This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: OdBxlGHytcMaZ712olrxM+odWZFvbP/i9/AEXVTby4Y= Subject key identifier: 23:D2:29:30:BC:F3:84:29:A9:0C:FA:38:5B:9B:0B:0E:40:D7:F4:8B Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019BF3BE2D5F4D77A83A58E3CBB88B871EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 06:01:25 +0000 Manifest this update: Sun 25 Jan 2026 06:01:25 +0000 Manifest next update: Mon 26 Jan 2026 06:01:25 +0000 Files and hashes: 1: 8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa (hash: RW6Oi5z/RcWRGaIQCUZbkdEin/DlQFbS+I/SqrTulAA=) 2: D9XgvWWebov0kTHT7gIL8Ih7bHs.roa (hash: aj3nCPdPkIlGQaAtMeiOa/fgxKRQ1tyiiopMxi8yVr4=) 3: QYAHCBRM8EgpLd4QrnaJwLlcTLc.roa (hash: xqjfeJepdMLIOn6HjKXxzAl/Wm+IlrawB25mUwSfoiA=) 4: RcHUb_7vBCGqZc4v6_mqpbqVtgg.roa (hash: 3AVyDWtRAwLaTj0fPOPIeQe2qLZtznTvofJILaYyw80=) 5: RjTlguRgcAqb5mkC5whD5YBTtos.roa (hash: rBmFvqm9la/6Kn095Es+kobXfpMnMG+qYPPeDl24mPQ=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: niYq9H8MCtHxdGnbs0rxPcZ2kT71vdWjQrKgOQVa9TA=) 7: Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa (hash: 0JlsZcX72VxzLBMarlq5cR72GCSjJdlrkx349OBiKdo=) 8: eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa (hash: FEmPy+g6KDj1MyKjGKfSJKzYk99+EtTwkcX8ACmfm44=) 9: hbzNsJKUFj9YPemgxueORzyaAR4.roa (hash: sHENi6SxTMQzE9Umyq+oAU2zV4mQDeA2gga98LgBks4=) 10: xdcZpWEbrxMAWI2r6x9fHtNAeos.roa (hash: pQvg5+txs+5H+YwG4r27g6XNgPtuojFD8BoBa08f/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:2d:5f:4d:77:a8:3a:58:e3:cb:b8:8b:87:1e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 25 06:01:25 2026 GMT Not After : Jan 26 06:01:25 2026 GMT Subject: CN=23d22930bcf38429a90cfa385b9b0b0e40d7f48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:0d:72:e7:30:ee:83:af:32:61:9d:98:9f: 42:3f:9e:f8:e4:81:13:e9:98:8f:20:a8:f7:12:31: ee:37:1c:c2:20:c1:f4:7a:53:3a:ea:16:1e:2d:eb: e8:b5:fe:8e:42:86:4c:c2:2b:02:f2:11:dd:b3:25: 4a:36:80:e0:19:b6:4e:94:50:a6:c8:03:77:c3:d6: fa:a9:db:ab:e2:1b:1f:5e:2c:9b:f8:fb:7e:bc:74: ec:97:17:a0:6d:6e:f1:4d:52:f6:66:4a:3b:1d:2e: 9e:20:4f:c7:fc:ac:03:29:69:5e:b2:29:10:7b:15: 76:e0:51:6e:d9:9a:10:23:83:f8:ff:55:a5:42:ba: de:eb:98:e7:12:3e:97:95:f3:1e:7b:3a:0e:1d:5f: 6c:98:88:be:27:db:6e:3f:1c:3a:5f:bf:2e:dc:b9: 2f:0b:d2:64:4c:a0:b5:9d:c4:6f:91:d4:fe:73:93: 9f:5b:47:cc:71:80:c8:8d:dc:6b:b9:db:68:fe:79: