This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: uHAg/qpJzA2mHc+3YCE2+nisceboJsfcjX58nH+T1SI= Subject key identifier: 61:A9:F7:33:D2:DA:15:2F:B8:1A:96:AD:1D:81:D2:B0:43:E6:E8:CA Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019BF3501F0C4027EEA21639462FEA28E4CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1805 Signing time: Sun 25 Jan 2026 04:01:12 +0000 Manifest this update: Sun 25 Jan 2026 04:01:12 +0000 Manifest next update: Mon 26 Jan 2026 04:01:12 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 3: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (hash: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A=) 4: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 5: GIu2ENBKArBoUM1sfnu8XliPsBk.roa (hash: h2kQp7Ea96pFeOOV+S4zc//9DSonXne4sXDGXPNxK5w=) 6: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: QjOukleFloZAav5WQq9Be6GSLBfYVbIyzB82ZkrVmfM=) 7: aIn00fvfKzliXANh-C6PPZYS9Ok.roa (hash: TraOgQuWpAARG27UmwJNvJB5NSHgGQ1+3Tn7sO48F7I=) 8: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 9: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:1f:0c:40:27:ee:a2:16:39:46:2f:ea:28:e4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 25 04:01:12 2026 GMT Not After : Jan 26 04:01:12 2026 GMT Subject: CN=61a9f733d2da152fb81a96ad1d81d2b043e6e8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:dd:d9:35:98:13:b2:67:65:80:39:b5:5b: e8:22:83:eb:9f:3e:5c:14:0a:79:44:5c:9c:8b:48: 7b:02:7b:87:20:a9:c3:94:a5:14:ba:eb:26:f8:29: 9b:0d:26:61:b9:4d:fb:70:da:ef:3a:29:ea:15:80: e7:9b:bc:3a:7c:0e:0b:f5:3c:be:d0:86:69:98:73: f7:28:29:7f:d9:ed:62:ca:d1:ee:90:85:c8:9d:02: 5c:75:1d:a5:68:20:ff:2d:a8:bd:e5:d0:48:d9:42: 44:c4:3d:b2:dc:84:b6:9d:28:8c:4f:95:71:91:24: 63:88:e6:3e:fd:82:81:c3:9f:64:4c:a9:0d:12:17: e7:6e:48:12:d1:46:2e:d7:dc:33:59:c6:d9:3f:72: e1:cc:f3:4b:67:37:ab:d6:1d:d0:89:8c:14:fb:fd: 37:a1:11:2b:0e:c1:8e:65:8d:7c:98:1e:2b:c6:0f: 17:e6:89:60:28:d3:56:f5:82:b4:f2:6f:5c:1a:12: c0:3c:da:94:0c:62:cd:c1:b9:0c:76:88:c4:9c:36: 43:f8:60:71:3a:a1:a8:e1:0a:5c:25:92:f9:90:93: 46:15:0b:bd:00:a5:e5:95:69:85:4b:00:7a:32:6e: ec:90:dd:e6:4d:a2:b1:0e:e7:e8:75:61:48:ca:dd: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A9:F7:33:D2:DA:15:2F:B8:1A:96:AD:1D:81:D2:B0:43:E6:E8:CA X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:86:53:5b:8d:be:46:e2:97:4b:3a:4e:88:67:2f:9d:4a:d3: 1c:99:ba:eb:97:49:3e:7a:f9:12:1f:e8:da:47:0c:ef:35:b8: 3e:4b:1c:9e:fb:77:33:20:dc:25:9b:63:52:f4:ab:20:ff:d2: a6:97:cd:ea:72:71:70:f0:4b:45:6e:6c:26:f9:3c:7c:d8:5e: 63:47:05:b4:01:6a:b5:fa:8e:fe:5a:39:37:ac:12:1b:48:8a: dd:af:a2:09:21:0a:bc:4b:ee:29:fa:9a:60:1a:a9:f3:3f:19: ee:8d:95:54:32:c0:ee:1c:45:68:17:63:c3:ad:c1:31:61:3a: 4b:ce:eb:f3:dc:67:63:71:9b:36:67:7c:50:58:ad:4d:6b:ca: 6a:ca:1a:3a:d8:02:f3:27:ec:b6:ca:0e:cf:ba:aa:bd:64:4f: 0a:5d:35:33:7d:63:ec:a0:fe:dd:91:ae:44:9a:9d:9f:d8:8b: c7:90:94:bd:80:40:40:99:8e:ad:02:41:b2:e4:18:26:e2:1c: 4d:b6:7f:ea:d4:ce:92:a1:d3:81:11:11:6b:00:ca:60:5b:43: 1e:89:72:02:c6:be:49:9f:65:29:c3:c2:f4:2d:8e:a6:c3:61: 48:49:c4:2b:44:9f:a4:1a:3b:1a:ac:c8:0e:77:d7:39:89:c2: 5d:de:15:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUB8MQCfuohY5Ri/qKOTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTI1MDQwMTEyWhcNMjYwMTI2MDQwMTEyWjAzMTEwLwYDVQQD Eyg2MWE5ZjczM2QyZGExNTJmYjgxYTk2YWQxZDgxZDJiMDQzZTZlOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Pd2TWYE7JnZYA5tVvoIoPrnz5c FAp5RFyci0h7AnuHIKnDlKUUuusm+CmbDSZhuU37cNrvOinqFYDnm7w6fA4L9Ty+ 0IZpmHP3KCl/2e1iytHukIXInQJcdR2laCD/Lai95dBI2UJExD2y3IS2nSiMT5Vx kSRjiOY+/YKBw59kTKkNEhfnbkgS0UYu19wzWcbZP3LhzPNLZzer1h3QiYwU+/03 oRErDsGOZY18mB4rxg8X5olgKNNW9YK08m9cGhLAPNqUDGLNwbkMdojEnDZD+GBx OqGo4QpcJZL5kJNGFQu9AKXllWmFSwB6Mm7skN3mTaKxDufodWFIyt1/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGp9zPS2hUvuBqWrR2B0rBD5ujKMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboZTW42+ RuKXSzpOiGcvnUrTHJm665dJPnr5Eh/o2kcM7zW4Pkscnvt3MyDcJZtjUvSrIP/S ppfN6nJxcPBLRW5sJvk8fNheY0cFtAFqtfqO/lo5N6wSG0iK3a+iCSEKvEvuKfqa YBqp8z8Z7o2VVDLA7hxFaBdjw63BMWE6S87r89xnY3GbNmd8UFitTWvKasoaOtgC 8yfstsoOz7qqvWRPCl01M31j7KD+3ZGuRJqdn9iLx5CUvYBAQJmOrQJBsuQYJuIc TbZ/6tTOkqHTgRERawDKYFtDHolyAsa+SZ9lKcPC9C2OpsNhSEnEK0SfpBo7GqzI DnfXOYnCXd4Vug== -----END CERTIFICATE-----Generated at Sun Jan 25 13:10:03 2026 by rpki-client