This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json) Hash identifier: KcXUfSA98HTDCinH9avE9nqB85hwymQXAEo0uj2QFgs= Subject key identifier: 34:B2:3B:31:4B:14:C9:1D:E4:0B:13:C9:A8:54:BC:39:E2:02:8B:D7 Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Certificate serial: 019BF619CA9C8E3E52B21EC237657240D18E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft Manifest number: 0644 Signing time: Sun 25 Jan 2026 17:00:43 +0000 Manifest this update: Sun 25 Jan 2026 17:00:43 +0000 Manifest next update: Mon 26 Jan 2026 17:00:43 +0000 Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=) 2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: 9e9stX+9td68FeWfY7EWTf4qV2DDMvFeG9/BzeRBcfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ca:9c:8e:3e:52:b2:1e:c2:37:65:72:40:d1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Validity Not Before: Jan 25 17:00:43 2026 GMT Not After : Jan 26 17:00:43 2026 GMT Subject: CN=34b23b314b14c91de40b13c9a854bc39e2028bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:5e:4f:ce:19:47:fc:24:3b:c6:1f:25:e1: e0:c7:d3:e4:4c:fe:4c:88:9d:6d:68:30:76:c7:dc: 63:68:bc:b1:96:a8:af:18:76:a1:fc:c4:3c:96:57: 5b:5b:cd:74:32:ae:bd:52:b0:b5:6d:0b:48:3a:67: b6:9d:cf:5d:d5:59:4b:0d:27:4e:12:4d:de:8e:dd: 4b:b0:02:1b:ec:a4:7c:09:59:1b:e7:6b:96:95:50: fc:98:d8:78:47:31:74:6a:b6:51:b0:97:8d:c5:cf: eb:03:6f:fc:17:d3:9e:94:00:2b:00:67:d5:64:7e: 23:35:5b:0f:a5:22:c2:de:dc:9a:e6:e2:36:e0:83: 99:a2:8a:8f:e8:df:41:d6:c8:8c:be:84:a6:32:94: 97:41:c4:50:18:5b:7f:59:40:56:61:da:4d:2c:e3: 1f:dd:87:84:7b:bb:f7:32:a7:6f:36:18:47:2a:f6: 45:ae:ac:47:ca:ad:ff:09:83:e5:19:44:fb:72:c4: 4a:00:21:e8:5c:66:ca:a1:fc:67:9d:7d:27:ba:21: 04:c8:31:0a:80:cb:90:a9:d3:39:c7:36:ba:50:b3: 0b:93:12:44:36:d4:67:3b:10:07:c9:c3:31:a8:04: 21:c2:f8:de:6d:18:91:c8:ad:ef:32:e0:eb:ef:d5: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B2:3B:31:4B:14:C9:1D:E4:0B:13:C9:A8:54:BC:39:E2:02:8B:D7 X509v3 Authority Key Identifier: keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:68:1b:a3:48:93:98:a1:f5:10:38:3c:af:77:85:bb:d9:a9: 76:ef:44:8c:ff:ed:41:96:12:3a:dd:10:20:b2:12:ca:b2:06: 8f:36:b9:a3:02:ac:89:8e:c6:32:c4:15:5d:df:b2:46:e6:5a: f3:a3:36:3f:dc:34:73:0c:0f:09:f9:7e:8e:5b:25:2e:c7:5e: 2b:b3:e9:84:99:97:c7:b4:a4:ff:52:a8:55:e9:d8:f1:51:e4: e1:78:39:e3:a5:8c:83:ed:4b:c6:a6:50:bf:f5:bd:fe:d9:db: cf:6f:37:98:f8:d9:4b:88:01:cb:45:0b:45:2e:27:3c:18:eb: 7b:61:63:e2:72:e3:7b:61:1c:40:e1:80:84:dd:ef:de:0b:8d: 71:7f:1f:c9:77:8a:55:81:89:00:3d:15:0c:46:21:a3:e0:ed: ac:70:ec:eb:aa:73:26:eb:f5:8d:82:64:1b:d4:3e:9a:1e:a2: a9:38:32:f6:8f:1e:23:71:5b:cd:a1:c1:67:d8:61:e2:11:1b: 10:88:7b:a5:e7:76:09:de:cb:6c:8b:85:80:34:77:34:0a:2b: f7:7d:62:6f:27:48:55:18:a5:be:87:00:9f:a0:d0:ea:1f:a2: d8:31:27:e4:45:29:60:f3:ef:42:29:33:35:16:7e:84:e6:da: 98:5a:96:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gcqcjj5Ssh7CN2VyQNGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw Y2RmNmEwHhcNMjYwMTI1MTcwMDQzWhcNMjYwMTI2MTcwMDQzWjAzMTEwLwYDVQQD EygzNGIyM2IzMTRiMTRjOTFkZTQwYjEzYzlhODU0YmMzOWUyMDI4YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JJeT84ZR/wkO8YfJeHgx9PkTP5M iJ1taDB2x9xjaLyxlqivGHah/MQ8lldbW810Mq69UrC1bQtIOme2nc9d1VlLDSdO Ek3ejt1LsAIb7KR8CVkb52uWlVD8mNh4RzF0arZRsJeNxc/rA2/8F9OelAArAGfV ZH4jNVsPpSLC3tya5uI24IOZooqP6N9B1siMvoSmMpSXQcRQGFt/WUBWYdpNLOMf 3YeEe7v3MqdvNhhHKvZFrqxHyq3/CYPlGUT7csRKACHoXGbKofxnnX0nuiEEyDEK gMuQqdM5xza6ULMLkxJENtRnOxAHycMxqAQhwvjebRiRyK3vMuDr79UvuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSyOzFLFMkd5AsTyahUvDniAovXMB8GA1UdIwQY MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1 LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWgbo0iT mKH1EDg8r3eFu9mpdu9EjP/tQZYSOt0QILISyrIGjza5owKsiY7GMsQVXd+yRuZa 86M2P9w0cwwPCfl+jlslLsdeK7PphJmXx7Sk/1KoVenY8VHk4Xg546WMg+1LxqZQ v/W9/tnbz283mPjZS4gBy0ULRS4nPBjre2Fj4nLje2EcQOGAhN3v3guNcX8fyXeK VYGJAD0VDEYho+DtrHDs66pzJuv1jYJkG9Q+mh6iqTgy9o8eI3FbzaHBZ9hh4hEb EIh7ped2Cd7LbIuFgDR3NAor931ibydIVRilvocAn6DQ6h+i2DEn5EUpYPPvQikz NRZ+hObamFqW7g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:38 2026 by rpki-client