This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json) Hash identifier: RkOgZ5u1kN4K1gS8gWmzoa6VMgAu0f8rjBybPjVK7N0= Subject key identifier: 7B:9A:FD:93:19:B6:5C:29:F5:98:4D:70:7D:ED:FD:A0:56:A0:85:5A Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Certificate serial: 019BF91C159222F7CE2B77BD1C69C40B63B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft Manifest number: 173E Signing time: Mon 26 Jan 2026 07:02:05 +0000 Manifest this update: Mon 26 Jan 2026 07:02:05 +0000 Manifest next update: Tue 27 Jan 2026 07:02:05 +0000 Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=) 2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: FsT5/H6lTA8qP5ljceeVu5ClrXUljxVwlZtA97WH0d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1c:15:92:22:f7:ce:2b:77:bd:1c:69:c4:0b:63:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Validity Not Before: Jan 26 07:02:05 2026 GMT Not After : Jan 27 07:02:05 2026 GMT Subject: CN=7b9afd9319b65c29f5984d707dedfda056a0855a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:c2:d6:4c:9c:68:1b:66:6d:c9:00:2e:d2: 23:10:e4:27:26:4d:fd:b2:66:c0:05:f2:09:5c:f3: c6:f3:59:08:3f:e2:d9:51:cf:08:d9:f4:af:da:c5: 2a:ed:75:74:cb:34:76:05:a8:fe:03:22:62:0b:5c: 95:47:f5:2f:99:57:63:f8:8f:6e:3f:ef:b8:48:21: b5:51:19:30:1d:50:e4:e1:a2:b5:92:e2:d4:67:84: 98:97:c1:00:d8:18:5c:ca:98:85:84:52:72:eb:c2: 06:67:6e:44:d6:6e:f0:e0:9f:02:e9:09:b8:75:76: cf:69:7e:57:f1:29:7f:18:2b:d5:41:04:e2:9c:7b: 51:14:7a:8b:aa:b4:ee:16:7f:16:f8:35:56:71:e1: f3:d6:52:4b:be:f8:bc:fb:0e:18:46:6f:24:78:b5: dc:13:04:ae:91:95:3c:39:2e:88:92:3c:ef:15:26: 59:d1:a4:8a:2b:c0:0d:cf:37:3b:b8:80:4f:fa:0e: a0:9c:98:de:45:ce:93:91:c6:45:f4:23:f9:92:a0: 24:7f:44:d1:2b:63:89:d4:4e:b0:28:f7:c1:e4:c6: 9d:15:4e:b7:43:67:8c:09:5d:a3:1a:6b:47:93:87: 7d:dc:d7:99:21:00:bd:e5:18:06:e3:d7:5e:48:b3: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:FD:93:19:B6:5C:29:F5:98:4D:70:7D:ED:FD:A0:56:A0:85:5A X509v3 Authority Key Identifier: keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:af:e7:55:fe:ad:7a:5c:7f:bd:6d:09:07:24:29:9f:84:ff: 1b:c5:8c:98:34:94:3a:4c:ab:8b:80:19:f9:de:e7:71:f3:7d: 33:5d:6b:d3:25:e8:e9:b2:21:dc:69:03:3c:5e:63:5f:4c:3e: f8:a5:f8:25:f8:44:6f:9a:a6:a7:1d:f0:8d:d4:b1:c9:71:d9: 25:ce:10:72:00:79:98:5f:04:b1:57:83:7e:4b:42:10:67:8b: a3:a0:01:5f:9b:7b:a3:5c:6b:7e:50:66:9e:d5:83:da:d5:9c: b7:fe:18:5b:7d:40:eb:10:bd:75:dd:80:e0:9e:68:75:0b:4f: ee:9c:12:49:9d:27:26:0b:4f:ed:46:1d:78:96:ce:2a:d8:bf: 74:8c:a0:4e:7b:04:91:0d:b9:77:3e:b3:f4:ad:51:df:a2:4b: bb:93:a4:49:66:33:f8:3f:7b:a2:5d:56:3c:18:e0:65:ac:b2: 4d:c3:c3:42:f9:16:bb:a3:4e:74:cd:73:fb:80:3f:86:84:e1: 1c:ad:e4:f5:a4:8c:e5:1f:d9:ac:34:a4:a4:84:aa:aa:d5:6d: 12:be:54:a2:d3:5d:05:53:c9:f8:bc:f1:7d:21:93:29:23:57: bd:47:d9:26:0b:97:db:05:6e:ed:d8:cf:d4:f3:fa:9a:65:59: 88:f7:3f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5HBWSIvfOK3e9HGnEC2OzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj ZDUxMTIwHhcNMjYwMTI2MDcwMjA1WhcNMjYwMTI3MDcwMjA1WjAzMTEwLwYDVQQD Eyg3YjlhZmQ5MzE5YjY1YzI5ZjU5ODRkNzA3ZGVkZmRhMDU2YTA4NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzC1kycaBtmbckALtIjEOQnJk39 smbABfIJXPPG81kIP+LZUc8I2fSv2sUq7XV0yzR2Baj+AyJiC1yVR/UvmVdj+I9u P++4SCG1URkwHVDk4aK1kuLUZ4SYl8EA2BhcypiFhFJy68IGZ25E1m7w4J8C6Qm4 dXbPaX5X8Sl/GCvVQQTinHtRFHqLqrTuFn8W+DVWceHz1lJLvvi8+w4YRm8keLXc EwSukZU8OS6IkjzvFSZZ0aSKK8ANzzc7uIBP+g6gnJjeRc6TkcZF9CP5kqAkf0TR K2OJ1E6wKPfB5MadFU63Q2eMCV2jGmtHk4d93NeZIQC95RgG49deSLP1JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHua/ZMZtlwp9ZhNcH3t/aBWoIVaMB8GA1UdIwQY MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq/nVf6t elx/vW0JByQpn4T/G8WMmDSUOkyri4AZ+d7ncfN9M11r0yXo6bIh3GkDPF5jX0w+ +KX4JfhEb5qmpx3wjdSxyXHZJc4QcgB5mF8EsVeDfktCEGeLo6ABX5t7o1xrflBm ntWD2tWct/4YW31A6xC9dd2A4J5odQtP7pwSSZ0nJgtP7UYdeJbOKti/dIygTnsE kQ25dz6z9K1R36JLu5OkSWYz+D97ol1WPBjgZayyTcPDQvkWu6NOdM1z+4A/hoTh HK3k9aSM5R/ZrDSkpISqqtVtEr5UotNdBVPJ+LzxfSGTKSNXvUfZJguX2wVu7djP 1PP6mmVZiPc/Qg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:01 2026 by rpki-client