This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json) Hash identifier: 2QB11rki8plM/Ni2b/RzpltyZen1IdjTEhqwv19k0Ls= Subject key identifier: 5A:60:2B:8A:D8:34:73:10:F7:C6:57:F6:99:4B:7D:2E:81:ED:A0:23 Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Certificate serial: 019BF651A1D4877C703DC055D7ADB27CC30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft Manifest number: 1248 Signing time: Sun 25 Jan 2026 18:01:43 +0000 Manifest this update: Sun 25 Jan 2026 18:01:43 +0000 Manifest next update: Mon 26 Jan 2026 18:01:43 +0000 Files and hashes: 1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=) 2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: 2+cmcledhn0RFFQ5DuNNFK7uVypdqzT90cdg1U9OKak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:a1:d4:87:7c:70:3d:c0:55:d7:ad:b2:7c:c3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Validity Not Before: Jan 25 18:01:43 2026 GMT Not After : Jan 26 18:01:43 2026 GMT Subject: CN=5a602b8ad8347310f7c657f6994b7d2e81eda023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:04:5c:97:0d:78:88:fc:53:40:d9:e0:d5: 22:e4:b9:6e:15:a7:5d:2b:2d:e0:0c:ec:6f:93:dc: 63:53:32:75:a7:63:8d:a6:e5:d3:c5:36:32:59:a4: 59:64:8b:f0:67:7c:2a:28:0f:39:6e:9b:08:87:fb: 86:4e:2f:6f:b9:c1:40:24:c6:6d:34:f0:a8:53:90: d8:7a:ac:38:1e:f9:ee:f6:89:f4:67:69:a0:39:35: b4:6d:d3:89:49:c2:58:85:51:96:a3:f4:a6:b2:5c: 96:81:66:a4:0f:72:63:8e:52:be:a8:fd:3a:cd:65: 00:c5:45:b9:7e:99:90:9b:2d:82:19:df:5c:43:bf: b1:65:a4:74:94:4e:53:55:81:46:95:a8:2f:76:85: 5a:a8:ed:53:2d:2c:76:7f:2a:4b:fc:84:b1:6b:dc: 04:8b:85:55:df:f2:4d:08:ae:2e:39:1e:2e:bd:23: d9:48:d2:61:26:11:5e:05:93:72:d7:3b:70:84:b1: 5b:47:b6:f1:b2:fa:4b:29:9b:cc:8d:61:74:1a:94: bc:48:da:fe:89:9a:fb:7f:f1:04:cd:6e:ae:cb:af: 01:a9:c4:9f:f6:6a:e0:67:f6:b8:de:5d:fc:48:ed: ae:3e:9c:89:dc:5b:7b:01:3f:90:e5:e5:f7:d0:3a: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:2B:8A:D8:34:73:10:F7:C6:57:F6:99:4B:7D:2E:81:ED:A0:23 X509v3 Authority Key Identifier: keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1f:d7:20:c7:65:14:21:4d:6d:c3:7d:66:4b:68:9e:d3:6c: 17:92:7e:ea:0a:09:32:7b:ac:0b:52:41:2f:a4:06:56:6f:ee: d0:7b:0a:60:ef:09:e0:d6:bd:23:5f:7e:54:73:68:67:dc:ef: 5a:0e:74:db:e5:08:36:83:f5:b1:a0:64:c8:2d:99:28:bf:e7: 99:81:7f:6a:3d:75:51:58:29:3c:5b:e1:5a:e9:44:c6:26:48: 2e:54:d3:3b:61:92:c7:8f:32:ce:9f:40:72:f8:6b:ac:28:89: 4d:22:c6:35:46:bd:1c:ca:54:18:a7:08:6b:ad:9c:48:06:c9: f5:c1:cf:78:e4:07:92:28:d9:08:42:0b:70:d6:0e:98:11:a2: 9a:99:53:b4:9e:e9:fa:0a:af:e2:f4:04:af:50:1d:0e:82:c3: ba:de:10:cf:be:d8:a2:bf:1f:70:7b:ae:ee:ed:d4:1e:ca:4d: 0d:6e:89:e6:cd:92:72:57:44:8c:3c:53:23:d7:28:7b:bf:99: da:c8:5a:ab:04:cd:ee:d3:94:65:55:ab:45:b8:b0:3e:0a:94: 2e:78:04:b8:6f:2d:7b:e2:41:4a:24:39:db:1c:8e:81:8c:ec: fa:d7:32:6e:85:d6:c0:ce:16:5d:62:5c:6a:6c:15:78:ad:d4: 9b:28:da:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UaHUh3xwPcBV162yfMMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj M2MxMWMwHhcNMjYwMTI1MTgwMTQzWhcNMjYwMTI2MTgwMTQzWjAzMTEwLwYDVQQD Eyg1YTYwMmI4YWQ4MzQ3MzEwZjdjNjU3ZjY5OTRiN2QyZTgxZWRhMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnEEXJcNeIj8U0DZ4NUi5LluFadd Ky3gDOxvk9xjUzJ1p2ONpuXTxTYyWaRZZIvwZ3wqKA85bpsIh/uGTi9vucFAJMZt NPCoU5DYeqw4Hvnu9on0Z2mgOTW0bdOJScJYhVGWo/SmslyWgWakD3JjjlK+qP06 zWUAxUW5fpmQmy2CGd9cQ7+xZaR0lE5TVYFGlagvdoVaqO1TLSx2fypL/ISxa9wE i4VV3/JNCK4uOR4uvSPZSNJhJhFeBZNy1ztwhLFbR7bxsvpLKZvMjWF0GpS8SNr+ iZr7f/EEzW6uy68BqcSf9mrgZ/a43l38SO2uPpyJ3Ft7AT+Q5eX30DpB2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpgK4rYNHMQ98ZX9plLfS6B7aAjMB8GA1UdIwQY MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt YmM4ZTBiNjlhYzEyLzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB/XIMdl FCFNbcN9ZktontNsF5J+6goJMnusC1JBL6QGVm/u0HsKYO8J4Na9I19+VHNoZ9zv Wg502+UINoP1saBkyC2ZKL/nmYF/aj11UVgpPFvhWulExiZILlTTO2GSx48yzp9A cvhrrCiJTSLGNUa9HMpUGKcIa62cSAbJ9cHPeOQHkijZCEILcNYOmBGimplTtJ7p +gqv4vQEr1AdDoLDut4Qz77Yor8fcHuu7u3UHspNDW6J5s2ScldEjDxTI9coe7+Z 2shaqwTN7tOUZVWrRbiwPgqULngEuG8te+JBSiQ52xyOgYzs+tcyboXWwM4WXWJc amwVeK3Umyjang== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:51 2026 by rpki-client