This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: svmNMuUua/7z1SXLyCgL2hElPG+mVVj5LIiEhff6VTc= Subject key identifier: D7:B6:5B:E6:26:D0:42:09:D2:97:28:A3:BB:AD:D1:82:CF:CB:DA:EF Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019BF386D3F9422657F24BB31E7D9ED0D9A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0FFF Signing time: Sun 25 Jan 2026 05:00:58 +0000 Manifest this update: Sun 25 Jan 2026 05:00:58 +0000 Manifest next update: Mon 26 Jan 2026 05:00:58 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: b+fnvBvKjLEJhDEhon+VDOK6VKiMIynt83axjYr0DWg=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:d3:f9:42:26:57:f2:4b:b3:1e:7d:9e:d0:d9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 25 05:00:58 2026 GMT Not After : Jan 26 05:00:58 2026 GMT Subject: CN=d7b65be626d04209d29728a3bbadd182cfcbdaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:35:e5:c2:b6:ba:8a:cb:cf:a0:ad:73:89: c0:4f:bf:0e:4a:ac:8c:c2:4b:f7:1f:35:8d:c0:35: 50:4d:3e:0f:91:e5:c3:0f:cb:09:29:06:d2:d5:80: 87:6b:51:5d:76:c0:e7:01:2c:4a:a0:68:38:41:3b: c4:0a:a3:a8:41:3c:90:77:aa:78:30:ff:3c:e3:58: 1e:da:ce:c6:f5:70:66:42:33:52:de:ac:31:ce:dc: 04:9a:6b:1d:a1:ee:ce:d4:32:5f:95:08:4a:59:0f: 5a:26:ad:fb:b8:7a:b6:ee:7c:0b:85:b5:37:66:d0: e5:ea:0c:be:69:09:70:f1:a2:84:76:3e:c3:43:2d: dd:9a:c5:54:b1:d9:7d:f7:74:75:db:b2:f8:8f:7b: 17:ab:3f:5f:0b:5e:71:83:f2:b6:50:99:37:fb:9d: 07:85:63:f2:7f:2a:ea:ba:ba:de:d2:9f:35:5d:5b: 8b:2a:43:f1:a9:b6:25:6f:f7:d2:4f:61:65:81:9a: 4e:b4:47:bb:de:ba:36:bc:ec:c9:5e:d7:c7:7e:91: 14:3c:b2:ed:18:f2:ba:56:9d:10:50:4e:8b:1a:1d: 1a:f9:b2:85:df:98:59:6c:80:3f:3b:13:65:1a:73: 38:99:d8:30:81:ee:1b:55:61:43:d3:0f:8d:a2:0c: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:5B:E6:26:D0:42:09:D2:97:28:A3:BB:AD:D1:82:CF:CB:DA:EF X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0b:3b:fe:58:81:fc:e6:4e:d8:f7:47:03:3f:cb:83:d8:8e: 42:50:78:e4:24:8c:c5:03:cc:1b:a7:0c:d6:35:7b:ed:f3:1d: 13:dc:56:6a:62:e6:51:c7:2b:8c:c6:c0:8b:9c:fd:c2:7e:b6: 7c:f2:8a:e5:aa:fc:76:a6:75:f7:0f:b6:e8:f7:e4:55:19:54: f3:0b:06:05:e7:4d:d3:4d:aa:90:f8:f1:f3:4a:e9:fa:5e:c8: c9:0c:b3:5c:7e:53:22:de:13:83:51:d0:12:85:fa:d8:68:93: 7d:b6:2e:1c:9d:8f:f4:bb:50:d9:10:eb:91:d1:c6:f9:f3:c3: fa:cd:5f:6b:73:ce:5b:d6:c7:68:ce:f5:70:94:aa:2d:70:ba: 73:92:80:d5:84:30:e1:26:1c:a1:d4:2e:cb:22:28:67:c9:d9: a3:78:3d:97:8c:21:76:ed:0d:ee:7e:e8:9a:f9:8d:50:26:ce: 1c:d8:0f:1a:fa:8e:14:84:aa:da:14:ff:1d:4a:2e:48:50:84: 8d:38:47:2e:82:db:98:ca:c3:49:fc:ed:a5:52:38:33:bd:e4: ce:5a:59:53:95:2d:f7:e9:eb:78:b7:c5:d5:21:b0:49:d2:ac: 7d:38:19:bc:89:1e:f3:86:f3:29:d9:21:13:e5:72:26:1b:72: 85:a5:0e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhtP5QiZX8kuzHn2e0NmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTI1MDUwMDU4WhcNMjYwMTI2MDUwMDU4WjAzMTEwLwYDVQQD EyhkN2I2NWJlNjI2ZDA0MjA5ZDI5NzI4YTNiYmFkZDE4MmNmY2JkYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWs15cK2uorLz6Ctc4nAT78OSqyM wkv3HzWNwDVQTT4PkeXDD8sJKQbS1YCHa1FddsDnASxKoGg4QTvECqOoQTyQd6p4 MP8841ge2s7G9XBmQjNS3qwxztwEmmsdoe7O1DJflQhKWQ9aJq37uHq27nwLhbU3 ZtDl6gy+aQlw8aKEdj7DQy3dmsVUsdl993R127L4j3sXqz9fC15xg/K2UJk3+50H hWPyfyrqurre0p81XVuLKkPxqbYlb/fST2FlgZpOtEe73ro2vOzJXtfHfpEUPLLt GPK6Vp0QUE6LGh0a+bKF35hZbIA/OxNlGnM4mdgwge4bVWFD0w+NogxO2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe2W+Ym0EIJ0pcoo7ut0YLPy9rvMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADws7/liB /OZO2PdHAz/Lg9iOQlB45CSMxQPMG6cM1jV77fMdE9xWamLmUccrjMbAi5z9wn62 fPKK5ar8dqZ19w+26PfkVRlU8wsGBedN002qkPjx80rp+l7IyQyzXH5TIt4Tg1HQ EoX62GiTfbYuHJ2P9LtQ2RDrkdHG+fPD+s1fa3POW9bHaM71cJSqLXC6c5KA1YQw 4SYcodQuyyIoZ8nZo3g9l4whdu0N7n7omvmNUCbOHNgPGvqOFISq2hT/HUouSFCE jThHLoLbmMrDSfztpVI4M73kzlpZU5Ut9+nreLfF1SGwSdKsfTgZvIke84bzKdkh E+VyJhtyhaUOQQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:52 2026 by rpki-client