This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json) Hash identifier: FYfbQQHco89VC1V1n1wcGBpCkibqAvDYeZyfNlIPx+Y= Subject key identifier: BA:E8:21:E6:7E:26:D1:3B:69:3A:37:D1:A6:48:56:CC:5C:19:4F:1E Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Certificate serial: 019BF53EF25C72BABFF62F14FFB29B98C282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft Manifest number: 17FE Signing time: Sun 25 Jan 2026 13:01:41 +0000 Manifest this update: Sun 25 Jan 2026 13:01:41 +0000 Manifest next update: Mon 26 Jan 2026 13:01:41 +0000 Files and hashes: 1: 5VIlaSHQH8NxTnw-lkuxFUsxkAY.roa (hash: sPTPxc0CroKVp6si6UEZ5BaO2FHxg18oEZaAVxG/qgA=) 2: FzjJcc8_JCLieqi-2oTuL9m5j6E.roa (hash: 1cQA3onX5glxtbbQgLiDRwKJisIaxVmmBI+vQ6zQvr4=) 3: JwHH6LBZedJ4Hv0TunMjXoDshWM.roa (hash: D5XiTo1X7KneliPOhbgW7WFXSwpdBlipBaJGWbMwuis=) 4: OvmTgUIhh_9t9vJEPoXypMFbwHo.roa (hash: ljOxdf4HiiTsksJZ7EMHV+kRnsod4sBa3jvJ2TuvVag=) 5: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: gIO+iG4RNnidzok/UvTz0c31zwn1T7A0hX5NZ9ecGOM=) 6: g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa (hash: SV51OkrNOpOVdTqiKqHM9Ro93TRFuichJHgxteFHtRM=) 7: tYudPSYbftTU4j3hgTGLKXhO4P4.roa (hash: Wb5twGJdbpT/Rb1UlbeVOOTStMG3K3OQ+0w1qq8xOmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:f2:5c:72:ba:bf:f6:2f:14:ff:b2:9b:98:c2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Validity Not Before: Jan 25 13:01:41 2026 GMT Not After : Jan 26 13:01:41 2026 GMT Subject: CN=bae821e67e26d13b693a37d1a64856cc5c194f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:06:17:66:85:84:5a:9c:b1:f6:b7:0d:70: 37:db:b0:b5:13:18:80:b2:23:3e:cc:c4:d5:88:ea: d6:3a:e9:b7:45:40:ca:cc:44:5d:41:33:e8:86:a6: 3d:ff:4e:d8:5d:af:d0:d9:ec:02:a5:52:1a:a2:93: 62:90:c4:d5:21:c5:9f:54:f8:da:85:1c:35:e9:18: 57:9c:78:92:6d:f5:d2:b0:66:b0:d0:34:a3:d6:c0: 32:a1:a3:c8:b9:3f:62:08:74:48:9d:e1:67:3e:6b: a7:00:06:96:fd:f7:8c:07:52:25:ee:61:70:9b:80: a0:bd:c3:53:20:33:bb:61:10:21:c9:3c:30:e9:a7: a3:e6:7f:c6:99:cd:84:54:74:17:eb:b5:37:5c:e9: 2a:e4:5a:e4:34:ce:1b:9a:58:c9:b4:ea:ef:90:68: 78:62:d8:96:e8:eb:54:bd:22:80:04:eb:1c:02:65: 28:80:09:e7:ac:39:ef:73:3d:40:88:01:3e:f8:4e: 87:bb:5b:6f:b2:54:71:79:f6:79:3d:d2:17:d9:e6: 19:40:86:9a:d4:d8:94:89:40:34:ca:4d:ba:50:6d: ba:c4:f1:c7:06:0a:37:97:ee:c4:8b:99:18:47:30: 