This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json) Hash identifier: n2uqRrrCEZhIH5fAm3EbutBxtbjc9Ul2oYl2VofflOk= Subject key identifier: 19:95:2C:08:E4:6C:B3:1F:78:6F:FB:AE:00:22:C3:F2:42:22:19:32 Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019BF61A1737AB3FD2756209B9E00998E7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 17:01:03 +0000 Manifest this update: Sun 25 Jan 2026 17:01:03 +0000 Manifest next update: Mon 26 Jan 2026 17:01:03 +0000 Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=) 2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=) 3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: mqap20OADq+gysVSvoeSJQIQkxYg0vsHghFsf0geyPc=) 4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:17:37:ab:3f:d2:75:62:09:b9:e0:09:98:e7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Jan 25 17:01:03 2026 GMT Not After : Jan 26 17:01:03 2026 GMT Subject: CN=19952c08e46cb31f786ffbae0022c3f242221932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:aa:4e:9e:f6:25:88:49:6e:61:ff:24:4f: 82:8a:36:7e:fd:3c:17:61:e2:0f:ef:72:a0:50:46: d3:07:cd:27:97:f7:6e:df:88:e1:4d:67:f9:c6:b4: 49:ad:56:ef:7d:dd:39:08:8c:ab:07:eb:98:fc:66: b0:78:5d:8d:bf:9b:a2:e5:6d:0b:81:ad:1a:be:59: 5a:ae:09:46:bf:4e:71:b9:b2:64:74:e1:9c:60:0e: 32:a7:58:2a:a3:18:9e:7c:d4:4d:7f:c9:73:19:9b: 22:c3:85:96:79:4d:40:7b:48:b1:10:19:f0:a9:fa: 0b:fd:0b:2b:7e:93:0e:7a:0a:23:8a:39:b9:72:a3: d2:94:11:f2:60:cd:db:80:c3:08:81:d0:61:4c:75: 36:47:f4:50:b4:6e:8b:a1:90:d1:f0:a8:e6:69:c4: c0:5e:fc:89:80:c3:b0:8d:c4:9a:f6:5f:70:5d:f5: f3:bf:71:9c:20:ae:99:df:7d:28:12:80:df:e8:4c: ff:d5:1a:2d:5f:db:18:6a:2c:b8:2d:1f:72:7a:b5: 7c:df:8d:f5:50:23:59:31:b6:ee:b6:e3:cb:08:46: 60:a8:bb:eb:7c:85:09:6d:2a:f2:77:f4:26:4f:e9: 80:ef:28:ee:1b:dd:d2:de:0f:d4:04:5f:40:ac:d4: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:2C:08:E4:6C:B3:1F:78:6F:FB:AE:00:22:C3:F2:42:22:19:32 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:17:b6:55:ce:cd:26:63:eb:3c:0a:20:e4:b9:6d:6f:b3:35: 5d:b6:06:f7:82:f7:35:35:5c:32:0e:82:36:0e:e6:73:78:f4: 30:2b:2d:c3:ee:69:c6:1c:c9:50:a9:7f:95:31:21:7a:9c:ad: 2b:41:90:b8:9c:3a:ff:dc:09:fa:9d:3d:81:e3:82:e2:c3:c2: 88:70:d4:9e:a7:15:fe:51:6c:0d:45:4c:05:4e:10:51:e0:d6: a5:02:80:a3:f2:25:9b:23:fe:04:fb:7e:55:fe:b0:cc:81:d1: 93:ee:97:db:23:e4:63:9a:f6:f4:f1:35:3f:71:28:ac:d1:d1: 9c:98:72:83:6e:9c:58:0c:f9:8a:b0:91:92:63:97:a2:1a:0e: 3b:d9:c4:d8:80:57:1a:94:98:05:0d:61:fa:dc:5e:26:35:30: e8:d5:5f:19:a0:4f:c5:f8:0a:08:65:aa:05:bd:20:f3:4d:eb: 76:ca:59:40:b0:30:9d:47:2b:84:c7:d4:6c:40:21:56:89:90: a5:2f:dc:f6:46:7d:47:c0:53:db:d3:80:05:2a:0f:f7:46:06: af:10:af:55:7f:3c:57:45:36:44:e6:ed:ce:79:f5:11:e3:c3: e4:c3:f8:90:cc:09:79:ce:52:f3:da:03:4b:10:d5:bb:20:dc: 61:23:e7:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ghc3qz/SdWIJueAJmOerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjYwMTI1MTcwMTAzWhcNMjYwMTI2MTcwMTAzWjAzMTEwLwYDVQQD EygxOTk1MmMwOGU0NmNiMzFmNzg2ZmZiYWUwMDIyYzNmMjQyMjIxOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/OqTp72JYhJbmH/JE+CijZ+/TwX YeIP73KgUEbTB80nl/du34jhTWf5xrRJrVbvfd05CIyrB+uY/GaweF2Nv5ui5W0L ga0avllarglGv05xubJkdOGcYA4yp1gqoxiefNRNf8lzGZsiw4WWeU1Ae0ixEBnw qfoL/QsrfpMOegojijm5cqPSlBHyYM3bgMMIgdBhTHU2R/RQtG6LoZDR8KjmacTA XvyJgMOwjcSa9l9wXfXzv3GcIK6Z330oEoDf6Ez/1RotX9sYaiy4LR9yerV83431 UCNZMbbutuPLCEZgqLvrfIUJbSryd/QmT+mA7yjuG93S3g/UBF9ArNRSvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmVLAjkbLMfeG/7rgAiw/JCIhkyMB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhe2Vc7N JmPrPAog5Lltb7M1XbYG94L3NTVcMg6CNg7mc3j0MCstw+5pxhzJUKl/lTEhepyt K0GQuJw6/9wJ+p09geOC4sPCiHDUnqcV/lFsDUVMBU4QUeDWpQKAo/IlmyP+BPt+ Vf6wzIHRk+6X2yPkY5r29PE1P3EorNHRnJhyg26cWAz5irCRkmOXohoOO9nE2IBX GpSYBQ1h+txeJjUw6NVfGaBPxfgKCGWqBb0g803rdspZQLAwnUcrhMfUbEAhVomQ pS/c9kZ9R8BT29OABSoP90YGrxCvVX88V0U2RObtznn1EePD5MP4kMwJec5S89oD SxDVuyDcYSPnVw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:12:50 2026 by rpki-client