This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json) Hash identifier: bkH0qphGFARLtvyzeGwTYaIsg/+YfRbZjGq9rkeMZ/s= Subject key identifier: 1B:7D:8A:67:E7:A7:91:2D:55:2F:EC:1E:AB:1C:F5:63:05:3D:1C:0A Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Certificate serial: 019BF8088AC08A433B45A129815841F06A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft Manifest number: 1732 Signing time: Mon 26 Jan 2026 02:01:07 +0000 Manifest this update: Mon 26 Jan 2026 02:01:07 +0000 Manifest next update: Tue 27 Jan 2026 02:01:07 +0000 Files and hashes: 1: 4JsWrqz-Jz67OAHjK_U7oEEgSkY.roa (hash: 3K5vRYnD3iE7cp5rdSZE+i0c32UlHaGrNKY3bOD1VyE=) 2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: 9w4qh1pFeilo7Ie395u030oh8A6yHmIFYezbJjEc+5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:8a:c0:8a:43:3b:45:a1:29:81:58:41:f0:6a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Validity Not Before: Jan 26 02:01:07 2026 GMT Not After : Jan 27 02:01:07 2026 GMT Subject: CN=1b7d8a67e7a7912d552fec1eab1cf563053d1c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:0a:17:3b:f3:66:ae:20:6f:39:01:da:06: c1:63:27:59:fc:82:0e:da:c6:31:f4:8b:30:ab:1c: 6e:b8:f8:b7:9f:a6:65:5b:ea:5c:83:63:2e:61:0d: 70:6d:12:c5:f4:4f:e3:f6:d9:dc:55:9c:a9:1a:33: 11:53:c3:1f:03:44:26:d4:3f:08:03:b4:a8:ba:22: b2:55:45:d2:46:4f:7b:40:25:bd:7a:a4:bb:40:de: 01:65:45:9f:ed:97:44:f9:44:72:6d:d9:47:77:3f: 4b:66:63:19:15:33:d1:96:46:c3:76:07:2c:f6:6a: fe:e2:ff:d7:00:f2:e8:56:a3:65:07:fe:3d:2f:67: a5:6e:14:84:47:92:b5:f0:4f:98:ea:e8:dc:1b:67: bf:71:05:9a:1c:29:4f:b9:1f:56:28:58:37:90:30: 3b:46:90:90:14:02:7d:25:9b:17:f4:2e:02:ad:2b: 36:6a:e2:d9:ca:63:9b:d6:75:a2:9d:da:0c:7c:df: 31:74:d5:f8:57:f9:f4:f8:91:ee:0a:ed:aa:b6:82: 88:34:68:0e:15:43:92:6e:76:3d:12:1c:30:8b:ab: 03:31:1b:64:20:c5:8c:0e:71:08:69:4b:d0:04:ba: fc:df:b1:54:4f:9b:28:24:f2:1c:6f:5e:f4:2c:90: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:8A:67:E7:A7:91:2D:55:2F:EC:1E:AB:1C:F5:63:05:3D:1C:0A X509v3 Authority Key Identifier: keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d4:fa:87:e0:12:e3:d3:77:a7:a1:30:7c:70:e2:dd:81:c4: 94:a3:9c:95:46:bc:3d:db:42:3e:4c:2d:48:31:d6:a6:af:a1: 8c:ee:ef:65:66:88:a6:40:d9:2e:0a:b2:e1:4b:22:08:9f:a7: 0a:10:a1:5a:73:74:72:4c:6f:65:08:a2:7b:65:c2:13:c8:41: ba:bd:ac:57:d1:a6:76:d0:4d:49:c2:93:dc:18:06:91:41:f7: df:26:f9:16:57:0a:3f:39:59:dc:af:11:a2:4b:08:db:8d:76: 0d:4a:81:8a:2b:a8:f0:b5:37:83:65:15:36:04:25:71:6c:33: f9:e6:5d:10:2b:bd:ab:95:7a:91:bb:80:e5:ad:88:b0:70:68: 64:aa:7b:a3:a5:fe:cc:b2:e0:34:dd:e9:4c:f6:ca:42:0f:e3: 7c:0e:a6:99:7b:43:be:9f:14:18:62:ba:89:8d:dd:94:d0:b1: d1:f3:7c:52:6d:ea:5b:be:72:6f:47:d8:69:8a:66:db:f9:b2: 5b:dc:78:06:fc:b7:25:d1:1f:71:41:88:71:a4:72:96:8b:1c: a0:b9:92:a0:b5:79:80:ed:d1:7e:09:ee:ed:10:5c:a1:a5:6a: cb:72:85:7d:d8:2a:7e:83:7b:f5:fb:ef:74:c2:ed:87:28:66: 49:f5:46:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CIrAikM7RaEpgVhB8GqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy YTNjZTgwHhcNMjYwMTI2MDIwMTA3WhcNMjYwMTI3MDIwMTA3WjAzMTEwLwYDVQQD EygxYjdkOGE2N2U3YTc5MTJkNTUyZmVjMWVhYjFjZjU2MzA1M2QxYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIQKFzvzZq4gbzkB2gbBYydZ/IIO 2sYx9IswqxxuuPi3n6ZlW+pcg2MuYQ1wbRLF9E/j9tncVZypGjMRU8MfA0Qm1D8I A7SouiKyVUXSRk97QCW9eqS7QN4BZUWf7ZdE+URybdlHdz9LZmMZFTPRlkbDdgcs 9mr+4v/XAPLoVqNlB/49L2elbhSER5K18E+Y6ujcG2e/cQWaHClPuR9WKFg3kDA7 RpCQFAJ9JZsX9C4CrSs2auLZymOb1nWindoMfN8xdNX4V/n0+JHuCu2qtoKINGgO FUOSbnY9Ehwwi6sDMRtkIMWMDnEIaUvQBLr837FUT5soJPIcb170LJB4/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt9imfnp5EtVS/sHqsc9WMFPRwKMB8GA1UdIwQY MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt YzliNDcwZGMyNDBiLzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActT6h+AS 49N3p6EwfHDi3YHElKOclUa8PdtCPkwtSDHWpq+hjO7vZWaIpkDZLgqy4UsiCJ+n ChChWnN0ckxvZQiie2XCE8hBur2sV9GmdtBNScKT3BgGkUH33yb5FlcKPzlZ3K8R oksI2412DUqBiiuo8LU3g2UVNgQlcWwz+eZdECu9q5V6kbuA5a2IsHBoZKp7o6X+ zLLgNN3pTPbKQg/jfA6mmXtDvp8UGGK6iY3dlNCx0fN8Um3qW75yb0fYaYpm2/my W9x4Bvy3JdEfcUGIcaRyloscoLmSoLV5gO3Rfgnu7RBcoaVqy3KFfdgqfoN79fvv dMLthyhmSfVGvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:46 2026 by rpki-client