c:0e:0d:f3:77:e6:9a:ea:a4:8a:fd:f3:64:69:6b:78:6f: 3b:d9:9b:b7:95:30:d2:aa:68:be:ac:5a:a1:2c:5e:e9:02:0b: 1a:1a:f6:a6:b4:c1:e7:1a:5b:54:1b:d3:d8:3e:f5:f1:2b:db: f8:db:9d:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PzjkMNMyV0PDg1ikSs/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh MTkxYmYwHhcNMjYwMTI2MDMwMDUxWhcNMjYwMTI3MDMwMDUxWjAzMTEwLwYDVQQD EygwN2U0ZDc4NjdmOGRiODZkMjRhMjhkMGE1NzRjODMzYjc2OTBhZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23CuSWjySD06F6TdtLH84cxo/nlj Y3eBdJmD1VWEX0ClcPlMqDHMR9mB7JuU5zJ0Rv2wo74CCB7wrFH0i+kl14uHlYqU VitgDYKaj2ybuP/iCJdGgHYs8gEk0cfikFUEG9c6z4WTrlxG8LlN2sKDmvjfBTji M11Bj0B/aWnkH+ugNMV0tq3RLJ8F2chG0iCEj0KTcmIWfb+IZuHjYdCiaJcV6940 u08VvMCR8oWZunWdo4Em7YfQLQIE9CdhQLOn6b0ar9h9yJWk8Oz1jmMpFh6MND/R cuuyf1S1tvb0GA9I5LYSS4GWhQg5tSg059ht7al/zAwJIHML2ZyZWi7jdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfk14Z/jbhtJKKNCldMgzt2kK66MB8GA1UdIwQY MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4 LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQCZ2aYP /loKIsxx1F4iY3eIEWMJQurjuqIhTT57XdwQx80Tm8yKKcHDT8wKddwVt2TF8IPO g6U6Ur/iLDV9TE4rK04QzARsPYcShWNFNVmRhQUPYpxPa8cQ5ah5RobLNKnDLM+t si5R6oMaWleJiAmO0vyeW96oq+6bmPKc4/j7/gYNx7Kbh2rM3SjmcUUi5/xmImfe /TNM+ilH2v72np5uMWMV3/BdQogd494XR3B8QqPFLfOEvlpb5p9544aVVZKLklZy 0QwODfN35prqpIr982Rpa3hvO9mbt5Uw0qpovqxaoSxe6QILGhr2prTB5xpbVBvT 2D718Svb+NudsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:55 2026 by rpki-client