This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json) Hash identifier: gWsFQliqdUgty6ipH9mCGZoqjoHWiBpU1FCjwsY/CTA= Subject key identifier: 85:C3:BE:31:8D:B1:DA:0B:AD:F9:18:C4:25:82:52:33:B5:1F:8D:27 Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019BF876950A158E19B1B68DA578A571EE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 04:01:19 +0000 Manifest this update: Mon 26 Jan 2026 04:01:19 +0000 Manifest next update: Tue 27 Jan 2026 04:01:19 +0000 Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=) 2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=) 3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=) 4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: h7ncgh3HryHuPtjjwP0OM1CjQvrJYe3ANo1wOlFyPns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:95:0a:15:8e:19:b1:b6:8d:a5:78:a5:71:ee:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Jan 26 04:01:19 2026 GMT Not After : Jan 27 04:01:19 2026 GMT Subject: CN=85c3be318db1da0badf918c425825233b51f8d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:8d:0d:80:69:30:65:5f:2a:e9:dd:d9:45: b7:d6:7e:e3:75:89:9f:07:f4:68:f6:78:8a:a8:d6: 24:5c:e2:b5:bc:5c:b4:1b:a1:fd:7c:fd:60:e4:1d: 7c:5c:61:0d:4e:03:69:bc:46:04:ef:88:76:da:31: 63:07:fc:b1:1d:ab:95:e3:b6:a3:ff:24:c2:28:15: 26:d3:69:be:a6:59:b9:ee:11:8f:9f:39:4b:88:3d: ce:9a:ae:b7:58:6c:2e:48:0d:97:6a:07:d2:2a:7d: 38:2d:a1:9f:c6:29:bb:53:c7:49:3a:5d:b1:e7:0c: 9d:17:ea:8b:96:c9:cc:2d:35:88:43:af:91:15:86: c3:da:7f:22:a6:18:17:3b:03:ac:52:90:30:ff:7f: 40:50:1c:60:6c:73:17:6a:82:62:64:77:2b:62:93: 81:35:b3:10:72:49:32:78:8e:13:7d:55:59:c0:df: cd:b7:db:43:9f:86:a0:de:78:53:d2:50:c9:63:2c: ec:72:6f:11:6e:d9:c3:6b:77:54:2c:f0:aa:38:44: 43:28:45:62:a5:58:67:bf:fa:b4:bd:c1:74:bd:92: 8f:71:4f:3a:2e:85:3c:98:d0:78:3c:c8:89:68:e9: 22:a1:cf:fc:65:0a:17:ba:d2:15:d5:0e:10:07:a6: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:BE:31:8D:B1:DA:0B:AD:F9:18:C4:25:82:52:33:B5:1F:8D:27 X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d0:61:8f:a0:c5:f6:09:ab:71:78:b9:ed:0b:2c:be:22:f2: 4d:4c:47:f4:fd:bc:37:1b:9c:a9:32:6f:9f:a8:72:59:15:f7: 6f:b6:4e:7b:95:86:e1:e0:49:7b:77:be:92:29:74:dc:f2:d5: c7:08:94:43:c1:2c:18:15:d7:f7:aa:db:99:b4:a1:b0:c5:d7: c1:c8:59:ed:e3:b4:b0:c4:2e:ce:28:96:1e:3e:2e:9b:70:28: 9d:bb:6f:af:75:9d:b2:e5:e3:19:b8:45:de:ea:26:b9:18:54: 1e:53:39:77:8f:35:85:ef:bc:86:fe:e4:8a:b5:33:06:00:a8: 34:4f:72:b4:4d:9f:23:80:e8:eb:9a:66:39:ea:1f:10:de:02: 33:c1:9a:4e:20:d3:e4:d3:3a:01:bb:a9:50:b8:ec:08:e1:58: 4b:37:0f:79:f2:27:59:62:6c:0d:20:35:39:1d:68:01:81:9a: 25:b2:9d:d2:6e:10:23:a5:cf:df:95:a8:81:9a:ea:bf:e5:d3: 6b:d6:db:19:23:08:45:31:be:a4:0f:f1:28:3b:11:3c:66:f9: 16:b5:5b:4f:f1:2e:34:db:fb:19:ad:36:bc:d8:f4:69:72:ef: c8:1d:14:ac:3f:4f:11:cd:b5:3c:41:60:3a:ec:26:df:3b:8d: 7b:7b:84:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpUKFY4ZsbaNpXilce5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjYwMTI2MDQwMTE5WhcNMjYwMTI3MDQwMTE5WjAzMTEwLwYDVQQD Eyg4NWMzYmUzMThkYjFkYTBiYWRmOTE4YzQyNTgyNTIzM2I1MWY4ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohqNDYBpMGVfKund2UW31n7jdYmf B/Ro9niKqNYkXOK1vFy0G6H9fP1g5B18XGENTgNpvEYE74h22jFjB/yxHauV47aj /yTCKBUm02m+plm57hGPnzlLiD3Omq63WGwuSA2XagfSKn04LaGfxim7U8dJOl2x 5wydF+qLlsnMLTWIQ6+RFYbD2n8iphgXOwOsUpAw/39AUBxgbHMXaoJiZHcrYpOB NbMQckkyeI4TfVVZwN/Nt9tDn4ag3nhT0lDJYyzscm8RbtnDa3dULPCqOERDKEVi pVhnv/q0vcF0vZKPcU86LoU8mNB4PMiJaOkioc/8ZQoXutIV1Q4QB6aOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXDvjGNsdoLrfkYxCWCUjO1H40nMB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtBhj6DF 9gmrcXi57QssviLyTUxH9P28NxucqTJvn6hyWRX3b7ZOe5WG4eBJe3e+kil03PLV xwiUQ8EsGBXX96rbmbShsMXXwchZ7eO0sMQuziiWHj4um3Aonbtvr3WdsuXjGbhF 3uomuRhUHlM5d481he+8hv7kirUzBgCoNE9ytE2fI4Do65pmOeofEN4CM8GaTiDT 5NM6AbupULjsCOFYSzcPefInWWJsDSA1OR1oAYGaJbKd0m4QI6XP35WogZrqv+XT a9bbGSMIRTG+pA/xKDsRPGb5FrVbT/EuNNv7Ga02vNj0aXLvyB0UrD9PEc21PEFg Ouwm3zuNe3uEmA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:41 2026 by rpki-client