This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json) Hash identifier: FUfGziJwm/W0HYaDLSpWqCCAcCD91BOrfh1h7aynr4I= Subject key identifier: 74:39:BF:D6:3C:B5:22:18:9A:AE:C6:44:41:1B:74:19:41:1E:24:F6 Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019BF8AD4B6BA73F9F6D9D5119C86748DC3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft Manifest number: 0D97 Signing time: Mon 26 Jan 2026 05:01:05 +0000 Manifest this update: Mon 26 Jan 2026 05:01:05 +0000 Manifest next update: Tue 27 Jan 2026 05:01:05 +0000 Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=) 2: 8bHRc8tr2a4XBd3O15Qoano2tfQ.roa (hash: orjr1SLl5fYCt3s+uAWK9iZFvIcZNLQi4CUpABQKDvk=) 3: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=) 4: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=) 5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: 2dsb+Qq7oTDtMUtBA/bywcRSvDzUqdNkhuvYkYXYync=) 6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=) 7: t8PF2dzz4p808TasTsfwf7JVfCc.roa (hash: ouA5VopXvLk7YoGc+RmYEF9pxuL+pu1BO6KzbRP9lbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:4b:6b:a7:3f:9f:6d:9d:51:19:c8:67:48:dc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Jan 26 05:01:05 2026 GMT Not After : Jan 27 05:01:05 2026 GMT Subject: CN=7439bfd63cb522189aaec644411b7419411e24f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:78:56:fe:bb:e1:69:c4:bc:5d:29:29:67: f9:dc:8f:1f:dd:70:f6:74:79:63:92:9c:a8:73:a7: 62:86:0d:5f:f7:77:83:bc:d2:c3:d4:50:81:82:e5: 4e:48:89:a0:9f:8a:40:0a:f3:3e:f2:c5:23:cd:4f: 19:28:5e:2e:88:de:ef:45:cd:ce:52:a4:1d:da:bb: 9e:c1:52:db:e7:e7:02:33:2b:a7:ca:42:d9:b5:42: b1:67:08:e2:6b:61:1c:6a:60:53:01:03:e3:b6:8b: 89:1c:86:4e:dc:c8:b4:b3:bb:f2:bd:5c:05:b2:40: 39:11:57:62:ec:5a:e7:58:b3:7f:43:de:1f:5b:f8: eb:dd:d5:d0:96:cf:17:73:00:09:24:21:8b:fd:57: 90:e0:95:7a:25:e8:cc:53:e2:e6:07:6f:b6:f1:e8: bc:f5:12:72:c5:98:dc:aa:df:09:d6:d4:25:8a:00: 8b:f7:ea:23:f5:58:2c:e6:3f:b3:a2:a1:31:68:13: 6b:69:65:31:c4:9e:0f:bc:14:c2:c6:08:5a:d3:a8: 8a:a4:77:eb:c3:8f:2a:67:66:4a:d6:95:90:20:8d: 98:18:81:98:61:cb:03:54:e4:d8:92:ed:d5:8b:94: 94:2d:38:19:57:8f:2b:9e:8e:36:ff:01:fb:9e:76: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:BF:D6:3C:B5:22:18:9A:AE:C6:44:41:1B:74:19:41:1E:24:F6 X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:29:58:b4:22:3e:99:f9:d2:c1:47:d0:f9:c0:60:f5:33:50: e5:f2:b0:18:c2:0e:6c:66:8d:3c:17:26:d7:79:5d:e5:0c:d0: 5a:5b:c0:92:79:1d:6a:4e:24:00:b2:b7:b2:87:7b:36:43:34: 90:90:55:0d:75:32:53:e3:10:f7:ac:8d:44:2b:d1:90:43:79: a2:00:8f:2e:42:d3:cd:0c:2e:72:4f:9f:fc:f7:e2:cd:bd:73: a3:6b:25:24:40:3f:65:15:81:84:22:f2:9b:93:24:44:25:f8: 37:b0:f4:62:08:88:b1:1f:45:1b:bf:f0:1a:90:ee:6d:2c:fa: f3:a6:d8:79:37:2b:45:f7:c7:fe:d8:e4:ef:cd:33:8b:28:2b: 13:10:97:7b:17:b9:31:05:f1:ca:ea:29:93:ad:24:8c:9b:bb: 0d:72:3c:54:31:ac:90:fa:32:b4:d4:04:dd:5a:f0:87:9b:8e: ea:98:fd:77:9e:fb:67:45:dc:e3:d3:11:1f:b2:c9:41:73:29: f7:6c:04:0c:f6:83:df:35:9d:a8:9e:9a:15:95:86:47:13:f6: 7e:d0:3b:fe:34:0c:fd:94:0d:fb:93:4b:2a:47:9a:d8:81:a5: ff:4b:78:b7:8e:7e:c2:a0:b6:49:8a:8d:15:27:81:b6:07:8b: 62:cf:5f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rUtrpz+fbZ1RGchnSNw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjYwMTI2MDUwMTA1WhcNMjYwMTI3MDUwMTA1WjAzMTEwLwYDVQQD Eyg3NDM5YmZkNjNjYjUyMjE4OWFhZWM2NDQ0MTFiNzQxOTQxMWUyNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyx4Vv674WnEvF0pKWf53I8f3XD2 dHljkpyoc6dihg1f93eDvNLD1FCBguVOSImgn4pACvM+8sUjzU8ZKF4uiN7vRc3O UqQd2ruewVLb5+cCMyunykLZtUKxZwjia2EcamBTAQPjtouJHIZO3Mi0s7vyvVwF skA5EVdi7FrnWLN/Q94fW/jr3dXQls8XcwAJJCGL/VeQ4JV6JejMU+LmB2+28ei8 9RJyxZjcqt8J1tQligCL9+oj9Vgs5j+zoqExaBNraWUxxJ4PvBTCxgha06iKpHfr w48qZ2ZK1pWQII2YGIGYYcsDVOTYku3Vi5SULTgZV48rno42/wH7nnaRqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ5v9Y8tSIYmq7GREEbdBlBHiT2MB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlClYtCI+ mfnSwUfQ+cBg9TNQ5fKwGMIObGaNPBcm13ld5QzQWlvAknkdak4kALK3sod7NkM0 kJBVDXUyU+MQ96yNRCvRkEN5ogCPLkLTzQwuck+f/Pfizb1zo2slJEA/ZRWBhCLy m5MkRCX4N7D0YgiIsR9FG7/wGpDubSz686bYeTcrRffH/tjk780ziygrExCXexe5 MQXxyuopk60kjJu7DXI8VDGskPoytNQE3Vrwh5uO6pj9d577Z0Xc49MRH7LJQXMp 92wEDPaD3zWdqJ6aFZWGRxP2ftA7/jQM/ZQN+5NLKkea2IGl/0t4t45+wqC2SYqN FSeBtgeLYs9f2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:42 2026 by rpki-client