This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json) Hash identifier: rLC+Fe/6XDuEyHL6ifBejoSsbzRTZRa5AXKiJFU9fTM= Subject key identifier: 59:15:EF:3A:86:A8:9F:AA:55:9B:8A:51:93:E2:B2:65:CB:08:0D:61 Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Certificate serial: 019BFA9C4B56631EE9F9CF2108F91C293826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 14:01:45 +0000 Manifest this update: Mon 26 Jan 2026 14:01:45 +0000 Manifest next update: Tue 27 Jan 2026 14:01:45 +0000 Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: M6HfhxM+ZjEKZ9HOev6lILJCI6gD02CvrHr4Gt0Yzmw=) 2: ZyTWugoefki0oz6k0H0j3uSA6D0.roa (hash: 8RbuK4aoWVsFj9ZjDN4iwth9lW8pdbJFx/Taog1hSJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:4b:56:63:1e:e9:f9:cf:21:08:f9:1c:29:38:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Validity Not Before: Jan 26 14:01:45 2026 GMT Not After : Jan 27 14:01:45 2026 GMT Subject: CN=5915ef3a86a89faa559b8a5193e2b265cb080d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:54:79:68:4e:c6:ee:53:07:64:ba:9a:07: b9:6c:1c:3d:8a:14:cf:47:40:48:7c:20:29:64:6f: 34:01:45:fb:7b:49:0c:1a:07:a3:19:af:32:7d:88: ef:e2:fd:4d:fb:28:bf:d0:62:ff:60:6c:37:47:d3: 7d:2c:b1:37:e4:2d:d6:66:23:9c:24:ab:eb:73:cc: 03:d4:54:25:69:33:3c:7c:96:7e:e4:f7:f8:f2:38: b3:0f:4a:fe:d5:0d:f7:f5:85:51:9e:dc:37:80:51: d6:57:9e:ea:9c:87:9d:b2:ec:8d:6a:d1:a8:2d:91: 7e:69:49:55:c1:89:f2:93:bc:62:21:64:28:74:ff: 86:78:1e:a3:b0:ea:c4:0a:ae:f7:83:30:d3:45:9c: e6:ca:7a:05:76:e2:96:b2:52:42:5d:57:c9:01:81: 49:8d:37:38:c3:4a:cd:cc:b9:a0:0c:b6:41:d8:77: 92:fd:aa:fc:bb:03:e8:5d:a1:02:46:a3:c3:86:c2: 49:df:d1:90:34:19:04:30:61:92:f1:4b:fb:ec:dd: 03:95:96:7a:07:c1:31:15:9a:ee:c0:97:46:12:53: a5:70:a7:95:b2:ff:c8:40:c7:e8:52:c9:cf:20:94: 25:33:c8:8a:8d:32:7e:1d:18:dd:03:d7:9c:4b:7e: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:EF:3A:86:A8:9F:AA:55:9B:8A:51:93:E2:B2:65:CB:08:0D:61 X509v3 Authority Key Identifier: keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:94:4b:6f:0e:97:ce:d4:93:d9:85:6e:5b:b8:1d:08:9f: d7:47:02:6f:2b:c2:66:3f:b8:fc:db:bd:2a:e8:27:d5:a4:67: b8:29:74:fd:2c:bd:86:cf:5e:8a:2f:4d:36:8b:11:ce:4b:1c: d4:9e:8f:20:6e:b8:09:d7:c1:1a:fb:92:e7:1f:18:2d:8b:b8: af:c2:19:2d:79:fc:bc:f7:12:02:26:40:6c:f7:c8:c9:9a:74: 10:42:e4:85:d1:23:71:55:9d:18:92:95:75:54:6d:71:fe:14: d4:5d:a5:4d:57:f4:a9:9f:c7:55:17:2f:8c:e0:18:fc:a0:15: e5:db:85:ef:41:81:73:84:2f:26:f3:25:b6:a7:02:f0:6d:30: 6e:81:ca:1b:58:75:c5:8e:2f:cd:9c:85:ec:3c:18:b8:8a:15: e7:8f:ca:35:d0:86:ee:1a:3e:e3:29:8e:9d:4f:da:3e:92:ca: 66:95:fb:f8:2b:7f:6f:dc:8d:20:d1:4f:a2:c3:d9:86:88:2b: 47:ca:50:5b:88:85:46:d5:ce:06:7e:18:e1:32:48:91:92:b7: 5a:ff:a7:9f:c5:95:20:2b:49:44:80:76:fe:58:6c:0d:ea:76: 86:1a:e1:2a:37:e6:6b:72:f0:97:2e:cc:be:a7:84:d0:51:82: 88:2c:e5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nEtWYx7p+c8hCPkcKTgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx MWEzMTgwHhcNMjYwMTI2MTQwMTQ1WhcNMjYwMTI3MTQwMTQ1WjAzMTEwLwYDVQQD Eyg1OTE1ZWYzYTg2YTg5ZmFhNTU5YjhhNTE5M2UyYjI2NWNiMDgwZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZBUeWhOxu5TB2S6mge5bBw9ihTP R0BIfCApZG80AUX7e0kMGgejGa8yfYjv4v1N+yi/0GL/YGw3R9N9LLE35C3WZiOc JKvrc8wD1FQlaTM8fJZ+5Pf48jizD0r+1Q339YVRntw3gFHWV57qnIedsuyNatGo LZF+aUlVwYnyk7xiIWQodP+GeB6jsOrECq73gzDTRZzmynoFduKWslJCXVfJAYFJ jTc4w0rNzLmgDLZB2HeS/ar8uwPoXaECRqPDhsJJ39GQNBkEMGGS8Uv77N0DlZZ6 B8ExFZruwJdGElOlcKeVsv/IQMfoUsnPIJQlM8iKjTJ+HRjdA9ecS371IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkV7zqGqJ+qVZuKUZPismXLCA1hMB8GA1UdIwQY MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4 LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7KUS28O l87Uk9mFblu4HQif10cCbyvCZj+4/Nu9Kugn1aRnuCl0/Sy9hs9eii9NNosRzksc 1J6PIG64CdfBGvuS5x8YLYu4r8IZLXn8vPcSAiZAbPfIyZp0EELkhdEjcVWdGJKV dVRtcf4U1F2lTVf0qZ/HVRcvjOAY/KAV5duF70GBc4QvJvMltqcC8G0wboHKG1h1 xY4vzZyF7DwYuIoV54/KNdCG7ho+4ymOnU/aPpLKZpX7+Ct/b9yNINFPosPZhogr R8pQW4iFRtXOBn4Y4TJIkZK3Wv+nn8WVICtJRIB2/lhsDep2hhrhKjfma3Lwly7M vqeE0FGCiCzl5A== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:30 2026 by rpki-client