85:62:0e:45:8e:66:a5:9b:90:2b:a9:8c:8f:8a:35: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:21:E6:7E:26:D1:3B:69:3A:37:D1:A6:48:56:CC:5C:19:4F:1E X509v3 Authority Key Identifier: keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:11:46:3f:22:ba:db:f6:45:b4:07:0c:8a:16:b9:94:ac:ef: 9b:d9:12:aa:3b:61:26:bc:57:ce:8e:06:96:1d:1e:a2:1b:d6: 85:f8:45:0d:9d:66:0f:94:57:32:97:7b:46:02:50:1d:e6:7c: 97:ac:d1:94:1c:95:e0:a1:76:0d:74:27:1e:6d:03:77:b4:9a: 95:f6:0c:7f:5a:55:b4:d3:f5:2e:b8:56:a8:88:b3:db:e9:3c: 1e:d6:91:29:0a:a4:0f:c5:00:22:6f:eb:5e:10:a6:40:95:d1: 29:7c:34:42:3e:81:de:db:03:bd:22:18:9e:e0:b4:40:63:e4: b7:84:a7:88:ca:61:06:da:ac:11:57:46:ad:d7:c4:4d:8e:1a: 37:e4:c6:09:b5:f9:02:75:23:c8:6b:8a:20:62:b7:70:0d:4f: 3c:d4:44:a0:e5:71:9d:ac:e3:f5:10:0f:01:13:4c:d1:bc:9c: 7d:f7:d7:08:25:d3:51:ea:3b:1e:b4:dd:aa:d0:ae:aa:13:0e: 23:c9:90:ef:77:75:9f:55:18:30:db:49:64:a6:46:7d:9e:bf: 21:66:28:b7:e1:78:f7:8d:28:b6:94:2c:f2:af:cb:74:9a:37: 2e:5d:34:9d:fe:41:02:a5:12:53:dd:ad:ee:55:f5:ad:6a:a7: dc:7f:32:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PvJccrq/9i8U/7KbmMKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl OGYwMTgwHhcNMjYwMTI1MTMwMTQxWhcNMjYwMTI2MTMwMTQxWjAzMTEwLwYDVQQD EyhiYWU4MjFlNjdlMjZkMTNiNjkzYTM3ZDFhNjQ4NTZjYzVjMTk0ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx18GF2aFhFqcsfa3DXA327C1ExiA siM+zMTViOrWOum3RUDKzERdQTPohqY9/07YXa/Q2ewCpVIaopNikMTVIcWfVPja hRw16RhXnHiSbfXSsGaw0DSj1sAyoaPIuT9iCHRIneFnPmunAAaW/feMB1Il7mFw m4CgvcNTIDO7YRAhyTww6aej5n/Gmc2EVHQX67U3XOkq5FrkNM4bmljJtOrvkGh4 YtiW6OtUvSKABOscAmUogAnnrDnvcz1AiAE++E6Hu1tvslRxefZ5PdIX2eYZQIaa 1NiUiUA0yk26UG26xPHHBgo3l+7Ei5kYRzCFYg5Fjmalm5ArqYyPijXf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLroIeZ+JtE7aTo30aZIVsxcGU8eMB8GA1UdIwQY MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt MTEyOGU1Y2U2YTViLzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBFGPyK6 2/ZFtAcMiha5lKzvm9kSqjthJrxXzo4Glh0eohvWhfhFDZ1mD5RXMpd7RgJQHeZ8 l6zRlByV4KF2DXQnHm0Dd7SalfYMf1pVtNP1LrhWqIiz2+k8HtaRKQqkD8UAIm/r XhCmQJXRKXw0Qj6B3tsDvSIYnuC0QGPkt4SniMphBtqsEVdGrdfETY4aN+TGCbX5 AnUjyGuKIGK3cA1PPNREoOVxnazj9RAPARNM0bycfffXCCXTUeo7HrTdqtCuqhMO I8mQ73d1n1UYMNtJZKZGfZ6/IWYot+F4940otpQs8q/LdJo3Ll00nf5BAqUSU92t 7lX1rWqn3H8ynA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:24 2026 by rpki-client