This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json) Hash identifier: rxNxUXjyumnBhS56ieWmDQl0AHoOv4ImJBgKWX6snNM= Subject key identifier: C2:5C:5C:4B:B0:CD:37:B4:67:8C:4D:3A:64:D9:01:8E:03:6A:96:7B Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Certificate serial: 019BF83EEA176AD1AD2C8D08B908B002F477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 03:00:31 +0000 Manifest this update: Mon 26 Jan 2026 03:00:31 +0000 Manifest next update: Tue 27 Jan 2026 03:00:31 +0000 Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=) 2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: GYpDphwWkqgWFEm5ycnfIzW+h+bV9N7UDlwTowWmO/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:ea:17:6a:d1:ad:2c:8d:08:b9:08:b0:02:f4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Validity Not Before: Jan 26 03:00:31 2026 GMT Not After : Jan 27 03:00:31 2026 GMT Subject: CN=c25c5c4bb0cd37b4678c4d3a64d9018e036a967b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:2e:21:66:e4:2d:01:17:12:f7:d7:74:ad: e9:36:7f:97:56:ab:cd:ae:7a:bf:5e:48:12:c4:1f: eb:b3:21:8e:a1:b5:44:e5:d9:0b:b8:f5:8a:54:6b: 61:3d:8b:7f:11:73:67:d0:a9:c8:f0:81:bd:b7:ce: 7d:1e:19:93:ba:0f:3c:19:7f:24:cf:a4:f6:bd:89: 3d:b4:44:3a:d0:19:cb:6f:2a:8c:6e:ef:b1:75:1f: f1:99:2a:0c:57:8a:80:6d:ad:4b:ab:1b:03:50:0d: 20:ca:be:59:15:95:51:79:74:59:21:78:40:76:c2: 3f:53:5e:cc:60:df:55:ff:63:0d:8c:f6:07:98:11: 1d:15:8c:5a:ab:fa:0d:3e:1d:42:e8:7d:74:f2:aa: 59:65:e6:40:c1:aa:91:51:41:c2:d2:c2:54:e0:58: 82:30:ee:41:fc:19:37:b0:c3:33:89:07:be:b1:b6: 28:fb:38:ed:29:fc:a8:fc:b5:59:20:3e:11:86:1e: ab:84:b2:63:a4:60:e0:e9:0f:ea:fc:25:c2:a5:5e: c2:82:6a:30:ae:a2:f0:67:47:22:22:38:da:3d:98: 4d:18:08:70:85:13:b0:7f:c6:e9:b7:b2:98:b9:86: 88:73:0d:41:c8:49:cf:fc:62:0d:7d:c8:88:c3:79: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5C:5C:4B:B0:CD:37:B4:67:8C:4D:3A:64:D9:01:8E:03:6A:96:7B X509v3 Authority Key Identifier: keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e5:bd:1c:e2:89:f2:af:f8:7d:a3:cc:f1:b6:6f:bc:93:39: 3a:6d:ac:21:a9:bf:a1:af:7b:70:5c:e1:4e:b0:09:e1:93:8e: e7:5f:05:20:26:fc:12:ff:d1:1f:3a:dd:09:13:6c:33:f2:83: 64:a3:60:3a:84:d4:5c:39:d4:ad:ec:d8:81:c7:18:54:75:f6: 70:bd:42:1b:3c:f5:24:97:aa:dd:fe:5d:b8:d2:d9:e8:4a:97: 69:c3:8b:be:a1:1e:47:eb:66:5e:c2:97:49:bf:72:31:ef:ac: 40:5c:fd:d7:1e:3a:52:3d:5f:02:f3:2c:23:fc:bc:40:07:24: 51:e4:5d:bf:11:f1:d7:03:92:c7:94:fb:5e:90:62:5d:15:a3: aa:45:12:35:aa:d9:99:85:7d:fc:19:c6:96:b8:57:e8:b8:1a: 11:30:93:3f:52:ce:d8:4a:e2:22:30:f4:fa:aa:f7:5a:d7:0a: 18:7a:e4:9a:3a:cc:f9:45:8a:58:93:ff:a2:c9:d6:83:01:5d: cd:ba:4b:55:1b:bb:a1:ff:89:cd:ec:d5:cb:7c:63:f3:b0:44: 25:dc:be:bf:2d:d2:3b:c0:50:72:18:08:dc:25:e1:1d:13:af: 95:92:76:bf:48:2c:4b:c6:3e:a6:7a:57:11:6d:4c:e9:75:f2: 90:f7:e3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PuoXatGtLI0IuQiwAvR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3 ZmUxODkwHhcNMjYwMTI2MDMwMDMxWhcNMjYwMTI3MDMwMDMxWjAzMTEwLwYDVQQD EyhjMjVjNWM0YmIwY2QzN2I0Njc4YzRkM2E2NGQ5MDE4ZTAzNmE5NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRMuIWbkLQEXEvfXdK3pNn+XVqvN rnq/XkgSxB/rsyGOobVE5dkLuPWKVGthPYt/EXNn0KnI8IG9t859HhmTug88GX8k z6T2vYk9tEQ60BnLbyqMbu+xdR/xmSoMV4qAba1LqxsDUA0gyr5ZFZVReXRZIXhA dsI/U17MYN9V/2MNjPYHmBEdFYxaq/oNPh1C6H108qpZZeZAwaqRUUHC0sJU4FiC MO5B/Bk3sMMziQe+sbYo+zjtKfyo/LVZID4Rhh6rhLJjpGDg6Q/q/CXCpV7Cgmow rqLwZ0ciIjjaPZhNGAhwhROwf8bpt7KYuYaIcw1ByEnP/GINfciIw3lTMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJcXEuwzTe0Z4xNOmTZAY4DapZ7MB8GA1UdIwQY MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeW9HOKJ 8q/4faPM8bZvvJM5Om2sIam/oa97cFzhTrAJ4ZOO518FICb8Ev/RHzrdCRNsM/KD ZKNgOoTUXDnUrezYgccYVHX2cL1CGzz1JJeq3f5duNLZ6EqXacOLvqEeR+tmXsKX Sb9yMe+sQFz91x46Uj1fAvMsI/y8QAckUeRdvxHx1wOSx5T7XpBiXRWjqkUSNarZ mYV9/BnGlrhX6LgaETCTP1LO2EriIjD0+qr3WtcKGHrkmjrM+UWKWJP/osnWgwFd zbpLVRu7of+JzezVy3xj87BEJdy+vy3SO8BQchgI3CXhHROvlZJ2v0gsS8Y+pnpX EW1M6XXykPfjGw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:34 2026 by rpki-client