This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json) Hash identifier: Stik+jxEAkvC8lMsjuACC9gNsXxQf9nixzc4PM8Eaq8= Subject key identifier: F0:A3:35:D9:A9:13:4B:C8:E7:91:7F:B9:AE:C6:ED:37:AC:AF:F1:5F Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb Certificate serial: 019BF83F732531478B002119104296058ABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft Manifest number: 0C38 Signing time: Mon 26 Jan 2026 03:01:06 +0000 Manifest this update: Mon 26 Jan 2026 03:01:06 +0000 Manifest next update: Tue 27 Jan 2026 03:01:06 +0000 Files and hashes: 1: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (hash: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc=) 2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: Uo80sZn1LeHv8CDScyWFaloHdnVWu6s37EJWAgcDRWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:73:25:31:47:8b:00:21:19:10:42:96:05:8a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb Validity Not Before: Jan 26 03:01:06 2026 GMT Not After : Jan 27 03:01:06 2026 GMT Subject: CN=f0a335d9a9134bc8e7917fb9aec6ed37acaff15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:82:3b:34:a3:89:ac:93:e3:b5:b2:96:b9: db:0f:85:27:47:37:f8:d1:7b:d9:4e:46:d1:f6:b7: 8b:00:69:f8:21:48:0b:b3:7f:89:8f:ff:0d:a7:06: 46:7b:b6:63:65:7d:3a:d4:15:e5:cb:fc:bc:ed:32: aa:6b:4d:a4:92:9f:da:b7:18:6f:d2:2d:ef:e0:e0: c0:56:03:d9:c3:9c:d6:31:54:df:c5:9e:7a:77:4b: 7c:a5:5a:b4:a5:b9:70:ac:4b:b0:ee:b3:22:66:4d: 79:50:37:31:8d:cc:8c:fc:6e:a4:b3:2f:8b:bc:a9: b6:ca:80:31:17:2d:9f:3c:19:32:47:05:22:15:ac: 75:f9:db:1c:f8:3a:76:ae:16:48:76:00:39:1c:79: ea:32:50:bf:00:49:77:2b:ac:3a:27:14:2c:c8:e8: 64:3b:2f:57:c1:fe:75:6a:a5:e6:79:f4:a1:cb:f1: b9:66:8d:19:29:16:0a:d6:5f:39:f5:ad:66:19:dd: 29:f1:23:27:ad:95:df:d9:27:17:d3:f6:3d:46:49: 19:d8:6e:f1:e8:ac:f7:ca:49:17:79:2c:52:e0:a3: a2:cd:da:b4:49:eb:75:05:91:ff:11:7a:22:1e:b1: 57:30:3d:4a:b1:db:13:bf:1f:fa:87:07:3a:59:db: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A3:35:D9:A9:13:4B:C8:E7:91:7F:B9:AE:C6:ED:37:AC:AF:F1:5F X509v3 Authority Key Identifier: keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f6:d4:25:64:5d:9b:d4:84:bc:d7:d8:8e:6c:cc:7e:f6:32: 91:36:92:a6:a7:fd:0c:41:a2:5a:f6:6d:6a:fa:bb:29:d8:e8: 7a:e7:b8:34:c3:5a:41:cb:86:1e:2c:c0:77:c0:d6:5a:9c:71: e3:e1:dd:bb:aa:b8:ea:95:20:a3:03:b5:d9:29:5e:ec:27:8e: 69:e1:f3:b0:1e:09:ee:a3:5e:3b:65:7a:92:4d:d3:43:ad:cd: 7b:b7:73:e1:e9:fe:42:3a:eb:d5:03:a8:01:31:b2:1c:c9:18: 14:a6:6a:83:1d:f7:85:86:d8:b7:59:07:4d:2b:f2:44:fd:95: b5:69:95:92:cd:6b:6f:e9:ff:ac:63:d2:67:b4:b5:37:07:ef: dc:e4:d2:d1:fa:4e:13:b4:15:23:f0:20:a5:32:d8:b3:90:ec: 7a:37:62:b6:f3:21:fa:4f:63:c9:37:cf:bf:e5:4d:f6:57:95: a0:1b:80:0a:f7:db:37:21:c3:ba:94:d3:ca:cf:06:28:6e:46: 9e:de:ee:2f:c2:03:5e:82:02:6b:5c:64:63:71:eb:9c:17:b4: 0e:5d:b0:46:19:65:56:94:86:a4:7e:b9:ef:5a:25:5a:be:29: 81:87:e6:87:aa:b4:d5:03:56:31:b8:a8:1e:0d:0a:f7:6f:7d: 18:a6:ea:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3MlMUeLACEZEEKWBYq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTI0NTRjMTY2OTY0ODZjZjA3MWVkMThlNzk3NmUzNDA0 OTA5ZmIwHhcNMjYwMTI2MDMwMTA2WhcNMjYwMTI3MDMwMTA2WjAzMTEwLwYDVQQD EyhmMGEzMzVkOWE5MTM0YmM4ZTc5MTdmYjlhZWM2ZWQzN2FjYWZmMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoiCOzSjiayT47WylrnbD4UnRzf4 0XvZTkbR9reLAGn4IUgLs3+Jj/8NpwZGe7ZjZX061BXly/y87TKqa02kkp/atxhv 0i3v4ODAVgPZw5zWMVTfxZ56d0t8pVq0pblwrEuw7rMiZk15UDcxjcyM/G6ksy+L vKm2yoAxFy2fPBkyRwUiFax1+dsc+Dp2rhZIdgA5HHnqMlC/AEl3K6w6JxQsyOhk Oy9Xwf51aqXmefShy/G5Zo0ZKRYK1l859a1mGd0p8SMnrZXf2ScX0/Y9RkkZ2G7x 6Kz3ykkXeSxS4KOizdq0Set1BZH/EXoiHrFXMD1KsdsTvx/6hwc6WdvekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCjNdmpE0vI55F/ua7G7Tesr/FfMB8GA1UdIwQY MBaAFLaSRUwWaWSGzwce0Y55duNASQn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYt NGE2ZjcxN2M3NTY0LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iZDE3M2QtNmNmNS00MjUwLWFhMjYtNGE2ZjcxN2M3NTY0 LzEvdHBKRlRCWnBaSWJQQng3UmpubDI0MEJKQ2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPbUJWRd m9SEvNfYjmzMfvYykTaSpqf9DEGiWvZtavq7Kdjoeue4NMNaQcuGHizAd8DWWpxx 4+Hdu6q46pUgowO12Sle7CeOaeHzsB4J7qNeO2V6kk3TQ63Ne7dz4en+Qjrr1QOo ATGyHMkYFKZqgx33hYbYt1kHTSvyRP2VtWmVks1rb+n/rGPSZ7S1Nwfv3OTS0fpO E7QVI/AgpTLYs5DsejditvMh+k9jyTfPv+VN9leVoBuACvfbNyHDupTTys8GKG5G nt7uL8IDXoICa1xkY3HrnBe0Dl2wRhllVpSGpH6571olWr4pgYfmh6q01QNWMbio Hg0K9299GKbqIA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:12 2026 by rpki-client