This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json) Hash identifier: siEAMrKrnsaziGEcCvg0jm3LWC9YZ4ciiM+a7imLrRU= Subject key identifier: 80:A5:CA:B8:C2:9B:45:6A:41:A8:34:68:B2:C5:71:52:13:E9:BE:FB Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019BF5AC0C8F46F4869BD6714DB7EB794DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft Manifest number: 084C Signing time: Sun 25 Jan 2026 15:00:51 +0000 Manifest this update: Sun 25 Jan 2026 15:00:51 +0000 Manifest next update: Mon 26 Jan 2026 15:00:51 +0000 Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=) 2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: FnVMRj6yV8NSceibgRAcet956S580WY+gkFoKfl2OqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:0c:8f:46:f4:86:9b:d6:71:4d:b7:eb:79:4d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Jan 25 15:00:51 2026 GMT Not After : Jan 26 15:00:51 2026 GMT Subject: CN=80a5cab8c29b456a41a83468b2c5715213e9befb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:48:4b:18:53:77:a4:50:27:a6:01:b8:2b: f4:9d:9b:28:61:9a:1f:35:f6:11:13:d7:9a:2d:40: 83:6e:59:f2:1d:c4:74:c1:3d:41:87:01:34:9e:b5: 53:ff:71:5d:75:de:f1:7a:87:5d:9c:cb:20:4d:31: f0:ca:20:05:22:6a:40:69:1a:52:0a:5e:38:89:17: 0c:52:79:1c:7b:ed:d2:73:0a:ec:97:d7:65:c0:5c: 5a:83:0d:aa:f3:3f:57:8c:f1:c0:b1:45:fa:bd:a2: 02:e7:41:8f:80:10:99:35:0c:8e:05:83:6a:6b:5c: d8:fd:98:db:e3:20:96:3c:5a:22:41:02:fb:94:87: 4e:2b:7d:92:02:ce:4a:8e:55:14:f5:cf:be:e6:fe: fb:13:d6:80:65:35:9d:f4:80:b2:58:61:d9:13:bb: b3:67:64:80:f9:40:31:e2:c4:d0:c4:40:8d:d3:41: f8:d3:58:e7:7e:11:d8:c9:ba:f4:50:36:db:e1:97: e0:44:83:11:32:57:09:0a:42:97:56:0d:47:c4:ff: 1a:2d:fe:5f:eb:01:85:b7:d0:60:5a:5e:98:fb:72: 40:e7:59:58:f5:ea:72:e0:d9:6b:34:4c:f3:8d:34: 58:67:af:84:37:0c:ef:41:5f:c9:a3:d3:1e:31:9f: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A5:CA:B8:C2:9B:45:6A:41:A8:34:68:B2:C5:71:52:13:E9:BE:FB X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3f:f6:b1:f8:f6:98:88:a8:47:5c:e2:72:fd:e7:db:86:77: ce:0a:da:95:44:18:91:0a:e6:39:2c:8a:2a:25:f8:9e:05:fd: 38:05:e1:44:b1:68:89:8c:5b:ef:22:db:ef:a5:68:5f:5d:09: 59:a9:e3:39:c7:ad:84:0f:67:b1:48:4a:ea:67:38:ab:14:cd: f7:e1:ce:6c:c4:ba:c2:79:48:0f:7d:84:69:24:8d:2a:09:d1: f4:eb:7d:15:1e:3f:f5:ce:0f:4f:17:9a:50:7f:f1:9e:1e:c7: 33:21:d3:e3:2c:3e:74:f6:14:a5:be:46:04:31:0a:fb:68:e2: 67:40:e6:62:23:46:ae:cb:cb:5a:07:af:57:a5:88:61:ee:ac: 2c:72:70:28:a1:0a:e2:4d:20:08:0a:d4:9f:c3:f7:39:d7:a4: 4c:11:b1:6d:48:9a:0b:f8:c7:1a:c1:9a:4f:3c:7d:2e:57:d9: e4:ca:1c:f0:68:06:9c:e3:18:52:46:2b:c6:99:97:c2:af:10: b7:be:86:1e:cb:48:eb:35:8f:38:09:5f:51:cf:26:c0:c8:e2: 73:93:af:4a:b3:ad:6e:3e:b6:03:61:71:fe:4b:70:b8:ff:43: 05:2e:55:21:85:dd:a1:25:4b:1c:79:eb:89:98:12:23:eb:70: 52:35:ea:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rAyPRvSGm9ZxTbfreU3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjYwMTI1MTUwMDUxWhcNMjYwMTI2MTUwMDUxWjAzMTEwLwYDVQQD Eyg4MGE1Y2FiOGMyOWI0NTZhNDFhODM0NjhiMmM1NzE1MjEzZTliZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3tISxhTd6RQJ6YBuCv0nZsoYZof NfYRE9eaLUCDblnyHcR0wT1BhwE0nrVT/3Fddd7xeoddnMsgTTHwyiAFImpAaRpS Cl44iRcMUnkce+3Scwrsl9dlwFxagw2q8z9XjPHAsUX6vaIC50GPgBCZNQyOBYNq a1zY/Zjb4yCWPFoiQQL7lIdOK32SAs5KjlUU9c++5v77E9aAZTWd9ICyWGHZE7uz Z2SA+UAx4sTQxECN00H401jnfhHYybr0UDbb4ZfgRIMRMlcJCkKXVg1HxP8aLf5f 6wGFt9BgWl6Y+3JA51lY9epy4NlrNEzzjTRYZ6+ENwzvQV/Jo9MeMZ84KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIClyrjCm0VqQag0aLLFcVIT6b77MB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsz/2sfj2 mIioR1zicv3n24Z3zgralUQYkQrmOSyKKiX4ngX9OAXhRLFoiYxb7yLb76VoX10J WanjOcethA9nsUhK6mc4qxTN9+HObMS6wnlID32EaSSNKgnR9Ot9FR4/9c4PTxea UH/xnh7HMyHT4yw+dPYUpb5GBDEK+2jiZ0DmYiNGrsvLWgevV6WIYe6sLHJwKKEK 4k0gCArUn8P3OdekTBGxbUiaC/jHGsGaTzx9LlfZ5Moc8GgGnOMYUkYrxpmXwq8Q t76GHstI6zWPOAlfUc8mwMjic5OvSrOtbj62A2Fx/ktwuP9DBS5VIYXdoSVLHHnr iZgSI+twUjXqpA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:40 2026 by rpki-client