This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft File: tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json) Hash identifier: /a6Ym9UE/8oSefTQ1aEI/2l4+HJWnVa9yRYS0XhDy/8= Subject key identifier: 7B:93:6A:4D:C6:31:35:BB:D4:A3:F2:A7:DC:B2:22:8F:79:27:23:E6 Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 Certificate issuer: /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Certificate serial: 019BF68796A28F61CB24DC35F9678D6CB1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft Manifest number: 0275 Signing time: Sun 25 Jan 2026 19:00:39 +0000 Manifest this update: Sun 25 Jan 2026 19:00:39 +0000 Manifest next update: Mon 26 Jan 2026 19:00:39 +0000 Files and hashes: 1: Oi4i4ArTYX2bzJDgdOmJ8wfG-Qc.roa (hash: 3SqbbSrad4TWe7DkRtPVNoNwj8sBMXzmlo9+pJyqPD0=) 2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: yPV1u7mVeZ/nlEl4tKIV0T5M/aHI40LX2ZfMWX4ulk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:96:a2:8f:61:cb:24:dc:35:f9:67:8d:6c:b1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Validity Not Before: Jan 25 19:00:39 2026 GMT Not After : Jan 26 19:00:39 2026 GMT Subject: CN=7b936a4dc63135bbd4a3f2a7dcb2228f792723e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:d9:16:aa:07:1c:14:17:74:f0:a3:9d:3e: 76:71:06:bc:b4:6f:5d:d8:0d:3f:b5:f2:ad:e7:c6: e9:46:b0:c0:30:78:4b:5d:87:c8:54:52:02:76:55: 7e:b2:b3:4f:d3:d8:88:29:90:c8:e6:bb:92:cf:fd: 38:5d:93:56:b8:ea:bf:e7:cf:c4:9e:7e:11:ff:18: cd:22:ef:3d:ed:f8:df:60:13:1a:58:10:7c:57:0e: 01:d5:99:e2:0e:db:4c:5a:b9:07:e9:71:a3:56:da: cd:66:fc:6e:28:8f:b3:89:20:53:32:ed:6a:d4:21: 19:d9:86:fd:47:7b:b7:91:88:17:22:6e:d6:50:53: 4b:70:dc:eb:b5:1c:62:8f:89:0a:4e:df:e0:c8:13: 45:47:42:71:63:4a:42:a4:4d:1f:70:cc:5c:46:24: 03:12:ba:92:ed:92:a1:06:d2:5a:48:17:b4:51:ca: b3:87:10:34:5e:6b:7c:7d:c4:ea:a0:33:48:62:0c: e0:41:52:e0:53:7d:ae:26:fc:da:22:d3:da:ed:99: 59:d9:ab:0a:6f:62:d0:c5:b8:aa:cb:2c:da:f1:02: 0d:21:0d:c5:c7:a7:ff:24:3a:55:38:5c:f0:b9:7a: bc:6c:00:9b:c6:09:e9:ef:75:44:32:50:44:b8:f0: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:93:6A:4D:C6:31:35:BB:D4:A3:F2:A7:DC:B2:22:8F:79:27:23:E6 X509v3 Authority Key Identifier: keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4a:3e:cb:ed:95:50:8c:0b:4c:b8:85:f4:28:e8:4a:98:14: ab:82:24:d2:82:40:3e:de:ef:4f:a8:06:fa:d5:53:54:92:e4: 06:b8:85:24:32:55:2e:39:43:95:6a:45:73:8e:89:3a:55:a8: 83:1b:43:2c:21:f3:84:60:22:0e:af:83:e8:77:84:d7:db:af: 0b:c0:ad:5e:cf:9f:5a:de:56:27:f5:dd:60:53:ba:aa:5a:8e: 49:75:96:54:92:6e:c4:55:88:38:c4:74:de:39:e1:ce:25:74: 5a:65:4e:f9:73:3a:80:fc:c7:da:87:34:17:04:5d:08:52:fb: 7a:60:31:5d:40:68:7f:88:08:f5:c4:c8:bf:ca:92:24:cf:6f: 90:5f:86:11:dd:ee:ad:06:ef:32:78:c7:0c:0f:41:bf:22:dd: 86:7d:f4:99:cb:6f:56:65:a0:16:ae:12:7b:ce:33:c7:18:75: ea:c6:8f:03:f1:c5:ce:c0:2e:66:9f:67:8f:b5:43:67:01:f8: fd:95:03:59:58:8b:e1:26:dd:c2:0b:e4:ed:68:d9:95:dc:7a: 4d:46:4d:e7:78:ab:8d:86:f9:ad:60:b5:56:73:c7:a1:d3:a1: 1f:f1:c2:35:1a:88:73:d4:83:15:c0:34:d9:07:1d:de:5b:3e: 92:52:59:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5aij2HLJNw1+WeNbLGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTM2OGI4ZTY2ZjllMTVhNjEwZWMxOGQ2YjE0N2I2YmEy NGNlZTcwHhcNMjYwMTI1MTkwMDM5WhcNMjYwMTI2MTkwMDM5WjAzMTEwLwYDVQQD Eyg3YjkzNmE0ZGM2MzEzNWJiZDRhM2YyYTdkY2IyMjI4Zjc5MjcyM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswTZFqoHHBQXdPCjnT52cQa8tG9d 2A0/tfKt58bpRrDAMHhLXYfIVFICdlV+srNP09iIKZDI5ruSz/04XZNWuOq/58/E nn4R/xjNIu897fjfYBMaWBB8Vw4B1ZniDttMWrkH6XGjVtrNZvxuKI+ziSBTMu1q 1CEZ2Yb9R3u3kYgXIm7WUFNLcNzrtRxij4kKTt/gyBNFR0JxY0pCpE0fcMxcRiQD ErqS7ZKhBtJaSBe0UcqzhxA0Xmt8fcTqoDNIYgzgQVLgU32uJvzaItPa7ZlZ2asK b2LQxbiqyyza8QINIQ3Fx6f/JDpVOFzwuXq8bACbxgnp73VEMlBEuPBo9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuTak3GMTW71KPyp9yyIo95JyPmMB8GA1UdIwQY MBaAFLajaLjmb54VphDsGNaxR7a6JM7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMt NzQ4MGQ4YTJmMWJlLzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMtNzQ4MGQ4YTJmMWJl LzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEo+y+2V UIwLTLiF9CjoSpgUq4Ik0oJAPt7vT6gG+tVTVJLkBriFJDJVLjlDlWpFc46JOlWo gxtDLCHzhGAiDq+D6HeE19uvC8CtXs+fWt5WJ/XdYFO6qlqOSXWWVJJuxFWIOMR0 3jnhziV0WmVO+XM6gPzH2oc0FwRdCFL7emAxXUBof4gI9cTIv8qSJM9vkF+GEd3u rQbvMnjHDA9BvyLdhn30mctvVmWgFq4Se84zxxh16saPA/HFzsAuZp9nj7VDZwH4 /ZUDWViL4Sbdwgvk7WjZldx6TUZN53irjYb5rWC1VnPHodOhH/HCNRqIc9SDFcA0 2Qcd3ls+klJZNQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:12 2026 by rpki-client