This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json) Hash identifier: VkhmA9U5G5ETRSurQQRmm9KUBYIFSDsIXoXCKaSXn3Q= Subject key identifier: 34:66:7A:12:41:70:E9:BC:C1:EE:CC:64:5C:31:1A:8C:8D:84:18:89 Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5 Certificate serial: 019BF4D0EC9FC36F64F01511BD4996CF77F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft Manifest number: 14C0 Signing time: Sun 25 Jan 2026 11:01:31 +0000 Manifest this update: Sun 25 Jan 2026 11:01:31 +0000 Manifest next update: Mon 26 Jan 2026 11:01:31 +0000 Files and hashes: 1: TmvOzGWnmK2lk0JBtr2hwCa8AyI.asa (hash: jT3uzkFsF2IKke7bmyYM9JWOSf+ukPwuY/SlyIWkCoE=) 2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=) 3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: eYDGJCRQaKZlie8DQ7A7HW7AtIuP/0MahTDKMaexdV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:ec:9f:c3:6f:64:f0:15:11:bd:49:96:cf:77:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5 Validity Not Before: Jan 25 11:01:31 2026 GMT Not After : Jan 26 11:01:31 2026 GMT Subject: CN=34667a124170e9bcc1eecc645c311a8c8d841889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:77:7f:f1:61:66:9a:3f:cd:3c:71:54:5f:b2: 04:3c:cd:2a:16:af:5f:f7:5a:48:54:ff:72:98:80: e6:85:fd:90:8c:37:e4:eb:d4:cc:8a:f7:a6:58:9b: 55:d7:94:93:dc:cb:13:d8:ee:f5:f2:07:00:63:81: 33:11:46:6f:a2:ee:e0:71:a6:79:ee:91:21:45:dd: de:65:b2:36:c1:c0:7e:71:51:00:45:78:91:9b:9d: a5:1f:2d:a3:7b:d1:96:f8:ea:01:69:49:a5:2f:ab: 92:ae:88:85:8c:4f:78:11:60:fa:2f:8e:56:43:75: 95:20:ae:46:89:97:e1:2a:75:ef:eb:fc:1a:5a:13: 0d:43:57:c1:fd:b7:0a:60:55:98:d2:51:7e:a1:e7: 1f:f4:11:de:46:e5:6a:ff:a7:c0:4e:4d:05:47:47: c9:64:91:1b:e2:de:df:a6:16:51:7a:62:43:85:09: 53:68:ee:51:06:75:2c:de:e4:32:38:57:c0:b5:00: 5f:51:0d:47:13:41:ad:ca:30:d9:0e:ba:c8:bc:d5: e1:c3:a4:22:9b:28:93:d4:9a:d9:29:06:52:b3:da: 7a:49:c8:1b:4e:3b:cd:6d:6a:b9:30:85:34:f0:88: f7:3d:53:69:35:a4:eb:a1:f4:5a:de:8f:0e:f6:36: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:7A:12:41:70:E9:BC:C1:EE:CC:64:5C:31:1A:8C:8D:84:18:89 X509v3 Authority Key Identifier: keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f6:6a:9a:35:42:64:0e:60:2b:0e:cf:86:be:8c:79:9c:cb: 5d:77:1c:19:0a:cd:ea:e5:da:07:28:01:a5:22:e5:3a:d0:f6: 38:88:0f:95:1c:e3:4f:7c:6a:c1:93:83:09:7d:2f:24:63:66: 37:c0:1d:5a:46:c0:c1:b9:2b:93:2c:66:a8:69:96:d7:9a:3d: 3d:ea:ba:62:5b:1e:ef:01:06:9a:c5:19:83:58:ed:60:a4:64: 4e:b4:4e:40:94:fe:3c:f6:34:ae:6a:53:53:0d:dd:de:9e:02: a1:20:c5:a4:55:20:5a:00:b7:4c:3f:c2:03:6a:1e:ed:ec:39: cf:32:99:5b:29:29:39:b0:50:72:a6:dc:7e:11:ab:1a:a8:dd: ff:bd:c4:a3:0d:14:7e:dd:c6:fe:f8:2b:f7:95:ae:df:cb:fe: fd:d8:3d:6a:9c:5c:f2:01:16:47:b6:bb:4b:b7:2e:f4:9c:20: 94:cf:16:89:04:33:fa:b7:67:7c:b7:78:c5:b7:ed:23:33:91: ed:ad:74:e6:7c:d5:79:90:ae:ef:26:74:9e:f4:35:20:bf:98: a7:1d:dc:22:5d:cf:dd:65:23:f1:a3:bf:20:08:4f:94:1e:80: ac:a5:cf:c2:2e:22:bc:e3:d2:3c:5d:27:41:78:19:9b:80:9e: c2:54:d9:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Oyfw29k8BURvUmWz3f2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl ZTM5YjUwHhcNMjYwMTI1MTEwMTMxWhcNMjYwMTI2MTEwMTMxWjAzMTEwLwYDVQQD EygzNDY2N2ExMjQxNzBlOWJjYzFlZWNjNjQ1YzMxMWE4YzhkODQxODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Xd/8WFmmj/NPHFUX7IEPM0qFq9f 91pIVP9ymIDmhf2QjDfk69TMivemWJtV15ST3MsT2O718gcAY4EzEUZvou7gcaZ5 7pEhRd3eZbI2wcB+cVEARXiRm52lHy2je9GW+OoBaUmlL6uSroiFjE94EWD6L45W Q3WVIK5GiZfhKnXv6/waWhMNQ1fB/bcKYFWY0lF+oecf9BHeRuVq/6fATk0FR0fJ ZJEb4t7fphZRemJDhQlTaO5RBnUs3uQyOFfAtQBfUQ1HE0GtyjDZDrrIvNXhw6Qi myiT1JrZKQZSs9p6ScgbTjvNbWq5MIU08Ij3PVNpNaTrofRa3o8O9ja++QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRmehJBcOm8we7MZFwxGoyNhBiJMB8GA1UdIwQY MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPZqmjVC ZA5gKw7Phr6MeZzLXXccGQrN6uXaBygBpSLlOtD2OIgPlRzjT3xqwZODCX0vJGNm N8AdWkbAwbkrkyxmqGmW15o9Peq6Ylse7wEGmsUZg1jtYKRkTrROQJT+PPY0rmpT Uw3d3p4CoSDFpFUgWgC3TD/CA2oe7ew5zzKZWykpObBQcqbcfhGrGqjd/73Eow0U ft3G/vgr95Wu38v+/dg9apxc8gEWR7a7S7cu9JwglM8WiQQz+rdnfLd4xbftIzOR 7a105nzVeZCu7yZ0nvQ1IL+Ypx3cIl3P3WUj8aO/IAhPlB6ArKXPwi4ivOPSPF0n QXgZm4CewlTZTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:43 2026 by rpki-client