This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json) Hash identifier: tpGWHzKRnHZrLvzYy37bfpKpupo2acW4bF5bW6Tz8QY= Subject key identifier: 22:25:53:14:CB:1D:02:53:B2:C3:8E:32:42:A6:9A:B6:E9:40:1D:90 Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Certificate serial: 019BF687CA796A57DCA53A4C19AFD9F8DC9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 19:00:52 +0000 Manifest this update: Sun 25 Jan 2026 19:00:52 +0000 Manifest next update: Mon 26 Jan 2026 19:00:52 +0000 Files and hashes: 1: 8M8YMfi0h_G2D7NTU4bpPcwvRYU.roa (hash: CZCGZ/lTIHM50UQeqzvjgM1bhMMP8aMbAEQl+Vqm5GE=) 2: PNj9cF3Hsh3vfuNuwDWinad61dQ.roa (hash: V97LaZrx2hP3Un7Jqbk9Fjlhl5xWfP0hR0ApEyVRBVc=) 3: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: 6O2D/ahumJnmodIDMeNgGPeq0b3l9wd4ztv2HyNyVbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:ca:79:6a:57:dc:a5:3a:4c:19:af:d9:f8:dc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Validity Not Before: Jan 25 19:00:52 2026 GMT Not After : Jan 26 19:00:52 2026 GMT Subject: CN=22255314cb1d0253b2c38e3242a69ab6e9401d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:02:40:1f:30:90:dc:4d:6b:3b:08:5e:f1: 90:69:94:8f:02:67:69:26:b9:c3:31:75:ad:3c:bd: 2e:ab:45:36:39:ae:5e:85:2c:54:75:e7:5d:f7:84: 21:6b:5c:cf:a8:55:41:8e:4c:ec:31:f6:f9:7b:4b: 0a:e9:d3:6a:d8:61:2c:f6:70:f6:a3:92:ee:02:30: b2:e3:ab:85:c8:4e:3e:58:87:8f:8e:21:c5:75:52: 45:60:a5:9e:fb:9f:2b:3c:a6:b9:f7:82:f4:c2:5f: 84:25:cc:6b:a4:7a:df:15:37:8a:65:64:20:19:0a: c4:72:44:75:b0:08:08:a6:47:ad:50:72:bc:86:16: cc:e4:35:f8:34:16:9a:a8:5a:87:5b:93:50:c2:86: c5:ce:2f:b5:ce:70:03:96:cb:62:c4:7d:27:e0:64: 5f:ab:6d:c0:5e:5b:84:f7:8c:76:55:4d:0a:f3:26: af:12:b5:7d:86:79:82:5b:ac:2f:db:56:f1:4e:58: 18:b0:96:49:97:90:28:33:cb:1b:9a:58:af:81:f2: ba:86:c9:2f:df:84:a6:08:70:17:92:bd:3c:37:49: b7:8e:0f:d4:1e:f2:0b:0f:76:bf:49:46:e4:ad:6f: ff:9e:ee:c9:99:0f:c0:1f:f6:7f:f0:53:97:fc:f7: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:53:14:CB:1D:02:53:B2:C3:8E:32:42:A6:9A:B6:E9:40:1D:90 X509v3 Authority Key Identifier: keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b2:43:c6:3e:95:92:a6:cc:62:77:6d:51:c8:5c:ca:7f:6d: 0f:91:79:e8:77:e4:9c:99:af:5e:1a:67:1e:eb:29:87:a9:04: 64:4f:1c:ba:f6:10:10:2d:dc:76:48:a9:ae:7f:61:02:66:36: 52:57:db:63:5b:56:ef:b0:5b:e5:e0:96:81:6f:62:e6:83:a9: 42:f5:0e:dd:51:6a:ef:4f:cf:5b:84:fd:bd:a7:53:4c:af:2a: cb:17:1f:8c:f6:25:0e:70:63:29:3a:37:8b:81:a9:23:60:91: ce:70:13:5f:fe:b7:90:3f:34:06:4c:50:08:0b:07:24:3f:64: 5e:b5:ee:90:d6:de:dd:2f:92:85:8a:ca:d2:e3:5d:af:0d:1e: bb:fb:98:e6:8f:2c:2b:c3:19:28:47:f0:fb:f3:f7:8a:7d:f5: 0b:8d:46:99:e8:99:41:03:6b:5d:47:0b:97:1e:aa:63:1f:69: a6:96:21:32:8e:0e:88:a8:84:61:f4:bb:28:80:76:af:b6:65: 17:17:12:d6:5b:40:cc:46:e3:f7:0e:b2:ad:29:57:56:14:18: 12:40:df:e5:b9:c5:05:7b:84:a4:51:07:d1:38:9a:f4:9a:92: 79:42:fa:f0:97:85:c6:ea:1a:13:01:96:de:de:ff:ac:11:3d: 32:2a:55:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h8p5alfcpTpMGa/Z+NyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz ODM4YzEwHhcNMjYwMTI1MTkwMDUyWhcNMjYwMTI2MTkwMDUyWjAzMTEwLwYDVQQD EygyMjI1NTMxNGNiMWQwMjUzYjJjMzhlMzI0MmE2OWFiNmU5NDAxZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIACQB8wkNxNazsIXvGQaZSPAmdp JrnDMXWtPL0uq0U2Oa5ehSxUdedd94Qha1zPqFVBjkzsMfb5e0sK6dNq2GEs9nD2 o5LuAjCy46uFyE4+WIePjiHFdVJFYKWe+58rPKa594L0wl+EJcxrpHrfFTeKZWQg GQrEckR1sAgIpketUHK8hhbM5DX4NBaaqFqHW5NQwobFzi+1znADlstixH0n4GRf q23AXluE94x2VU0K8yavErV9hnmCW6wv21bxTlgYsJZJl5AoM8sbmlivgfK6hskv 34SmCHAXkr08N0m3jg/UHvILD3a/SUbkrW//nu7JmQ/AH/Z/8FOX/PcaJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIlUxTLHQJTssOOMkKmmrbpQB2QMB8GA1UdIwQY MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt ZmM5MTQzM2QzNjdkLzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7JDxj6V kqbMYndtUchcyn9tD5F56HfknJmvXhpnHusph6kEZE8cuvYQEC3cdkiprn9hAmY2 UlfbY1tW77Bb5eCWgW9i5oOpQvUO3VFq70/PW4T9vadTTK8qyxcfjPYlDnBjKTo3 i4GpI2CRznATX/63kD80BkxQCAsHJD9kXrXukNbe3S+ShYrK0uNdrw0eu/uY5o8s K8MZKEfw+/P3in31C41GmeiZQQNrXUcLlx6qYx9pppYhMo4OiKiEYfS7KIB2r7Zl FxcS1ltAzEbj9w6yrSlXVhQYEkDf5bnFBXuEpFEH0Tia9JqSeUL68JeFxuoaEwGW 3t7/rBE9MipVTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:41:34 2026 by rpki-client