This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json) Hash identifier: WB9o3zmWbFMLRRqNYFeUovboQfXRF/xGPavQAdlpmuw= Subject key identifier: C7:96:1E:23:BF:15:1D:B6:A6:A8:7F:5F:D1:CC:18:0E:8A:C2:54:F5 Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Certificate serial: 019BF34FF4F0C6D4938BAB09F6BA84B718A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft Manifest number: 05DC Signing time: Sun 25 Jan 2026 04:01:02 +0000 Manifest this update: Sun 25 Jan 2026 04:01:02 +0000 Manifest next update: Mon 26 Jan 2026 04:01:02 +0000 Files and hashes: 1: R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa (hash: nQU1BjOZCkDFTHZ5GWt9nYnHvXRxdvBnHniV1Cq7F7M=) 2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: ufZsJZtEKTyZ+wdo+8Oj4G5Mn56WLqAyIYzfkfjkUhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:f4:f0:c6:d4:93:8b:ab:09:f6:ba:84:b7:18:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Validity Not Before: Jan 25 04:01:02 2026 GMT Not After : Jan 26 04:01:02 2026 GMT Subject: CN=c7961e23bf151db6a6a87f5fd1cc180e8ac254f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:c9:8d:03:1c:5e:bd:a0:74:5a:bb:95:a5: 15:a5:0d:60:bc:6c:fe:6c:bf:e3:72:59:f8:f2:9e: 12:c7:f8:e3:75:9b:d5:10:4b:a1:55:19:a6:be:be: 53:9b:c0:51:48:a8:88:8e:d0:72:8f:8e:0f:7d:13: a8:95:da:90:28:cf:7b:a1:6b:f4:b2:9a:51:c0:4d: dc:7d:7a:95:8a:76:dc:8f:0d:3a:f7:b2:d6:c0:56: 72:b2:00:0c:5a:2f:67:c5:49:44:5a:5a:80:88:dd: f7:77:5e:52:d0:2a:e9:af:10:64:a7:7b:9f:d1:b9: 19:a9:04:89:05:7a:ec:e0:65:6a:2e:82:3e:08:c1: 6b:ca:da:7e:c9:32:8a:9f:78:01:7c:cb:16:ab:98: 03:0f:e6:fa:94:7e:3a:48:07:00:2c:a4:67:f4:37: 81:7c:40:d0:f6:9c:81:a8:b8:d2:e7:ed:9b:61:42: da:b9:66:32:f0:8f:fb:ee:27:89:96:18:3d:5a:02: 46:56:d8:df:5d:04:59:ce:0e:68:fe:9c:b1:34:71: 26:7a:e1:71:fc:1d:ee:2f:35:16:a9:98:b5:96:da: 8e:22:19:76:f3:23:c2:d6:e9:20:fe:e0:e9:65:5d: 74:79:80:6f:85:60:50:f7:aa:e8:d2:82:60:cb:7b: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:96:1E:23:BF:15:1D:B6:A6:A8:7F:5F:D1:CC:18:0E:8A:C2:54:F5 X509v3 Authority Key Identifier: keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:c5:e2:e0:eb:c4:e8:7e:8e:3b:b4:ba:04:f2:1c:f9:1e: f8:1f:83:be:ff:97:6f:21:4d:6e:2c:70:ff:84:d0:fc:82:d3: 6b:e7:2e:3c:f3:d5:ed:5f:e9:63:2c:89:a5:ab:6d:df:23:08: a8:52:8b:1c:6a:6b:a0:3f:52:53:78:35:3d:a8:e2:43:dd:a1: 42:58:c3:c7:1b:18:40:db:62:a9:38:7f:25:dc:9d:55:5b:ea: 27:76:9b:0a:eb:bd:d3:81:69:e2:d2:f8:3b:e3:06:f3:66:d6: b9:e4:f3:b4:92:e4:10:79:41:52:ea:64:55:4a:ef:00:8c:6b: 40:c6:6e:6d:fc:32:97:0b:82:8c:48:05:ac:09:4a:30:06:1d: ec:13:a3:6b:17:c1:92:9c:a9:4b:3d:fd:90:08:b9:bb:b3:74: d4:af:b6:37:28:81:97:ea:28:9d:22:18:6e:89:69:e2:55:ee: 3c:4b:ee:2d:8e:54:e3:32:1a:af:fd:34:f6:a4:51:fb:66:0b: 13:29:04:fc:4e:c3:22:b1:ed:bc:25:aa:7f:6d:04:cf:13:56: 98:6f:cd:dd:9b:b6:20:ac:7f:ab:80:1d:57:c5:5d:99:f5:8f: bf:23:0f:5b:0c:d3:b8:f1:85:51:22:0f:6b:3b:76:37:af:b2: df:eb:db:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT/TwxtSTi6sJ9rqEtxipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTYyN2I5MjM5ZmVhMzQ1N2NkODdjYjkzN2FiNGM3OTg2 Y2FjMDkwHhcNMjYwMTI1MDQwMTAyWhcNMjYwMTI2MDQwMTAyWjAzMTEwLwYDVQQD EyhjNzk2MWUyM2JmMTUxZGI2YTZhODdmNWZkMWNjMTgwZThhYzI1NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu/JjQMcXr2gdFq7laUVpQ1gvGz+ bL/jcln48p4Sx/jjdZvVEEuhVRmmvr5Tm8BRSKiIjtByj44PfROoldqQKM97oWv0 sppRwE3cfXqVinbcjw0697LWwFZysgAMWi9nxUlEWlqAiN33d15S0CrprxBkp3uf 0bkZqQSJBXrs4GVqLoI+CMFrytp+yTKKn3gBfMsWq5gDD+b6lH46SAcALKRn9DeB fEDQ9pyBqLjS5+2bYULauWYy8I/77ieJlhg9WgJGVtjfXQRZzg5o/pyxNHEmeuFx /B3uLzUWqZi1ltqOIhl28yPC1ukg/uDpZV10eYBvhWBQ96ro0oJgy3tNUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeWHiO/FR22pqh/X9HMGA6KwlT1MB8GA1UdIwQY MBaAFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2Qt YTVmZWIzOTczNTEyLzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2QtYTVmZWIzOTczNTEy LzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2jF4uDr xOh+jju0ugTyHPke+B+Dvv+XbyFNbixw/4TQ/ILTa+cuPPPV7V/pYyyJpatt3yMI qFKLHGproD9SU3g1PajiQ92hQljDxxsYQNtiqTh/JdydVVvqJ3abCuu904Fp4tL4 O+MG82bWueTztJLkEHlBUupkVUrvAIxrQMZubfwylwuCjEgFrAlKMAYd7BOjaxfB kpypSz39kAi5u7N01K+2NyiBl+oonSIYbolp4lXuPEvuLY5U4zIar/009qRR+2YL EykE/E7DIrHtvCWqf20EzxNWmG/N3Zu2IKx/q4AdV8VdmfWPvyMPWwzTuPGFUSIP azt2N6+y3+vbFg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:19 2026 by rpki-client