This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json) Hash identifier: OBx9w0R8CF3HLqQqG/ouuSQhKmysbacGpizW5D0EchY= Subject key identifier: CC:51:53:CE:29:CC:AD:59:2C:A8:44:B6:B9:88:93:6D:92:87:01:BA Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1 Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1 Certificate serial: 019BF65105F8D06BB249FDA0CD3C411BC89E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft Manifest number: 4E Signing time: Sun 25 Jan 2026 18:01:03 +0000 Manifest this update: Sun 25 Jan 2026 18:01:03 +0000 Manifest next update: Mon 26 Jan 2026 18:01:03 +0000 Files and hashes: 1: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=) 2: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: CrET5q3hG8bYp+HIlzY3b9Zm3MT/j1tVeDYHf0vW9LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:05:f8:d0:6b:b2:49:fd:a0:cd:3c:41:1b:c8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1 Validity Not Before: Jan 25 18:01:03 2026 GMT Not After : Jan 26 18:01:03 2026 GMT Subject: CN=cc5153ce29ccad592ca844b6b988936d928701ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:19:89:54:be:8c:d7:50:49:6e:c5:f4:84: 33:1c:69:7b:40:af:37:d5:77:4d:da:4f:10:cb:fd: e0:8d:46:27:75:b9:56:23:d5:4f:10:cc:34:24:62: f4:26:66:f4:05:c1:34:12:96:d1:98:14:00:9b:0a: 18:8b:22:be:8a:9e:f1:89:eb:5d:2a:9e:64:34:b3: b6:c2:1b:48:c7:4f:50:04:42:12:6c:47:9f:45:25: fc:c2:f2:d6:83:68:00:7f:fe:22:fb:0a:cd:cb:44: af:78:39:15:a1:07:b7:e9:09:5d:b6:44:5a:ad:fe: 93:2d:eb:9d:5a:58:16:c2:56:b4:34:a3:e7:46:db: e0:58:d2:0b:6c:68:55:07:fb:66:56:78:66:2f:74: ce:2a:75:d0:f3:97:86:6b:3a:e7:6d:a8:fb:64:43: 3e:2d:40:b9:1e:cb:f7:36:ec:97:eb:7f:c3:67:64: fd:6f:f7:43:93:3a:6f:1c:4d:f9:67:24:7b:28:c8: 51:08:a0:dd:e2:99:89:c7:f3:43:59:8d:5f:1d:81: c2:48:0a:a0:4f:af:db:61:86:87:4e:05:b0:f0:de: c9:07:6f:8b:9f:f2:56:21:37:b5:17:c4:ca:f4:2c: 80:85:19:09:88:19:a3:16:a8:23:68:89:2b:8f:b7: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:51:53:CE:29:CC:AD:59:2C:A8:44:B6:B9:88:93:6D:92:87:01:BA X509v3 Authority Key Identifier: keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:83:b7:53:29:0b:25:0f:a6:3f:44:04:8f:19:16:19:b6:2d: f5:74:92:ce:5a:43:b1:79:be:ed:d9:92:59:cb:68:49:6b:0b: 1a:b9:e7:f9:49:0a:e1:7d:b4:ba:c8:67:83:20:a9:af:d1:3b: 71:db:59:8b:d6:17:07:0f:4f:89:bf:6c:9f:d9:d8:2c:03:fd: ed:13:4f:cb:76:13:46:ad:f8:bc:ad:d9:41:2b:29:7b:05:e3: a4:27:09:68:94:d9:0b:13:24:f0:26:8f:d4:b4:ac:a3:17:f1: bf:db:0c:62:9a:1c:b4:0a:68:b6:02:18:e6:d0:f8:9c:75:44: 33:bc:c1:f0:c6:69:e0:73:29:08:d6:ad:34:99:fc:9a:95:17: 49:98:db:4b:a4:73:85:b8:7b:be:c1:e9:ea:8f:5e:cd:78:33: 8f:e9:03:fc:c0:d6:b3:72:30:94:1f:0d:50:8e:c2:c6:3c:17: bd:9c:93:f7:28:80:58:01:14:71:5b:0d:78:e5:56:b9:05:5e: 81:7a:a2:cd:48:9d:98:f0:67:e4:9d:b1:65:0a:8d:7b:b8:60: 13:3e:fa:d6:2c:aa:49:8c:c3:69:4d:75:33:68:64:ff:ef:b6: 1d:a9:ca:6c:29:05:12:35:44:30:d0:0e:f4:f3:63:24:50:12: b8:14:9f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQX40GuySf2gzTxBG8ieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjIzMzNmMDY2NTczZjUzMTZlMDc1YTAxY2UyNDkwYjU4 YzZhZTEwHhcNMjYwMTI1MTgwMTAzWhcNMjYwMTI2MTgwMTAzWjAzMTEwLwYDVQQD EyhjYzUxNTNjZTI5Y2NhZDU5MmNhODQ0YjZiOTg4OTM2ZDkyODcwMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJgZiVS+jNdQSW7F9IQzHGl7QK83 1XdN2k8Qy/3gjUYndblWI9VPEMw0JGL0Jmb0BcE0EpbRmBQAmwoYiyK+ip7xietd Kp5kNLO2whtIx09QBEISbEefRSX8wvLWg2gAf/4i+wrNy0SveDkVoQe36QldtkRa rf6TLeudWlgWwla0NKPnRtvgWNILbGhVB/tmVnhmL3TOKnXQ85eGazrnbaj7ZEM+ LUC5Hsv3NuyX63/DZ2T9b/dDkzpvHE35ZyR7KMhRCKDd4pmJx/NDWY1fHYHCSAqg T6/bYYaHTgWw8N7JB2+Ln/JWITe1F8TK9CyAhRkJiBmjFqgjaIkrj7fKnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxRU84pzK1ZLKhEtrmIk22ShwG6MB8GA1UdIwQY MBaAFLayMz8GZXP1MW4HWgHOJJC1jGrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYt ODA1MTcwYWM5YzBlLzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYtODA1MTcwYWM5YzBl LzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4O3UykL JQ+mP0QEjxkWGbYt9XSSzlpDsXm+7dmSWctoSWsLGrnn+UkK4X20ushngyCpr9E7 cdtZi9YXBw9Pib9sn9nYLAP97RNPy3YTRq34vK3ZQSspewXjpCcJaJTZCxMk8CaP 1LSsoxfxv9sMYpoctApotgIY5tD4nHVEM7zB8MZp4HMpCNatNJn8mpUXSZjbS6Rz hbh7vsHp6o9ezXgzj+kD/MDWs3IwlB8NUI7CxjwXvZyT9yiAWAEUcVsNeOVWuQVe gXqizUidmPBn5J2xZQqNe7hgEz761iyqSYzDaU11M2hk/++2HanKbCkFEjVEMNAO 9PNjJFASuBSfbg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:20 2026 by rpki-client