This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json) Hash identifier: Hg1j0Icnm+vQxnK8Ln5B++Ilhr9yLf1xLU3b4muMHpU= Subject key identifier: DB:2B:F1:D5:8E:FB:5F:AE:A4:72:CF:0B:08:0A:60:28:AD:B8:74:3C Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Certificate serial: 019BF6BEA5142C6AC3608C811690109E576E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft Manifest number: 0ECF Signing time: Sun 25 Jan 2026 20:00:47 +0000 Manifest this update: Sun 25 Jan 2026 20:00:47 +0000 Manifest next update: Mon 26 Jan 2026 20:00:47 +0000 Files and hashes: 1: Mw_jlWOX47w8ZEpuvWB3HZ4VYvQ.roa (hash: sfhBIh2mCq2mgYz96ptYyTEOfSgYQ6EGFDmjhxXGLyI=) 2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: do1thPXoJpkmYYk7B/VIGJmBWyveK89HDK0Rrnpoa2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:a5:14:2c:6a:c3:60:8c:81:16:90:10:9e:57:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Validity Not Before: Jan 25 20:00:47 2026 GMT Not After : Jan 26 20:00:47 2026 GMT Subject: CN=db2bf1d58efb5faea472cf0b080a6028adb8743c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:1e:66:00:bb:5e:a4:e2:c1:c9:b3:51:ae: 0e:46:f8:7c:10:8c:7f:5d:4e:a9:f6:67:7d:a7:3d: 24:93:d6:cf:44:bf:01:5a:f4:9d:e0:f7:d9:92:96: ce:b1:62:ca:24:4d:22:d7:a2:e3:21:e6:5b:07:59: e4:22:34:80:e2:15:4f:0d:30:20:41:0a:54:d9:58: a1:b8:17:ba:34:2c:59:c4:71:66:a2:62:f5:1e:f2: cc:10:0c:8c:6d:2a:ca:4b:f4:44:86:e7:fd:ab:6f: c9:14:89:c5:3c:fb:02:1a:47:45:1c:f2:5a:29:81: ff:92:4f:2c:0a:f3:e5:9f:76:19:dc:cc:82:12:fc: d8:99:4e:6f:34:ff:71:5a:91:1e:85:de:d1:d1:64: 69:d6:d4:cb:e2:f9:af:d1:1c:e7:c5:d5:3e:52:56: 25:31:93:2e:c6:b0:92:81:ff:a2:c1:78:fa:a4:25: d6:a1:e6:64:20:6c:0d:a3:85:c1:c0:9a:e9:9e:7d: ec:be:e6:04:dd:02:0a:7a:53:4e:4d:6f:fd:91:76: 10:d1:77:e3:ec:4e:e2:42:82:8a:01:fa:a9:51:a1: 12:20:c3:ea:79:5f:4a:c5:32:a4:79:70:75:95:0a: 3c:1d:03:7c:e1:9f:4c:b9:30:d6:78:2b:5b:ff:c4: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2B:F1:D5:8E:FB:5F:AE:A4:72:CF:0B:08:0A:60:28:AD:B8:74:3C X509v3 Authority Key Identifier: keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e4:e7:c2:67:58:0e:2c:ae:8a:23:05:ff:60:05:0b:74:6b: 41:9c:6f:80:20:26:6e:a9:ee:7d:f4:b2:ac:80:4a:8a:36:66: dc:86:65:82:6a:90:60:36:e2:ac:26:ba:a5:4f:a4:03:9e:c9: b1:13:4d:7b:59:66:11:b0:c9:9f:4b:43:8b:51:ce:69:42:6a: 91:c0:6d:91:fa:31:6b:f6:56:56:2a:52:f7:76:4a:8a:62:5f: 4f:a6:9b:8a:55:3d:51:85:ea:e2:18:2e:2f:d7:b9:17:fd:62: 48:75:21:5e:71:45:82:d3:37:5c:7a:12:c9:11:e1:be:3f:79: 9e:24:93:7f:28:1d:19:e9:db:d9:bd:1a:f9:3d:4c:12:2b:95: b9:89:9d:1b:79:16:50:75:0c:e5:86:02:25:ff:44:8e:da:a1: 98:44:de:e6:a2:d9:17:e1:84:40:8c:2b:6b:fc:34:24:a0:bd: 5d:2d:cd:71:0e:16:bb:ed:ed:c9:63:ae:fc:e2:7d:1f:2c:19: 90:83:90:7b:5d:58:f6:fb:2d:85:be:30:26:4b:67:b6:0d:0e: 70:44:f1:c5:01:2c:e2:94:54:4e:dc:96:d5:d9:a4:35:78:f6: 23:57:c1:61:1d:34:de:a7:75:e2:6b:5a:e9:0a:23:45:ad:44: 11:7b:b5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqUULGrDYIyBFpAQnlduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4 MDhmYjUwHhcNMjYwMTI1MjAwMDQ3WhcNMjYwMTI2MjAwMDQ3WjAzMTEwLwYDVQQD EyhkYjJiZjFkNThlZmI1ZmFlYTQ3MmNmMGIwODBhNjAyOGFkYjg3NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj4eZgC7XqTiwcmzUa4ORvh8EIx/ XU6p9md9pz0kk9bPRL8BWvSd4PfZkpbOsWLKJE0i16LjIeZbB1nkIjSA4hVPDTAg QQpU2VihuBe6NCxZxHFmomL1HvLMEAyMbSrKS/REhuf9q2/JFInFPPsCGkdFHPJa KYH/kk8sCvPln3YZ3MyCEvzYmU5vNP9xWpEehd7R0WRp1tTL4vmv0RznxdU+UlYl MZMuxrCSgf+iwXj6pCXWoeZkIGwNo4XBwJrpnn3svuYE3QIKelNOTW/9kXYQ0Xfj 7E7iQoKKAfqpUaESIMPqeV9KxTKkeXB1lQo8HQN84Z9MuTDWeCtb/8S/kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsr8dWO+1+upHLPCwgKYCituHQ8MB8GA1UdIwQY MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOTnwmdY DiyuiiMF/2AFC3RrQZxvgCAmbqnuffSyrIBKijZm3IZlgmqQYDbirCa6pU+kA57J sRNNe1lmEbDJn0tDi1HOaUJqkcBtkfoxa/ZWVipS93ZKimJfT6abilU9UYXq4hgu L9e5F/1iSHUhXnFFgtM3XHoSyRHhvj95niSTfygdGenb2b0a+T1MEiuVuYmdG3kW UHUM5YYCJf9EjtqhmETe5qLZF+GEQIwra/w0JKC9XS3NcQ4Wu+3tyWOu/OJ9HywZ kIOQe11Y9vsthb4wJktntg0OcETxxQEs4pRUTtyW1dmkNXj2I1fBYR003qd14mta 6QojRa1EEXu1zg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:18 2026 by rpki-client