This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json) Hash identifier: P9bQSvrrModdDLelTpMEBZWqJdJE9naSOq4RXFWm+tA= Subject key identifier: 9E:96:BB:D2:05:01:39:4C:A2:56:01:43:29:D2:B4:C7:39:27:D5:AD Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb Certificate serial: 019BF9889523889095BF041F23EBA82717AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 09:00:36 +0000 Manifest this update: Mon 26 Jan 2026 09:00:36 +0000 Manifest next update: Tue 27 Jan 2026 09:00:36 +0000 Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=) 2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: MwW7Rx/xGtn0CtA0F56XnSrO+ux8Ty09VyPPLdv3u8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:95:23:88:90:95:bf:04:1f:23:eb:a8:27:17:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb Validity Not Before: Jan 26 09:00:36 2026 GMT Not After : Jan 27 09:00:36 2026 GMT Subject: CN=9e96bbd20501394ca256014329d2b4c73927d5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:21:db:64:90:21:19:ee:0b:d4:df:66:02:ff: 1e:ff:3c:84:15:c8:bd:5e:8b:c6:8f:b2:87:cd:d8: 2c:cb:a5:14:3e:54:5b:fe:e7:5e:55:48:6a:b0:07: 7d:00:a8:b0:85:2f:b7:6f:e0:b1:7b:3d:4f:e6:d8: 2b:51:0a:44:eb:14:69:fb:51:ca:ac:02:0a:0d:e9: 2a:15:b7:c7:c0:68:43:63:ea:49:3c:04:a3:ab:26: 70:a1:4f:c5:f8:8b:16:0c:96:f6:ae:19:cd:ce:ef: fd:03:36:b8:c7:4c:85:ec:1a:01:68:30:ac:fe:8e: 69:7b:72:76:42:90:03:24:26:fe:a7:55:6a:87:c2: 74:7d:de:39:49:de:b3:7e:50:ff:78:5d:11:be:14: e6:14:4b:94:26:c2:24:53:72:11:48:9a:00:b9:72: ff:32:47:ca:fc:65:51:8c:ac:c0:ec:0c:96:1d:77: 11:f0:86:88:15:db:6e:05:75:f2:15:e5:ab:25:cf: b1:c6:ab:a7:aa:3b:c1:0f:42:87:b5:90:8e:9c:13: 54:9b:d2:b1:bb:43:02:2c:e4:f6:7e:ea:2e:91:b0: b2:24:18:61:23:33:6a:91:3b:10:83:3f:bc:71:02: bc:be:e4:0f:ab:ac:39:79:ed:12:00:52:b6:9b:73: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:96:BB:D2:05:01:39:4C:A2:56:01:43:29:D2:B4:C7:39:27:D5:AD X509v3 Authority Key Identifier: keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4f:9c:b5:f9:2e:1f:aa:f8:6b:7b:41:28:01:c5:19:68:e6: b6:6d:75:3d:e6:1f:c6:5a:20:8a:1b:c8:8e:5a:69:23:af:20: 9d:dc:50:74:bb:e5:08:8f:4e:5b:82:fc:6c:ca:2a:8b:9a:0f: 6b:ba:c6:a6:3a:3c:dd:1c:11:0b:ba:99:3a:47:2e:0b:a8:24: 66:25:bc:3f:92:e9:f2:78:29:4c:08:a7:f1:b0:72:3a:8e:fe: 2f:cc:cc:2d:76:92:1e:3c:85:d3:be:9c:91:94:63:f0:31:63: 26:0c:ae:8a:c2:65:d1:02:b4:4e:aa:b4:ea:80:1e:a4:60:32: 12:9b:db:22:9d:7c:5b:ad:f5:66:2f:14:f3:2a:d6:16:63:ed: 17:20:1a:95:2a:5c:29:25:8f:a5:a1:0f:2b:13:9f:8f:0d:20: bf:0b:0b:b0:7b:9a:00:6f:44:4c:72:06:11:78:85:c2:1e:aa: ba:aa:cb:07:26:85:d0:a9:8f:a9:ae:03:1f:ae:a4:4f:84:76: 8b:4a:c0:da:cf:70:37:78:8b:ab:f6:a7:e3:d1:22:3d:c7:56: 94:8f:77:bd:9e:72:84:20:80:ae:95:ed:85:6f:f5:4b:44:ac: d9:6b:cd:00:4c:00:43:8a:38:87:3e:29:55:13:94:2e:7a:9a: f1:d6:37:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iJUjiJCVvwQfI+uoJxesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh NWEwZmIwHhcNMjYwMTI2MDkwMDM2WhcNMjYwMTI3MDkwMDM2WjAzMTEwLwYDVQQD Eyg5ZTk2YmJkMjA1MDEzOTRjYTI1NjAxNDMyOWQyYjRjNzM5MjdkNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iHbZJAhGe4L1N9mAv8e/zyEFci9 XovGj7KHzdgsy6UUPlRb/udeVUhqsAd9AKiwhS+3b+Cxez1P5tgrUQpE6xRp+1HK rAIKDekqFbfHwGhDY+pJPASjqyZwoU/F+IsWDJb2rhnNzu/9Aza4x0yF7BoBaDCs /o5pe3J2QpADJCb+p1Vqh8J0fd45Sd6zflD/eF0RvhTmFEuUJsIkU3IRSJoAuXL/ MkfK/GVRjKzA7AyWHXcR8IaIFdtuBXXyFeWrJc+xxqunqjvBD0KHtZCOnBNUm9Kx u0MCLOT2fuoukbCyJBhhIzNqkTsQgz+8cQK8vuQPq6w5ee0SAFK2m3N83QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6Wu9IFATlMolYBQynStMc5J9WtMB8GA1UdIwQY MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE+ctfku H6r4a3tBKAHFGWjmtm11PeYfxlogihvIjlppI68gndxQdLvlCI9OW4L8bMoqi5oP a7rGpjo83RwRC7qZOkcuC6gkZiW8P5Lp8ngpTAin8bByOo7+L8zMLXaSHjyF076c kZRj8DFjJgyuisJl0QK0Tqq06oAepGAyEpvbIp18W631Zi8U8yrWFmPtFyAalSpc KSWPpaEPKxOfjw0gvwsLsHuaAG9ETHIGEXiFwh6quqrLByaF0KmPqa4DH66kT4R2 i0rA2s9wN3iLq/an49EiPcdWlI93vZ5yhCCArpXthW/1S0Ss2WvNAEwAQ4o4hz4p VROULnqa8dY3ew== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:07 2026 by rpki-client