This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json) Hash identifier: na8GDLjw9ccXcZB4PdvTt9OmKrWq8+RwS35tOUGTltg= Subject key identifier: F3:E1:ED:46:83:5C:96:72:1A:DA:B7:B3:60:03:C1:F3:40:72:D1:E6 Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Certificate serial: 019BF6F59738BE9C1CE22ABC1FE018FA21B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 21:00:48 +0000 Manifest this update: Sun 25 Jan 2026 21:00:48 +0000 Manifest next update: Mon 26 Jan 2026 21:00:48 +0000 Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: hsCBPu4qWIwIojlEk0xQiqhaJaTrrkpQpRkBmS0Ubpo=) 2: o-popO9auROaiIHZBs-GFli-ZBg.roa (hash: 3gA1UOiSr0PnnoNboQJZUsn/LeXSette67Qdwhw+aTc=) 3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:97:38:be:9c:1c:e2:2a:bc:1f:e0:18:fa:21:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Validity Not Before: Jan 25 21:00:48 2026 GMT Not After : Jan 26 21:00:48 2026 GMT Subject: CN=f3e1ed46835c96721adab7b36003c1f34072d1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:b2:09:d6:0c:cb:fe:0e:dd:0c:34:f3:4b: ee:86:cc:a3:8a:30:f2:c5:0c:96:65:53:e2:b8:40: 10:2f:c2:8c:e2:48:25:8d:92:a8:da:6b:24:30:fb: af:d4:5d:9c:98:ef:62:9b:36:5d:36:fe:b3:7d:f7: 76:94:ea:6b:8e:28:ce:c4:71:6f:d1:f0:0f:44:f2: cd:1d:e4:01:0e:80:d1:66:48:8c:8e:51:93:61:07: 9c:2b:76:d9:4e:6f:93:09:77:e0:76:6b:ab:54:85: 71:68:fb:a2:ed:bc:ed:48:83:ed:a7:80:a4:45:26: e3:0f:45:13:19:b4:f5:72:4d:90:28:49:f0:c6:e7: e9:99:22:40:bc:6a:06:5d:87:33:3c:19:09:ce:e1: cf:41:81:6e:fe:92:4b:60:0a:d8:0b:76:1a:85:d6: 75:17:c4:23:3c:a2:f8:33:1b:15:57:1c:18:e9:9c: 4d:bc:8c:6e:4a:65:5c:7d:07:bd:52:26:66:7c:93: 6c:4a:55:b7:c4:7f:b3:76:8e:f8:42:df:54:c0:ff: 8a:ae:81:78:6d:f9:d5:cc:36:7f:ba:0d:1a:81:70: f3:74:b5:5e:ee:97:26:72:12:1b:32:5f:77:52:48: 61:ba:3a:63:b6:d6:e2:0b:85:51:e3:1c:b9:4d:f6: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:ED:46:83:5C:96:72:1A:DA:B7:B3:60:03:C1:F3:40:72:D1:E6 X509v3 Authority Key Identifier: keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c4:c2:56:f5:39:e4:0d:26:e4:0b:27:80:a7:01:a3:1a:ac: 1c:e9:df:7d:30:89:d4:dd:a3:73:b0:1b:4e:e9:93:57:00:1f: 4d:c6:2c:11:e0:57:88:c6:6c:84:ce:c0:a0:23:1a:d8:a8:73: bf:59:0e:68:78:fd:ef:52:2f:95:25:72:70:08:4d:3b:e5:5a: a2:8a:7f:10:1d:fd:e4:b3:37:d9:7f:72:d5:6f:97:9d:34:39: 3b:e4:e2:ea:6f:11:7e:d8:c8:48:55:05:14:ba:51:d6:ca:46: a3:7a:13:87:30:83:2b:f6:9c:c0:c3:64:75:83:42:e7:f9:aa: b4:47:18:a6:3c:d1:38:df:e3:2d:62:bb:17:ef:d7:47:e8:e5: 01:1c:96:17:8b:11:2f:b9:62:a6:a0:66:37:03:ee:75:d4:36: e7:94:07:46:89:33:9f:de:6f:c9:30:31:a0:0b:01:3f:55:5a: 53:8e:35:af:89:19:14:e5:74:e7:37:e2:0d:cd:20:cd:82:cf: ac:e9:2a:c6:c7:e3:23:dc:35:bd:61:bc:a7:12:d7:4c:0d:71: 50:6f:84:12:2c:f8:b6:3f:ce:62:e1:75:fc:63:26:d4:84:9b: cb:84:fe:65:a8:82:a0:7e:32:9b:dc:61:f5:35:81:8a:6f:37: dd:52:c2:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Zc4vpwc4iq8H+AY+iG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy YmE5NzYwHhcNMjYwMTI1MjEwMDQ4WhcNMjYwMTI2MjEwMDQ4WjAzMTEwLwYDVQQD EyhmM2UxZWQ0NjgzNWM5NjcyMWFkYWI3YjM2MDAzYzFmMzQwNzJkMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvWyCdYMy/4O3Qw080vuhsyjijDy xQyWZVPiuEAQL8KM4kgljZKo2mskMPuv1F2cmO9imzZdNv6zffd2lOprjijOxHFv 0fAPRPLNHeQBDoDRZkiMjlGTYQecK3bZTm+TCXfgdmurVIVxaPui7bztSIPtp4Ck RSbjD0UTGbT1ck2QKEnwxufpmSJAvGoGXYczPBkJzuHPQYFu/pJLYArYC3YahdZ1 F8QjPKL4MxsVVxwY6ZxNvIxuSmVcfQe9UiZmfJNsSlW3xH+zdo74Qt9UwP+KroF4 bfnVzDZ/ug0agXDzdLVe7pcmchIbMl93UkhhujpjttbiC4VR4xy5TfbITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPh7UaDXJZyGtq3s2ADwfNActHmMB8GA1UdIwQY MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8TCVvU5 5A0m5AsngKcBoxqsHOnffTCJ1N2jc7AbTumTVwAfTcYsEeBXiMZshM7AoCMa2Khz v1kOaHj971IvlSVycAhNO+Vaoop/EB395LM32X9y1W+XnTQ5O+Ti6m8RftjISFUF FLpR1spGo3oThzCDK/acwMNkdYNC5/mqtEcYpjzRON/jLWK7F+/XR+jlARyWF4sR L7lipqBmNwPuddQ255QHRokzn95vyTAxoAsBP1VaU441r4kZFOV05zfiDc0gzYLP rOkqxsfjI9w1vWG8pxLXTA1xUG+EEiz4tj/OYuF1/GMm1ISby4T+ZaiCoH4ym9xh 9TWBim833VLCig== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:04 2026 by rpki-client