This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: 3dQmTR8hwJnWQf7WwNvW8UtDky8tYllHacTV6Qba2jk= Subject key identifier: A0:54:68:29:90:41:BB:28:97:E8:2E:E9:2A:D8:DF:D3:B2:D0:8A:C5 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019BF53E7A1797C239197D905FE72BBE9657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1806 Signing time: Sun 25 Jan 2026 13:01:10 +0000 Manifest this update: Sun 25 Jan 2026 13:01:10 +0000 Manifest next update: Mon 26 Jan 2026 13:01:10 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 3: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (hash: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A=) 4: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 5: GIu2ENBKArBoUM1sfnu8XliPsBk.roa (hash: h2kQp7Ea96pFeOOV+S4zc//9DSonXne4sXDGXPNxK5w=) 6: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: 8FrAjE+0o+Nad+XFlcpgHXN3U7+63YC4RG4xmmTryfw=) 7: aIn00fvfKzliXANh-C6PPZYS9Ok.roa (hash: TraOgQuWpAARG27UmwJNvJB5NSHgGQ1+3Tn7sO48F7I=) 8: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 9: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:7a:17:97:c2:39:19:7d:90:5f:e7:2b:be:96:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 25 13:01:10 2026 GMT Not After : Jan 26 13:01:10 2026 GMT Subject: CN=a05468299041bb2897e82ee92ad8dfd3b2d08ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:f0:d4:a6:85:2f:9d:b7:d7:a8:75:f7:77: 43:ba:d6:be:b9:68:2a:21:d8:0e:58:b1:de:9a:6c: a9:5e:9a:b4:97:ff:64:64:20:b0:29:99:8a:38:43: 49:ca:be:0c:b0:3f:48:f9:19:30:c2:72:b9:87:be: 4b:8e:7e:74:67:61:43:f8:b2:17:8f:0d:6f:e9:1b: 70:6e:c8:e1:01:3c:d0:9e:5b:d3:11:be:f5:70:55: af:d4:5c:80:42:15:92:41:cf:5f:2d:e3:08:cb:df: 5d:38:7a:ad:09:93:4e:5a:3a:fd:b2:ad:5b:f0:f6: c4:11:8a:be:9d:19:06:e5:c5:70:c1:9f:17:7e:46: c2:43:cf:8d:24:3c:b6:bb:45:76:2f:e5:3b:ed:66: f6:96:3a:6c:a6:52:47:f0:34:5d:af:63:96:8d:23: f7:a1:ac:af:7a:1d:fc:2c:ca:6f:8b:b4:bc:a5:39: 55:54:f0:84:ef:41:9a:c1:04:48:38:c9:40:a2:a2: 58:c7:07:69:e3:a7:2f:cc:44:52:d3:54:07:bd:5d: ec:87:14:29:09:40:f2:90:c7:22:0b:e4:10:e8:10: d4:bf:10:5a:0d:0a:7a:71:a8:d7:00:42:03:86:37: 1b:4b:8d:47:84:14:d2:cd:04:ee:95:41:8e:d9:15: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:54:68:29:90:41:BB:28:97:E8:2E:E9:2A:D8:DF:D3:B2:D0:8A:C5 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2b:05:1e:a9:f6:33:d2:9e:fb:ac:79:bd:da:a2:13:35:c7: ec:bf:98:2d:a4:c2:27:77:59:af:18:46:44:fb:51:f3:2a:a3: 29:b8:46:d8:d5:25:7e:1e:95:8c:68:48:7f:05:d9:c0:75:28: 54:56:67:2f:26:2e:2a:5b:65:f9:6e:2d:71:7d:6e:36:04:a9: c6:e9:c6:07:48:67:82:34:d0:d1:39:ae:ac:eb:ca:b9:34:fa: 8b:41:20:0d:c6:69:ce:7f:ab:1c:9b:04:ff:80:e6:90:be:38: 58:50:ce:e7:36:5f:d2:23:29:6d:a6:ab:3d:71:06:4b:8f:10: f0:f6:67:76:12:dc:0f:54:c8:eb:a4:88:69:34:fd:b6:89:95: c0:cf:2a:78:67:60:35:8e:82:30:75:6f:c8:cb:92:99:6e:6d: 18:b6:90:5e:ad:a3:40:71:8b:3c:50:51:af:68:e2:6d:7f:5f: 2a:b9:91:35:09:93:bb:05:c1:a8:f2:b0:93:63:fe:a1:a5:1f: 2c:82:22:c5:8d:b5:f5:89:b5:c3:44:f0:c2:1a:78:75:10:a3: d2:95:8c:47:5b:cf:e2:7d:48:4b:09:55:de:ce:17:dd:52:0c: fe:c4:91:4f:a8:ac:6e:26:e1:fe:da:f6:68:48:b1:09:0b:58: f7:f1:23:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PnoXl8I5GX2QX+crvpZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTI1MTMwMTEwWhcNMjYwMTI2MTMwMTEwWjAzMTEwLwYDVQQD EyhhMDU0NjgyOTkwNDFiYjI4OTdlODJlZTkyYWQ4ZGZkM2IyZDA4YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiifw1KaFL52316h193dDuta+uWgq IdgOWLHemmypXpq0l/9kZCCwKZmKOENJyr4MsD9I+RkwwnK5h75Ljn50Z2FD+LIX jw1v6RtwbsjhATzQnlvTEb71cFWv1FyAQhWSQc9fLeMIy99dOHqtCZNOWjr9sq1b 8PbEEYq+nRkG5cVwwZ8XfkbCQ8+NJDy2u0V2L+U77Wb2ljpsplJH8DRdr2OWjSP3 oayveh38LMpvi7S8pTlVVPCE70GawQRIOMlAoqJYxwdp46cvzERS01QHvV3shxQp CUDykMciC+QQ6BDUvxBaDQp6cajXAEIDhjcbS41HhBTSzQTulUGO2RVGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBUaCmQQbsol+gu6SrY39Oy0IrFMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACysFHqn2 M9Ke+6x5vdqiEzXH7L+YLaTCJ3dZrxhGRPtR8yqjKbhG2NUlfh6VjGhIfwXZwHUo VFZnLyYuKltl+W4tcX1uNgSpxunGB0hngjTQ0TmurOvKuTT6i0EgDcZpzn+rHJsE /4DmkL44WFDO5zZf0iMpbaarPXEGS48Q8PZndhLcD1TI66SIaTT9tomVwM8qeGdg NY6CMHVvyMuSmW5tGLaQXq2jQHGLPFBRr2jibX9fKrmRNQmTuwXBqPKwk2P+oaUf LIIixY219Ym1w0Twwhp4dRCj0pWMR1vP4n1ISwlV3s4X3VIM/sSRT6isbibh/tr2 aEixCQtY9/EjpA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:30:59 2026 by rpki-client