This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json) Hash identifier: HVleQU9QfcmZxd4wzI77vCH/Zo9qdhXSnzlNUAmIm6A= Subject key identifier: 24:38:35:18:78:74:3A:B8:9D:79:57:ED:F6:A5:99:9F:FE:6B:D8:F6 Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Certificate serial: 019BF876663CC2249BC637C146FD23128898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 04:01:07 +0000 Manifest this update: Mon 26 Jan 2026 04:01:07 +0000 Manifest next update: Tue 27 Jan 2026 04:01:07 +0000 Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: j+puE7Tn/jUrKPmYLYykaZMYLPxff0Gtk1MwdYvU7yc=) 2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:66:3c:c2:24:9b:c6:37:c1:46:fd:23:12:88:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Validity Not Before: Jan 26 04:01:07 2026 GMT Not After : Jan 27 04:01:07 2026 GMT Subject: CN=2438351878743ab89d7957edf6a5999ffe6bd8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:3b:e0:06:aa:1a:86:b4:94:98:4c:fb:d6: 71:2c:0e:ad:02:75:a8:19:9f:0f:fa:27:ad:14:14: ea:89:00:71:00:c0:26:f2:39:e8:06:0d:98:55:62: 3b:c4:d8:2e:81:e4:4a:91:ff:d7:28:03:7f:7b:08: 6e:11:f2:64:f9:3c:0d:e4:be:c9:ba:af:98:d0:4c: 30:6a:1d:8e:f8:68:49:96:71:74:c8:67:fc:13:57: 93:a5:48:f5:a4:33:c5:19:92:06:2f:a7:59:0f:a6: b3:29:6e:b6:3d:71:c5:a7:d9:98:0b:75:9d:63:38: 8d:94:d8:ce:6e:40:d6:1e:7e:46:b5:5c:2b:48:fb: 28:3d:d5:f9:b0:b3:db:d9:38:d7:3d:7d:69:cc:fb: bc:22:2d:ed:f3:de:a8:86:a9:0a:c8:cd:33:fb:9f: 29:7d:05:a0:ad:e0:3c:98:13:19:e9:98:81:94:bc: 6d:6e:a8:e5:67:9e:01:9c:ca:ad:cf:ac:01:59:ab: b4:0b:d9:30:8c:1b:25:ae:30:d2:d0:d2:fc:ce:04: dd:9e:c8:e2:53:f5:3e:f8:5f:9f:3b:da:08:7b:f6: 4a:65:87:c2:52:1a:a0:43:d2:20:ba:17:bc:0a:62: ed:3d:9b:28:31:7b:a3:fc:59:52:b7:54:84:c4:ce: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:38:35:18:78:74:3A:B8:9D:79:57:ED:F6:A5:99:9F:FE:6B:D8:F6 X509v3 Authority Key Identifier: keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:79:c9:5e:5a:13:bd:77:e6:da:5e:d7:4e:fa:70:81:b8:e3: 00:1c:4b:eb:f7:7f:24:26:d1:0e:9a:34:e7:9f:e2:dc:fa:8f: 30:c6:a3:04:e1:39:ca:ca:95:34:d8:01:c1:1b:a6:40:8b:81: a9:d6:dc:18:cb:85:5b:12:13:07:b6:f3:09:5d:39:82:f2:eb: c2:9a:85:16:74:fe:c4:de:68:0a:d5:e4:4f:86:43:f8:57:ae: 5d:93:80:32:8a:e5:ef:be:e0:5b:7e:37:70:09:cb:22:92:d3: a4:03:86:4c:3c:7c:44:f3:e3:fe:28:06:c6:04:af:8f:10:60: 7f:b6:db:fe:5b:8f:a5:39:db:24:8b:06:93:99:c5:3c:99:94: 72:67:47:1b:97:56:f2:95:48:84:1a:ca:4f:e8:ec:ad:3e:84: a6:21:cc:7a:e8:4e:9e:02:84:57:a5:e1:30:49:45:e2:de:0d: 92:64:77:ac:83:dd:fc:63:a4:81:fe:58:1b:6e:36:c4:23:da: 61:b9:4b:04:5c:02:a4:74:82:65:45:22:3a:c9:0f:78:71:a8: dd:3b:7b:b5:a2:81:4d:af:80:33:c5:58:44:e4:06:5c:b9:f3: be:c7:ef:36:f1:ac:ed:1f:e0:b5:5d:22:e0:47:db:9c:41:1d: fd:be:02:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dmY8wiSbxjfBRv0jEoiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh YzIwYTgwHhcNMjYwMTI2MDQwMTA3WhcNMjYwMTI3MDQwMTA3WjAzMTEwLwYDVQQD EygyNDM4MzUxODc4NzQzYWI4OWQ3OTU3ZWRmNmE1OTk5ZmZlNmJkOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpc74AaqGoa0lJhM+9ZxLA6tAnWo GZ8P+ietFBTqiQBxAMAm8jnoBg2YVWI7xNgugeRKkf/XKAN/ewhuEfJk+TwN5L7J uq+Y0Ewwah2O+GhJlnF0yGf8E1eTpUj1pDPFGZIGL6dZD6azKW62PXHFp9mYC3Wd YziNlNjObkDWHn5GtVwrSPsoPdX5sLPb2TjXPX1pzPu8Ii3t896ohqkKyM0z+58p fQWgreA8mBMZ6ZiBlLxtbqjlZ54BnMqtz6wBWau0C9kwjBslrjDS0NL8zgTdnsji U/U++F+fO9oIe/ZKZYfCUhqgQ9Iguhe8CmLtPZsoMXuj/FlSt1SExM4Z/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ4NRh4dDq4nXlX7falmZ/+a9j2MB8GA1UdIwQY MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct MGE5MWNhZGJlZTY2LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2 LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHnJXloT vXfm2l7XTvpwgbjjABxL6/d/JCbRDpo055/i3PqPMMajBOE5ysqVNNgBwRumQIuB qdbcGMuFWxITB7bzCV05gvLrwpqFFnT+xN5oCtXkT4ZD+FeuXZOAMorl777gW343 cAnLIpLTpAOGTDx8RPPj/igGxgSvjxBgf7bb/luPpTnbJIsGk5nFPJmUcmdHG5dW 8pVIhBrKT+jsrT6EpiHMeuhOngKEV6XhMElF4t4NkmR3rIPd/GOkgf5YG242xCPa YblLBFwCpHSCZUUiOskPeHGo3Tt7taKBTa+AM8VYROQGXLnzvsfvNvGs7R/gtV0i 4EfbnEEd/b4C7A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:37:40 2026 by rpki-client