This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json) Hash identifier: aS+6K461Ogo7oYmkWOrtAj4/RMHtECIz6FnhycF5914= Subject key identifier: DA:4D:26:B0:9D:34:68:E2:44:41:FF:67:AD:49:90:E9:14:D0:43:AE Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Certificate serial: 019BF808407BAD70F261CD905CF35DCE37A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft Manifest number: 125A Signing time: Mon 26 Jan 2026 02:00:48 +0000 Manifest this update: Mon 26 Jan 2026 02:00:48 +0000 Manifest next update: Tue 27 Jan 2026 02:00:48 +0000 Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=) 2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=) 3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: 252X8MjUZTkP8VMUv/MpxVuEpWVqQhPxOBND+V/RZi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:40:7b:ad:70:f2:61:cd:90:5c:f3:5d:ce:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Validity Not Before: Jan 26 02:00:48 2026 GMT Not After : Jan 27 02:00:48 2026 GMT Subject: CN=da4d26b09d3468e24441ff67ad4990e914d043ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:b2:3e:c8:b1:fa:87:38:a3:10:ab:f1:0a: 86:4d:1f:bc:2f:ed:fa:de:91:2f:80:39:3f:4c:6e: 9a:a3:ad:10:00:cb:e9:c2:50:0b:cb:ad:a3:b6:50: 3a:de:3b:50:78:4d:aa:56:ba:2e:bb:37:36:af:1b: a7:18:74:88:84:bc:e4:2e:a8:97:ce:0f:8f:bb:2e: 89:76:ff:7e:85:7a:0b:93:f6:bc:b9:f3:0e:87:ec: f4:43:c5:57:52:49:dd:da:dd:94:b9:48:a2:6c:40: 38:73:08:81:e7:2b:e0:ae:d8:08:4c:37:4c:b4:11: c9:a0:fb:05:1f:98:88:6a:f1:37:a8:f0:bf:7d:fa: d3:3c:b3:9c:b9:ff:07:87:b0:9d:2e:d9:d5:1c:a1: 3c:f7:88:a2:6d:4f:e6:b0:20:97:09:a2:89:66:fe: 8f:81:51:72:09:42:fc:79:90:83:6e:d8:6f:5f:81: 36:53:77:ae:b5:68:62:55:5e:a0:70:de:c4:a6:4a: 3d:35:b0:13:af:23:8e:9d:8d:29:27:7f:43:b9:2d: df:79:3f:b2:28:8b:05:d3:46:6d:63:be:4b:7b:ca: 0e:b3:06:72:78:4e:79:1a:47:df:0b:73:bd:27:c0: d5:d3:5f:78:e6:74:8a:6c:26:09:da:a1:18:21:a0: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:26:B0:9D:34:68:E2:44:41:FF:67:AD:49:90:E9:14:D0:43:AE X509v3 Authority Key Identifier: keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5f:2d:7f:06:94:e6:ea:c2:94:96:6c:b0:dc:22:67:0b:fb: 9f:9a:52:b4:68:f0:bc:1c:e2:da:c1:fe:36:cc:4c:df:96:96: d4:83:1a:8a:6c:11:51:e0:3c:6d:7b:4a:bb:aa:75:ce:77:cf: 56:fd:69:6e:f6:cb:a7:83:1f:3e:49:83:0c:85:3b:54:d9:e1: 0e:0f:83:f0:e9:21:4a:d9:49:c8:f3:15:32:cb:d7:35:80:80: 1c:e6:ed:60:48:7e:ee:a7:e2:42:69:4c:c1:c5:79:96:3c:6f: a7:32:d4:13:db:eb:16:6a:21:42:02:0d:9c:b6:4c:7f:a4:20: af:9b:1f:21:d5:f5:39:90:a6:e1:3e:f8:67:11:87:9a:56:fc: 62:cd:42:f2:be:60:76:35:8a:3d:ab:41:69:01:15:d8:4d:6e: df:b8:ce:cf:10:af:6f:f6:df:41:25:fa:82:b7:d5:a2:ce:c9: 03:60:13:9f:7b:bc:c3:b7:23:56:09:11:a3:d7:3b:70:a5:80: bf:23:e3:89:e1:31:07:e7:e0:dd:13:e6:bf:0a:e9:2d:06:76: 8b:2c:32:10:5e:9a:e8:0a:8b:89:19:fb:d7:e1:37:7a:d9:7c: 73:c6:6c:4c:fa:d9:ec:15:a8:5c:4d:1c:f9:44:e1:83:48:2d: 32:48:98:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CEB7rXDyYc2QXPNdzjegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm YTQ0YTAwHhcNMjYwMTI2MDIwMDQ4WhcNMjYwMTI3MDIwMDQ4WjAzMTEwLwYDVQQD EyhkYTRkMjZiMDlkMzQ2OGUyNDQ0MWZmNjdhZDQ5OTBlOTE0ZDA0M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqyPsix+oc4oxCr8QqGTR+8L+36 3pEvgDk/TG6ao60QAMvpwlALy62jtlA63jtQeE2qVrouuzc2rxunGHSIhLzkLqiX zg+Puy6Jdv9+hXoLk/a8ufMOh+z0Q8VXUknd2t2UuUiibEA4cwiB5yvgrtgITDdM tBHJoPsFH5iIavE3qPC/ffrTPLOcuf8Hh7CdLtnVHKE894iibU/msCCXCaKJZv6P gVFyCUL8eZCDbthvX4E2U3eutWhiVV6gcN7Epko9NbATryOOnY0pJ39DuS3feT+y KIsF00ZtY75Le8oOswZyeE55GkffC3O9J8DV01945nSKbCYJ2qEYIaDXCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpNJrCdNGjiREH/Z61JkOkU0EOuMB8GA1UdIwQY MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5 LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV8tfwaU 5urClJZssNwiZwv7n5pStGjwvBzi2sH+NsxM35aW1IMaimwRUeA8bXtKu6p1znfP Vv1pbvbLp4MfPkmDDIU7VNnhDg+D8OkhStlJyPMVMsvXNYCAHObtYEh+7qfiQmlM wcV5ljxvpzLUE9vrFmohQgINnLZMf6Qgr5sfIdX1OZCm4T74ZxGHmlb8Ys1C8r5g djWKPatBaQEV2E1u37jOzxCvb/bfQSX6grfVos7JA2ATn3u8w7cjVgkRo9c7cKWA vyPjieExB+fg3RPmvwrpLQZ2iywyEF6a6AqLiRn71+E3etl8c8ZsTPrZ7BWoXE0c +UThg0gtMkiY3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:39 2026 by rpki-client