This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json) Hash identifier: PoqgTHc58Q1OB6+ypVkNNBFJeG4HDzIDa51C+sP8Ua0= Subject key identifier: F7:42:C7:EF:1E:23:19:CB:00:B3:BF:FD:3C:AB:D5:AD:26:A4:61:AD Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Certificate serial: 019BF6BE7C7EDB4E033D6516D9CCC58DDA1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 20:00:37 +0000 Manifest this update: Sun 25 Jan 2026 20:00:37 +0000 Manifest next update: Mon 26 Jan 2026 20:00:37 +0000 Files and hashes: 1: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: yg7SwuI4AKdD9yMVkZbMloEqtPzfDDsiUFTqYq0i1SQ=) 2: wFdwl3GPZJGJpXxabTkhX-gww84.roa (hash: 1a0mdIaHaosCkhFYntZmxOwmIiA+NPlXeJT6rqJ3578=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:7c:7e:db:4e:03:3d:65:16:d9:cc:c5:8d:da:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Validity Not Before: Jan 25 20:00:37 2026 GMT Not After : Jan 26 20:00:37 2026 GMT Subject: CN=f742c7ef1e2319cb00b3bffd3cabd5ad26a461ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3f:b8:c3:d2:3f:f8:80:da:25:a2:28:bb:26: 5f:34:f6:ab:56:db:d9:4b:18:3b:59:dd:fa:f7:34: 58:62:e6:7e:bc:90:d0:dc:ab:bc:93:12:c4:17:1f: 6c:1f:5d:f8:89:cd:3f:9f:fa:8a:4e:60:be:cd:1b: 91:a9:d0:48:bf:b4:e5:95:d4:bd:d3:c2:d4:e4:b2: b9:a5:0f:96:0d:72:18:35:ca:f7:23:b4:bf:8d:98: 0c:a0:44:a1:13:8a:da:d4:01:54:b7:13:e0:5a:1f: 9c:20:a3:a4:52:80:b9:6e:ef:c7:c3:1a:37:d8:ed: fd:02:0e:a1:5f:11:e5:de:4a:18:77:59:58:73:c5: 15:c5:74:29:e3:b4:d3:d9:23:90:2d:fc:29:83:98: e8:b8:23:dc:78:1b:39:94:9c:ab:85:e4:f3:a9:fa: ee:d9:1a:a3:21:70:af:4d:43:f9:d2:2b:4a:e2:23: a7:b8:f9:3e:75:1a:b6:81:86:4a:fb:58:c6:b5:da: 9f:80:97:76:56:31:85:eb:22:61:60:ef:17:b7:f6: a2:c9:8a:ba:f1:f6:0b:f7:7f:c8:d1:05:89:8b:e2: a4:77:8b:09:f2:68:2f:18:4e:b7:8f:8d:df:2f:ba: ab:49:08:85:42:75:ba:ba:4e:5d:5a:d0:b7:37:4f: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:42:C7:EF:1E:23:19:CB:00:B3:BF:FD:3C:AB:D5:AD:26:A4:61:AD X509v3 Authority Key Identifier: keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:06:c0:22:03:fd:34:7a:d8:ca:d8:de:1d:2e:65:1b:e9:de: d4:bf:6b:2e:06:6d:50:58:e5:f4:b1:3a:a3:7c:35:3d:5a:db: 7a:dc:f3:a0:1c:c9:9d:2d:e8:0f:ec:e7:e9:3b:32:04:88:41: 51:70:a1:1f:47:bd:ba:c6:f0:2c:94:0b:2f:91:08:27:2e:5c: 92:13:7d:e9:eb:a5:d7:63:ee:91:e6:b2:72:4f:3d:6d:0b:6e: 2a:ba:a1:ee:21:97:4d:b8:2b:88:e1:f8:66:c4:b2:60:45:61: d3:ec:47:3b:63:06:be:55:6d:19:70:34:24:36:8e:25:d4:55: e4:82:57:3b:0d:b3:42:00:d3:c8:31:0f:83:c9:33:23:97:6f: eb:c9:b0:af:bd:a2:28:ce:62:f0:21:5b:dc:dc:1b:b3:9e:5c: e9:20:fd:89:48:a0:b9:c8:53:c3:34:c5:26:67:5f:3a:e5:9a: b2:97:0c:bd:d5:36:f0:f0:a8:fb:c4:b7:89:27:f8:01:9c:5d: 02:a4:8a:e4:d2:a9:0d:a4:cd:0f:c7:d7:ef:bf:84:05:0f:88: 83:fb:36:68:2e:54:a0:6b:50:21:d1:50:1e:77:da:1b:d8:a7: 3a:7d:fc:8c:9f:39:af:bd:1a:5a:13:71:a9:9f:7e:ea:2f:1b: 9a:61:53:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vnx+204DPWUW2czFjdocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTcxZWMwNTU5NmRjNDk5NDEwNjcwZmYyMTkzZjMwOTRm YWE2YTcwHhcNMjYwMTI1MjAwMDM3WhcNMjYwMTI2MjAwMDM3WjAzMTEwLwYDVQQD EyhmNzQyYzdlZjFlMjMxOWNiMDBiM2JmZmQzY2FiZDVhZDI2YTQ2MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD+4w9I/+IDaJaIouyZfNParVtvZ Sxg7Wd369zRYYuZ+vJDQ3Ku8kxLEFx9sH134ic0/n/qKTmC+zRuRqdBIv7TlldS9 08LU5LK5pQ+WDXIYNcr3I7S/jZgMoEShE4ra1AFUtxPgWh+cIKOkUoC5bu/Hwxo3 2O39Ag6hXxHl3koYd1lYc8UVxXQp47TT2SOQLfwpg5jouCPceBs5lJyrheTzqfru 2RqjIXCvTUP50itK4iOnuPk+dRq2gYZK+1jGtdqfgJd2VjGF6yJhYO8Xt/aiyYq6 8fYL93/I0QWJi+Kkd4sJ8mgvGE63j43fL7qrSQiFQnW6uk5dWtC3N089SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdCx+8eIxnLALO//Tyr1a0mpGGtMB8GA1UdIwQY MBaAFLbnHsBVltxJlBBnD/IZPzCU+qanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEt ZDViY2YyOGY3NDhiLzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEtZDViY2YyOGY3NDhi LzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQbAIgP9 NHrYytjeHS5lG+ne1L9rLgZtUFjl9LE6o3w1PVrbetzzoBzJnS3oD+zn6TsyBIhB UXChH0e9usbwLJQLL5EIJy5ckhN96eul12Pukeayck89bQtuKrqh7iGXTbgriOH4 ZsSyYEVh0+xHO2MGvlVtGXA0JDaOJdRV5IJXOw2zQgDTyDEPg8kzI5dv68mwr72i KM5i8CFb3Nwbs55c6SD9iUiguchTwzTFJmdfOuWaspcMvdU28PCo+8S3iSf4AZxd AqSK5NKpDaTND8fX77+EBQ+Ig/s2aC5UoGtQIdFQHnfaG9inOn38jJ85r70aWhNx qZ9+6i8bmmFTMw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:14 2026 by rpki-client