This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json) Hash identifier: DEmHBkDHCZRVBerebjZHZ8ROilezikwgdAUAb2vT1T0= Subject key identifier: C4:E7:5D:DF:45:E6:93:37:96:0E:3B:FF:1F:41:B6:58:93:1E:B4:C0 Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf Certificate serial: 019BF687F57F8800EFDA2952DE617CDE4B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 19:01:03 +0000 Manifest this update: Sun 25 Jan 2026 19:01:03 +0000 Manifest next update: Mon 26 Jan 2026 19:01:03 +0000 Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=) 2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=) 3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: fmADql6g1HgUNtV5qnkZRMyqkAsfUCC+piFDoL4uin4=) 4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=) 5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f5:7f:88:00:ef:da:29:52:de:61:7c:de:4b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf Validity Not Before: Jan 25 19:01:03 2026 GMT Not After : Jan 26 19:01:03 2026 GMT Subject: CN=c4e75ddf45e69337960e3bff1f41b658931eb4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:96:02:74:b6:24:28:d8:64:9a:3a:c6:c4: 62:9c:a5:51:c7:62:96:81:c3:99:3d:b5:0a:a6:12: 4b:fb:41:a0:8c:f5:b1:df:23:7e:08:00:1d:63:73: da:85:f4:b0:82:9f:49:78:19:12:91:f8:e8:43:56: be:5e:b5:6c:82:4b:7f:c3:ce:3a:94:c5:e8:7c:e3: a7:05:5c:8a:68:14:84:64:86:43:d6:91:83:96:c3: 9c:cb:01:67:26:ab:3d:78:2d:d2:44:8b:bf:f8:a8: a1:a5:e9:04:68:60:80:af:f7:c2:90:48:a2:7f:9c: 8e:0a:a2:33:b8:37:41:fb:99:01:6f:c8:a1:73:e4: 1b:be:c1:2c:9e:ad:14:02:ff:dd:8c:32:a0:fd:53: dd:73:58:63:41:c2:68:aa:ba:a4:ca:70:87:02:ea: 43:60:f3:fd:7d:a9:80:c5:97:92:6c:bd:dd:8b:08: 47:d3:37:38:03:90:b2:4e:ba:39:4c:8a:36:bf:ac: 23:b4:8e:95:38:b1:f1:eb:24:4c:5f:93:fd:07:6f: 63:e8:05:82:71:1d:12:f6:18:06:df:d7:38:a6:d6: 7e:e5:96:3b:50:83:c2:fa:ef:12:6c:27:d1:26:41: b4:00:2e:7f:52:17:6d:e6:04:20:50:8f:26:a5:e0: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E7:5D:DF:45:E6:93:37:96:0E:3B:FF:1F:41:B6:58:93:1E:B4:C0 X509v3 Authority Key Identifier: keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:40:b0:c7:79:1b:27:37:97:f8:58:1d:d7:6d:ac:00:ff:f2: 8e:ed:f2:58:19:5c:68:8a:21:65:a3:fe:5b:99:7b:54:62:ad: e1:5d:53:7b:73:47:f3:9e:a8:c8:59:fd:d7:47:67:f9:f7:60: 97:d7:3a:18:c3:6b:61:d6:70:32:98:98:26:cc:79:48:8d:ca: f1:41:d5:02:42:14:93:45:5d:ae:18:78:44:27:c8:5a:6d:5a: 49:7b:e2:8d:9c:78:a7:29:28:8e:a1:60:6c:64:fc:01:5b:28: 89:f6:db:88:57:cd:44:bd:e9:60:38:c4:6a:70:64:aa:06:38: 44:69:b5:bb:62:46:9c:25:92:52:92:9f:51:3e:2c:62:48:90: 95:8f:a5:d9:ae:4c:25:67:c8:1b:0e:40:f0:11:e1:b1:85:ce: a9:07:d4:8d:de:5b:88:fa:a0:e9:90:07:4d:81:d6:af:8b:ab: 0c:5f:78:6d:56:d2:bf:6c:cd:dc:d2:4e:59:f2:fd:c5:bb:b0: 9d:f8:df:3a:e1:8a:c2:95:77:4d:06:e0:4b:a0:bd:0c:4a:82: 49:df:52:c8:a0:e9:37:24:c4:ae:ec:75:2c:1d:66:d2:cc:4d: 97:a3:31:23:46:89:a9:e4:fa:7b:7c:05:b2:ea:51:35:11:d4: a0:d5:e0:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/V/iADv2ilS3mF83ktMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTRlY2NlNmNiYzljNTQ5MjllYWE0YjIyYjMzN2IwZmQ5 YjM2YmYwHhcNMjYwMTI1MTkwMTAzWhcNMjYwMTI2MTkwMTAzWjAzMTEwLwYDVQQD EyhjNGU3NWRkZjQ1ZTY5MzM3OTYwZTNiZmYxZjQxYjY1ODkzMWViNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2myWAnS2JCjYZJo6xsRinKVRx2KW gcOZPbUKphJL+0GgjPWx3yN+CAAdY3PahfSwgp9JeBkSkfjoQ1a+XrVsgkt/w846 lMXofOOnBVyKaBSEZIZD1pGDlsOcywFnJqs9eC3SRIu/+KihpekEaGCAr/fCkEii f5yOCqIzuDdB+5kBb8ihc+QbvsEsnq0UAv/djDKg/VPdc1hjQcJoqrqkynCHAupD YPP9famAxZeSbL3diwhH0zc4A5CyTro5TIo2v6wjtI6VOLHx6yRMX5P9B29j6AWC cR0S9hgG39c4ptZ+5ZY7UIPC+u8SbCfRJkG0AC5/Uhdt5gQgUI8mpeDH/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTnXd9F5pM3lg47/x9BtliTHrTAMB8GA1UdIwQY MBaAFExU7M5svJxUkp6qSyKzN7D9mza/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTct MzA1OWM4OWI3MmVhLzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTctMzA1OWM4OWI3MmVh LzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUCwx3kb JzeX+Fgd122sAP/yju3yWBlcaIohZaP+W5l7VGKt4V1Te3NH856oyFn910dn+fdg l9c6GMNrYdZwMpiYJsx5SI3K8UHVAkIUk0Vdrhh4RCfIWm1aSXvijZx4pykojqFg bGT8AVsoifbbiFfNRL3pYDjEanBkqgY4RGm1u2JGnCWSUpKfUT4sYkiQlY+l2a5M JWfIGw5A8BHhsYXOqQfUjd5biPqg6ZAHTYHWr4urDF94bVbSv2zN3NJOWfL9xbuw nfjfOuGKwpV3TQbgS6C9DEqCSd9SyKDpNyTErux1LB1m0sxNl6MxI0aJqeT6e3wF supRNRHUoNXgmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:46 2026 by rpki-client