This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json) Hash identifier: +6DB+V4EXOfINVCIZO0UYUbo7tJhgAnngJ+GwfKylgM= Subject key identifier: AE:22:96:C5:B1:D8:51:EA:7B:8F:FC:6F:E7:20:3E:88:CD:43:86:EA Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Certificate serial: 019BF83F91C1F0F40FCCAB3BEADDCA50796C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft Manifest number: 1167 Signing time: Mon 26 Jan 2026 03:01:14 +0000 Manifest this update: Mon 26 Jan 2026 03:01:14 +0000 Manifest next update: Tue 27 Jan 2026 03:01:14 +0000 Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: /99peLXrfokPkD/Q/GkptCh8rtCukXPt/pwnPrQctv4=) 2: dkZVoeRJR-__79SdUjWpgfrqgX0.roa (hash: hRQs/VOKf6Kl6D61x2oomcbiDqJtvslx7y4t6WRaaHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:91:c1:f0:f4:0f:cc:ab:3b:ea:dd:ca:50:79:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Validity Not Before: Jan 26 03:01:14 2026 GMT Not After : Jan 27 03:01:14 2026 GMT Subject: CN=ae2296c5b1d851ea7b8ffc6fe7203e88cd4386ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:af:46:30:25:23:99:48:ab:26:63:ef:e3: 41:66:30:43:83:a6:51:cb:c9:6a:ac:33:d6:70:0e: de:a7:c7:95:82:32:47:ce:4a:94:be:5c:aa:78:80: 0c:da:98:37:58:b6:76:19:b5:29:e7:c2:3d:28:b9: 39:ef:8b:96:1a:5d:18:32:21:86:08:fc:0b:77:58: bd:1b:57:9b:e3:e4:12:b1:19:eb:c3:d5:99:2d:5d: 80:c8:22:c8:31:05:ff:c1:2f:30:da:09:ba:63:d7: 11:50:f9:fe:60:ba:0a:a9:0a:47:e5:31:b0:31:eb: c9:52:fc:67:11:8e:f0:bd:82:bd:56:e2:bb:2f:a8: e2:9a:b8:51:16:0a:83:44:a0:a3:98:4c:2f:10:58: 09:0a:b2:96:5f:fc:ac:f9:de:65:d0:db:22:f0:96: 61:48:d8:87:3e:14:26:30:97:77:89:96:82:f9:5f: ca:1e:83:43:6f:3b:84:98:c0:c3:78:9b:be:0e:97: 06:33:4a:92:7d:ed:17:18:16:3c:fd:08:c3:3b:22: 8d:fb:0b:5d:c9:0b:97:1a:dd:54:9c:04:1c:b3:1b: f5:40:6a:26:e4:4b:3c:8e:b1:31:e8:26:a4:0d:90: 91:c3:76:09:77:aa:58:a0:22:c7:ba:ef:50:1a:f0: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:22:96:C5:B1:D8:51:EA:7B:8F:FC:6F:E7:20:3E:88:CD:43:86:EA X509v3 Authority Key Identifier: keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:bd:19:79:75:bb:1b:ba:30:43:d9:0e:0b:64:ed:ab:28:f9: 93:a4:e7:49:c6:ad:07:4b:87:32:5c:04:6e:80:80:7f:13:5a: f4:42:14:53:20:31:23:2a:13:10:b2:33:79:6c:d2:47:78:01: 51:77:d5:e9:c0:6d:6e:12:d1:f9:11:a6:a1:0a:85:aa:be:34: 6f:1c:a3:74:05:14:8c:e7:24:57:5e:a7:3a:53:cb:7c:bd:5e: f4:58:0e:8a:47:e0:30:b5:3d:a1:13:12:29:a3:82:38:49:a2: 9f:b8:03:d4:03:b5:78:c9:bb:84:4d:eb:9e:ef:8c:e9:24:5f: 59:ae:ab:6d:92:ed:cd:c2:e8:f2:e3:70:20:f3:51:42:fe:5a: 21:cd:81:f2:c9:2f:f0:41:9f:94:70:de:42:69:66:55:e7:fb: b6:83:fe:b8:91:5e:e6:6e:d8:d9:f6:f6:ba:c9:b1:b8:e8:96: e0:da:4f:86:75:0b:54:2d:ce:52:72:8d:c7:78:1a:fb:35:00: 06:22:5f:66:9f:58:da:15:7a:7c:54:d9:e1:62:b1:e7:bb:88: 9a:a8:ee:f1:81:8a:8d:ef:95:91:ea:ef:6c:f2:dc:7f:c7:d8: 58:5d:fb:88:84:48:bd:87:8d:85:ee:52:7d:14:ad:48:d8:6d: e6:e3:7e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P5HB8PQPzKs76t3KUHlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy YjQ4OGQwHhcNMjYwMTI2MDMwMTE0WhcNMjYwMTI3MDMwMTE0WjAzMTEwLwYDVQQD EyhhZTIyOTZjNWIxZDg1MWVhN2I4ZmZjNmZlNzIwM2U4OGNkNDM4NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUmvRjAlI5lIqyZj7+NBZjBDg6ZR y8lqrDPWcA7ep8eVgjJHzkqUvlyqeIAM2pg3WLZ2GbUp58I9KLk574uWGl0YMiGG CPwLd1i9G1eb4+QSsRnrw9WZLV2AyCLIMQX/wS8w2gm6Y9cRUPn+YLoKqQpH5TGw MevJUvxnEY7wvYK9VuK7L6jimrhRFgqDRKCjmEwvEFgJCrKWX/ys+d5l0Nsi8JZh SNiHPhQmMJd3iZaC+V/KHoNDbzuEmMDDeJu+DpcGM0qSfe0XGBY8/QjDOyKN+wtd yQuXGt1UnAQcsxv1QGom5Es8jrEx6CakDZCRw3YJd6pYoCLHuu9QGvDJYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4ilsWx2FHqe4/8b+cgPojNQ4bqMB8GA1UdIwQY MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt MzUwZTY4MWI5OWQxLzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL0ZeXW7 G7owQ9kOC2Ttqyj5k6TnScatB0uHMlwEboCAfxNa9EIUUyAxIyoTELIzeWzSR3gB UXfV6cBtbhLR+RGmoQqFqr40bxyjdAUUjOckV16nOlPLfL1e9FgOikfgMLU9oRMS KaOCOEmin7gD1AO1eMm7hE3rnu+M6SRfWa6rbZLtzcLo8uNwIPNRQv5aIc2B8skv 8EGflHDeQmlmVef7toP+uJFe5m7Y2fb2usmxuOiW4NpPhnULVC3OUnKNx3ga+zUA BiJfZp9Y2hV6fFTZ4WKx57uImqju8YGKje+VkervbPLcf8fYWF37iIRIvYeNhe5S fRStSNht5uN+xQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:35:00 2026 by rpki-client