This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json) Hash identifier: Wh4YEjJlUEGs+Zk/WC6PMayvOJWhl60FaA+NBWG3VpA= Subject key identifier: ED:7A:1E:78:67:10:F3:D3:16:7D:A4:E7:C1:AE:B1:AA:14:82:1B:EF Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Certificate serial: 019BF76359EAE65B73B48356E993879F3190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft Manifest number: 01A4 Signing time: Sun 25 Jan 2026 23:00:41 +0000 Manifest this update: Sun 25 Jan 2026 23:00:41 +0000 Manifest next update: Mon 26 Jan 2026 23:00:41 +0000 Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: mR/mfEaTMPIMWkMltyA7k0/7PzQLMv9fLceQJBSWLgo=) 2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:59:ea:e6:5b:73:b4:83:56:e9:93:87:9f:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Validity Not Before: Jan 25 23:00:41 2026 GMT Not After : Jan 26 23:00:41 2026 GMT Subject: CN=ed7a1e786710f3d3167da4e7c1aeb1aa14821bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:fc:53:50:07:37:61:ca:16:28:13:63:b6: 98:cb:35:9f:e4:30:22:28:d7:34:6b:30:1e:14:cf: 53:f7:e8:c5:a6:03:45:8d:c8:30:70:29:52:a4:45: 63:77:bb:6e:b7:b9:f7:2b:58:ff:74:9f:42:fe:cf: 9f:d4:e1:78:9e:12:a9:4e:73:87:d7:9f:78:5c:85: 56:3e:70:8e:c1:03:90:97:3b:45:f4:51:e0:7c:79: b8:6a:d7:a2:fa:ea:59:2f:64:20:46:14:2e:28:e1: d1:41:ee:96:b8:e1:dd:3a:b9:9d:dd:68:7b:2b:d3: 63:f2:d5:ea:9b:11:69:85:5b:0f:43:80:3b:7a:b2: c8:cd:6f:54:8f:44:ef:64:ce:11:a7:91:52:e0:55: 64:08:26:a2:3e:dc:42:92:6b:55:56:b5:5e:9c:8e: a9:8d:e1:3f:e6:9c:4d:e0:78:a9:ec:f2:ad:6c:98: b5:5a:67:b5:ef:66:8f:c5:c1:4e:f4:a4:c8:19:d9: aa:54:1e:7f:04:cf:e0:dc:85:e5:96:e5:d4:38:4c: 1a:af:59:6d:5e:86:9a:bf:2c:e6:6e:da:4b:f0:de: 86:9d:2b:4f:cd:ad:97:86:61:95:2c:d0:29:77:ba: 4b:09:8c:f4:ad:d6:43:78:8f:84:42:96:87:8b:a3: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:1E:78:67:10:F3:D3:16:7D:A4:E7:C1:AE:B1:AA:14:82:1B:EF X509v3 Authority Key Identifier: keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7b:18:47:a2:45:f2:8c:8e:21:ff:30:a4:eb:ed:dd:d9:09: 48:c9:03:19:f2:38:28:2b:a8:e9:b1:54:83:83:92:fe:10:49: 14:57:76:64:f1:b2:5b:a9:1c:51:a2:ba:91:9d:10:5d:08:76: 14:c1:0a:89:04:65:28:d4:c9:65:58:e5:27:90:35:43:59:78: 5c:e7:65:b3:51:51:78:0f:56:e0:1c:06:3e:e2:7e:dd:7e:e7: 07:92:ce:cb:7c:79:28:1b:b0:0c:97:88:22:80:9f:ec:6e:07: 7f:ed:ec:dc:36:53:8c:61:b0:07:83:f3:10:77:99:00:7a:f2: 1d:b8:3e:49:5d:a0:fe:26:58:77:33:c1:87:26:f1:da:46:da: f4:8c:c2:e6:99:8e:91:8f:43:6b:3a:61:dd:4b:f8:11:76:d7: 1b:56:9c:55:a5:9b:1c:eb:74:35:e6:8d:07:ca:dd:b8:4d:e9: dd:18:54:2f:69:b2:de:0e:70:bc:95:f8:38:6c:82:f9:03:cc: 3d:41:e3:5d:fc:de:5f:6e:d7:27:0b:71:25:62:24:64:de:50: 9a:7d:a9:52:bc:31:a9:18:dc:ba:eb:b8:ef:3d:ac:48:eb:1a: 75:c7:79:5d:de:c5:f2:39:69:14:c1:c3:44:78:4f:bc:d5:aa: 89:55:48:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1nq5ltztINW6ZOHnzGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw MTVmNjUwHhcNMjYwMTI1MjMwMDQxWhcNMjYwMTI2MjMwMDQxWjAzMTEwLwYDVQQD EyhlZDdhMWU3ODY3MTBmM2QzMTY3ZGE0ZTdjMWFlYjFhYTE0ODIxYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruD8U1AHN2HKFigTY7aYyzWf5DAi KNc0azAeFM9T9+jFpgNFjcgwcClSpEVjd7tut7n3K1j/dJ9C/s+f1OF4nhKpTnOH 1594XIVWPnCOwQOQlztF9FHgfHm4atei+upZL2QgRhQuKOHRQe6WuOHdOrmd3Wh7 K9Nj8tXqmxFphVsPQ4A7erLIzW9Uj0TvZM4Rp5FS4FVkCCaiPtxCkmtVVrVenI6p jeE/5pxN4Hip7PKtbJi1Wme172aPxcFO9KTIGdmqVB5/BM/g3IXlluXUOEwar1lt XoaavyzmbtpL8N6GnStPza2XhmGVLNApd7pLCYz0rdZDeI+EQpaHi6Pk4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO16HnhnEPPTFn2k58GusaoUghvvMB8GA1UdIwQY MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt MDlhMmM5Y2E3MTU1LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1 LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3sYR6JF 8oyOIf8wpOvt3dkJSMkDGfI4KCuo6bFUg4OS/hBJFFd2ZPGyW6kcUaK6kZ0QXQh2 FMEKiQRlKNTJZVjlJ5A1Q1l4XOdls1FReA9W4BwGPuJ+3X7nB5LOy3x5KBuwDJeI IoCf7G4Hf+3s3DZTjGGwB4PzEHeZAHryHbg+SV2g/iZYdzPBhybx2kba9IzC5pmO kY9Dazph3Uv4EXbXG1acVaWbHOt0NeaNB8rduE3p3RhUL2my3g5wvJX4OGyC+QPM PUHjXfzeX27XJwtxJWIkZN5Qmn2pUrwxqRjcuuu47z2sSOsadcd5Xd7F8jlpFMHD RHhPvNWqiVVI1A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:22 2026 by rpki-client