This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json) Hash identifier: /fAlcepqQg8q656UNAkFov3tX5ilxMEenRS0VhUYBfY= Subject key identifier: 5C:10:31:19:5E:3D:ED:CC:8E:50:F6:12:54:75:1B:AD:7D:56:37:C8 Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b Certificate serial: 019BF9C027064AAA76CCEB9C2DD912FC5EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft Manifest number: 177C Signing time: Mon 26 Jan 2026 10:01:18 +0000 Manifest this update: Mon 26 Jan 2026 10:01:18 +0000 Manifest next update: Tue 27 Jan 2026 10:01:18 +0000 Files and hashes: 1: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: kqG0LAkiQoBOkoDNfIFLP6SjGSW3SkpK+b5HOOFeVio=) 2: wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa (hash: pjVKRqlOO9z+7mcPGp3goRgbyLNPwv20Ps3g73hf4MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:27:06:4a:aa:76:cc:eb:9c:2d:d9:12:fc:5e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b Validity Not Before: Jan 26 10:01:18 2026 GMT Not After : Jan 27 10:01:18 2026 GMT Subject: CN=5c1031195e3dedcc8e50f61254751bad7d5637c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:24:ac:cf:fb:ff:c7:4c:4c:6f:34:b2:c3: 98:79:51:0f:ca:3f:94:8a:d5:9e:d5:73:90:80:09: 6a:f7:e0:d4:06:bb:a7:90:1f:ff:0b:17:53:cf:b8: 92:9f:26:bb:35:85:3b:09:00:ba:cd:fc:66:6f:11: e1:fb:c4:ec:e6:70:05:65:43:d7:04:6c:82:85:c2: 87:3e:3d:55:c3:2a:ec:32:a6:2a:69:ac:5d:00:f9: 63:32:9f:9f:49:3a:37:a0:55:fe:f6:f2:b8:1f:dd: d3:08:a9:6b:be:c8:9a:b0:46:af:9d:e8:37:23:fe: d4:ea:4c:03:c6:6f:c5:b9:28:1a:9c:31:6a:82:81: 5b:37:81:d8:77:f6:7b:c9:c8:89:5d:0c:23:7f:5a: ea:bc:b6:af:61:a3:a7:9c:d8:58:e0:01:3b:cb:85: ae:6a:2b:3b:58:d4:9f:b2:00:85:08:ea:28:b1:a8: 97:16:34:b9:53:de:62:24:f3:6e:f4:2c:78:0e:60: c1:94:6f:56:9a:7f:a5:07:a8:44:f4:d9:84:2a:61: 29:46:9e:ed:9a:2a:f0:8b:04:24:29:d3:09:45:2d: 2f:f2:14:d6:95:4e:c1:cf:be:a6:de:a5:1a:62:b4: 6f:0d:48:5d:fe:97:b0:af:21:97:92:9e:c0:ef:59: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:10:31:19:5E:3D:ED:CC:8E:50:F6:12:54:75:1B:AD:7D:56:37:C8 X509v3 Authority Key Identifier: keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:87:05:cb:5b:4a:d6:f3:64:5f:1a:aa:83:b1:e6:f4:92:1a: ad:c6:c7:8c:1a:af:22:f5:61:9c:ad:cd:77:41:c9:de:ad:fb: f7:9c:28:5d:a8:d4:17:9d:88:ee:0e:85:21:54:a3:d4:f7:46: 6a:a1:a4:14:f5:d5:e1:28:e8:1c:d6:02:c2:3e:0a:59:1d:04: 5c:b4:8c:cb:ce:0f:6a:44:38:36:a8:5d:2b:a5:32:37:17:d4: e0:10:54:fc:70:e8:cc:be:73:95:3b:e9:17:4e:63:2d:1d:40: 2f:cf:b0:53:4c:02:f4:43:d3:1f:14:64:8e:73:4a:da:ed:84: e7:41:e5:f6:20:22:e3:df:1c:04:b4:e2:52:92:14:b2:c3:62: 27:b4:5c:32:93:31:f9:84:f3:52:05:a7:51:ec:a8:4e:e6:88: 1d:64:ae:90:e6:6f:1b:57:5e:a2:2a:d2:9e:7c:df:48:17:73: c5:26:6e:b6:67:da:ce:04:96:c8:6a:7e:48:7a:f5:85:ef:28: 7c:39:87:50:b6:db:a5:74:f5:f8:b9:25:12:35:ac:82:e7:15: 7e:d9:85:51:0b:21:db:c4:4b:9c:cc:6f:aa:7e:c2:d4:d4:98: 9b:14:e6:2e:cd:db:54:83:c6:a1:db:99:d7:0b:e2:24:28:d8: 8e:f1:6f:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wCcGSqp2zOucLdkS/F6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1 YjU3NGIwHhcNMjYwMTI2MTAwMTE4WhcNMjYwMTI3MTAwMTE4WjAzMTEwLwYDVQQD Eyg1YzEwMzExOTVlM2RlZGNjOGU1MGY2MTI1NDc1MWJhZDdkNTYzN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OwkrM/7/8dMTG80ssOYeVEPyj+U itWe1XOQgAlq9+DUBrunkB//CxdTz7iSnya7NYU7CQC6zfxmbxHh+8Ts5nAFZUPX BGyChcKHPj1VwyrsMqYqaaxdAPljMp+fSTo3oFX+9vK4H93TCKlrvsiasEavneg3 I/7U6kwDxm/FuSganDFqgoFbN4HYd/Z7yciJXQwjf1rqvLavYaOnnNhY4AE7y4Wu ais7WNSfsgCFCOoosaiXFjS5U95iJPNu9Cx4DmDBlG9Wmn+lB6hE9NmEKmEpRp7t mirwiwQkKdMJRS0v8hTWlU7Bz76m3qUaYrRvDUhd/pewryGXkp7A71k91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwQMRlePe3MjlD2ElR1G619VjfIMB8GA1UdIwQY MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt MDU5OWYwYjJiMDlhLzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIcFy1tK 1vNkXxqqg7Hm9JIarcbHjBqvIvVhnK3Nd0HJ3q3795woXajUF52I7g6FIVSj1PdG aqGkFPXV4SjoHNYCwj4KWR0EXLSMy84PakQ4NqhdK6UyNxfU4BBU/HDozL5zlTvp F05jLR1AL8+wU0wC9EPTHxRkjnNK2u2E50Hl9iAi498cBLTiUpIUssNiJ7RcMpMx +YTzUgWnUeyoTuaIHWSukOZvG1deoirSnnzfSBdzxSZutmfazgSWyGp+SHr1he8o fDmHULbbpXT1+LklEjWsgucVftmFUQsh28RLnMxvqn7C1NSYmxTmLs3bVIPGoduZ 1wviJCjYjvFvlA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:32 2026 by rpki-client