This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json) Hash identifier: KBlyeY0P4LFDESh+TmlZrh/kFTEUkBMU/4P95kQQRQY= Subject key identifier: 39:C5:90:C6:3F:FC:46:AE:84:BC:8F:44:A8:34:5B:A9:5A:EC:B4:BD Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Certificate serial: 019BF350A8C814A66C50F040D206149B5A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 04:01:48 +0000 Manifest this update: Sun 25 Jan 2026 04:01:48 +0000 Manifest next update: Mon 26 Jan 2026 04:01:48 +0000 Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=) 2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=) 3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: 1QCvXmXjBA/RMtE+K77uMKaCE0wdkKC8Bmj7ndPhhGM=) 4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:a8:c8:14:a6:6c:50:f0:40:d2:06:14:9b:5a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Validity Not Before: Jan 25 04:01:48 2026 GMT Not After : Jan 26 04:01:48 2026 GMT Subject: CN=39c590c63ffc46ae84bc8f44a8345ba95aecb4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:03:f2:99:3f:e0:9d:df:8a:70:5b:a5:0e: 87:9f:bf:13:16:b6:67:65:e2:ae:1a:c0:ef:f7:3c: 28:d3:b1:42:ff:2d:ed:b6:07:25:a2:bf:d1:a9:06: 7b:eb:07:40:01:22:77:75:c4:35:ac:fa:f3:c4:7d: 4f:75:7f:72:6a:f7:97:d6:a6:89:49:ec:e3:ea:4c: 25:92:72:bc:d0:2c:01:9a:39:2d:7e:f5:1c:59:74: 18:dc:6a:93:4b:4f:6f:1a:b7:a8:39:58:9d:38:38: 8f:20:79:15:06:3f:40:03:38:ff:95:b3:4a:d9:ef: 28:0e:7d:45:8c:ce:af:35:a2:52:a5:32:4c:52:f9: c5:20:cb:54:2e:53:a7:57:f4:4b:45:62:8b:38:4e: 43:c8:61:16:e0:8e:aa:9b:4c:9b:d4:4d:54:5b:49: 1d:37:65:f8:7a:2b:98:30:a1:2b:4b:3f:5b:14:1a: 35:97:f0:e4:9f:14:6e:20:27:2d:c7:75:74:7f:c3: d0:8b:e6:c2:73:fb:2a:f6:67:bd:64:c3:96:84:ab: 60:be:cd:31:a1:26:94:cd:be:ce:b2:5a:b2:7b:ec: 95:4e:d9:cd:79:76:37:87:2a:6c:99:07:5c:94:ef: cc:2d:3a:8f:fa:31:b3:af:61:76:66:92:1f:46:51: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C5:90:C6:3F:FC:46:AE:84:BC:8F:44:A8:34:5B:A9:5A:EC:B4:BD X509v3 Authority Key Identifier: keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:84:30:c3:be:c4:95:ac:96:b3:75:97:56:38:68:08:ef:ff: 3b:15:ce:ed:37:eb:b7:ca:7d:34:89:43:32:20:82:6a:84:cd: 9e:36:25:3f:6f:b3:17:c4:98:8f:8e:40:14:b4:d7:ae:e0:19: 71:91:7e:c4:d0:08:64:95:b5:d3:ef:c1:b8:d1:fa:36:99:e6: e2:b1:73:d1:a3:d5:12:55:1a:40:48:eb:06:09:4d:a5:aa:a3: 4b:20:0b:bc:cb:56:19:f8:a2:5f:af:da:08:0e:68:32:6d:a0: 9a:15:68:f3:85:e7:42:34:b4:69:0c:19:5a:2f:e8:f1:4b:38: 15:49:fc:b8:44:45:f8:94:f8:ca:13:d9:f1:fd:55:e6:c8:5a: 44:0f:2c:f2:14:63:0d:94:fa:fc:50:62:c6:be:c0:6c:27:48: 4b:2c:b5:51:26:69:d3:3f:21:8c:3d:8f:a2:f2:7f:c8:2b:40: a7:ab:59:ce:f0:cb:9b:de:54:ba:95:cc:e1:5f:f3:2a:af:58: 6f:78:1e:4e:01:b2:a4:67:af:4e:25:7e:ce:7e:ad:c8:2c:a4: e2:59:67:a8:09:1a:05:15:96:89:00:ad:e0:74:c3:ca:f1:ed: b3:ab:fe:35:03:1b:30:6c:94:98:8b:de:96:21:e1:03:84:9e: b8:41:64:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUKjIFKZsUPBA0gYUm1qdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw MzllZDgwHhcNMjYwMTI1MDQwMTQ4WhcNMjYwMTI2MDQwMTQ4WjAzMTEwLwYDVQQD EygzOWM1OTBjNjNmZmM0NmFlODRiYzhmNDRhODM0NWJhOTVhZWNiNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmQD8pk/4J3finBbpQ6Hn78TFrZn ZeKuGsDv9zwo07FC/y3ttgclor/RqQZ76wdAASJ3dcQ1rPrzxH1PdX9yaveX1qaJ Sezj6kwlknK80CwBmjktfvUcWXQY3GqTS09vGreoOVidODiPIHkVBj9AAzj/lbNK 2e8oDn1FjM6vNaJSpTJMUvnFIMtULlOnV/RLRWKLOE5DyGEW4I6qm0yb1E1UW0kd N2X4eiuYMKErSz9bFBo1l/DknxRuICctx3V0f8PQi+bCc/sq9me9ZMOWhKtgvs0x oSaUzb7Oslqye+yVTtnNeXY3hypsmQdclO/MLTqP+jGzr2F2ZpIfRlFUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnFkMY//EauhLyPRKg0W6la7LS9MB8GA1UdIwQY MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4Qww77E layWs3WXVjhoCO//OxXO7Tfrt8p9NIlDMiCCaoTNnjYlP2+zF8SYj45AFLTXruAZ cZF+xNAIZJW10+/BuNH6Npnm4rFz0aPVElUaQEjrBglNpaqjSyALvMtWGfiiX6/a CA5oMm2gmhVo84XnQjS0aQwZWi/o8Us4FUn8uERF+JT4yhPZ8f1V5shaRA8s8hRj DZT6/FBixr7AbCdISyy1USZp0z8hjD2PovJ/yCtAp6tZzvDLm95UupXM4V/zKq9Y b3geTgGypGevTiV+zn6tyCyk4llnqAkaBRWWiQCt4HTDyvHts6v+NQMbMGyUmIve liHhA4SeuEFkiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:54 2026 by rpki-client