This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json) Hash identifier: OX/mDBpZqrnab8hhFQJL5LVbi5S8T+PyN5hP6Z6rt6c= Subject key identifier: 77:67:FD:61:0E:D4:E8:E8:8A:83:5D:8C:9D:8F:C0:B2:C9:75:7E:33 Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Certificate serial: 019BF79AE42590375AC812EA9BFBE070F7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft Manifest number: 04B7 Signing time: Mon 26 Jan 2026 00:01:21 +0000 Manifest this update: Mon 26 Jan 2026 00:01:21 +0000 Manifest next update: Tue 27 Jan 2026 00:01:21 +0000 Files and hashes: 1: In4EzW4PifpkipDj7qZT5AtFRqI.roa (hash: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA=) 2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: h5/VKqEisXm9/E6juHM+vh9bFcXtqZB3MrTXyn1rxAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e4:25:90:37:5a:c8:12:ea:9b:fb:e0:70:f7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225 Validity Not Before: Jan 26 00:01:21 2026 GMT Not After : Jan 27 00:01:21 2026 GMT Subject: CN=7767fd610ed4e8e88a835d8c9d8fc0b2c9757e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:3d:9c:e4:f2:88:8a:40:ad:d9:75:9d:9e: 71:a2:31:8f:c1:a8:41:a6:04:c6:af:6d:6d:e8:a1: 12:22:be:36:01:a7:95:c2:da:59:af:10:b8:1e:33: 10:53:97:e7:73:84:59:8e:9f:e2:e3:29:02:17:14: 46:b4:6f:36:9b:78:09:c2:9f:08:79:08:58:c4:56: d1:a2:4b:57:ce:63:c4:72:ca:72:e6:a1:01:e3:6f: 74:8b:3d:b5:e8:fc:93:f5:fd:ed:98:cb:90:7b:83: 0d:05:84:35:f7:f9:d4:bb:0f:04:6d:e3:36:4c:b7: 71:75:2b:e5:c4:37:fb:a5:b7:3e:7c:72:fc:23:b1: 21:72:1b:55:4a:fc:86:e2:ed:95:7a:66:9a:0e:51: f8:2a:f9:07:57:47:3b:3c:f0:39:76:43:9b:dc:a2: 72:2b:ab:d5:15:6d:5e:44:68:95:be:ce:04:41:30: d5:6b:82:91:19:2b:8d:2e:3b:af:17:1f:c8:01:99: a6:02:0c:b0:0c:fa:b2:7c:45:34:fd:25:bc:0e:ab: 98:2b:d4:ad:51:c0:d2:63:ef:ba:e1:45:7c:59:2b: cf:ab:bc:c7:dd:0f:d1:d8:3e:af:51:ed:4f:72:63: 8a:ef:56:5d:9b:75:6b:f1:f4:9d:9a:22:3f:7b:79: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:67:FD:61:0E:D4:E8:E8:8A:83:5D:8C:9D:8F:C0:B2:C9:75:7E:33 X509v3 Authority Key Identifier: keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:21:ab:fa:5f:22:fd:49:31:5b:e4:66:46:36:52:d5:fa:63: 59:1f:0b:2b:a7:96:a3:51:69:4b:31:43:a1:4c:ed:c8:9b:26: 0e:09:43:43:10:65:3c:0c:51:dc:7e:96:f1:8a:44:df:12:5b: 2d:be:48:36:ae:cf:10:a3:19:3d:9c:26:48:1e:0b:6c:d3:46: 6a:23:d5:59:e9:4c:7c:10:16:e0:08:6c:58:26:84:e5:a1:83: 75:9d:96:ea:e9:8e:30:71:04:30:a7:ee:c3:20:b5:9b:4a:b3: 48:e3:b5:4f:04:ff:ee:13:18:83:6a:a8:8a:a4:6e:e1:90:97: 82:2c:42:fc:50:77:65:2e:c4:fb:82:dc:41:d6:88:d9:77:84: 11:6d:a7:70:dd:b8:a6:5d:a0:34:a5:e0:26:2a:7c:45:bd:8a: 23:dd:35:7e:37:a5:7f:1c:f5:08:18:81:d6:f7:9f:5e:68:1d: 21:7d:cc:b4:76:74:19:2a:09:9f:c4:1a:ec:ac:96:4d:d2:0d: c4:94:31:8c:5a:5d:e5:20:a8:58:e2:35:98:b5:88:aa:b7:5c: 23:44:79:5f:4e:16:f1:ea:a0:43:e1:21:55:70:f2:21:70:f3: 36:9a:b7:39:c0:83:fa:24:52:75:d2:62:1c:a3:f6:8d:62:e2: 0d:53:ec:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muQlkDdayBLqm/vgcPflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MWJiMWNkZDViODZiZTc3ODA2ODg5ZDJlMWIyMDJhY2My N2IyMjUwHhcNMjYwMTI2MDAwMTIxWhcNMjYwMTI3MDAwMTIxWjAzMTEwLwYDVQQD Eyg3NzY3ZmQ2MTBlZDRlOGU4OGE4MzVkOGM5ZDhmYzBiMmM5NzU3ZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouw9nOTyiIpArdl1nZ5xojGPwahB pgTGr21t6KESIr42AaeVwtpZrxC4HjMQU5fnc4RZjp/i4ykCFxRGtG82m3gJwp8I eQhYxFbRoktXzmPEcspy5qEB4290iz216PyT9f3tmMuQe4MNBYQ19/nUuw8EbeM2 TLdxdSvlxDf7pbc+fHL8I7EhchtVSvyG4u2VemaaDlH4KvkHV0c7PPA5dkOb3KJy K6vVFW1eRGiVvs4EQTDVa4KRGSuNLjuvFx/IAZmmAgywDPqyfEU0/SW8DquYK9St UcDSY++64UV8WSvPq7zH3Q/R2D6vUe1PcmOK71Zdm3Vr8fSdmiI/e3lJEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdn/WEO1OjoioNdjJ2PwLLJdX4zMB8GA1UdIwQY MBaAFLQbsc3VuGvneAaInS4bICrMJ7IlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQt ZGM0ZTc5ODhhMjhhLzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQtZGM0ZTc5ODhhMjhh LzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyGr+l8i /UkxW+RmRjZS1fpjWR8LK6eWo1FpSzFDoUztyJsmDglDQxBlPAxR3H6W8YpE3xJb Lb5INq7PEKMZPZwmSB4LbNNGaiPVWelMfBAW4AhsWCaE5aGDdZ2W6umOMHEEMKfu wyC1m0qzSOO1TwT/7hMYg2qoiqRu4ZCXgixC/FB3ZS7E+4LcQdaI2XeEEW2ncN24 pl2gNKXgJip8Rb2KI901fjelfxz1CBiB1vefXmgdIX3MtHZ0GSoJn8Qa7KyWTdIN xJQxjFpd5SCoWOI1mLWIqrdcI0R5X04W8eqgQ+EhVXDyIXDzNpq3OcCD+iRSddJi HKP2jWLiDVPsIg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:52:32 2026 by rpki-client