This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json) Hash identifier: GKkFMt/xqxGjZUN/AQo+g43aYN6qcMkfuQjPi9fJ6fg= Subject key identifier: 39:F6:E9:0B:16:F0:0F:45:C9:22:78:6D:71:70:D1:8E:86:97:CC:23 Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Certificate serial: 019BF9895CD45BCA67866D52EACF86BD798A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft Manifest number: 14CC Signing time: Mon 26 Jan 2026 09:01:27 +0000 Manifest this update: Mon 26 Jan 2026 09:01:27 +0000 Manifest next update: Tue 27 Jan 2026 09:01:27 +0000 Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=) 2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=) 3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: 2drRTelaII3MG6hf8/vmLAKeuNR9zIkpqv2Gh2sTPgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:5c:d4:5b:ca:67:86:6d:52:ea:cf:86:bd:79:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Validity Not Before: Jan 26 09:01:27 2026 GMT Not After : Jan 27 09:01:27 2026 GMT Subject: CN=39f6e90b16f00f45c922786d7170d18e8697cc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:b6:3b:5a:57:5d:cb:76:3b:94:63:1d:6e: 55:9a:18:af:dc:70:55:22:d1:32:05:1a:1f:8e:3e: a4:58:d9:75:d0:ff:36:d0:5b:a4:5b:cc:d8:a8:48: 0b:85:2c:c8:71:1c:4b:28:f7:57:d3:4f:77:27:45: 72:58:93:d3:cb:3b:c7:56:dd:ce:0e:a3:d3:3e:6e: 67:d9:32:80:b1:ff:45:8e:6d:75:86:9e:a1:22:88: f6:88:82:20:b5:40:d3:10:97:73:8c:8c:2f:e9:db: cc:7d:49:35:62:08:da:63:68:e7:b9:f3:9a:d5:df: 3b:3f:a6:49:3b:f7:e8:cf:6b:84:8f:d0:ef:27:39: f1:14:4b:63:61:ac:c8:b6:59:ae:db:36:68:1e:9a: 56:3d:bc:d6:e3:51:4c:50:ea:13:46:6e:f3:92:9a: f1:a5:bb:0d:11:95:74:3e:3e:3a:71:85:eb:a5:b9: f0:c2:da:69:d2:6c:eb:da:a1:a9:3e:f0:40:68:f4: 5a:69:45:e2:0a:56:1c:f7:dd:b1:4d:e0:94:0f:24: 25:81:ac:27:58:c7:39:98:21:38:16:66:29:45:e1: 3d:b9:3c:22:e2:78:c1:c3:97:a7:00:7a:c3:9d:e1: 7b:54:10:11:97:71:9b:56:7b:ea:50:01:c4:98:ab: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F6:E9:0B:16:F0:0F:45:C9:22:78:6D:71:70:D1:8E:86:97:CC:23 X509v3 Authority Key Identifier: keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:83:92:f3:bc:3c:a8:3a:27:92:00:2b:68:0a:4e:39:21:64: 1d:33:bb:8a:e2:8e:e4:d8:9f:f6:0d:27:2a:fb:7c:2b:63:81: 85:f2:ce:c8:d5:ed:3d:1f:d6:04:09:1a:30:b5:c9:b0:04:d0: 96:90:96:5d:14:a2:21:dc:7f:d5:83:18:d6:36:c2:e7:72:80: 2d:da:1e:79:74:ce:b6:69:b8:6d:5e:b8:0d:08:1f:17:ec:33: 5a:f5:9e:79:e1:c1:98:18:67:45:93:be:e3:3a:44:29:8b:2b: 41:31:65:a9:87:65:15:c9:de:17:8b:60:b7:dc:02:0c:82:51: d2:fe:f7:52:59:6b:ce:70:bf:21:07:7f:27:41:f9:e5:90:ad: 21:bd:f6:93:0d:7f:88:d5:e1:6f:87:3d:4b:63:54:98:37:26: 1f:a8:93:0d:7c:2b:a9:87:2b:4d:01:00:03:d4:de:c9:9a:ff: e9:2f:65:5f:80:49:db:49:f6:28:6c:3b:06:fa:d2:17:d8:74: 4c:c5:39:a0:b1:d2:c7:d7:37:8d:2a:ef:ab:48:f0:4b:5b:99: b1:5f:4c:03:5b:53:32:2c:c9:c0:1e:ae:6d:0f:0c:af:21:03: 23:04:cf:a5:d8:c5:b2:aa:83:5e:f4:66:84:bd:7e:55:b3:cb: 85:86:df:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iVzUW8pnhm1S6s+GvXmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy MjEwZTYwHhcNMjYwMTI2MDkwMTI3WhcNMjYwMTI3MDkwMTI3WjAzMTEwLwYDVQQD EygzOWY2ZTkwYjE2ZjAwZjQ1YzkyMjc4NmQ3MTcwZDE4ZTg2OTdjYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuS2O1pXXct2O5RjHW5Vmhiv3HBV ItEyBRofjj6kWNl10P820FukW8zYqEgLhSzIcRxLKPdX0093J0VyWJPTyzvHVt3O DqPTPm5n2TKAsf9Fjm11hp6hIoj2iIIgtUDTEJdzjIwv6dvMfUk1YgjaY2jnufOa 1d87P6ZJO/foz2uEj9DvJznxFEtjYazItlmu2zZoHppWPbzW41FMUOoTRm7zkprx pbsNEZV0Pj46cYXrpbnwwtpp0mzr2qGpPvBAaPRaaUXiClYc992xTeCUDyQlgawn WMc5mCE4FmYpReE9uTwi4njBw5enAHrDneF7VBARl3GbVnvqUAHEmKskCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn26QsW8A9FySJ4bXFw0Y6Gl8wjMB8GA1UdIwQY MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3 LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIOS87w8 qDonkgAraApOOSFkHTO7iuKO5Nif9g0nKvt8K2OBhfLOyNXtPR/WBAkaMLXJsATQ lpCWXRSiIdx/1YMY1jbC53KALdoeeXTOtmm4bV64DQgfF+wzWvWeeeHBmBhnRZO+ 4zpEKYsrQTFlqYdlFcneF4tgt9wCDIJR0v73UllrznC/IQd/J0H55ZCtIb32kw1/ iNXhb4c9S2NUmDcmH6iTDXwrqYcrTQEAA9TeyZr/6S9lX4BJ20n2KGw7BvrSF9h0 TMU5oLHSx9c3jSrvq0jwS1uZsV9MA1tTMizJwB6ubQ8MryEDIwTPpdjFsqqDXvRm hL1+VbPLhYbfOw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:48 2026 by rpki-client