This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json) Hash identifier: jUHbpRo2xLnjwi0V1rgMRef5UgkmJkXwIji8if0xKmA= Subject key identifier: D1:DD:34:0E:05:1F:6C:C7:C2:2D:98:AF:1E:A4:4C:AE:52:A3:9A:12 Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Certificate serial: 019BF53E0A3296B65A2F17B1A87BCC2FA3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft Manifest number: 8F Signing time: Sun 25 Jan 2026 13:00:42 +0000 Manifest this update: Sun 25 Jan 2026 13:00:42 +0000 Manifest next update: Mon 26 Jan 2026 13:00:42 +0000 Files and hashes: 1: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: QPcEWqPpM5FkWi3N0ZAClSsjzHmacCxGkJc1wQoR1mM=) 2: kDYozZEWu2W8znIaj8exYx-L2Bs.asa (hash: j0/c6bh6BWZ0FlNxEde74E3WHSTFdY59g7eeu3U3o4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:0a:32:96:b6:5a:2f:17:b1:a8:7b:cc:2f:a3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Validity Not Before: Jan 25 13:00:42 2026 GMT Not After : Jan 26 13:00:42 2026 GMT Subject: CN=d1dd340e051f6cc7c22d98af1ea44cae52a39a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:b5:dd:92:f8:b2:a3:4a:a8:fc:e1:d8:30: e6:14:f8:c0:d9:8e:9f:97:6e:4e:bb:3d:ed:e4:74: f2:47:08:b6:07:ee:f6:e8:c7:92:ad:1b:81:8a:87: 6e:f5:ce:16:74:20:60:77:f5:a9:6f:af:15:a0:0a: 8c:90:b7:97:78:cf:ab:e9:92:a5:e4:a7:cb:85:ef: 50:a4:9d:ad:0b:9b:29:63:a2:db:31:55:2c:c6:da: fb:70:ed:20:ff:32:bb:37:aa:10:f0:27:40:c9:00: c8:74:c9:75:cd:8d:26:9e:d3:62:eb:32:27:a6:83: 96:c6:b9:ab:cc:1a:7f:f6:60:b1:c0:1d:b0:bb:b6: 2c:e3:a2:92:c7:fc:df:9f:62:f5:e1:7e:79:99:e8: dc:f7:85:c2:45:4c:f0:b4:c7:3f:ad:db:ec:e0:ae: 49:9b:14:c3:6b:31:8b:75:be:b6:b1:c3:bc:cc:d9: ca:0a:5e:70:f1:e8:7b:27:dd:59:33:d3:c0:59:ce: e9:e7:a2:7a:61:d7:94:05:82:35:22:7c:b0:2a:e1: 27:77:b5:15:cd:aa:63:42:1e:5a:77:c0:b1:20:27: c9:31:ea:5f:c5:be:9c:1f:26:a1:c8:5d:a6:af:9a: c7:f8:cc:0f:83:90:24:1f:3a:bd:5c:e6:07:87:01: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:34:0E:05:1F:6C:C7:C2:2D:98:AF:1E:A4:4C:AE:52:A3:9A:12 X509v3 Authority Key Identifier: keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c0:57:25:07:23:b0:3c:48:cd:86:e6:1c:2a:dc:35:d1:84: d4:bf:cf:5f:37:58:6b:77:d6:ea:42:0f:53:3a:9f:06:05:c7: eb:5b:0c:e8:da:92:3e:df:8e:73:32:79:1b:97:ba:1f:d6:d8: 1f:a7:43:9a:06:31:d4:5a:aa:2c:5f:15:e4:17:5b:9f:69:29: d8:e2:af:16:1d:a4:98:ed:82:aa:66:70:f5:ca:9b:c7:f2:c6: 9e:5a:d6:de:03:fd:e3:54:b2:bf:9a:0b:4c:d3:2e:97:fd:6f: 45:51:2c:64:7c:8b:18:3d:ad:a8:e9:a7:a4:50:85:ed:d8:76: d6:2b:f5:f6:8d:cf:63:76:db:35:ff:de:0b:ef:35:fa:b5:d9: 44:67:9a:0f:68:50:ef:4a:92:63:cc:74:23:10:17:57:e8:aa: b4:4c:1f:19:d5:00:25:20:c0:13:67:d2:ce:d2:c9:b4:cc:da: 72:1f:ab:95:b4:33:fb:ae:cf:14:a0:33:36:4d:9c:4c:9c:88: 1f:32:f2:37:14:41:b6:77:3e:dc:eb:37:04:c6:a7:2c:c2:8c: 0f:38:02:13:a5:00:af:22:b9:da:84:1f:8c:d2:2d:bc:6d:c9: b8:ac:93:d4:c0:d1:d4:0a:19:cd:1f:20:15:c8:a0:2d:e1:f9: aa:38:41:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgoylrZaLxexqHvML6OtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl NTlkZjAwHhcNMjYwMTI1MTMwMDQyWhcNMjYwMTI2MTMwMDQyWjAzMTEwLwYDVQQD EyhkMWRkMzQwZTA1MWY2Y2M3YzIyZDk4YWYxZWE0NGNhZTUyYTM5YTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVC13ZL4sqNKqPzh2DDmFPjA2Y6f l25Ouz3t5HTyRwi2B+726MeSrRuBiodu9c4WdCBgd/Wpb68VoAqMkLeXeM+r6ZKl 5KfLhe9QpJ2tC5spY6LbMVUsxtr7cO0g/zK7N6oQ8CdAyQDIdMl1zY0mntNi6zIn poOWxrmrzBp/9mCxwB2wu7Ys46KSx/zfn2L14X55mejc94XCRUzwtMc/rdvs4K5J mxTDazGLdb62scO8zNnKCl5w8eh7J91ZM9PAWc7p56J6YdeUBYI1InywKuEnd7UV zapjQh5ad8CxICfJMepfxb6cHyahyF2mr5rH+MwPg5AkHzq9XOYHhwHaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHdNA4FH2zHwi2Yrx6kTK5So5oSMB8GA1UdIwQY MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt ZTJmZWRhYjNjYjA5LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5 LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcBXJQcj sDxIzYbmHCrcNdGE1L/PXzdYa3fW6kIPUzqfBgXH61sM6NqSPt+OczJ5G5e6H9bY H6dDmgYx1FqqLF8V5Bdbn2kp2OKvFh2kmO2CqmZw9cqbx/LGnlrW3gP941Syv5oL TNMul/1vRVEsZHyLGD2tqOmnpFCF7dh21iv19o3PY3bbNf/eC+81+rXZRGeaD2hQ 70qSY8x0IxAXV+iqtEwfGdUAJSDAE2fSztLJtMzach+rlbQz+67PFKAzNk2cTJyI HzLyNxRBtnc+3Os3BManLMKMDzgCE6UAryK52oQfjNItvG3JuKyT1MDR1AoZzR8g FcigLeH5qjhBnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:45 2026 by rpki-client