This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: QlLtSUlHcVHTOBcQrlOkTVR+5rk40+dwAksy9WUW8kM= Subject key identifier: 1F:65:FA:7A:DA:94:94:8A:33:84:7E:22:7E:BF:E9:0A:2E:4F:86:90 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 019BF61A35EE5D61368F2786E450AAA36F29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 17FC Signing time: Sun 25 Jan 2026 17:01:11 +0000 Manifest this update: Sun 25 Jan 2026 17:01:11 +0000 Manifest next update: Mon 26 Jan 2026 17:01:11 +0000 Files and hashes: 1: 2jrszJlgV71mCpgTFgHjigRHN0o.roa (hash: WSCn/RX/PMY99fcjdFAAZEiGRwDYCQ00UuZMQjGF8MQ=) 2: 2rG6ym8QVb4IUhWKaVABLqMEudA.roa (hash: Y1qgFOR6xRSvB0/M5PW+1DtdG1enb2kLb7e2HnI2Yl0=) 3: 5CmVOyjMGaOx3Azoa9vaES31gNU.roa (hash: tmSpZLW8QseubN/4w6VFtZ3Yl76f3yLn1OWmBKE45j4=) 4: I_YkIIbROaBHikP_X2q88QJJL04.roa (hash: i+Ynuk2mjQ1KZXlivUmIRXIts9g1U/IQ+uGbqumlnv0=) 5: RmwlWvxPZCDB4xbKMMesGg3bu0I.roa (hash: fIWc46L++Y89xrT3n8iiNza9KgN/VAJAA63Ft2Lj+vM=) 6: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: bKn22Ij51UvEdBRBr3+QTSTleuF+CzhsNT0+LqvtkFk=) 7: UjpGqkRA-GecGub_bNfWIbCr8qA.roa (hash: MyFhNDBxXDyd4tsLsFpkGJ4cdmLuM53A1RTlBXsPZhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:35:ee:5d:61:36:8f:27:86:e4:50:aa:a3:6f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jan 25 17:01:11 2026 GMT Not After : Jan 26 17:01:11 2026 GMT Subject: CN=1f65fa7ada94948a33847e227ebfe90a2e4f8690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:23:68:88:48:69:8f:87:79:ab:ff:0c:4d: f8:c0:ee:60:d9:b0:7a:34:01:84:86:36:7b:77:cd: d7:da:41:4e:ab:ae:c0:f7:2e:7b:86:e1:f3:4d:b4: 6c:b0:35:2a:04:b7:a4:a7:6b:24:8e:eb:9a:97:64: 37:42:aa:e7:d7:66:6a:83:da:7f:e2:4d:7a:c6:ef: c8:47:41:af:ec:a6:06:f2:4c:10:21:00:9e:27:49: d4:89:db:12:7b:1a:eb:ee:25:6e:5b:3d:45:4b:dc: ae:5c:e9:6c:91:25:6d:e9:eb:59:6a:6c:d4:37:e2: c3:8b:85:56:79:e0:82:5c:99:b5:83:60:6f:8d:60: db:5b:b5:44:da:dc:c9:94:4e:77:70:5a:16:92:ce: c6:29:a3:d8:be:cf:f3:7e:c3:fa:76:e5:3d:b9:a5: bc:66:c9:5c:c1:6f:5e:79:8c:0e:c1:f4:5d:80:51: 64:6c:b2:98:1c:15:88:88:d3:f1:ee:b4:b6:6b:af: 31:c7:55:ed:df:97:b5:12:32:07:c4:62:bf:9e:4b: 9e:8b:9b:f3:3e:1e:e2:e1:32:22:7d:51:aa:d6:76: 37:10:67:29:1f:e4:8d:09:70:4d:f7:ea:90:8c:ba: 73:41:1e:bd:5a:65:ed:fd:af:50:f3:42:1a:e6:e2: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:FA:7A:DA:94:94:8A:33:84:7E:22:7E:BF:E9:0A:2E:4F:86:90 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:96:d5:8b:31:43:de:2c:81:8d:6c:d9:e2:56:ab:52:56:09: cc:59:19:12:fd:47:6a:b3:fd:c9:d1:d9:60:63:35:34:a5:5f: f0:91:ea:2f:d7:29:cc:d0:af:e7:9e:78:ba:4f:17:35:46:7c: c4:3c:e8:f2:b1:42:7b:ef:06:ef:8b:ec:37:f6:8f:a8:9a:62: 54:54:80:09:8c:9e:62:22:c0:a6:17:cf:3c:2b:60:96:8c:b3: e6:ff:12:1e:d7:3a:d1:d7:64:b1:0c:0a:e4:42:51:97:51:1d: 8c:05:cd:11:41:f2:85:94:71:1b:61:a0:03:28:5d:db:4c:52: f8:71:28:70:1f:29:91:b2:2a:86:9b:73:7c:f2:15:6d:c4:a9: ac:89:3c:81:e6:9e:d2:6a:65:94:54:00:10:79:23:7a:d6:eb: 8b:c6:6c:c4:14:83:3b:7f:8a:82:fc:e5:f3:c9:37:23:52:36: 01:33:df:e8:35:81:63:5f:71:da:7c:50:97:cc:f2:43:e1:1e: 72:b5:44:18:8a:4a:49:f9:30:59:bb:31:1b:4a:7e:2f:52:3c: 7c:c2:ee:a7:2e:bc:6f:1d:bc:6f:c9:95:72:42:ce:29:4b:87: b2:f5:b3:6b:b4:ce:a6:ef:67:fc:dc:70:a0:ac:9d:d4:1c:d0: 31:f1:de:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GjXuXWE2jyeG5FCqo28pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjYwMTI1MTcwMTExWhcNMjYwMTI2MTcwMTExWjAzMTEwLwYDVQQD EygxZjY1ZmE3YWRhOTQ5NDhhMzM4NDdlMjI3ZWJmZTkwYTJlNGY4NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z4jaIhIaY+Heav/DE34wO5g2bB6 NAGEhjZ7d83X2kFOq67A9y57huHzTbRssDUqBLekp2skjuual2Q3Qqrn12Zqg9p/ 4k16xu/IR0Gv7KYG8kwQIQCeJ0nUidsSexrr7iVuWz1FS9yuXOlskSVt6etZamzU N+LDi4VWeeCCXJm1g2BvjWDbW7VE2tzJlE53cFoWks7GKaPYvs/zfsP6duU9uaW8 ZslcwW9eeYwOwfRdgFFkbLKYHBWIiNPx7rS2a68xx1Xt35e1EjIHxGK/nkuei5vz Ph7i4TIifVGq1nY3EGcpH+SNCXBN9+qQjLpzQR69WmXt/a9Q80Ia5uIuJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9l+nralJSKM4R+In6/6QouT4aQMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJbVizFD 3iyBjWzZ4larUlYJzFkZEv1HarP9ydHZYGM1NKVf8JHqL9cpzNCv5554uk8XNUZ8 xDzo8rFCe+8G74vsN/aPqJpiVFSACYyeYiLAphfPPCtgloyz5v8SHtc60ddksQwK 5EJRl1EdjAXNEUHyhZRxG2GgAyhd20xS+HEocB8pkbIqhptzfPIVbcSprIk8geae 0mpllFQAEHkjetbri8ZsxBSDO3+Kgvzl88k3I1I2ATPf6DWBY19x2nxQl8zyQ+Ee crVEGIpKSfkwWbsxG0p+L1I8fMLupy68bx28b8mVckLOKUuHsvWza7TOpu9n/Nxw oKyd1BzQMfHerA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:48 2026 by rpki-client