This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json) Hash identifier: KIDEeyVMRvFjMTmMWlL9+WOArZaLLj1vZCyBSN4BZYM= Subject key identifier: DF:40:94:A6:67:E9:90:5B:CD:39:BD:DD:36:52:71:1E:6C:3C:91:AA Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019BF4D08A8186DD065FFB120A38F50AB454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft Manifest number: 0C54 Signing time: Sun 25 Jan 2026 11:01:06 +0000 Manifest this update: Sun 25 Jan 2026 11:01:06 +0000 Manifest next update: Mon 26 Jan 2026 11:01:06 +0000 Files and hashes: 1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=) 2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 7Hbmedsd6yqQg0hc0F8T3jKavJjRx1CBvjeLM93SjbY=) 3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:8a:81:86:dd:06:5f:fb:12:0a:38:f5:0a:b4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Jan 25 11:01:06 2026 GMT Not After : Jan 26 11:01:06 2026 GMT Subject: CN=df4094a667e9905bcd39bddd3652711e6c3c91aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:5e:35:1f:e7:af:d9:dc:1d:82:e4:71:59: f6:6e:f3:f1:db:37:ad:38:28:d1:52:5e:5c:ad:7e: 31:be:88:1e:3c:2f:38:a3:40:86:64:16:51:53:b1: 62:3c:94:5f:fd:83:bd:0b:9a:b2:f0:29:25:b7:89: a6:0c:9b:2f:69:d9:01:50:03:17:43:6b:d2:52:24: 1a:d4:f0:9e:71:bf:98:2e:1a:b8:65:39:ff:e2:46: 2b:8b:d5:e7:86:fb:ce:6d:01:3b:8e:2a:fe:ab:19: ab:2f:05:49:19:7b:94:62:0e:6e:59:cc:be:cd:92: fc:b6:95:af:dd:b4:10:06:c7:e8:fb:a2:19:02:12: 52:4d:40:f5:99:fc:b6:97:8e:77:38:0a:29:7e:0b: 86:6e:18:ad:88:6e:ed:3d:30:31:f3:bb:72:5f:c4: a9:1d:97:ec:26:90:80:c7:4d:3a:09:d2:19:ce:cc: 0a:00:71:71:b0:cd:dd:06:5f:9c:33:82:f2:32:bf: a7:f4:18:fd:07:50:33:2e:1e:74:92:f3:84:ec:4f: dd:7e:dd:46:4f:25:4f:9e:ad:28:f3:38:11:11:d4: 3d:03:59:8f:72:0b:a4:05:01:39:bf:a5:3e:03:9f: ae:3d:d7:67:24:c2:b1:01:33:aa:25:81:ec:e0:0e: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:94:A6:67:E9:90:5B:CD:39:BD:DD:36:52:71:1E:6C:3C:91:AA X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ff:f5:ae:b8:6a:79:98:92:40:12:53:38:35:4b:3f:d6:d4: c3:95:1c:44:04:07:f5:9b:15:13:d7:16:66:23:59:97:a2:7d: 65:1f:de:d1:d4:24:24:ce:15:b5:56:f1:c4:fe:08:0a:fb:09: 36:61:13:d6:3f:6a:89:bd:b6:a0:19:fb:d6:e4:e8:03:c0:64: b0:98:f1:65:52:85:1b:4b:09:49:a3:24:de:90:98:14:79:55: d8:6d:00:3b:17:f7:2a:36:e3:7c:36:b7:63:b2:52:ce:62:be: 0c:73:74:ac:f4:6b:03:1c:30:39:06:a1:a5:03:12:51:73:80: b5:9d:fb:07:2a:4a:70:12:04:5b:30:20:05:77:a4:ac:f6:e7: cf:b2:38:15:e6:19:32:ac:9b:fe:2a:29:15:22:a4:ac:94:29: 18:a7:99:b5:27:18:07:43:d3:9f:01:61:3e:d4:bd:19:08:17: fb:1d:7c:fc:ef:05:4b:24:ce:04:ac:9d:da:d8:71:5b:06:a8: 93:e9:51:48:bd:2c:ee:50:27:a9:99:57:82:a1:8d:77:c2:fa: 0b:f9:50:78:e6:9b:79:b7:cb:b7:66:7d:ff:5d:1e:22:34:79: 60:41:68:aa:a0:3b:25:5b:d0:d1:91:66:ac:29:4f:33:69:48: a8:6c:80:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00IqBht0GX/sSCjj1CrRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjYwMTI1MTEwMTA2WhcNMjYwMTI2MTEwMTA2WjAzMTEwLwYDVQQD EyhkZjQwOTRhNjY3ZTk5MDViY2QzOWJkZGQzNjUyNzExZTZjM2M5MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R1eNR/nr9ncHYLkcVn2bvPx2zet OCjRUl5crX4xvogePC84o0CGZBZRU7FiPJRf/YO9C5qy8Cklt4mmDJsvadkBUAMX Q2vSUiQa1PCecb+YLhq4ZTn/4kYri9XnhvvObQE7jir+qxmrLwVJGXuUYg5uWcy+ zZL8tpWv3bQQBsfo+6IZAhJSTUD1mfy2l453OAopfguGbhitiG7tPTAx87tyX8Sp HZfsJpCAx006CdIZzswKAHFxsM3dBl+cM4LyMr+n9Bj9B1AzLh50kvOE7E/dft1G TyVPnq0o8zgREdQ9A1mPcgukBQE5v6U+A5+uPddnJMKxATOqJYHs4A7hPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9AlKZn6ZBbzTm93TZScR5sPJGqMB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu//1rrhq eZiSQBJTODVLP9bUw5UcRAQH9ZsVE9cWZiNZl6J9ZR/e0dQkJM4VtVbxxP4ICvsJ NmET1j9qib22oBn71uToA8BksJjxZVKFG0sJSaMk3pCYFHlV2G0AOxf3KjbjfDa3 Y7JSzmK+DHN0rPRrAxwwOQahpQMSUXOAtZ37BypKcBIEWzAgBXekrPbnz7I4FeYZ Mqyb/iopFSKkrJQpGKeZtScYB0PTnwFhPtS9GQgX+x18/O8FSyTOBKyd2thxWwao k+lRSL0s7lAnqZlXgqGNd8L6C/lQeOabebfLt2Z9/10eIjR5YEFoqqA7JVvQ0ZFm rClPM2lIqGyAsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:20 2026 by rpki-client