This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json) Hash identifier: M8LnxiVB3i6gfC+G7/ZjcFVQ1ZMJ7PxnvvDH0ztTIX4= Subject key identifier: 34:91:F8:11:2C:DC:FF:E4:6C:1F:74:29:32:13:BC:17:60:F4:18:89 Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Certificate serial: 019BF65184A9CCF5FB51C5574E3CADD8EB8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 18:01:35 +0000 Manifest this update: Sun 25 Jan 2026 18:01:35 +0000 Manifest next update: Mon 26 Jan 2026 18:01:35 +0000 Files and hashes: 1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=) 2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: KNYbQ6x+tw+DUIImeIVyd4YZ9jgULOATiRg7IUzkGps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:84:a9:cc:f5:fb:51:c5:57:4e:3c:ad:d8:eb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Validity Not Before: Jan 25 18:01:35 2026 GMT Not After : Jan 26 18:01:35 2026 GMT Subject: CN=3491f8112cdcffe46c1f74293213bc1760f41889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f0:6c:fb:3c:df:ab:a1:fe:24:0b:2d:6b:9b: 2e:a8:f9:c8:11:53:07:50:bf:fc:83:7a:7d:8a:4d: 78:ab:b7:02:4f:9c:b6:63:88:d4:23:01:a2:f8:97: 26:e7:0d:c4:4b:3c:85:9b:20:32:c9:4e:8a:9a:94: d4:c7:15:fc:14:cf:cc:7c:31:50:46:a4:ad:54:1b: bd:9d:fd:17:69:4b:84:8b:8a:7a:cb:68:d3:a4:38: 72:28:be:f1:a7:d4:6c:70:26:25:32:7a:7e:46:5d: 3b:aa:16:49:b2:ab:d1:16:d2:fa:ad:ec:e5:ad:d8: 26:72:bc:43:7f:66:13:37:a7:d1:51:49:bb:06:c3: b5:36:10:9c:ab:c1:5f:11:fa:4a:33:5c:48:3b:a1: 08:e7:ed:c9:75:21:91:d3:a9:96:7f:aa:ff:c9:66: 6d:9d:1a:2a:a5:97:55:eb:ca:f1:43:65:06:8b:98: db:6b:38:04:67:9d:06:17:d2:3c:a0:6e:fd:f4:ad: 2f:32:f5:d7:29:e6:d6:96:ce:ef:86:bf:89:bb:f1: 6f:ac:fb:fd:4d:9a:d7:dd:18:0f:a9:33:33:4b:27: 3c:d6:85:0f:4e:ea:2d:94:87:38:42:c1:93:1b:61: 7b:39:60:65:19:0e:1d:fe:e4:fd:de:97:ff:a8:ef: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:F8:11:2C:DC:FF:E4:6C:1F:74:29:32:13:BC:17:60:F4:18:89 X509v3 Authority Key Identifier: keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:50:fb:ac:52:bb:5a:7a:7a:a9:f7:9f:57:7c:9e:f5:3e:c1: 17:18:b9:b7:09:c0:55:60:a2:73:55:1a:23:73:19:96:a2:be: 0e:e0:36:e0:f7:15:83:c6:44:ed:09:3f:77:3e:18:9d:1d:4d: 4f:35:8f:76:d1:d2:6c:6c:41:1b:5f:26:4b:a8:62:97:5b:04: 10:4e:5b:62:c9:ac:3b:23:dc:10:1b:5b:ae:c5:9a:75:6c:97: bd:d7:e8:48:15:b7:6f:3c:12:2d:20:a5:e2:60:ca:f1:b6:a2: 08:7a:74:c7:2f:75:b6:de:7a:5f:a8:3e:8c:4b:2a:85:0e:cd: 13:60:17:47:37:ed:81:99:35:5f:54:41:ac:ce:d4:c7:bf:c9: 0c:90:af:b5:67:cb:f1:a1:6e:46:42:e5:6e:f9:b0:0c:aa:ba: b6:cd:b6:ad:e5:f2:36:18:99:8f:d6:8c:8b:45:d9:aa:08:5c: 5b:48:ff:1e:86:12:59:3c:29:4b:42:87:a9:6e:56:1a:d2:4f: 25:f1:7a:1a:2b:1b:3d:4e:71:81:fd:8f:03:c4:01:af:4d:3f: 82:72:cf:29:72:17:53:f7:36:70:92:aa:84:fd:26:62:39:32: ec:bb:7c:c1:48:2c:08:1b:2c:e5:05:51:37:01:67:c3:e5:61: c7:e2:cb:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UYSpzPX7UcVXTjyt2OuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk ODcyYzUwHhcNMjYwMTI1MTgwMTM1WhcNMjYwMTI2MTgwMTM1WjAzMTEwLwYDVQQD EygzNDkxZjgxMTJjZGNmZmU0NmMxZjc0MjkzMjEzYmMxNzYwZjQxODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fBs+zzfq6H+JAsta5suqPnIEVMH UL/8g3p9ik14q7cCT5y2Y4jUIwGi+Jcm5w3ESzyFmyAyyU6KmpTUxxX8FM/MfDFQ RqStVBu9nf0XaUuEi4p6y2jTpDhyKL7xp9RscCYlMnp+Rl07qhZJsqvRFtL6rezl rdgmcrxDf2YTN6fRUUm7BsO1NhCcq8FfEfpKM1xIO6EI5+3JdSGR06mWf6r/yWZt nRoqpZdV68rxQ2UGi5jbazgEZ50GF9I8oG799K0vMvXXKebWls7vhr+Ju/FvrPv9 TZrX3RgPqTMzSyc81oUPTuotlIc4QsGTG2F7OWBlGQ4d/uT93pf/qO/sTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSR+BEs3P/kbB90KTITvBdg9BiJMB8GA1UdIwQY MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt Y2EzYjcyNzhkZGUyLzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVD7rFK7 Wnp6qfefV3ye9T7BFxi5twnAVWCic1UaI3MZlqK+DuA24PcVg8ZE7Qk/dz4YnR1N TzWPdtHSbGxBG18mS6hil1sEEE5bYsmsOyPcEBtbrsWadWyXvdfoSBW3bzwSLSCl 4mDK8baiCHp0xy91tt56X6g+jEsqhQ7NE2AXRzftgZk1X1RBrM7Ux7/JDJCvtWfL 8aFuRkLlbvmwDKq6ts22reXyNhiZj9aMi0XZqghcW0j/HoYSWTwpS0KHqW5WGtJP JfF6GisbPU5xgf2PA8QBr00/gnLPKXIXU/c2cJKqhP0mYjky7Lt8wUgsCBss5QVR NwFnw+Vhx+LLug== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:27 2026 by rpki-client