This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json) Hash identifier: feXBHgQdKuHDOra/U5J/2RfapUAMY9P7xw6NvhdkNrI= Subject key identifier: 4D:68:B8:A5:DB:75:AA:09:08:20:E1:3B:08:FE:2C:16:64:DA:66:0A Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Certificate serial: 019BF651AA5A577BCA6C3B3000D10949E145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft Manifest number: 0A49 Signing time: Sun 25 Jan 2026 18:01:45 +0000 Manifest this update: Sun 25 Jan 2026 18:01:45 +0000 Manifest next update: Mon 26 Jan 2026 18:01:45 +0000 Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=) 2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: DlQ1+cYZYULNZLhbgXpOYW83JkfixH/k/nR9ajSf5l0=) 3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:aa:5a:57:7b:ca:6c:3b:30:00:d1:09:49:e1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Validity Not Before: Jan 25 18:01:45 2026 GMT Not After : Jan 26 18:01:45 2026 GMT Subject: CN=4d68b8a5db75aa090820e13b08fe2c1664da660a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:17:95:e9:6b:ac:ac:60:7d:b8:a5:62:c0: 82:1d:ce:e1:b7:e9:75:4f:1a:c7:cd:64:2a:f1:72: 42:2c:8c:bd:6f:83:61:d6:64:ab:79:72:31:a9:b0: 42:01:01:f7:93:63:19:06:de:d1:85:ff:81:36:e5: 17:01:4e:32:c4:58:78:22:86:b0:90:1e:24:4d:50: 2f:b3:b6:7f:d7:cf:ce:2d:29:91:30:bd:d8:d4:12: 46:9b:76:35:99:30:ae:93:30:0f:de:63:9a:82:56: f0:b5:f7:11:13:a0:e4:71:7a:4a:1b:ef:37:f4:a4: 81:47:5e:d2:96:52:ab:e2:53:32:47:47:48:ae:48: a8:d3:33:39:b3:7a:59:7f:1c:95:76:d5:29:2f:18: bc:c3:df:8d:e4:ba:3b:a3:5d:d0:31:ab:63:d1:2d: 6b:02:ce:f5:b8:93:11:77:7a:af:25:33:80:b9:83: 95:23:45:57:ab:fb:f5:8c:0c:ea:06:2c:41:f9:24: d4:0c:34:e1:11:36:a2:10:f6:b5:1d:57:b4:1e:b3: 0f:05:8b:1d:9a:7d:c2:74:00:73:7a:34:5a:a3:5b: 7a:b4:ba:c9:7b:7c:a2:36:a3:17:d5:29:e4:de:fb: 35:3d:9a:aa:f7:56:5a:24:b0:0e:11:3c:60:02:aa: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:B8:A5:DB:75:AA:09:08:20:E1:3B:08:FE:2C:16:64:DA:66:0A X509v3 Authority Key Identifier: keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3e:86:cf:4f:50:5b:af:83:39:59:bb:a4:f8:40:c2:44:f1: bd:08:ce:59:f4:98:1f:02:90:4a:44:53:d4:a2:aa:21:e2:8f: 72:cd:5f:5a:b7:49:03:db:23:dd:6d:c7:15:cb:bb:01:5c:55: f8:c8:4b:38:86:1d:2d:05:32:13:2e:5f:1e:32:6f:3f:6b:15: 08:a9:e6:a2:8d:d6:65:a9:4a:4c:9e:9e:63:38:8c:1e:98:d4: 26:c5:a1:01:c9:d7:7e:eb:ba:9a:33:df:3c:12:a5:82:ba:ab: a0:85:33:b8:04:da:96:97:19:ce:2a:7c:5d:7b:46:10:d7:e6: 79:ed:48:21:86:b1:5b:aa:d4:7b:08:af:31:70:90:34:a1:a8: fc:94:cd:0f:a5:ec:07:ae:bc:8b:07:d4:9f:cd:0d:64:e8:82: bb:40:63:ab:cf:77:1d:9b:1e:64:5b:69:29:f8:1b:76:1d:54: 02:d9:f1:a0:71:a4:62:0b:99:18:17:02:e3:80:10:c4:51:fd: 7b:b1:e4:52:1d:aa:25:f1:78:18:96:90:00:18:d1:13:b1:60: 90:45:bc:ab:4a:50:46:a7:a8:08:2f:18:e7:d5:e3:9e:71:05: ec:d8:08:ef:df:31:3e:13:57:94:b4:dd:a6:b1:cd:10:19:07: 5b:71:74:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UapaV3vKbDswANEJSeFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy Njc5ZDkwHhcNMjYwMTI1MTgwMTQ1WhcNMjYwMTI2MTgwMTQ1WjAzMTEwLwYDVQQD Eyg0ZDY4YjhhNWRiNzVhYTA5MDgyMGUxM2IwOGZlMmMxNjY0ZGE2NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplQXlelrrKxgfbilYsCCHc7ht+l1 TxrHzWQq8XJCLIy9b4Nh1mSreXIxqbBCAQH3k2MZBt7Rhf+BNuUXAU4yxFh4Ioaw kB4kTVAvs7Z/18/OLSmRML3Y1BJGm3Y1mTCukzAP3mOaglbwtfcRE6DkcXpKG+83 9KSBR17SllKr4lMyR0dIrkio0zM5s3pZfxyVdtUpLxi8w9+N5Lo7o13QMatj0S1r As71uJMRd3qvJTOAuYOVI0VXq/v1jAzqBixB+STUDDThETaiEPa1HVe0HrMPBYsd mn3CdABzejRao1t6tLrJe3yiNqMX1Snk3vs1PZqq91ZaJLAOETxgAqqIMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1ouKXbdaoJCCDhOwj+LBZk2mYKMB8GA1UdIwQY MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt NzZhM2ExMGEyNmYyLzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj6Gz09Q W6+DOVm7pPhAwkTxvQjOWfSYHwKQSkRT1KKqIeKPcs1fWrdJA9sj3W3HFcu7AVxV +MhLOIYdLQUyEy5fHjJvP2sVCKnmoo3WZalKTJ6eYziMHpjUJsWhAcnXfuu6mjPf PBKlgrqroIUzuATalpcZzip8XXtGENfmee1IIYaxW6rUewivMXCQNKGo/JTND6Xs B668iwfUn80NZOiCu0Bjq893HZseZFtpKfgbdh1UAtnxoHGkYguZGBcC44AQxFH9 e7HkUh2qJfF4GJaQABjRE7FgkEW8q0pQRqeoCC8Y59XjnnEF7NgI798xPhNXlLTd prHNEBkHW3F0Og== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:40 2026 by rpki-client