This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json) Hash identifier: q4S4B6vhK6N1/EB4CLLzhEhZCzlIuIAQoNnsS6RKp1E= Subject key identifier: 89:AC:6A:B8:D0:44:CF:07:44:7F:7C:42:D6:4A:9F:28:D8:02:DC:FD Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Certificate serial: 019BF6884C6C6C1E2D9AF0C900E17A2ACC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 19:01:26 +0000 Manifest this update: Sun 25 Jan 2026 19:01:26 +0000 Manifest next update: Mon 26 Jan 2026 19:01:26 +0000 Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=) 2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=) 3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: BwQgj+2AYDzftBGaEtKvuQ19JKSFEmUlHdcoeXQLAHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4c:6c:6c:1e:2d:9a:f0:c9:00:e1:7a:2a:cc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Validity Not Before: Jan 25 19:01:26 2026 GMT Not After : Jan 26 19:01:26 2026 GMT Subject: CN=89ac6ab8d044cf07447f7c42d64a9f28d802dcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:ab:3f:ed:2e:17:72:33:ba:f4:70:38:a7: 9f:78:9d:0f:a9:6a:c1:e7:c7:9c:f3:9e:57:5f:a9: ae:0d:42:8b:10:5e:ab:ea:c4:54:22:2f:c0:12:d6: 50:31:c5:36:21:13:5f:58:60:49:74:20:97:dd:bb: 13:4d:9f:90:61:f2:31:d0:f6:d5:59:41:af:46:13: 2e:e3:38:ad:7a:a0:48:01:78:41:f3:51:50:a4:85: 2b:b6:62:1c:7b:50:51:e9:51:9d:1b:60:33:2e:d5: cc:f4:0d:68:ae:a9:63:7e:b7:90:b2:26:10:23:57: 40:bd:fd:e3:a2:91:b5:e5:53:fe:24:c8:9f:86:22: ca:1b:31:8d:7d:03:6a:2b:ce:4b:a6:2d:32:d8:46: 7d:4d:3f:33:6c:8e:38:d2:fe:94:2a:a5:00:81:ed: a9:b9:95:09:74:e6:65:9b:9b:3f:11:16:d4:63:c9: 40:b2:52:34:93:77:b0:1c:a5:50:a3:90:0d:56:1c: 3e:0a:ab:77:e3:e8:57:7d:6c:63:2b:9c:aa:7a:d4: 01:7b:5d:88:5b:c7:62:50:a4:a6:50:73:a5:7a:5d: 2e:e7:5f:9e:32:48:e6:01:db:d0:e4:b0:ab:74:fd: bd:3a:a5:98:73:55:de:bc:2a:eb:a4:99:bb:3e:71: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AC:6A:B8:D0:44:CF:07:44:7F:7C:42:D6:4A:9F:28:D8:02:DC:FD X509v3 Authority Key Identifier: keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e9:02:b5:1f:49:17:7e:68:9e:78:6c:aa:1a:73:2d:4f:c6: 70:d4:a9:da:6a:85:91:87:3b:89:bd:d5:c8:fb:31:e9:ba:3d: 20:7a:29:41:52:ae:e3:35:a3:72:7a:9d:c8:59:a5:07:fc:eb: df:6d:f5:ed:57:40:e5:3d:08:2f:5b:35:2e:3f:b5:94:57:72: 4c:3f:7f:ae:5e:44:79:27:3c:7c:1b:eb:54:11:5d:74:8d:fc: 8a:a3:81:31:a9:5f:63:e8:1c:ab:52:fb:6d:9e:a1:3e:71:07: 41:28:0d:e5:a4:91:36:19:43:06:d0:d4:48:ad:ee:71:ef:3d: 13:a1:37:12:fb:bf:12:60:33:87:ca:4c:60:b4:d4:65:2b:4e: 32:f0:ef:2d:eb:23:5d:97:8f:3f:4b:97:d6:ea:7e:da:b4:1f: 33:21:a9:05:f9:29:ab:19:7d:61:f4:3b:de:a7:96:36:53:a7: e6:26:52:cc:3d:d1:c5:1a:91:46:08:02:14:a5:0e:d4:a0:c3: 94:d0:63:2a:62:72:dd:be:fa:e7:ce:4e:c4:63:b2:3c:1e:3a: a0:14:f8:c0:65:09:83:70:f9:e5:6e:21:49:4d:c8:f6:ba:4d: c7:93:aa:d0:6a:60:f1:57:93:2e:b0:ee:06:75:7f:5a:ad:8e: 53:af:8a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iExsbB4tmvDJAOF6KswpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZmFlYzRiOGQ5OTJkZDZiOWNkODlhODQ4OWQzYzNhNjUy YWVjZDIwHhcNMjYwMTI1MTkwMTI2WhcNMjYwMTI2MTkwMTI2WjAzMTEwLwYDVQQD Eyg4OWFjNmFiOGQwNDRjZjA3NDQ3ZjdjNDJkNjRhOWYyOGQ4MDJkY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1CrP+0uF3IzuvRwOKefeJ0PqWrB 58ec855XX6muDUKLEF6r6sRUIi/AEtZQMcU2IRNfWGBJdCCX3bsTTZ+QYfIx0PbV WUGvRhMu4ziteqBIAXhB81FQpIUrtmIce1BR6VGdG2AzLtXM9A1orqljfreQsiYQ I1dAvf3jopG15VP+JMifhiLKGzGNfQNqK85Lpi0y2EZ9TT8zbI440v6UKqUAge2p uZUJdOZlm5s/ERbUY8lAslI0k3ewHKVQo5ANVhw+Cqt34+hXfWxjK5yqetQBe12I W8diUKSmUHOlel0u51+eMkjmAdvQ5LCrdP29OqWYc1XevCrrpJm7PnFGQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImsarjQRM8HRH98QtZKnyjYAtz9MB8GA1UdIwQY MBaAFLX67EuNmS3Wuc2JqEidPDplKuzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjkt NDI0M2RlY2FkMzYwLzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjktNDI0M2RlY2FkMzYw LzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOkCtR9J F35onnhsqhpzLU/GcNSp2mqFkYc7ib3VyPsx6bo9IHopQVKu4zWjcnqdyFmlB/zr 32317VdA5T0IL1s1Lj+1lFdyTD9/rl5EeSc8fBvrVBFddI38iqOBMalfY+gcq1L7 bZ6hPnEHQSgN5aSRNhlDBtDUSK3uce89E6E3Evu/EmAzh8pMYLTUZStOMvDvLesj XZePP0uX1up+2rQfMyGpBfkpqxl9YfQ73qeWNlOn5iZSzD3RxRqRRggCFKUO1KDD lNBjKmJy3b76585OxGOyPB46oBT4wGUJg3D55W4hSU3I9rpNx5Oq0Gpg8VeTLrDu BnV/Wq2OU6+KJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:52 2026 by rpki-client