This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json) Hash identifier: YbVOWwzgtMOiVTABGYReyQcxsUfKCLOcVCE6h886vEQ= Subject key identifier: 5A:B3:9B:62:6F:61:D8:48:02:EF:19:F9:9A:B8:93:EA:08:00:1A:ED Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Certificate serial: 019BF49970B82EC6B64136FC6F380B59799F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 10:00:55 +0000 Manifest this update: Sun 25 Jan 2026 10:00:55 +0000 Manifest next update: Mon 26 Jan 2026 10:00:55 +0000 Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=) 2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=) 3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: UjMEfy+tbOUHocNQp2nAfYA9m8PXTS+ZrgF4KGuC0XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:70:b8:2e:c6:b6:41:36:fc:6f:38:0b:59:79:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Validity Not Before: Jan 25 10:00:55 2026 GMT Not After : Jan 26 10:00:55 2026 GMT Subject: CN=5ab39b626f61d84802ef19f99ab893ea08001aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:1e:3f:c4:61:7d:9b:4c:4f:cc:72:fe:79: ae:3d:06:a8:9c:8c:11:e4:79:9c:6d:3d:58:82:12: ed:07:5e:8e:fa:ea:9b:4c:39:77:23:e2:d6:92:22: 9a:65:13:31:e1:49:61:97:0c:6f:ee:54:ea:73:a9: bd:49:4f:f0:19:42:6b:1d:66:c8:12:48:8f:91:61: f9:d5:67:db:95:6f:92:8d:cb:98:1c:7c:80:ac:85: 48:e9:7f:3f:62:c4:fa:34:b3:c1:dd:08:c9:56:e5: 74:5e:66:36:91:85:31:a4:10:32:df:1d:ec:c1:07: 3c:1c:f0:c5:de:52:50:f8:2d:20:88:cf:9a:07:7e: 3b:d4:00:f8:9a:3d:df:8d:55:44:7f:ef:c0:6f:b7: 29:cc:0a:17:a5:c9:4f:9b:2e:ec:25:a6:49:18:4a: c9:57:fb:02:07:d5:fd:d3:d3:da:75:83:18:af:c5: 93:0c:5c:a7:c1:9d:72:7a:85:e4:1c:bf:d6:f2:90: ce:4e:ff:5c:4b:bd:e8:56:29:83:fa:84:af:1f:a7: bb:84:46:4e:05:ca:04:86:f5:16:2c:d6:02:4a:f6: 56:3e:44:a0:4a:e5:eb:44:30:c5:fe:0a:39:6b:1f: 8c:42:fc:39:09:ed:9c:24:c5:f7:20:ba:b7:80:fc: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:9B:62:6F:61:D8:48:02:EF:19:F9:9A:B8:93:EA:08:00:1A:ED X509v3 Authority Key Identifier: keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d8:17:4f:31:94:c9:d4:29:51:b2:0c:48:a5:d3:72:41:d7: 29:7d:39:d2:02:80:61:a0:e4:d9:3c:c3:80:26:3a:e6:07:fc: 36:1f:2d:a9:f9:49:4b:57:1d:5d:9d:9f:58:1c:3e:ac:70:eb: bc:b7:8f:c8:fb:cf:b0:11:d6:53:bb:a2:5d:7a:21:a4:bb:63: 71:62:9a:0a:86:43:4e:bb:63:7f:7c:03:b8:84:d0:04:ae:24: ae:b3:68:15:11:90:c3:b7:5f:fc:7a:8a:61:bd:37:4e:fa:86: fa:c6:3d:e5:ea:92:e6:07:3e:d0:ea:dc:57:0e:f5:91:9f:71: 10:eb:8f:db:c8:c9:06:fc:eb:8b:02:0f:0d:fa:73:42:1f:d3: 28:1d:8c:27:2f:c3:16:91:a9:97:5a:7c:8f:fb:0a:e8:fd:c3: b0:6e:de:6e:a2:45:7a:a3:a1:1e:51:49:4a:c4:51:8a:69:16: 86:27:a0:74:46:4f:23:9f:72:51:b4:6f:c5:3f:d1:21:08:fe: 35:e3:d8:b3:70:72:9f:e2:34:3f:06:6e:74:d3:b0:6e:30:cb: 22:ab:51:e1:10:87:e3:aa:29:98:6e:34:cc:73:8e:17:7e:d8: 81:4d:e3:c2:15:1b:f8:09:d6:5b:99:11:9d:50:86:c6:4e:9e: 34:8c:3b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mXC4Lsa2QTb8bzgLWXmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5 NjVkOWYwHhcNMjYwMTI1MTAwMDU1WhcNMjYwMTI2MTAwMDU1WjAzMTEwLwYDVQQD Eyg1YWIzOWI2MjZmNjFkODQ4MDJlZjE5Zjk5YWI4OTNlYTA4MDAxYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGkeP8RhfZtMT8xy/nmuPQaonIwR 5HmcbT1YghLtB16O+uqbTDl3I+LWkiKaZRMx4Ulhlwxv7lTqc6m9SU/wGUJrHWbI EkiPkWH51WfblW+SjcuYHHyArIVI6X8/YsT6NLPB3QjJVuV0XmY2kYUxpBAy3x3s wQc8HPDF3lJQ+C0giM+aB3471AD4mj3fjVVEf+/Ab7cpzAoXpclPmy7sJaZJGErJ V/sCB9X909PadYMYr8WTDFynwZ1yeoXkHL/W8pDOTv9cS73oVimD+oSvH6e7hEZO BcoEhvUWLNYCSvZWPkSgSuXrRDDF/go5ax+MQvw5Ce2cJMX3ILq3gPwBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqzm2JvYdhIAu8Z+Zq4k+oIABrtMB8GA1UdIwQY MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt YTUyZGM5YzIyMDdjLzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdgXTzGU ydQpUbIMSKXTckHXKX050gKAYaDk2TzDgCY65gf8Nh8tqflJS1cdXZ2fWBw+rHDr vLePyPvPsBHWU7uiXXohpLtjcWKaCoZDTrtjf3wDuITQBK4krrNoFRGQw7df/HqK Yb03TvqG+sY95eqS5gc+0OrcVw71kZ9xEOuP28jJBvzriwIPDfpzQh/TKB2MJy/D FpGpl1p8j/sK6P3DsG7ebqJFeqOhHlFJSsRRimkWhiegdEZPI59yUbRvxT/RIQj+ NePYs3Byn+I0PwZudNOwbjDLIqtR4RCH46opmG40zHOOF37YgU3jwhUb+AnWW5kR nVCGxk6eNIw7Xg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:52:48 2026 by rpki-client