This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json) Hash identifier: oGYWkFWyX1YUlO7PM1e/HIiBJYlJeZrrubEwgUuL+a4= Subject key identifier: 3F:E7:58:A1:EB:2F:DD:C2:DE:24:96:09:29:36:6F:75:23:90:4A:9B Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Certificate serial: 019BFA2D995346D7D098F90D588E22E8DF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 12:00:50 +0000 Manifest this update: Mon 26 Jan 2026 12:00:50 +0000 Manifest next update: Tue 27 Jan 2026 12:00:50 +0000 Files and hashes: 1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=) 2: BpTEWFuaVAmDD0gS8GtzltOvrDc.roa (hash: x9sMNPsZhw4zuQc28bgkmq0CPdL7ikw7lR8SsfIXz9c=) 3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: 7awvtT8JswN5glfqQqzGpK/L2nSHfwcS08TzbXO7dQ8=) 4: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:99:53:46:d7:d0:98:f9:0d:58:8e:22:e8:df:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Validity Not Before: Jan 26 12:00:50 2026 GMT Not After : Jan 27 12:00:50 2026 GMT Subject: CN=3fe758a1eb2fddc2de24960929366f7523904a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:56:9e:1b:62:01:1d:be:94:3c:2a:1d:6b: 4c:53:86:15:8c:78:a4:ae:d6:4a:04:dd:73:9b:a8: 04:9b:23:68:82:66:45:30:d2:66:ee:6e:06:61:cb: a9:27:80:e7:af:45:81:32:4e:b8:b4:c2:0f:03:a1: df:4f:90:d5:be:67:6d:b1:71:60:fa:b8:e3:81:1c: de:5a:93:4b:ec:92:24:50:b4:a2:51:89:a3:79:84: 0f:1a:e7:97:5b:7d:19:59:ec:0e:46:b9:66:94:44: fb:4d:91:b0:20:be:84:79:72:5b:ff:3e:31:31:12: 66:db:36:09:04:60:3f:83:ef:b0:98:27:16:57:41: b3:a0:00:a8:9b:3d:9b:ff:2b:2b:3f:6b:40:aa:af: d4:ca:46:0f:a2:65:ad:b3:e4:18:2f:d6:b8:f9:b0: ad:5e:55:4f:47:16:04:27:9f:24:29:a0:28:0a:96: 8d:7a:38:60:65:77:77:a8:08:ab:06:21:ed:07:92: e3:c0:5e:17:bf:7b:6d:4a:bb:59:d6:61:3c:85:41: 34:a8:9f:cd:c1:b0:da:e2:32:cf:f5:25:db:04:d5: a7:d9:d0:37:1a:30:ef:c5:71:75:ca:fa:18:47:87: 24:99:5f:e8:01:ab:5d:83:9c:02:fd:d9:20:30:0d: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E7:58:A1:EB:2F:DD:C2:DE:24:96:09:29:36:6F:75:23:90:4A:9B X509v3 Authority Key Identifier: keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:de:4a:c3:ab:c3:10:e2:b0:a4:cb:ae:21:db:2c:8b:ea:a6: c8:18:b8:f5:41:7a:12:04:7f:2c:4f:95:d3:a1:16:f2:20:a9: 57:00:b0:7c:3f:01:e3:b9:de:9e:5d:ca:8f:aa:fd:35:45:91: a2:88:a1:12:fc:41:c0:86:a7:fb:30:90:8e:4f:5c:48:57:24: 1d:f4:78:d1:04:8c:aa:68:94:ad:f6:14:c3:59:08:b3:d9:9f: 0c:59:35:74:50:48:86:dd:3f:cd:47:86:bd:cf:bd:a0:ff:89: 63:95:7f:54:5b:51:b1:f8:9b:33:ab:e8:13:58:b8:17:81:2f: 0b:54:12:ff:a3:20:79:31:b4:7d:6a:70:1a:bd:38:25:4c:70: df:78:6e:c7:e5:fb:74:40:33:1d:9c:9e:0e:ed:30:0a:5d:ec: 50:d2:4e:b3:26:c8:37:f6:37:56:87:d9:14:e5:ef:23:82:a8: 23:82:c6:af:cc:b2:d5:e2:b0:b0:02:39:89:0e:f9:15:a3:17: c0:96:65:ec:55:ac:b1:c6:1a:a9:ae:6c:d6:a4:2c:30:71:63: ba:83:8b:8b:a2:00:9d:43:7a:5f:c4:4a:a9:f5:5c:68:29:3c: 53:6d:a0:a7:10:1a:96:9b:bc:30:41:ca:32:e9:c0:21:ba:4e: 4d:bc:d9:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZlTRtfQmPkNWI4i6N8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy ZTBmM2UwHhcNMjYwMTI2MTIwMDUwWhcNMjYwMTI3MTIwMDUwWjAzMTEwLwYDVQQD EygzZmU3NThhMWViMmZkZGMyZGUyNDk2MDkyOTM2NmY3NTIzOTA0YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09tWnhtiAR2+lDwqHWtMU4YVjHik rtZKBN1zm6gEmyNogmZFMNJm7m4GYcupJ4Dnr0WBMk64tMIPA6HfT5DVvmdtsXFg +rjjgRzeWpNL7JIkULSiUYmjeYQPGueXW30ZWewORrlmlET7TZGwIL6EeXJb/z4x MRJm2zYJBGA/g++wmCcWV0GzoAComz2b/ysrP2tAqq/UykYPomWts+QYL9a4+bCt XlVPRxYEJ58kKaAoCpaNejhgZXd3qAirBiHtB5LjwF4Xv3ttSrtZ1mE8hUE0qJ/N wbDa4jLP9SXbBNWn2dA3GjDvxXF1yvoYR4ckmV/oAatdg5wC/dkgMA38BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/nWKHrL93C3iSWCSk2b3UjkEqbMB8GA1UdIwQY MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt NzE1ZjljZDYzMDg2LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2 LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzt5Kw6vD EOKwpMuuIdssi+qmyBi49UF6EgR/LE+V06EW8iCpVwCwfD8B47nenl3Kj6r9NUWR ooihEvxBwIan+zCQjk9cSFckHfR40QSMqmiUrfYUw1kIs9mfDFk1dFBIht0/zUeG vc+9oP+JY5V/VFtRsfibM6voE1i4F4EvC1QS/6MgeTG0fWpwGr04JUxw33hux+X7 dEAzHZyeDu0wCl3sUNJOsybIN/Y3VofZFOXvI4KoI4LGr8yy1eKwsAI5iQ75FaMX wJZl7FWsscYaqa5s1qQsMHFjuoOLi6IAnUN6X8RKqfVcaCk8U22gpxAalpu8MEHK MunAIbpOTbzZ5w== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:17 2026 by rpki-client