This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: nJsDF7ySBsnAqXH34cANIvZb7VTX3adGEu5DSobVCtY= Subject key identifier: D9:30:07:BF:A9:24:66:62:7B:27:24:93:C7:68:B4:FF:17:A9:33:89 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019BF83FF674E8F79C3761965FBEB8A20907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 17FF Signing time: Mon 26 Jan 2026 03:01:39 +0000 Manifest this update: Mon 26 Jan 2026 03:01:39 +0000 Manifest next update: Tue 27 Jan 2026 03:01:39 +0000 Files and hashes: 1: 0u0Z9G_sLm4VMeScNSe2qxkNpUw.roa (hash: ZjKrwSklc3LkDu0tAkV/6i8mo/dNcOG0GCNtibli/Q4=) 2: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=) 3: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=) 4: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=) 5: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=) 6: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=) 7: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=) 8: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=) 9: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=) 10: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=) 11: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: fWlXrgxx0GxkWr+1R6S7FsaanDsX2Qrj+gLDVcCcz20=) 12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:f6:74:e8:f7:9c:37:61:96:5f:be:b8:a2:09:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 26 03:01:39 2026 GMT Not After : Jan 27 03:01:39 2026 GMT Subject: CN=d93007bfa92466627b272493c768b4ff17a93389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:61:df:f0:4e:9c:88:e2:83:4a:71:f9:ab: c8:22:ba:e4:e7:e6:54:20:cb:12:d9:ca:07:a9:05: ea:c8:04:84:ef:ee:df:f3:9c:37:af:9d:b1:d5:35: fa:a7:9e:33:e9:84:b5:c3:f5:62:17:1d:ae:ae:86: 1d:7b:65:57:c1:d2:9d:72:4a:b4:2b:69:98:21:1a: 9c:f2:bd:00:0e:66:bd:74:4e:a4:70:a5:87:24:69: 77:e6:2e:e1:13:ca:28:e4:62:f1:61:da:b6:6e:00: 6f:4d:11:5f:dd:21:df:26:54:53:db:70:21:46:f4: 16:4c:7e:10:cc:ef:1b:7c:08:c9:58:e6:c2:60:80: d0:7a:b2:ae:14:97:71:3c:71:57:9d:a5:9d:b3:bc: 67:cb:c4:9b:c4:c1:b5:57:9a:1f:71:6b:4b:bc:3c: ae:b5:4d:8e:cb:f8:b3:0d:66:aa:b0:0d:51:da:57: c0:87:06:bc:9e:3a:aa:ff:2f:98:3a:49:e4:a0:5b: 3b:01:26:b9:ae:a4:b2:05:d5:22:5b:8a:5e:72:da: 5b:38:3b:d3:99:fc:c3:30:a5:ca:3a:26:c3:fd:34: ce:ff:72:43:75:9c:15:ff:bb:d8:34:f0:7d:af:f4: f2:83:76:1d:38:91:b5:e5:dc:87:04:14:12:70:fd: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:30:07:BF:A9:24:66:62:7B:27:24:93:C7:68:B4:FF:17:A9:33:89 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:ab:4a:c3:94:40:5f:f4:ab:01:28:af:c2:58:11:30:cc: d7:3c:48:65:6d:7b:a3:48:35:b8:4b:86:1c:db:22:64:71:63: 08:05:e6:62:82:17:fc:84:65:fe:b1:39:5a:19:5b:81:91:b7: 8c:54:95:35:d3:a6:94:41:77:69:a7:d5:7f:ee:2c:0a:11:c8: e0:01:6a:98:14:ee:cd:65:b5:73:ad:11:0b:44:f9:9e:5c:c5: bb:9b:6c:25:3a:0b:5c:a9:b7:7e:72:89:4a:ed:a2:8a:84:a3: a9:9a:15:d4:2f:6b:38:71:ee:fc:7f:d9:03:5a:62:b0:d7:1a: 1c:dc:52:90:fd:3b:f7:4e:66:dc:9c:5c:18:6a:cb:53:df:6a: 24:51:95:1c:4d:3e:ef:81:63:69:70:9e:ed:8e:b6:3d:7f:e8: 4a:52:38:b7:5c:a0:8e:ff:8e:e1:10:8a:08:f4:57:15:03:77: 39:ba:22:93:15:71:4c:ce:1f:30:af:42:ca:41:33:f3:c2:0b: a2:ae:e8:c2:d4:0d:a4:35:3f:c9:40:4a:f2:8a:48:38:5d:a7: 25:d5:b8:20:09:ef:4b:f4:80:c9:c7:e7:98:a9:ec:33:14:51: ee:ff:72:da:0a:cd:c3:82:b2:6f:b7:bf:21:90:2b:23:71:a8: 09:44:0e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P/Z06PecN2GWX764ogkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTI2MDMwMTM5WhcNMjYwMTI3MDMwMTM5WjAzMTEwLwYDVQQD EyhkOTMwMDdiZmE5MjQ2NjYyN2IyNzI0OTNjNzY4YjRmZjE3YTkzMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ulh3/BOnIjig0px+avIIrrk5+ZU IMsS2coHqQXqyASE7+7f85w3r52x1TX6p54z6YS1w/ViFx2uroYde2VXwdKdckq0 K2mYIRqc8r0ADma9dE6kcKWHJGl35i7hE8oo5GLxYdq2bgBvTRFf3SHfJlRT23Ah RvQWTH4QzO8bfAjJWObCYIDQerKuFJdxPHFXnaWds7xny8SbxMG1V5ofcWtLvDyu tU2Oy/izDWaqsA1R2lfAhwa8njqq/y+YOknkoFs7ASa5rqSyBdUiW4pectpbODvT mfzDMKXKOibD/TTO/3JDdZwV/7vYNPB9r/Tyg3YdOJG15dyHBBQScP213QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkwB7+pJGZieyckk8dotP8XqTOJMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmSrSsOU QF/0qwEor8JYETDM1zxIZW17o0g1uEuGHNsiZHFjCAXmYoIX/IRl/rE5WhlbgZG3 jFSVNdOmlEF3aafVf+4sChHI4AFqmBTuzWW1c60RC0T5nlzFu5tsJToLXKm3fnKJ Su2iioSjqZoV1C9rOHHu/H/ZA1pisNcaHNxSkP07905m3JxcGGrLU99qJFGVHE0+ 74FjaXCe7Y62PX/oSlI4t1ygjv+O4RCKCPRXFQN3OboikxVxTM4fMK9CykEz88IL oq7owtQNpDU/yUBK8opIOF2nJdW4IAnvS/SAycfnmKnsMxRR7v9y2grNw4Kyb7e/ IZArI3GoCUQOPw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:45 2026 by rpki-client