This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: f8JbJlCelJv2kwDAqclAMVmnCkZHkTVh+KopakG3Fvs= Subject key identifier: C9:E9:8A:00:D9:C5:27:85:44:7B:CA:66:51:39:53:80:A6:E6:E3:5A Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019BF5752F761F5CB57A89D3CA050C37A35F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 180B Signing time: Sun 25 Jan 2026 14:00:56 +0000 Manifest this update: Sun 25 Jan 2026 14:00:56 +0000 Manifest next update: Mon 26 Jan 2026 14:00:56 +0000 Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 2: Lbd7OlSYZZwy_6X1BIMG6Koz7d4.roa (hash: tiYUvDBlf1LQU9lfVQg2G8kbpiC1hXVYCRazqiEsZus=) 3: O0rfOGz-McmMnU1eCY2sEgNi7PU.roa (hash: 4rQUZ3pnpaJVp0N8CW/NojdvUgqmwQuyE4ZpcBYicXU=) 4: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: BgwxzwhWJDXjFPypRRU+yVNKD7Tivzztfzntz67ViI0=) 5: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 6: UKBFNmW-avu0y-ZELfNkwrzKuSM.roa (hash: SdZuGRpwFqsC6fwO8VFNthsAajlBrQzgt1h1a3a0ulc=) 7: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 8: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (hash: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0=) 9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) 11: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (hash: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:2f:76:1f:5c:b5:7a:89:d3:ca:05:0c:37:a3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jan 25 14:00:56 2026 GMT Not After : Jan 26 14:00:56 2026 GMT Subject: CN=c9e98a00d9c52785447bca6651395380a6e6e35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:99:25:82:66:d1:5e:5b:46:01:aa:aa:8a: e7:d1:7c:8f:66:c3:d9:0b:b1:44:0f:51:a0:01:69: 45:a3:66:2b:93:97:7b:7f:ef:15:e9:87:5f:78:8e: 85:e3:94:d3:ce:f1:45:de:c6:e8:66:f1:af:ad:44: dc:55:25:30:50:58:1a:15:b2:66:6c:34:9c:78:69: a7:e2:0f:ff:13:21:a0:23:ca:2e:f8:4f:32:37:70: bb:36:d2:7b:44:c0:0c:08:9f:f4:a3:44:3d:e1:6c: 29:fe:de:56:54:47:97:98:6e:4c:17:77:08:39:ff: 82:a2:ce:93:6b:d7:06:96:da:03:8d:7f:e7:5c:b3: 68:5f:55:f6:4f:79:a4:e8:cc:3c:da:ff:39:bd:05: 21:99:bd:f0:a3:60:ba:fd:c5:60:68:89:b4:ce:1d: c8:c8:21:94:2a:d7:d1:9f:14:1f:9d:73:3d:2c:6b: d0:e2:80:78:65:4d:f8:04:08:0a:b4:0f:43:ac:8b: 49:b5:e0:c0:c9:98:dc:b7:79:c0:00:14:e5:c0:24: c5:7a:6f:11:ac:e9:9a:cb:94:14:18:66:29:3e:d4: fd:dd:6e:b0:8f:d1:cc:81:fb:c8:b3:94:20:25:79: df:27:5d:db:a5:59:33:37:1a:b1:07:e5:15:4e:5b: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E9:8A:00:D9:C5:27:85:44:7B:CA:66:51:39:53:80:A6:E6:E3:5A X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:81:69:16:d6:23:ce:e4:e5:fd:2b:55:21:e0:b1:a5:0c:c8: d1:83:aa:45:73:7a:a0:36:03:b2:6b:51:20:03:82:ae:cf:f6: 49:39:40:09:ff:f0:49:2f:ab:2b:bf:33:dd:c9:dd:48:9f:43: bb:94:21:31:b7:86:e3:f4:f5:a2:bb:8d:ac:fc:0d:12:f7:15: 76:34:e5:cc:21:65:01:bf:c7:31:bf:35:6f:cd:71:07:59:e0: 54:8b:bf:1a:a8:8d:6c:3c:c3:12:98:f0:cb:3e:e4:08:a6:0b: fb:01:85:a0:51:0c:4e:72:fb:ac:c0:ef:e7:21:0b:68:10:71: fe:fb:f0:6a:db:81:e6:be:a9:ba:fd:68:62:15:b3:95:39:67: b9:02:a3:12:e5:21:9f:db:11:f3:e5:4b:42:09:e9:3f:aa:5e: 18:e3:19:f0:fb:23:a2:fb:6d:e0:e7:d9:81:cf:e4:41:82:cb: 40:1d:55:41:e5:45:98:2e:0a:6c:d8:a5:ca:1d:07:67:59:8b: 89:da:73:31:f3:fb:10:82:de:15:c9:30:0d:d0:1a:10:fd:1d: 5c:aa:b8:ac:21:75:b2:65:29:59:a4:2a:6b:3c:3a:ac:7a:4c: 97:e7:41:41:b4:13:27:a5:1d:d1:73:04:26:91:7b:86:1d:20: 71:d9:46:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dS92H1y1eonTygUMN6NfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMTI1MTQwMDU2WhcNMjYwMTI2MTQwMDU2WjAzMTEwLwYDVQQD EyhjOWU5OGEwMGQ5YzUyNzg1NDQ3YmNhNjY1MTM5NTM4MGE2ZTZlMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQCZJYJm0V5bRgGqqorn0XyPZsPZ C7FED1GgAWlFo2Yrk5d7f+8V6YdfeI6F45TTzvFF3sboZvGvrUTcVSUwUFgaFbJm bDSceGmn4g//EyGgI8ou+E8yN3C7NtJ7RMAMCJ/0o0Q94Wwp/t5WVEeXmG5MF3cI Of+Cos6Ta9cGltoDjX/nXLNoX1X2T3mk6Mw82v85vQUhmb3wo2C6/cVgaIm0zh3I yCGUKtfRnxQfnXM9LGvQ4oB4ZU34BAgKtA9DrItJteDAyZjct3nAABTlwCTFem8R rOmay5QUGGYpPtT93W6wj9HMgfvIs5QgJXnfJ13bpVkzNxqxB+UVTluRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnpigDZxSeFRHvKZlE5U4Cm5uNaMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIFpFtYj zuTl/StVIeCxpQzI0YOqRXN6oDYDsmtRIAOCrs/2STlACf/wSS+rK78z3cndSJ9D u5QhMbeG4/T1oruNrPwNEvcVdjTlzCFlAb/HMb81b81xB1ngVIu/GqiNbDzDEpjw yz7kCKYL+wGFoFEMTnL7rMDv5yELaBBx/vvwatuB5r6puv1oYhWzlTlnuQKjEuUh n9sR8+VLQgnpP6peGOMZ8Psjovtt4OfZgc/kQYLLQB1VQeVFmC4KbNilyh0HZ1mL idpzMfP7EILeFckwDdAaEP0dXKq4rCF1smUpWaQqazw6rHpMl+dBQbQTJ6Ud0XME JpF7hh0gcdlGKw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:41 2026 by rpki-client