This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json) Hash identifier: 0bZ8T87ohi3CiMjWOIyReOekBFdzUTy7t8/BS50qnFY= Subject key identifier: D3:BD:BA:E5:15:FB:B0:70:55:50:59:31:5F:31:81:F0:C5:FF:DB:33 Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c Certificate serial: 019BF8084EED22B4421EA052E88B06177D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft Manifest number: 0F71 Signing time: Mon 26 Jan 2026 02:00:52 +0000 Manifest this update: Mon 26 Jan 2026 02:00:52 +0000 Manifest next update: Tue 27 Jan 2026 02:00:52 +0000 Files and hashes: 1: VIZHMby6Q0z8tuLZsidVN3bEF_M.roa (hash: i1v+i2O2Pq/WLn5UBhp0s/SOrdZreDHtW1YwUuevJKQ=) 2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: SdxmoBvotUWi7aSKxcQxlY97hdUWgm6dvtEBZdGqwc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:4e:ed:22:b4:42:1e:a0:52:e8:8b:06:17:7d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c Validity Not Before: Jan 26 02:00:52 2026 GMT Not After : Jan 27 02:00:52 2026 GMT Subject: CN=d3bdbae515fbb070555059315f3181f0c5ffdb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:2a:57:2b:fd:85:3b:f5:5d:55:c0:6b:ef: bb:82:96:61:eb:9a:7a:1f:bd:35:24:de:30:99:7d: fe:04:ed:34:ed:6e:12:00:a5:1e:c9:09:9f:3d:80: 35:e0:a9:72:3f:ab:c1:2c:5d:d3:a8:20:c0:96:38: 94:e2:8f:f8:71:22:d0:16:4e:fb:63:dc:b6:53:1d: 27:7d:97:a4:dc:2a:35:46:5f:43:7d:d1:26:63:57: 53:85:eb:a9:6d:5d:4e:6c:c8:c4:bd:45:8e:7b:86: 92:d3:0c:1d:dc:a4:87:c7:88:3f:3e:b4:03:c4:70: e0:c1:9f:fe:3a:f7:5b:df:a8:fb:d6:5e:1c:96:1d: 8a:d8:ad:e3:df:0c:28:fb:a7:1d:83:ec:f2:7f:fc: ea:42:32:c3:12:2c:77:48:af:7b:5b:48:c0:08:53: f0:3b:17:1a:f9:2e:19:95:b0:15:1f:b7:ca:5b:21: be:96:d6:41:5d:e0:af:6f:4e:9c:99:86:f2:db:76: a5:8c:67:6c:a8:30:5d:9f:65:d8:7b:ae:ad:0e:7f: 88:44:e1:8d:92:c2:c2:07:8f:82:94:c4:d1:e0:0c: e5:99:03:b6:d8:5f:23:36:ab:1e:94:5d:e1:71:bf: 10:3a:1f:7c:03:b3:12:88:a2:64:63:c0:cd:2b:c9: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BD:BA:E5:15:FB:B0:70:55:50:59:31:5F:31:81:F0:C5:FF:DB:33 X509v3 Authority Key Identifier: keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0d:e4:d0:cc:e4:39:97:59:8f:df:3a:9d:e4:61:91:5d:e2: 0e:01:cb:68:45:42:d7:23:43:c6:bf:61:7c:f4:0b:e9:b1:38: fc:4f:3d:e8:2f:fb:18:37:1b:b9:59:4b:df:dd:f6:0b:c0:d0: f7:d5:a7:a4:66:ef:e9:87:e5:61:3e:e1:10:96:6c:74:6c:af: 52:e3:7e:3b:e1:ac:94:bd:d2:25:b5:ac:01:75:6d:be:0f:b0: 79:0b:8c:a5:17:24:de:ad:83:88:d7:03:25:7a:1a:d0:a0:bf: 7f:79:23:de:d5:32:88:0b:f8:54:a7:eb:5f:55:92:0b:8b:9b: 66:df:76:ac:e9:50:f2:95:5a:02:6c:e1:5c:e4:01:7e:3d:ca: e2:97:23:75:39:85:b4:cd:bd:b8:d7:23:23:b8:56:1e:ee:42: 6b:b5:9b:14:0e:49:16:d5:e5:28:11:c6:72:05:61:81:b6:75: 5b:26:71:ed:66:36:50:f7:ae:a0:bf:93:23:69:89:b5:9b:2b: db:bd:15:9b:ac:c1:14:98:f9:8d:17:9f:aa:fe:cc:59:d5:3b: 35:04:d3:8a:3d:40:d3:67:e3:04:1c:be:33:fe:b4:38:98:6b: ae:d9:62:aa:e0:ee:fc:03:d9:46:f8:3a:51:12:12:f9:fc:d9: c5:2b:2f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CE7tIrRCHqBS6IsGF32DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTBmZTBmYWY2ODQ0OTg4YWYyZjc0NGQ1MTZlZGI5YzVk ZmU3MWMwHhcNMjYwMTI2MDIwMDUyWhcNMjYwMTI3MDIwMDUyWjAzMTEwLwYDVQQD EyhkM2JkYmFlNTE1ZmJiMDcwNTU1MDU5MzE1ZjMxODFmMGM1ZmZkYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnAqVyv9hTv1XVXAa++7gpZh65p6 H701JN4wmX3+BO007W4SAKUeyQmfPYA14KlyP6vBLF3TqCDAljiU4o/4cSLQFk77 Y9y2Ux0nfZek3Co1Rl9DfdEmY1dTheupbV1ObMjEvUWOe4aS0wwd3KSHx4g/PrQD xHDgwZ/+Ovdb36j71l4clh2K2K3j3wwo+6cdg+zyf/zqQjLDEix3SK97W0jACFPw Oxca+S4ZlbAVH7fKWyG+ltZBXeCvb06cmYby23aljGdsqDBdn2XYe66tDn+IROGN ksLCB4+ClMTR4AzlmQO22F8jNqselF3hcb8QOh98A7MSiKJkY8DNK8lQCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO9uuUV+7BwVVBZMV8xgfDF/9szMB8GA1UdIwQY MBaAFLbg/g+vaESYivL3RNUW7bnF3+ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMt MjA5ZTFmODQyMjRlLzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMtMjA5ZTFmODQyMjRl LzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABA3k0Mzk OZdZj986neRhkV3iDgHLaEVC1yNDxr9hfPQL6bE4/E896C/7GDcbuVlL3932C8DQ 99WnpGbv6YflYT7hEJZsdGyvUuN+O+GslL3SJbWsAXVtvg+weQuMpRck3q2DiNcD JXoa0KC/f3kj3tUyiAv4VKfrX1WSC4ubZt92rOlQ8pVaAmzhXOQBfj3K4pcjdTmF tM29uNcjI7hWHu5Ca7WbFA5JFtXlKBHGcgVhgbZ1WyZx7WY2UPeuoL+TI2mJtZsr 270Vm6zBFJj5jRefqv7MWdU7NQTTij1A02fjBBy+M/60OJhrrtliquDu/APZRvg6 URIS+fzZxSsv9g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:39 2026 by rpki-client