This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json) Hash identifier: L69P+yc7FSz6ytfO5I9ynyNzjy2ibZf1BL6LfWC2d2c= Subject key identifier: 78:BA:66:C3:D4:41:97:34:F5:2C:62:72:27:36:1D:38:51:C4:EC:77 Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26 Certificate serial: 019BF3BDCECEDCE064D58F6D303A185AFC2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft Manifest number: 087E Signing time: Sun 25 Jan 2026 06:01:01 +0000 Manifest this update: Sun 25 Jan 2026 06:01:01 +0000 Manifest next update: Mon 26 Jan 2026 06:01:01 +0000 Files and hashes: 1: 4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (hash: GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=) 2: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=) 3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: 9yTNXtDVhtJWWS6Fa7YAcsadNXxpVHOjDpSAkThvjlg=) 4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:ce:ce:dc:e0:64:d5:8f:6d:30:3a:18:5a:fc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26 Validity Not Before: Jan 25 06:01:01 2026 GMT Not After : Jan 26 06:01:01 2026 GMT Subject: CN=78ba66c3d4419734f52c627227361d3851c4ec77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:23:7b:b7:2c:d9:85:a0:75:89:cc:f6:f7: 57:0f:00:9c:b8:6e:19:a2:01:34:a8:ab:71:c2:28: 4e:02:5c:b8:80:6c:d5:4e:b8:1d:e5:20:d9:e5:83: 61:c1:53:57:e4:16:c2:a1:7e:a5:72:04:69:98:20: 73:f3:63:d8:51:c2:cd:50:f9:20:39:ac:13:cd:e6: 26:0a:6d:73:ff:7d:df:80:cf:de:da:c6:6f:19:3a: 02:5f:46:ea:0c:f5:9a:55:b9:ad:7f:41:5c:4e:5f: fe:33:39:50:ee:d3:8e:ff:b2:0b:0d:50:09:e7:fb: b4:70:ca:74:3e:53:a8:3c:81:16:7e:56:c0:19:0b: a1:7e:1c:23:10:2c:ec:12:47:70:55:6a:68:d5:3b: a8:87:12:c0:e0:e4:08:15:b5:12:fa:bf:ab:5e:d0: c0:9f:e9:4f:6d:55:37:3c:02:b9:5b:c3:4c:e0:91: a0:2d:7a:6e:b1:bf:d1:e9:df:6d:db:19:b3:de:e1: 94:63:0d:a9:bb:94:77:01:9b:c7:61:15:1d:20:e3: 89:98:76:7f:f7:15:78:56:b3:b6:d5:72:13:a8:05: 72:14:56:d5:7c:82:17:25:4d:7c:b5:d4:35:31:97: ff:da:57:98:00:91:8d:b0:ca:ef:ed:80:7e:13:ef: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BA:66:C3:D4:41:97:34:F5:2C:62:72:27:36:1D:38:51:C4:EC:77 X509v3 Authority Key Identifier: keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f0:25:69:4d:fd:74:2d:c7:0c:f4:aa:bb:c4:88:ce:05:7c: 2a:a5:68:bf:8c:61:0d:2d:9c:01:8e:9b:61:fd:97:f4:7c:1d: ce:10:37:29:ff:0e:07:ec:84:2e:5a:2a:e2:d2:5c:bc:10:61: 10:1e:b6:bf:9e:3a:cb:17:48:b0:82:d7:4c:10:46:92:53:10: 20:04:ed:4a:52:1d:fc:cc:fb:32:67:9b:ce:67:1f:20:5a:fb: d8:46:26:ab:5e:88:bb:fe:b6:d4:d1:fb:4d:c6:91:4b:69:f5: 2d:b0:e0:93:56:3c:1c:0b:57:29:e6:25:dd:67:02:05:93:87: 12:9e:26:42:51:c0:b6:c5:d9:11:22:bb:82:dd:8b:bc:ff:5b: 2b:13:4d:5e:b4:8b:dc:99:ed:68:37:69:67:53:da:88:99:0d: ce:a5:6b:2e:3f:ee:77:0e:45:66:7f:ba:2b:5a:cf:15:fa:18: 3e:a4:c8:39:a1:ba:ab:a2:9d:05:fe:bb:6d:28:e0:33:95:64: 0e:fd:ef:89:f3:25:6c:19:dc:28:5b:2d:f6:9b:81:cb:1e:90: aa:e9:af:73:2d:5b:d2:88:3a:e1:87:ce:84:67:2a:7b:45:08: c5:de:f9:65:39:e0:0f:98:46:20:c8:1f:27:0b:7f:0c:1b:aa: bb:8b:ef:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvc7O3OBk1Y9tMDoYWvwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0 YTlhMjYwHhcNMjYwMTI1MDYwMTAxWhcNMjYwMTI2MDYwMTAxWjAzMTEwLwYDVQQD Eyg3OGJhNjZjM2Q0NDE5NzM0ZjUyYzYyNzIyNzM2MWQzODUxYzRlYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr40je7cs2YWgdYnM9vdXDwCcuG4Z ogE0qKtxwihOAly4gGzVTrgd5SDZ5YNhwVNX5BbCoX6lcgRpmCBz82PYUcLNUPkg OawTzeYmCm1z/33fgM/e2sZvGToCX0bqDPWaVbmtf0FcTl/+MzlQ7tOO/7ILDVAJ 5/u0cMp0PlOoPIEWflbAGQuhfhwjECzsEkdwVWpo1TuohxLA4OQIFbUS+r+rXtDA n+lPbVU3PAK5W8NM4JGgLXpusb/R6d9t2xmz3uGUYw2pu5R3AZvHYRUdIOOJmHZ/ 9xV4VrO21XITqAVyFFbVfIIXJU18tdQ1MZf/2leYAJGNsMrv7YB+E+/u8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHi6ZsPUQZc09Sxicic2HThRxOx3MB8GA1UdIwQY MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt OTI0MWZmNmVjM2JmLzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPAlaU39 dC3HDPSqu8SIzgV8KqVov4xhDS2cAY6bYf2X9HwdzhA3Kf8OB+yELloq4tJcvBBh EB62v546yxdIsILXTBBGklMQIATtSlId/Mz7MmebzmcfIFr72EYmq16Iu/621NH7 TcaRS2n1LbDgk1Y8HAtXKeYl3WcCBZOHEp4mQlHAtsXZESK7gt2LvP9bKxNNXrSL 3JntaDdpZ1PaiJkNzqVrLj/udw5FZn+6K1rPFfoYPqTIOaG6q6KdBf67bSjgM5Vk Dv3vifMlbBncKFst9puByx6Qqumvcy1b0og64YfOhGcqe0UIxd75ZTngD5hGIMgf Jwt/DBuqu4vvvw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:58:54 2026 by rpki-client