This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json) Hash identifier: ifNEgIw1wQ6qmXdBrpoZDZbAwQhNgpC3h9NkrxMKhts= Subject key identifier: E3:5F:3B:B6:00:2E:E3:91:87:71:53:BB:2C:15:B4:67:FB:9F:D2:D7 Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c Certificate serial: 019BF651835953C64A044F0FE7587B45921E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:35 +0000 Manifest this update: Sun 25 Jan 2026 18:01:35 +0000 Manifest next update: Mon 26 Jan 2026 18:01:35 +0000 Files and hashes: 1: gOrhC3Rs6ZkPUS8bJ0Q8uGllb_s.roa (hash: bYWKYeeXDVqD6ocfaaGfzje6g+DprIe5/dFMotk0P/Q=) 2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: IiycMqVLg1cpZBPYaM/Dp7txfWaoSOs49+nm4WklWSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:83:59:53:c6:4a:04:4f:0f:e7:58:7b:45:92:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c Validity Not Before: Jan 25 18:01:35 2026 GMT Not After : Jan 26 18:01:35 2026 GMT Subject: CN=e35f3bb6002ee391877153bb2c15b467fb9fd2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:e4:ea:45:f3:71:e8:85:1a:9a:68:dc:c2: f7:7b:f1:44:05:55:19:a3:b4:93:a0:d4:c2:b9:e5: 40:c2:f0:7e:09:14:94:69:48:41:da:a5:ea:14:12: da:f7:f0:81:f0:f7:e0:d9:ac:8c:d6:ca:a6:c7:6a: 02:cf:90:a8:02:dc:50:a7:a3:a5:f3:55:2c:02:d8: c9:77:41:54:57:a4:c4:27:56:e2:ab:16:df:cb:75: c0:55:1e:76:86:7e:bc:91:35:5e:5b:ff:9f:93:0e: be:e6:cc:96:0a:29:c0:43:fb:89:9a:04:e3:67:95: 0a:a2:17:43:e8:9a:ce:7f:4b:2e:22:6d:7b:43:0e: b0:9e:97:1c:f7:ae:5e:e5:c2:f4:49:2d:1d:fc:b1: 96:1c:b9:a7:62:fc:c6:10:45:7e:39:40:f4:b5:42: 89:82:aa:2d:95:69:ce:e5:7e:d2:ca:f7:fe:a9:47: 46:29:30:7c:ea:03:d5:6f:f5:c9:30:3b:a1:04:96: 3f:35:a2:a7:25:2d:f8:83:0a:5b:dc:a8:43:66:fe: 65:e7:ee:fb:d6:c3:8c:b2:f7:e3:10:21:14:81:0b: cd:ea:8c:ac:df:4b:18:d1:aa:d5:52:95:d8:31:52: b3:4b:21:7e:28:80:98:4c:41:70:c3:bf:86:88:60: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5F:3B:B6:00:2E:E3:91:87:71:53:BB:2C:15:B4:67:FB:9F:D2:D7 X509v3 Authority Key Identifier: keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:06:e3:e9:e2:5b:10:1b:fa:01:0f:35:59:0c:c1:da:8a:ac: 5a:19:e2:6b:0e:ff:e4:b4:0d:20:63:50:99:02:a7:62:db:75: 00:20:ca:93:47:8f:fd:d8:45:03:8c:1f:09:59:71:74:7f:01: 8f:1e:55:c3:5b:bb:4c:7a:ea:7b:d1:7b:96:98:6e:bb:9b:4a: ea:62:c7:12:b8:c3:5c:ee:df:3c:52:26:6d:86:6a:9f:9e:1c: 3b:8d:38:77:00:0c:fa:a0:87:c7:72:ff:f8:2b:9a:0e:bc:b4: e2:eb:07:14:a8:36:ea:37:ff:27:b5:b3:13:8b:cb:c3:be:1b: 34:47:5d:89:25:8d:dd:01:9b:2a:87:66:87:fe:d6:06:13:e1: a9:12:83:6a:46:c3:ca:77:60:03:88:cc:74:29:6b:41:4f:d0: 9e:32:ca:dc:b9:0c:66:59:74:72:90:19:e5:d2:d5:0d:c6:52: e5:4b:52:a2:7c:a4:5f:6b:59:77:cf:c8:07:f7:a6:ce:87:54: a1:02:d4:7b:eb:7a:fe:da:04:26:e7:66:57:0a:be:36:52:e2: 29:4b:0e:4f:f6:0f:c4:63:cb:cc:81:1c:13:9f:c1:c2:6f:b2: a2:15:e9:18:b3:0b:eb:36:35:89:fc:6e:0a:eb:d6:f2:f8:3c: de:4a:25:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UYNZU8ZKBE8P51h7RZIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2I5N2ExZDIxZjYzN2I1NDkxMzBmMDg1N2E2ODFjYzdm Njg4NGMwHhcNMjYwMTI1MTgwMTM1WhcNMjYwMTI2MTgwMTM1WjAzMTEwLwYDVQQD EyhlMzVmM2JiNjAwMmVlMzkxODc3MTUzYmIyYzE1YjQ2N2ZiOWZkMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol3k6kXzceiFGppo3ML3e/FEBVUZ o7SToNTCueVAwvB+CRSUaUhB2qXqFBLa9/CB8Pfg2ayM1sqmx2oCz5CoAtxQp6Ol 81UsAtjJd0FUV6TEJ1biqxbfy3XAVR52hn68kTVeW/+fkw6+5syWCinAQ/uJmgTj Z5UKohdD6JrOf0suIm17Qw6wnpcc965e5cL0SS0d/LGWHLmnYvzGEEV+OUD0tUKJ gqotlWnO5X7Syvf+qUdGKTB86gPVb/XJMDuhBJY/NaKnJS34gwpb3KhDZv5l5+77 1sOMsvfjECEUgQvN6oys30sY0arVUpXYMVKzSyF+KICYTEFww7+GiGCqQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONfO7YALuORh3FTuywVtGf7n9LXMB8GA1UdIwQY MBaAFLQ7l6HSH2N7VJEw8IV6aBzH9ohMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0Yjkt MDQ2NGU5NDVmMWNjLzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0YjktMDQ2NGU5NDVmMWNj LzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgbj6eJb EBv6AQ81WQzB2oqsWhniaw7/5LQNIGNQmQKnYtt1ACDKk0eP/dhFA4wfCVlxdH8B jx5Vw1u7THrqe9F7lphuu5tK6mLHErjDXO7fPFImbYZqn54cO404dwAM+qCHx3L/ +CuaDry04usHFKg26jf/J7WzE4vLw74bNEddiSWN3QGbKodmh/7WBhPhqRKDakbD yndgA4jMdClrQU/QnjLK3LkMZll0cpAZ5dLVDcZS5UtSonykX2tZd8/IB/emzodU oQLUe+t6/toEJudmVwq+NlLiKUsOT/YPxGPLzIEcE5/Bwm+yohXpGLML6zY1ifxu CuvW8vg83kolBQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:25 2026 by rpki-client