This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json) Hash identifier: QIwe3Sa5BZsHLm9bD1Ie0hPc9dd0EdbM7jpJVYHmSS8= Subject key identifier: 32:95:33:8D:5A:C9:9A:C2:32:E1:BF:31:E1:EF:4A:9C:B3:81:4A:88 Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Certificate serial: 019BF80829D76788F20BBF088654C355F218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 02:00:43 +0000 Manifest this update: Mon 26 Jan 2026 02:00:43 +0000 Manifest next update: Tue 27 Jan 2026 02:00:43 +0000 Files and hashes: 1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=) 2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=) 3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: R6tmIE149cuztYVUZokiLsNZuocaO8SUjt+FnwA0dDM=) 4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:29:d7:67:88:f2:0b:bf:08:86:54:c3:55:f2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Validity Not Before: Jan 26 02:00:43 2026 GMT Not After : Jan 27 02:00:43 2026 GMT Subject: CN=3295338d5ac99ac232e1bf31e1ef4a9cb3814a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:85:77:a0:5d:bc:d7:96:33:d8:3f:17:db: 16:ad:70:40:73:9e:6c:2a:96:0f:e4:41:a8:8a:9a: c5:b6:60:8a:ef:cc:ed:42:78:78:b4:af:3f:88:18: 1a:83:eb:54:b8:f3:86:04:a8:4c:de:77:49:79:4f: 9b:61:a4:0a:a5:dd:5d:86:c0:fd:08:12:c6:06:0c: 93:e9:b1:b4:78:6f:a3:5b:f0:cf:33:63:86:12:dd: 12:3f:6c:3b:a1:44:be:0a:c3:f6:9f:fe:ea:e0:c7: ea:19:c5:e4:fe:c0:68:7b:0f:2c:b4:65:25:cb:82: 78:9f:2c:cb:48:30:6e:37:a4:fb:d0:d5:85:67:0d: 57:84:18:21:c3:ef:be:e4:b1:dd:bb:d2:1f:68:d7: 39:fb:3f:0f:54:7a:23:a5:ef:02:e2:41:ee:1f:ac: 8f:9b:40:c5:9f:25:86:c8:f7:73:9d:15:c7:35:84: 93:34:72:c7:8a:37:de:37:c9:55:e4:38:a5:3d:89: 6b:c7:54:02:19:4d:a4:2f:dd:34:b4:69:c4:c1:3e: 63:05:f6:5a:de:f5:45:aa:49:28:9f:38:68:ed:96: 69:6c:50:d1:70:f6:e8:b6:fb:7d:38:c3:87:39:51: 99:75:03:4b:a7:32:ed:14:c6:87:18:16:fa:3c:3c: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:95:33:8D:5A:C9:9A:C2:32:E1:BF:31:E1:EF:4A:9C:B3:81:4A:88 X509v3 Authority Key Identifier: keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2d:ce:3c:37:bf:af:b1:29:26:09:7a:77:05:d9:72:ec:4f: 32:d4:73:9f:8a:31:2e:4e:73:9d:d3:47:90:42:39:d5:48:c5: 9d:d2:fe:63:b2:ae:4f:ae:3f:00:26:5e:0b:73:f2:bd:25:a8: 1a:27:49:6a:c1:44:d3:ab:56:aa:25:91:db:fb:72:79:cd:ac: 7d:24:44:8d:a7:17:3c:5e:f7:bf:13:cc:34:fd:52:dc:bc:46: e2:86:cc:a3:67:2a:c2:74:5e:f8:14:a2:57:13:1b:e8:e3:e6: bb:97:37:75:9d:f0:e5:44:cc:da:48:60:70:6f:56:67:02:63: 52:f4:01:e2:30:83:03:5f:0d:24:be:b3:4b:41:be:38:5a:91: 3d:1a:24:72:4b:d0:35:57:89:d6:09:5e:03:f2:1a:06:72:60: 01:49:14:22:4f:b6:80:d5:42:37:d7:8e:03:71:29:41:60:ee: 05:cf:27:0f:10:81:35:a4:fc:2a:25:0d:63:b5:3c:ff:f3:bb: 71:a9:4c:3b:af:c2:d9:51:0e:ec:4e:f9:ef:09:71:45:2e:56: 63:c6:b9:b0:44:eb:fe:4b:c4:f4:99:d5:5d:ae:af:f4:df:ac: 69:28:e0:6f:d6:00:ab:32:14:58:5d:9b:00:92:42:2c:ec:16: 67:95:6a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CCnXZ4jyC78IhlTDVfIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw ZDZiZTkwHhcNMjYwMTI2MDIwMDQzWhcNMjYwMTI3MDIwMDQzWjAzMTEwLwYDVQQD EygzMjk1MzM4ZDVhYzk5YWMyMzJlMWJmMzFlMWVmNGE5Y2IzODE0YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshiFd6BdvNeWM9g/F9sWrXBAc55s KpYP5EGoiprFtmCK78ztQnh4tK8/iBgag+tUuPOGBKhM3ndJeU+bYaQKpd1dhsD9 CBLGBgyT6bG0eG+jW/DPM2OGEt0SP2w7oUS+CsP2n/7q4MfqGcXk/sBoew8stGUl y4J4nyzLSDBuN6T70NWFZw1XhBghw+++5LHdu9IfaNc5+z8PVHojpe8C4kHuH6yP m0DFnyWGyPdznRXHNYSTNHLHijfeN8lV5DilPYlrx1QCGU2kL900tGnEwT5jBfZa 3vVFqkkonzho7ZZpbFDRcPbotvt9OMOHOVGZdQNLpzLtFMaHGBb6PDwcRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKVM41ayZrCMuG/MeHvSpyzgUqIMB8GA1UdIwQY MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS3OPDe/ r7EpJgl6dwXZcuxPMtRzn4oxLk5zndNHkEI51UjFndL+Y7KuT64/ACZeC3PyvSWo GidJasFE06tWqiWR2/tyec2sfSREjacXPF73vxPMNP1S3LxG4obMo2cqwnRe+BSi VxMb6OPmu5c3dZ3w5UTM2khgcG9WZwJjUvQB4jCDA18NJL6zS0G+OFqRPRokckvQ NVeJ1gleA/IaBnJgAUkUIk+2gNVCN9eOA3EpQWDuBc8nDxCBNaT8KiUNY7U8//O7 calMO6/C2VEO7E757wlxRS5WY8a5sETr/kvE9JnVXa6v9N+saSjgb9YAqzIUWF2b AJJCLOwWZ5VqFA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:01 2026 by rpki-client