This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json) Hash identifier: VAqTlZby7CCu3YhfIdKqllC3+2apuo4UTpqNxQkUSso= Subject key identifier: C5:70:36:F8:17:DE:F2:67:C0:37:98:CB:D6:5F:5B:41:27:BF:9A:96 Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Certificate serial: 019BF5074D00F9AE3D389AA9F7DA63CC609C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 12:00:54 +0000 Manifest this update: Sun 25 Jan 2026 12:00:54 +0000 Manifest next update: Mon 26 Jan 2026 12:00:54 +0000 Files and hashes: 1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=) 2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: p1AKoKi5btY08R6VrSfD4KOdllGPAEOjTisfD7g6ZzU=) 3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=) 4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:4d:00:f9:ae:3d:38:9a:a9:f7:da:63:cc:60:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Validity Not Before: Jan 25 12:00:54 2026 GMT Not After : Jan 26 12:00:54 2026 GMT Subject: CN=c57036f817def267c03798cbd65f5b4127bf9a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:9a:5e:31:e6:5a:a4:0a:0b:ff:e9:0c:d6: b1:22:a0:a4:4b:40:e0:49:59:0e:d5:74:b8:2c:37: f3:54:7e:fb:a1:5e:b1:6b:8d:63:a4:b1:97:d2:a5: ba:2b:fc:5f:00:e0:8e:13:b2:bb:01:e0:9e:d6:68: 4e:fe:b1:c8:74:ea:19:02:df:f5:e3:96:71:53:02: d5:e7:c3:37:50:f0:73:49:b8:80:6e:e8:be:d3:2e: e9:55:dc:c5:1a:0f:58:61:99:d0:bd:87:6f:9b:d8: 37:2d:50:23:35:f8:a2:2f:b3:bd:51:76:6a:74:3c: 8b:2d:08:5f:5a:55:44:94:31:eb:52:ed:95:8f:77: 9e:3f:05:0c:ce:33:9a:a0:f5:d7:53:7d:c6:5a:0f: e5:f4:dd:a3:ac:4a:bb:82:07:1c:c5:1c:3d:01:a7: 3a:6f:7c:4e:63:04:77:ff:7b:e1:ab:96:5b:eb:f1: a9:94:6a:6d:09:cb:6c:e1:30:78:5b:28:48:ba:23: 20:3e:af:9e:09:94:85:11:63:60:b8:3c:b4:94:ff: 3a:86:a1:60:c9:58:48:8d:ab:17:45:b5:ee:d1:d8: 99:e3:94:f1:61:6c:39:4e:8f:bc:c7:a4:23:fa:4a: d1:5d:4a:04:8b:00:07:c5:19:99:7d:b3:b4:e8:6a: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:70:36:F8:17:DE:F2:67:C0:37:98:CB:D6:5F:5B:41:27:BF:9A:96 X509v3 Authority Key Identifier: keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4d:32:7b:1f:81:cd:0e:bd:09:a7:55:47:a3:b9:21:35:90: b0:42:57:8b:4d:cc:43:61:3d:a2:62:fb:4f:a6:82:e2:70:9c: 63:ee:74:d9:e9:ec:82:37:fa:f9:1c:74:31:83:fe:9e:d6:39: 94:4b:a0:e5:e8:66:f5:5a:32:96:88:78:47:63:bc:e1:07:21: c2:fb:02:60:c4:cb:f4:fc:92:9c:1c:ca:61:cc:b5:3e:2e:52: c4:69:5c:e3:11:86:76:9f:6a:c3:98:b2:4d:a7:e7:97:bf:01: ad:90:3a:03:5e:4f:06:00:28:6d:8c:6b:2f:46:f5:fa:e4:d1: e7:ad:4c:58:43:ca:86:df:7d:c5:8c:03:61:c4:fa:27:48:fb: c8:92:9e:16:9d:04:56:e3:f3:6a:63:fc:cb:eb:d5:c3:e2:e9: 1c:dc:f4:50:42:81:96:52:0a:cf:20:dd:f1:9d:05:40:90:81: b8:db:a1:03:c8:69:50:42:e7:1b:16:e5:5d:35:5b:6b:1e:6c: c8:a4:10:3b:5b:15:3f:c8:b0:12:de:59:b2:38:00:01:96:9c: 75:e2:a8:63:c6:44:53:98:d9:a1:69:52:d2:76:7f:e7:1a:b9: bf:76:6a:39:bc:2b:19:9c:b7:44:62:fc:9d:0d:b4:33:f1:8b: 94:34:09:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B00A+a49OJqp99pjzGCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1 MTdjODkwHhcNMjYwMTI1MTIwMDU0WhcNMjYwMTI2MTIwMDU0WjAzMTEwLwYDVQQD EyhjNTcwMzZmODE3ZGVmMjY3YzAzNzk4Y2JkNjVmNWI0MTI3YmY5YTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHuaXjHmWqQKC//pDNaxIqCkS0Dg SVkO1XS4LDfzVH77oV6xa41jpLGX0qW6K/xfAOCOE7K7AeCe1mhO/rHIdOoZAt/1 45ZxUwLV58M3UPBzSbiAbui+0y7pVdzFGg9YYZnQvYdvm9g3LVAjNfiiL7O9UXZq dDyLLQhfWlVElDHrUu2Vj3eePwUMzjOaoPXXU33GWg/l9N2jrEq7ggccxRw9Aac6 b3xOYwR3/3vhq5Zb6/GplGptCcts4TB4WyhIuiMgPq+eCZSFEWNguDy0lP86hqFg yVhIjasXRbXu0diZ45TxYWw5To+8x6Qj+krRXUoEiwAHxRmZfbO06Gr5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVwNvgX3vJnwDeYy9ZfW0Env5qWMB8GA1UdIwQY MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt MjNkZjhkZGRmOTc4LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4 LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX00yex+B zQ69CadVR6O5ITWQsEJXi03MQ2E9omL7T6aC4nCcY+502ensgjf6+Rx0MYP+ntY5 lEug5ehm9Voyloh4R2O84QchwvsCYMTL9PySnBzKYcy1Pi5SxGlc4xGGdp9qw5iy Tafnl78BrZA6A15PBgAobYxrL0b1+uTR561MWEPKht99xYwDYcT6J0j7yJKeFp0E VuPzamP8y+vVw+LpHNz0UEKBllIKzyDd8Z0FQJCBuNuhA8hpUELnGxblXTVbax5s yKQQO1sVP8iwEt5ZsjgAAZacdeKoY8ZEU5jZoWlS0nZ/5xq5v3ZqObwrGZy3RGL8 nQ20M/GLlDQJRw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:17 2026 by rpki-client