This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json) Hash identifier: lqyuF8njcPLtxFQD5N607j/DHiwyUFF8fii+qNcfnRU= Subject key identifier: D5:FB:04:4A:A1:34:81:1A:F4:A8:EC:09:92:07:1F:1D:B2:F7:E0:27 Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a Certificate serial: 019BF574E9D6EA5634B300174D5FD8A676EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 14:00:38 +0000 Manifest this update: Sun 25 Jan 2026 14:00:38 +0000 Manifest next update: Mon 26 Jan 2026 14:00:38 +0000 Files and hashes: 1: 7S2yeHR4bFiFyxZbbPP_sYHQp2w.roa (hash: VNevD8nKtYDVh3U0iiaGr0TdZvD9DviTbw2gv5/lGDA=) 2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: Od/iiT2ka3wHIG8kQENk9MgC9a6dIDbF1W4IKxDiMyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e9:d6:ea:56:34:b3:00:17:4d:5f:d8:a6:76:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a Validity Not Before: Jan 25 14:00:38 2026 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d5fb044aa134811af4a8ec0992071f1db2f7e027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:d2:88:f9:c5:3c:30:64:88:6e:09:9f:50: ef:20:d2:27:22:a3:0d:64:22:be:a0:a9:2b:a4:a9: da:b3:47:53:ee:4b:02:0d:80:85:fe:27:0d:2a:bd: f8:ee:33:11:35:e5:15:85:77:f7:27:9d:6a:97:97: 84:9f:3b:db:d2:cb:61:40:b4:fa:36:95:cc:ef:0d: 19:a7:47:ec:83:03:f9:a2:8d:d9:7e:c1:47:cb:43: bc:57:cd:40:bc:a3:7b:90:48:91:39:81:5a:0f:82: a0:bd:98:0e:b0:ee:79:5d:cd:89:a7:99:d4:fb:b0: 0c:d7:9a:d8:06:d7:18:fd:4f:bb:76:00:6e:0d:41: 85:ac:42:40:dd:bd:3e:b9:7e:69:84:c6:75:51:58: 66:34:3f:84:68:7b:b1:3d:cf:83:32:e8:5e:f1:53: ff:29:70:82:b3:b5:81:fc:c7:65:d4:ab:90:a0:59: b8:2b:49:e0:5d:db:66:77:97:cf:2c:61:c3:f8:46: 5f:4f:7d:e9:af:0a:18:bd:88:98:bc:8f:3d:fc:ce: 5a:95:52:a7:f0:72:11:29:19:a6:a4:4c:69:7f:12: 03:6d:18:d2:e6:72:36:d0:e9:55:6d:82:7b:7b:b1: f4:aa:ce:75:ab:28:42:0c:20:48:0b:7f:b7:54:fe: 0a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FB:04:4A:A1:34:81:1A:F4:A8:EC:09:92:07:1F:1D:B2:F7:E0:27 X509v3 Authority Key Identifier: keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:62:1b:22:20:9f:21:e1:4c:60:56:0d:1e:81:1e:26:dc:4c: bd:c2:57:44:1e:cd:f6:c0:83:97:4b:e2:2d:a2:76:e4:4c:8a: 16:26:93:0d:39:b3:76:d5:41:41:c1:dc:0b:42:7f:52:47:43: bb:13:bd:8f:d4:79:09:7f:81:9f:21:d9:66:47:98:39:d0:2c: 57:f3:71:72:d4:de:23:fc:ca:57:11:2f:11:a0:7f:c7:8f:6b: c9:70:da:73:f7:0d:30:bf:74:b0:5b:07:77:c8:84:8f:dc:b0: 70:d3:f6:83:6b:43:87:95:47:f9:77:11:70:63:97:bf:d4:a7: 4d:97:f8:f2:b2:0b:b2:f3:82:bc:65:39:90:05:2e:4b:1d:5b: 22:ad:bd:b6:90:cf:ae:95:a4:d9:69:47:00:5d:26:4a:84:74: c2:78:43:52:fd:04:05:50:36:c2:e9:e7:90:3a:0c:ff:42:d3: 30:83:09:ca:01:ca:a5:72:92:fa:54:28:fb:7d:43:17:91:9e: fa:21:86:3c:b3:a7:4f:83:ab:7e:73:5e:33:4c:fb:3b:73:fc: c3:13:2f:30:18:af:1c:9e:00:90:19:24:b8:da:9a:d2:5c:6a: 8f:82:e5:9b:f6:27:b6:46:14:39:71:42:2e:2b:f9:7b:02:9a: dc:67:fc:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOnW6lY0swAXTV/YpnbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDIzYzhjNTE4ZmE0MjlmZmNhMjU5NzdiNmE4Zjg0M2Y4 ZjBjNGEwHhcNMjYwMTI1MTQwMDM4WhcNMjYwMTI2MTQwMDM4WjAzMTEwLwYDVQQD EyhkNWZiMDQ0YWExMzQ4MTFhZjRhOGVjMDk5MjA3MWYxZGIyZjdlMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7TSiPnFPDBkiG4Jn1DvINInIqMN ZCK+oKkrpKnas0dT7ksCDYCF/icNKr347jMRNeUVhXf3J51ql5eEnzvb0sthQLT6 NpXM7w0Zp0fsgwP5oo3ZfsFHy0O8V81AvKN7kEiROYFaD4KgvZgOsO55Xc2Jp5nU +7AM15rYBtcY/U+7dgBuDUGFrEJA3b0+uX5phMZ1UVhmND+EaHuxPc+DMuhe8VP/ KXCCs7WB/Mdl1KuQoFm4K0ngXdtmd5fPLGHD+EZfT33prwoYvYiYvI89/M5alVKn 8HIRKRmmpExpfxIDbRjS5nI20OlVbYJ7e7H0qs51qyhCDCBIC3+3VP4KzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX7BEqhNIEa9KjsCZIHHx2y9+AnMB8GA1UdIwQY MBaAFLQCPIxRj6Qp/8oll3tqj4Q/jwxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYt M2I3NDVkZDhlMjFlLzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYtM2I3NDVkZDhlMjFl LzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGIbIiCf IeFMYFYNHoEeJtxMvcJXRB7N9sCDl0viLaJ25EyKFiaTDTmzdtVBQcHcC0J/UkdD uxO9j9R5CX+BnyHZZkeYOdAsV/NxctTeI/zKVxEvEaB/x49ryXDac/cNML90sFsH d8iEj9ywcNP2g2tDh5VH+XcRcGOXv9SnTZf48rILsvOCvGU5kAUuSx1bIq29tpDP rpWk2WlHAF0mSoR0wnhDUv0EBVA2wunnkDoM/0LTMIMJygHKpXKS+lQo+31DF5Ge +iGGPLOnT4OrfnNeM0z7O3P8wxMvMBivHJ4AkBkkuNqa0lxqj4Llm/YntkYUOXFC Liv5ewKa3Gf8Ug== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:34 2026 by rpki-client