This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json) Hash identifier: grjOLdyGTkUdFb4D0qGBRWnpKfh6I7E+O1C426uQXUE= Subject key identifier: D5:C1:03:82:3A:88:F8:AB:18:18:57:33:42:93:F9:85:50:7E:32:5B Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b Certificate serial: 019BF83F9B1B38506E78485E0BD1B9B0470D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft Manifest number: 13FB Signing time: Mon 26 Jan 2026 03:01:16 +0000 Manifest this update: Mon 26 Jan 2026 03:01:16 +0000 Manifest next update: Tue 27 Jan 2026 03:01:16 +0000 Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=) 2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: NFzZ/9Y5oUdpMjM4DUXY8EjoPC3TzLIatI7/al6mqO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:9b:1b:38:50:6e:78:48:5e:0b:d1:b9:b0:47:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60aac104376b79dd6829091947b779c989af68b Validity Not Before: Jan 26 03:01:16 2026 GMT Not After : Jan 27 03:01:16 2026 GMT Subject: CN=d5c103823a88f8ab181857334293f985507e325b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:c5:91:71:58:0e:52:10:93:26:2b:63:89: 1c:b7:2c:8d:3b:c4:4d:50:b7:50:bb:77:86:ca:90: 3f:63:15:31:8e:bd:ec:07:00:bc:4d:93:fd:2f:42: fb:b8:35:1b:2e:11:a6:17:75:2b:3d:90:45:f6:1a: 5a:32:15:b4:2a:7d:3c:b4:4a:1b:6a:39:1c:fd:46: e8:78:d9:38:06:c8:8b:81:85:58:14:f5:90:25:d8: 1d:4a:8a:52:1b:da:24:2e:57:4c:dc:19:bc:65:fe: 37:a7:58:84:6a:9b:68:42:02:44:00:7c:53:80:f0: 2b:8d:f5:83:de:bf:fb:a6:b9:8d:d3:f0:4c:f7:77: 25:9c:d9:90:c8:6b:94:cc:42:d1:ed:5a:2a:94:45: 60:9d:97:b5:ab:5e:73:73:9a:65:80:81:fb:2d:b8: 6c:14:4c:89:20:9c:ce:f4:f3:c6:33:18:0c:17:b3: 78:8f:b6:42:8f:89:a6:41:08:f3:7f:db:78:c9:cf: 58:e4:60:35:8f:7c:da:5f:26:0c:12:bc:c9:d7:5a: 7b:b3:5a:7d:63:aa:97:bc:14:c1:4b:fa:57:fe:a6: d1:0c:18:27:d8:c0:f0:ae:fd:7f:89:59:6b:91:1b: 89:21:22:37:ce:c3:71:b8:4b:3b:d3:1c:35:8f:47: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:03:82:3A:88:F8:AB:18:18:57:33:42:93:F9:85:50:7E:32:5B X509v3 Authority Key Identifier: keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0f:eb:0f:bd:28:41:9a:ae:73:0b:cf:82:64:42:7d:bc:99: 28:f0:06:bc:92:5e:3b:6a:54:9c:11:a8:fb:71:8d:07:d8:36: be:ea:3a:b8:54:b8:68:b8:1c:c0:52:ad:21:ea:89:ea:00:9f: 70:94:dc:b2:c6:51:77:24:33:94:66:d8:d8:17:f5:d2:80:a6: 2b:40:f3:de:55:9b:9c:82:25:b7:bf:2b:5a:f7:25:b5:c1:ac: 03:37:a7:ac:7e:e8:4d:47:d0:c1:87:eb:20:fe:f8:25:4d:a9: 33:78:f8:f9:9e:0f:bf:cc:e5:eb:0e:e7:8e:ac:b2:fa:b1:78: 23:e7:19:82:ca:67:14:73:34:4b:10:cf:96:01:69:6d:45:a2: c3:57:e7:12:c0:5b:10:73:c5:c9:09:54:81:2a:94:24:db:16: f7:c0:3c:46:33:14:42:5c:76:6c:cc:be:a3:8a:e4:a4:0f:ab: a9:90:d2:ae:8c:ec:88:ab:bd:23:f6:28:f2:00:d8:2a:28:ad: 4c:d8:e2:d6:66:72:5f:44:6e:8d:38:3e:c3:54:f2:ca:f9:db: aa:f5:19:17:0a:a0:f2:ab:c1:9a:fa:23:0f:a0:b9:07:2e:95: e2:d9:78:fc:54:d7:3d:f2:8e:bf:bd:2c:17:40:dd:22:38:3c: d6:2f:dc:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P5sbOFBueEheC9G5sEcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5 YWY2OGIwHhcNMjYwMTI2MDMwMTE2WhcNMjYwMTI3MDMwMTE2WjAzMTEwLwYDVQQD EyhkNWMxMDM4MjNhODhmOGFiMTgxODU3MzM0MjkzZjk4NTUwN2UzMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8DFkXFYDlIQkyYrY4kctyyNO8RN ULdQu3eGypA/YxUxjr3sBwC8TZP9L0L7uDUbLhGmF3UrPZBF9hpaMhW0Kn08tEob ajkc/UboeNk4BsiLgYVYFPWQJdgdSopSG9okLldM3Bm8Zf43p1iEaptoQgJEAHxT gPArjfWD3r/7prmN0/BM93clnNmQyGuUzELR7VoqlEVgnZe1q15zc5plgIH7Lbhs FEyJIJzO9PPGMxgMF7N4j7ZCj4mmQQjzf9t4yc9Y5GA1j3zaXyYMErzJ11p7s1p9 Y6qXvBTBS/pX/qbRDBgn2MDwrv1/iVlrkRuJISI3zsNxuEs70xw1j0dpUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXBA4I6iPirGBhXM0KT+YVQfjJbMB8GA1UdIwQY MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow/rD70o QZqucwvPgmRCfbyZKPAGvJJeO2pUnBGo+3GNB9g2vuo6uFS4aLgcwFKtIeqJ6gCf cJTcssZRdyQzlGbY2Bf10oCmK0Dz3lWbnIIlt78rWvcltcGsAzenrH7oTUfQwYfr IP74JU2pM3j4+Z4Pv8zl6w7njqyy+rF4I+cZgspnFHM0SxDPlgFpbUWiw1fnEsBb EHPFyQlUgSqUJNsW98A8RjMUQlx2bMy+o4rkpA+rqZDSrozsiKu9I/Yo8gDYKiit TNji1mZyX0RujTg+w1TyyvnbqvUZFwqg8qvBmvojD6C5By6V4tl4/FTXPfKOv70s F0DdIjg81i/cFg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:42 2026 by rpki-client