This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json) Hash identifier: HtUqb9fwNWJgRjryUXmbf4/mp+qFV442OFaJ2ArgTQs= Subject key identifier: 64:41:77:6D:4D:51:CE:9F:77:F5:1C:EB:DF:6D:52:D5:93:9C:29:7D Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189 Certificate serial: 019BF5AC2B3928B2736B55B1A53421D8D9C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft Manifest number: 0864 Signing time: Sun 25 Jan 2026 15:00:59 +0000 Manifest this update: Sun 25 Jan 2026 15:00:59 +0000 Manifest next update: Mon 26 Jan 2026 15:00:59 +0000 Files and hashes: 1: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: L4NCs8BeS2bTgefxCAnBWaA9y5tan5sTAT0VzSAptSg=) 2: vlOzrXADwVbr-4L_grlu0PIS3Rk.roa (hash: 3PRB7VQuDMBjsXiJij2GAncqz8RGuTBHCw9ZZ/+ej1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2b:39:28:b2:73:6b:55:b1:a5:34:21:d8:d9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b561ab100017a6125316fcc613384aafbde60189 Validity Not Before: Jan 25 15:00:59 2026 GMT Not After : Jan 26 15:00:59 2026 GMT Subject: CN=6441776d4d51ce9f77f51cebdf6d52d5939c297d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:9a:f2:5e:42:9b:48:20:9e:ed:3c:a5:f3: 3b:be:b2:69:bf:ff:1c:00:05:5d:8a:32:c1:5e:88: e0:67:ed:54:84:40:ec:b6:cc:e5:6a:a1:d5:89:3b: 95:c4:47:fa:49:e8:7f:59:fb:78:84:8f:d1:80:50: c1:14:db:23:08:55:80:1a:ed:d9:02:15:10:93:7d: 4d:48:27:97:8d:11:05:ed:56:bf:3f:cb:d7:23:fe: 26:c3:35:a8:d7:8c:95:3d:cc:a2:42:01:f2:1b:83: 3e:6a:66:56:f2:d6:74:d0:e2:ae:88:a9:b4:03:ad: 79:38:70:99:ff:df:b7:6b:1d:f5:d6:24:f2:0c:da: 61:df:d7:51:68:a9:4b:ad:a5:74:c0:46:cf:36:22: 99:1a:e4:06:43:21:d6:47:47:5a:df:bb:72:74:ba: 25:42:a8:ba:c0:f1:dd:72:d0:7f:37:e2:9f:d2:ca: 5f:e5:f2:32:2d:9d:61:0a:dc:3e:de:41:9d:4c:2c: 35:5a:f3:66:af:1e:a4:c7:ec:74:63:7f:33:fd:0e: 8d:76:e1:4a:d9:09:e9:e3:90:58:97:19:95:94:4a: 0b:f2:9a:2c:0d:10:62:67:55:5b:6e:a6:20:6c:39: 84:60:b2:cd:8c:cd:2c:09:ac:69:29:b1:93:85:c5: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:41:77:6D:4D:51:CE:9F:77:F5:1C:EB:DF:6D:52:D5:93:9C:29:7D X509v3 Authority Key Identifier: keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3b:69:8d:bc:76:fd:9c:22:55:ae:bb:15:a4:f9:88:e9:33: 15:9e:c1:5a:b2:c7:aa:8a:e7:2b:41:63:a0:e7:d2:d0:92:4c: 95:e8:7f:de:67:fe:5a:ba:c8:bf:7c:b7:8f:5d:4a:85:6f:d3: 41:16:0b:3f:a6:4e:45:ca:c9:ed:cf:3f:07:a5:c9:d1:76:2d: a1:fd:ed:8b:a5:ee:6c:c5:dc:6e:01:16:94:53:d5:70:b6:5a: 4a:83:96:68:1d:4f:46:d0:45:cf:31:cb:34:96:ae:ee:0d:d2: bf:ff:1f:22:a9:30:94:1c:b1:14:20:95:7b:a3:2c:72:a5:77: 1c:d6:84:73:dd:0d:69:3e:31:30:b0:da:ff:80:cc:36:20:39: d0:6e:4a:45:a3:9d:76:f2:10:e6:a3:e4:39:1c:0c:5b:49:ce: 0e:61:6b:54:d0:80:46:9e:eb:1a:52:e9:af:5b:c2:d1:8d:d3: df:24:6a:40:ba:62:4c:01:cb:cb:03:c1:d6:b1:23:19:2c:0e: f7:4f:39:9c:9f:6f:fa:3b:45:26:9d:e3:92:3d:a2:87:1d:1b: 90:e8:2c:29:d1:14:11:69:27:4c:41:e1:25:7d:4f:8e:b3:32: bd:bc:bc:3d:23:fd:f3:31:ad:bc:f8:59:7f:ac:5e:00:59:a2: 99:bb:56:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCs5KLJza1WxpTQh2NnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjFhYjEwMDAxN2E2MTI1MzE2ZmNjNjEzMzg0YWFmYmRl NjAxODkwHhcNMjYwMTI1MTUwMDU5WhcNMjYwMTI2MTUwMDU5WjAzMTEwLwYDVQQD Eyg2NDQxNzc2ZDRkNTFjZTlmNzdmNTFjZWJkZjZkNTJkNTkzOWMyOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI+a8l5Cm0ggnu08pfM7vrJpv/8c AAVdijLBXojgZ+1UhEDstszlaqHViTuVxEf6Seh/Wft4hI/RgFDBFNsjCFWAGu3Z AhUQk31NSCeXjREF7Va/P8vXI/4mwzWo14yVPcyiQgHyG4M+amZW8tZ00OKuiKm0 A615OHCZ/9+3ax311iTyDNph39dRaKlLraV0wEbPNiKZGuQGQyHWR0da37tydLol Qqi6wPHdctB/N+Kf0spf5fIyLZ1hCtw+3kGdTCw1WvNmrx6kx+x0Y38z/Q6NduFK 2Qnp45BYlxmVlEoL8posDRBiZ1VbbqYgbDmEYLLNjM0sCaxpKbGThcV2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRBd21NUc6fd/Uc699tUtWTnCl9MB8GA1UdIwQY MBaAFLVhqxAAF6YSUxb8xhM4Sq+95gGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQt OTJiOWRhYTAwMzc5LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQtOTJiOWRhYTAwMzc5 LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETtpjbx2 /ZwiVa67FaT5iOkzFZ7BWrLHqornK0FjoOfS0JJMleh/3mf+WrrIv3y3j11KhW/T QRYLP6ZORcrJ7c8/B6XJ0XYtof3ti6XubMXcbgEWlFPVcLZaSoOWaB1PRtBFzzHL NJau7g3Sv/8fIqkwlByxFCCVe6MscqV3HNaEc90NaT4xMLDa/4DMNiA50G5KRaOd dvIQ5qPkORwMW0nODmFrVNCARp7rGlLpr1vC0Y3T3yRqQLpiTAHLywPB1rEjGSwO 9085nJ9v+jtFJp3jkj2ihx0bkOgsKdEUEWknTEHhJX1PjrMyvby8PSP98zGtvPhZ f6xeAFmimbtWwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:06 2026 by rpki-client