This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft File: tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json) Hash identifier: 7ikqtFmkeNr8gbBxVR2dlKRjWrOL+fGceal4LnT75JQ= Subject key identifier: 2A:1B:2D:C0:AC:33:AB:0F:79:E8:9E:6C:EB:B2:41:CF:3B:50:77:58 Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Certificate serial: 019BF19855D99F6FE253A03F15C7548A641B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft Manifest number: 169A Signing time: Sat 24 Jan 2026 20:00:51 +0000 Manifest this update: Sat 24 Jan 2026 20:00:51 +0000 Manifest next update: Sun 25 Jan 2026 20:00:51 +0000 Files and hashes: 1: 8bRTFqqfGJUx5yKlpNBGGLyfeAk.roa (hash: kImY5tJNZeZT0ukreVQs42nY/D7z0/+YDr07Sp3JI24=) 2: CN-8Pu5bXSBT4QPtIGRjyVpzJzI.roa (hash: EZji+EdR2qZINXOAD9p9aVvQwY57zPJN1GhrheBWnsE=) 3: X7XF_Z41s1mEiSn68hr2N23_Z_M.roa (hash: zX/8WHiyiWYZSBhoo5FKkI77/U7PstQ4cdjNJSn1jls=) 4: Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa (hash: BX99khHc0q72Oz6YygWlNq7UO49uBQ/389b6gOKYPCM=) 5: _auQCy3k3EaDuaZ7EPCV9pV4Ih4.roa (hash: 1toHC+hcpBjFnpYLj94qlEAibL9ZGiBJ5ML7CqI3XaY=) 6: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: z58BoZGqPJ2cPz1iPHq4s/fDO9Kr3h8Ivq0OCYAVC1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:98:55:d9:9f:6f:e2:53:a0:3f:15:c7:54:8a:64:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Validity Not Before: Jan 24 20:00:51 2026 GMT Not After : Jan 25 20:00:51 2026 GMT Subject: CN=2a1b2dc0ac33ab0f79e89e6cebb241cf3b507758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:c2:ae:93:3f:a6:c7:06:43:a2:7b:53:14: 16:4e:78:d7:61:68:59:ea:f7:09:f2:f2:76:d7:14: 04:b3:c2:ac:39:f7:89:fe:69:bc:02:15:97:01:9d: 11:ed:49:36:b7:5d:8c:08:07:53:4b:60:02:5a:9f: a2:03:85:f4:b9:a6:31:ab:0e:cb:8f:8b:b9:9e:61: 35:e1:fb:95:c3:1e:f0:eb:69:2f:7c:f8:5c:61:95: 5a:ca:02:24:a2:da:07:85:69:29:c3:b8:48:3c:6a: dd:a9:10:f2:ae:fd:8e:03:e0:e1:41:cd:98:24:ba: 63:a1:59:07:3c:4a:4d:af:1c:02:14:95:88:e3:25: 57:33:60:ca:a1:64:34:37:09:53:e2:04:24:6f:79: bc:57:2e:7e:ff:4b:ec:25:fb:a7:82:fe:6f:f2:c4: e0:16:da:dd:2f:ae:42:e0:c6:e8:e3:c7:1d:d9:1a: 6f:57:32:e4:c2:3f:14:75:34:91:1e:ad:28:39:78: 96:9b:27:17:94:d2:c5:64:39:39:4e:16:5e:0d:3e: 40:db:f8:d6:49:b1:fb:5e:44:ac:81:94:5c:45:cf: 68:d4:88:0e:e4:c9:7a:d4:16:f4:60:78:a1:c8:0f: 2e:f3:c4:ce:c9:8b:ca:5c:b3:d9:d9:68:26:67:2c: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1B:2D:C0:AC:33:AB:0F:79:E8:9E:6C:EB:B2:41:CF:3B:50:77:58 X509v3 Authority Key Identifier: keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f7:6c:16:9e:9a:1d:bd:16:c6:7f:44:ac:a2:ef:19:29:91: b1:d9:0a:a0:ac:5d:4d:f5:17:e3:73:45:14:4a:c9:60:af:32: 09:0d:32:91:2b:cc:ac:87:3b:1e:8a:55:7f:0d:3d:e1:3a:7a: 04:9a:17:b8:91:e2:e1:38:f9:fa:cf:1f:49:4a:ef:29:56:7b: e6:67:95:cf:7c:97:79:68:59:e7:28:26:a8:14:7f:c1:b7:68: b8:74:da:da:04:ad:c1:f0:f6:60:bc:9b:44:f6:35:6a:7f:5a: bc:71:60:29:8b:0a:03:f0:1e:21:d7:97:da:8a:60:c6:7b:41: 7a:13:08:6b:ec:c5:f4:f2:ce:df:4e:fb:a0:68:d8:b9:52:30: ac:9a:53:8a:5c:3e:42:f2:fb:9b:a8:ea:54:15:44:d3:75:26: b5:3b:04:a1:fc:d4:bc:37:9c:37:a2:ed:dc:16:1a:c8:91:9d: 80:64:17:39:2e:6a:4a:80:c9:4e:cb:17:24:bb:5d:35:40:0f: 7c:8d:0a:97:2f:3b:f6:00:ac:d4:c6:91:1f:2a:b8:17:d5:2c: 80:5f:74:f5:54:f4:f8:de:68:42:02:87:91:35:c9:34:82:f3: 02:a8:a0:3c:fe:98:de:81:e3:c9:21:1c:07:ce:df:65:fd:65: 7a:95:f6:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxmFXZn2/iU6A/FcdUimQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh MGUwYTkwHhcNMjYwMTI0MjAwMDUxWhcNMjYwMTI1MjAwMDUxWjAzMTEwLwYDVQQD EygyYTFiMmRjMGFjMzNhYjBmNzllODllNmNlYmIyNDFjZjNiNTA3NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j7CrpM/pscGQ6J7UxQWTnjXYWhZ 6vcJ8vJ21xQEs8KsOfeJ/mm8AhWXAZ0R7Uk2t12MCAdTS2ACWp+iA4X0uaYxqw7L j4u5nmE14fuVwx7w62kvfPhcYZVaygIkotoHhWkpw7hIPGrdqRDyrv2OA+DhQc2Y JLpjoVkHPEpNrxwCFJWI4yVXM2DKoWQ0NwlT4gQkb3m8Vy5+/0vsJfungv5v8sTg FtrdL65C4Mbo48cd2RpvVzLkwj8UdTSRHq0oOXiWmycXlNLFZDk5ThZeDT5A2/jW SbH7XkSsgZRcRc9o1IgO5Ml61Bb0YHihyA8u88TOyYvKXLPZ2WgmZywanwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCobLcCsM6sPeeiebOuyQc87UHdYMB8GA1UdIwQY MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt N2ZiZjVlZTI5MGFjLzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPdsFp6a Hb0Wxn9ErKLvGSmRsdkKoKxdTfUX43NFFErJYK8yCQ0ykSvMrIc7HopVfw094Tp6 BJoXuJHi4Tj5+s8fSUrvKVZ75meVz3yXeWhZ5ygmqBR/wbdouHTa2gStwfD2YLyb RPY1an9avHFgKYsKA/AeIdeX2opgxntBehMIa+zF9PLO3077oGjYuVIwrJpTilw+ QvL7m6jqVBVE03UmtTsEofzUvDecN6Lt3BYayJGdgGQXOS5qSoDJTssXJLtdNUAP fI0Kly879gCs1MaRHyq4F9UsgF909VT0+N5oQgKHkTXJNILzAqigPP6Y3oHjySEc B87fZf1lepX2Pg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:05:12 2026 by rpki-client