eb:a0:df:53:00:2d:9f:ee:4f:6b:c9:f3:ee:fc:25: da:b6:1a:8f:4c:ba:40:38:6c:35:af:00:0b:53:44: d4:8b:f6:d0:1e:2e:0b:bf:64:48:8d:b9:46:17:9d: 65:58:bb:02:3a:24:c8:bf:d2:a0:78:b5:54:2d:14: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:29:30:BC:F3:84:29:A9:0C:FA:38:5B:9B:0B:0E:40:D7:F4:8B X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:19:fb:92:1b:60:6e:cc:1f:e5:73:56:6f:fa:74:db:de:07: 62:d9:65:93:1d:ca:26:fe:23:c2:dc:1b:79:b4:49:8c:3f:d2: 67:cf:0f:be:db:31:05:e1:c8:8c:8d:1e:0e:75:11:0a:55:b0: f2:3e:1a:7c:5f:2a:80:9f:b4:98:76:19:98:cd:df:9a:48:2f: e4:2e:60:24:0f:71:3b:e5:f4:8d:6e:5a:d9:5d:1c:15:6a:8c: 6c:07:46:d9:9d:ea:21:0b:26:48:43:aa:f7:af:d9:27:a0:f8: 18:54:d3:0e:e7:de:57:bb:e9:80:7f:c7:cb:5c:13:b3:24:2a: 14:aa:22:56:97:40:96:7a:a2:ff:56:f1:9c:00:0e:b7:c9:8a: 71:b3:06:96:93:8a:6b:7e:c6:8b:6b:4f:43:05:87:1d:c0:6c: f7:8e:f9:72:b9:c9:2b:5f:92:16:f9:cf:a6:88:81:6d:73:99: 4c:98:3f:f0:d8:31:55:a1:2b:0f:f6:bd:0d:f8:46:66:49:5f: 99:b8:21:79:bb:97:82:98:16:93:10:23:07:1d:0b:09:bb:b5: 30:cf:18:4a:8f:0c:d4:4c:ad:b8:e6:5c:90:3e:a0:0d:63:6a: 49:1f:b1:32:ea:e7:d1:ff:f7:d0:db:c2:cf:ad:1f:63:22:af: c4:84:67:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvi1fTXeoOljjy7iLhx6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTI1MDYwMTI1WhcNMjYwMTI2MDYwMTI1WjAzMTEwLwYDVQQD EygyM2QyMjkzMGJjZjM4NDI5YTkwY2ZhMzg1YjliMGIwZTQwZDdmNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa8Ncucw7oOvMmGdmJ9CP5745IET 6ZiPIKj3EjHuNxzCIMH0elM66hYeLevotf6OQoZMwisC8hHdsyVKNoDgGbZOlFCm yAN3w9b6qdur4hsfXiyb+Pt+vHTslxegbW7xTVL2Zko7HS6eIE/H/KwDKWlesikQ exV24FFu2ZoQI4P4/1WlQrre65jnEj6XlfMeezoOHV9smIi+J9tuPxw6X78u3Lkv C9JkTKC1ncRvkdT+c5OfW0fMcYDIjdxrudto/nnroN9TAC2f7k9ryfPu/CXathqP TLpAOGw1rwALU0TUi/bQHi4Lv2RIjblGF51lWLsCOiTIv9KgeLVULRS13wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPSKTC884QpqQz6OFubCw5A1/SLMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxn7khtg bswf5XNWb/p0294HYtllkx3KJv4jwtwbebRJjD/SZ88PvtsxBeHIjI0eDnURClWw 8j4afF8qgJ+0mHYZmM3fmkgv5C5gJA9xO+X0jW5a2V0cFWqMbAdG2Z3qIQsmSEOq 96/ZJ6D4GFTTDufeV7vpgH/Hy1wTsyQqFKoiVpdAlnqi/1bxnAAOt8mKcbMGlpOK a37Gi2tPQwWHHcBs9475crnJK1+SFvnPpoiBbXOZTJg/8NgxVaErD/a9DfhGZklf mbghebuXgpgWkxAjBx0LCbu1MM8YSo8M1EytuOZckD6gDWNqSR+xMurn0f/30NvC z60fYyKvxIRnrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:12 2026 by rpki-client