This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json) Hash identifier: OfnMUdBZEDx4Gb9s9BLu6wAwqnnRaqu6zIm+YCxZY/8= Subject key identifier: 73:8B:28:8F:93:CF:AD:AE:22:3F:90:56:30:AF:60:9C:DB:DE:85:70 Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c Certificate serial: 019BF5E3B9297F273A10EBDF31B0D9DB5DA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft Manifest number: 150D Signing time: Sun 25 Jan 2026 16:01:40 +0000 Manifest this update: Sun 25 Jan 2026 16:01:40 +0000 Manifest next update: Mon 26 Jan 2026 16:01:40 +0000 Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=) 2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: aoQFKuCIBc1SwRyagcqcPUWtIcxez3bZepI0jPsp0xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:b9:29:7f:27:3a:10:eb:df:31:b0:d9:db:5d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c Validity Not Before: Jan 25 16:01:40 2026 GMT Not After : Jan 26 16:01:40 2026 GMT Subject: CN=738b288f93cfadae223f905630af609cdbde8570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:b7:fb:24:4d:ae:a5:f4:18:90:af:7b:05: 87:f5:e6:46:60:cc:6f:fe:34:e4:97:4c:8c:fa:5b: f7:ad:71:e0:8e:76:30:e5:ac:21:63:2d:69:2c:29: 0c:c1:62:07:85:b5:c3:1d:77:2d:87:05:c2:ca:96: 93:4c:02:b3:b8:15:7a:60:27:27:e9:7a:1a:e4:1d: b7:35:7f:17:95:f9:0b:a6:f5:75:d5:f8:ab:ca:4f: 0d:7f:93:38:d3:03:fc:ae:c4:01:11:26:1c:72:d0: 5f:0f:cc:74:a5:97:e3:8e:41:92:5e:77:41:fd:df: ed:1c:c3:59:93:49:27:7a:27:93:2f:e9:20:af:68: 88:a8:cc:8a:cc:7d:d1:6c:9e:4c:c9:ab:af:dd:a9: 3a:d8:e0:f0:6f:60:27:7c:0d:8a:a0:a7:03:6b:f3: de:f5:18:ef:80:84:36:74:95:20:61:52:0f:fe:d2: 20:1d:c5:81:69:cb:2a:f2:da:37:46:b9:7f:94:2a: 18:5d:4a:ae:93:05:a1:3c:d1:3d:3a:95:91:24:5f: af:b2:0c:56:3a:8c:bf:57:a3:72:67:94:cc:17:68: e2:7d:85:8e:71:42:a8:9b:8e:21:0e:77:94:77:c0: 0b:0f:24:b4:71:6f:37:9e:70:2f:8f:42:e8:4f:41: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:28:8F:93:CF:AD:AE:22:3F:90:56:30:AF:60:9C:DB:DE:85:70 X509v3 Authority Key Identifier: keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:40:60:08:c2:1e:e0:78:73:d3:f6:f6:dc:ce:7f:20:00: 4e:0c:b7:5d:45:f8:bb:05:76:e4:33:bf:b5:09:2e:3c:a7:c6: 0c:b2:40:46:09:35:3c:9c:c0:4a:41:35:d6:bc:d8:30:82:e8: 59:0a:42:b7:73:c3:96:ab:ea:91:94:e4:e1:e7:9a:20:30:65: 34:bb:cb:a6:43:fc:94:3c:40:fe:ec:77:a1:40:d8:ae:16:de: ac:29:2f:af:0f:5c:2c:fa:71:f5:e2:b7:e0:43:fe:a0:e1:54: 00:14:11:d6:62:1e:48:b1:63:da:ec:db:7a:c6:f1:56:42:66: 79:5e:20:b2:d7:ed:e7:02:0a:ea:37:c3:d1:81:1f:ee:14:c7: db:3c:4d:35:d9:b8:be:49:01:cf:c4:ba:52:ca:9c:5c:6b:6c: 62:28:a8:98:8f:45:43:a6:e2:c8:5e:a8:ef:4a:17:d5:64:75: 20:c1:bc:ec:78:e5:ad:ff:6f:5b:16:ee:a6:37:cd:ce:1e:18: 89:87:16:76:fc:46:25:a0:6a:62:87:fc:09:fb:b1:34:73:8a: c1:82:57:85:ef:2c:28:a3:5d:5c:a4:b8:c3:47:a5:5b:1e:b4: 90:51:79:40:0b:bf:a3:cf:fe:a3:8f:7f:0c:7c:66:6b:82:83: 86:05:0c:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv147kpfyc6EOvfMbDZ212hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWU4NmIyMmMyNGJjYTc3MTMwNzFkZTk1ZDY4MjJjMzM5 Y2ZkMWMwHhcNMjYwMTI1MTYwMTQwWhcNMjYwMTI2MTYwMTQwWjAzMTEwLwYDVQQD Eyg3MzhiMjg4ZjkzY2ZhZGFlMjIzZjkwNTYzMGFmNjA5Y2RiZGU4NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EK3+yRNrqX0GJCvewWH9eZGYMxv /jTkl0yM+lv3rXHgjnYw5awhYy1pLCkMwWIHhbXDHXcthwXCypaTTAKzuBV6YCcn 6Xoa5B23NX8XlfkLpvV11firyk8Nf5M40wP8rsQBESYcctBfD8x0pZfjjkGSXndB /d/tHMNZk0kneieTL+kgr2iIqMyKzH3RbJ5Myauv3ak62ODwb2AnfA2KoKcDa/Pe 9RjvgIQ2dJUgYVIP/tIgHcWBacsq8to3Rrl/lCoYXUqukwWhPNE9OpWRJF+vsgxW Ooy/V6NyZ5TMF2jifYWOcUKom44hDneUd8ALDyS0cW83nnAvj0LoT0G8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOLKI+Tz62uIj+QVjCvYJzb3oVwMB8GA1UdIwQY MBaAFE7uhrIsJLyncTBx3pXWgiwznP0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmIt Mzg2ZWVhOGQ4ZGQ2LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmItMzg2ZWVhOGQ4ZGQ2 LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI39AYAjC HuB4c9P29tzOfyAATgy3XUX4uwV25DO/tQkuPKfGDLJARgk1PJzASkE11rzYMILo WQpCt3PDlqvqkZTk4eeaIDBlNLvLpkP8lDxA/ux3oUDYrhberCkvrw9cLPpx9eK3 4EP+oOFUABQR1mIeSLFj2uzbesbxVkJmeV4gstft5wIK6jfD0YEf7hTH2zxNNdm4 vkkBz8S6UsqcXGtsYiiomI9FQ6biyF6o70oX1WR1IMG87Hjlrf9vWxbupjfNzh4Y iYcWdvxGJaBqYof8CfuxNHOKwYJXhe8sKKNdXKS4w0elWx60kFF5QAu/o8/+o49/ DHxma4KDhgUM+g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:10 2026 by rpki-client