This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: gjsth3sLU9hCqnYtbnmgPhq/lQIotGyQQ/23iB4flHY= Subject key identifier: E1:C6:36:8F:ED:BF:05:C6:D3:D4:E2:A2:BA:91:6C:F4:0D:6E:CE:45 Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019BF42C057D8073F17247719E418509B8D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 0A58 Signing time: Sun 25 Jan 2026 08:01:24 +0000 Manifest this update: Sun 25 Jan 2026 08:01:24 +0000 Manifest next update: Mon 26 Jan 2026 08:01:24 +0000 Files and hashes: 1: 1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa (hash: bNfrVNzH2BXnE1dQKvpq85yCYPmZuhWsqc5IpPdYyzo=) 2: ANEuhIxGTh0gN0pm_5zFNRdf5ug.roa (hash: xOWr9sWoEVbPWgFS3DOCmN6xP+8pmNOay/7+vGgp/Os=) 3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=) 4: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: tEZjdSUwEFqTlrOk+00CLXBtvluijyagZBPHeXecANk=) 5: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=) 6: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=) 7: iZcZ_-KRFzETMXfXgFqcCVyHHWw.roa (hash: rbsN5PPkcbMSn4E12T9YbjsvzB+VtJOV1oya4fK1cDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:05:7d:80:73:f1:72:47:71:9e:41:85:09:b8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jan 25 08:01:24 2026 GMT Not After : Jan 26 08:01:24 2026 GMT Subject: CN=e1c6368fedbf05c6d3d4e2a2ba916cf40d6ece45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:7f:a3:d6:eb:a0:7b:d8:07:a3:ed:91:a3: 3d:76:71:39:69:e9:7d:ce:fa:83:f3:eb:f0:c5:dc: a5:85:02:71:c3:be:c7:90:88:44:18:26:a0:2c:77: a3:93:db:f5:c9:5b:26:13:3c:d9:3f:0a:c6:8b:b1: 1a:99:26:8f:05:ec:8b:26:87:44:e2:4f:cd:e3:f8: 1e:b3:ce:9f:b4:a4:f3:94:9b:ec:bf:28:f0:9e:f7: 0d:fe:9b:5a:69:fa:a0:84:ff:ec:c6:5a:84:d7:0b: ae:55:c4:5c:d2:7f:71:28:29:9d:dd:04:90:6a:63: 7e:38:d3:c9:e8:a3:c4:54:61:59:4a:4c:37:e9:2b: 2d:b5:bf:9a:c0:01:df:66:f4:7f:da:f8:0e:7d:44: 79:77:40:25:49:82:ed:9e:4e:a9:7f:03:e9:7b:8b: 77:26:c4:bf:a4:1e:52:7f:bd:34:ce:7a:17:79:57: d5:95:4d:f8:2c:96:45:4a:9e:49:7f:46:15:83:a8: f4:e2:c3:fb:0a:b4:21:c9:03:8b:ff:7a:f0:60:df: 35:4f:25:74:b9:85:64:5a:51:74:7a:b2:35:2e:6c: 1f:d4:76:a6:e7:dd:c5:f1:e3:4f:1c:e8:b9:10:e2: 8e:9d:18:ac:32:a4:2b:12:5c:a5:7c:58:c1:f2:da: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C6:36:8F:ED:BF:05:C6:D3:D4:E2:A2:BA:91:6C:F4:0D:6E:CE:45 X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:ff:3f:3f:0a:e0:56:89:b7:90:58:5d:9e:ef:c8:a5:8c:37: 46:87:ee:49:d0:26:df:67:25:0d:71:01:a0:6e:5a:1a:a5:a1: 0c:7e:10:1d:86:ad:97:2a:d3:79:b7:a3:a2:c8:3c:82:b6:fa: c0:8a:b3:37:0b:3b:52:82:25:30:d5:4f:37:74:f2:4c:9e:01: 90:33:e3:86:af:0e:47:49:82:0e:89:c7:7d:5f:da:8d:74:eb: b1:9f:60:1d:8e:a5:94:26:2b:63:2e:6d:30:70:24:47:35:c5: cd:be:da:2c:ee:82:a5:a3:fd:5a:e8:24:58:09:f5:f2:98:65: 16:e0:56:fa:bc:9f:19:75:48:14:7c:ee:7a:8e:17:22:4b:5d: de:45:96:b0:d4:0f:ec:6c:a1:a9:9b:72:3b:68:9c:0b:6f:2a: 56:f9:fd:c3:d6:be:aa:26:92:ac:6f:84:b9:c5:28:7e:45:40: ea:84:38:76:2a:94:b6:e5:3c:04:13:24:a8:d8:66:85:f8:e5: 61:04:f3:c7:87:55:e9:65:27:c8:e0:5c:ca:72:16:e6:8f:6d: be:38:2b:aa:ee:0f:af:94:8b:0f:91:c0:46:76:79:2c:de:98: 76:77:4d:bb:66:56:91:9b:be:5c:a0:26:42:27:a7:93:1d:81: c8:2e:c7:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LAV9gHPxckdxnkGFCbjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwMTI1MDgwMTI0WhcNMjYwMTI2MDgwMTI0WjAzMTEwLwYDVQQD EyhlMWM2MzY4ZmVkYmYwNWM2ZDNkNGUyYTJiYTkxNmNmNDBkNmVjZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrh/o9broHvYB6PtkaM9dnE5ael9 zvqD8+vwxdylhQJxw77HkIhEGCagLHejk9v1yVsmEzzZPwrGi7EamSaPBeyLJodE 4k/N4/ges86ftKTzlJvsvyjwnvcN/ptaafqghP/sxlqE1wuuVcRc0n9xKCmd3QSQ amN+ONPJ6KPEVGFZSkw36Ssttb+awAHfZvR/2vgOfUR5d0AlSYLtnk6pfwPpe4t3 JsS/pB5Sf700znoXeVfVlU34LJZFSp5Jf0YVg6j04sP7CrQhyQOL/3rwYN81TyV0 uYVkWlF0erI1Lmwf1Ham593F8eNPHOi5EOKOnRisMqQrElylfFjB8tor2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHGNo/tvwXG09TiorqRbPQNbs5FMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzP8/Pwrg Vom3kFhdnu/IpYw3RofuSdAm32clDXEBoG5aGqWhDH4QHYatlyrTebejosg8grb6 wIqzNws7UoIlMNVPN3TyTJ4BkDPjhq8OR0mCDonHfV/ajXTrsZ9gHY6llCYrYy5t MHAkRzXFzb7aLO6CpaP9WugkWAn18phlFuBW+ryfGXVIFHzueo4XIktd3kWWsNQP 7GyhqZtyO2icC28qVvn9w9a+qiaSrG+EucUofkVA6oQ4diqUtuU8BBMkqNhmhfjl YQTzx4dV6WUnyOBcynIW5o9tvjgrqu4Pr5SLD5HARnZ5LN6YdndNu2ZWkZu+XKAm Qienkx2ByC7HJg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:27 2026 by rpki-client