This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json) Hash identifier: jwlrjYklj5ulFajyOkSntRn3/tajdvM1/MpcTVTy83Q= Subject key identifier: E3:5B:95:9A:8C:12:00:C8:EC:46:E1:5D:1C:96:E6:6F:84:67:FB:B3 Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019BF4D0C2705F71F54B1738AE0D56619621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 11:01:20 +0000 Manifest this update: Sun 25 Jan 2026 11:01:20 +0000 Manifest next update: Mon 26 Jan 2026 11:01:20 +0000 Files and hashes: 1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=) 2: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=) 3: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=) 4: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=) 5: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: Fa0sBLTzmAjuyYHpiVfEtqUpIc2cKIIfN1bNnpzt75o=) 6: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=) 7: hFJA5_fA_Gp7BCxbMO_bes9nk40.roa (hash: s64nTqpmoBBkk6Hywj8GwfB0MNxG8qecnHtsYCweNdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:c2:70:5f:71:f5:4b:17:38:ae:0d:56:61:96:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Jan 25 11:01:20 2026 GMT Not After : Jan 26 11:01:20 2026 GMT Subject: CN=e35b959a8c1200c8ec46e15d1c96e66f8467fbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:c4:8c:98:61:a4:b2:1a:f6:15:bf:de:a9: 8b:c5:b2:d8:a8:13:ee:32:aa:ef:89:39:82:a0:d6: 19:6c:8c:37:b9:20:f0:31:b8:5e:8c:c2:6f:a8:fa: c2:be:60:ad:5e:f5:5f:61:ed:40:f3:06:9a:e7:75: 94:f9:5a:c1:ec:a4:89:d9:58:47:b5:1d:1f:e5:ae: 74:bf:81:d1:1f:d8:b2:1b:9e:e5:fa:b6:b0:fe:c7: c7:da:cd:7c:0f:1b:45:3f:11:f7:02:a0:4d:1c:fd: 58:30:30:64:d6:6c:86:bf:a9:ae:2b:9b:be:18:17: c6:63:b1:78:d7:1c:d0:1d:a1:27:6e:0d:ab:f4:17: fb:4f:e4:76:9f:dd:b7:7e:20:24:ac:08:fa:40:89: 28:c7:f5:e9:5e:b8:98:42:24:ae:69:a1:04:c8:3a: db:22:31:96:44:e4:08:33:f1:e4:e0:cf:f2:96:43: 6a:71:8c:67:33:63:88:c6:7b:7e:9e:0a:99:ba:fd: 30:e0:a5:48:24:65:5e:fd:c2:86:6a:68:b1:39:ab: ce:07:c8:22:be:6d:fe:39:11:22:8e:20:11:33:bf: 1b:73:38:c8:31:ca:0d:72:82:f5:b7:d3:95:34:f1: 3c:6a:da:83:0a:57:ba:76:76:40:30:bb:cd:8b:10: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5B:95:9A:8C:12:00:C8:EC:46:E1:5D:1C:96:E6:6F:84:67:FB:B3 X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:78:18:5a:df:20:8a:f1:56:40:2a:9c:da:14:7f:5f:b6:a5: 7e:87:53:c5:c5:a3:65:b6:e0:8c:70:33:af:aa:cc:69:9a:fe: ae:6d:cb:2d:17:e4:f3:ea:a9:5b:8e:b5:b6:ad:71:44:a3:ec: ce:e4:d8:6d:4d:7f:30:9d:98:b6:eb:ec:bd:18:f3:ec:2a:cf: 55:df:9b:b9:af:a0:f3:2d:d3:1c:d7:c8:34:39:b9:a9:4a:c9: 72:aa:2e:65:3b:a2:54:0b:15:14:e4:0f:d4:04:d0:36:c5:59: c9:55:b2:16:15:bf:e3:d1:ac:6a:ba:fd:3e:b8:a9:80:4b:09: 04:59:58:96:db:80:d6:fe:ac:34:de:b9:e3:88:33:81:bb:6b: d8:f7:ef:33:b3:4d:f2:16:90:d5:e3:44:d0:9f:e0:32:b3:81: d0:2a:5f:34:40:7c:19:14:94:33:39:43:d1:4e:0b:ed:d6:a2: 9f:64:6b:2f:6d:cb:38:ec:e5:48:6f:4b:9b:3b:d0:94:2e:bc: 23:c4:46:a6:d9:dc:0d:b4:25:5e:59:37:ac:9b:8a:2e:08:b1: ef:44:e9:17:1b:70:4e:57:84:f2:06:f6:d9:89:4e:cc:35:cc: 2c:2d:c3:34:7c:50:0b:ce:b0:e4:b8:fb:71:b1:e3:ac:e0:d2: 61:c2:28:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00MJwX3H1Sxc4rg1WYZYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjYwMTI1MTEwMTIwWhcNMjYwMTI2MTEwMTIwWjAzMTEwLwYDVQQD EyhlMzViOTU5YThjMTIwMGM4ZWM0NmUxNWQxYzk2ZTY2Zjg0NjdmYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyfEjJhhpLIa9hW/3qmLxbLYqBPu MqrviTmCoNYZbIw3uSDwMbhejMJvqPrCvmCtXvVfYe1A8waa53WU+VrB7KSJ2VhH tR0f5a50v4HRH9iyG57l+raw/sfH2s18DxtFPxH3AqBNHP1YMDBk1myGv6muK5u+ GBfGY7F41xzQHaEnbg2r9Bf7T+R2n923fiAkrAj6QIkox/XpXriYQiSuaaEEyDrb IjGWROQIM/Hk4M/ylkNqcYxnM2OIxnt+ngqZuv0w4KVIJGVe/cKGamixOavOB8gi vm3+OREijiARM78bczjIMcoNcoL1t9OVNPE8atqDCle6dnZAMLvNixC6JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONblZqMEgDI7EbhXRyW5m+EZ/uzMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHgYWt8g ivFWQCqc2hR/X7alfodTxcWjZbbgjHAzr6rMaZr+rm3LLRfk8+qpW461tq1xRKPs zuTYbU1/MJ2YtuvsvRjz7CrPVd+bua+g8y3THNfINDm5qUrJcqouZTuiVAsVFOQP 1ATQNsVZyVWyFhW/49Gsarr9PripgEsJBFlYltuA1v6sNN6544gzgbtr2PfvM7NN 8haQ1eNE0J/gMrOB0CpfNEB8GRSUMzlD0U4L7dain2RrL23LOOzlSG9LmzvQlC68 I8RGptncDbQlXlk3rJuKLgix70TpFxtwTleE8gb22YlOzDXMLC3DNHxQC86w5Lj7 cbHjrODSYcIoNw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:27 2026 by rpki-client