This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json) Hash identifier: qN7dPfFh5bnKsuom/Zg6CC3jWsL87PnwQbTGm5OTZkY= Subject key identifier: FC:43:66:1D:26:E5:BA:B6:CD:BB:E7:E8:F3:E2:16:FA:63:A9:35:48 Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Certificate serial: 019BF7636C87D5FBF200A6F263FEDABD26F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft Manifest number: 8E Signing time: Sun 25 Jan 2026 23:00:46 +0000 Manifest this update: Sun 25 Jan 2026 23:00:46 +0000 Manifest next update: Mon 26 Jan 2026 23:00:46 +0000 Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=) 2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: wF8HvTmtkdYsu+KlB/+peFQ6JZli2a0yWZz3j7xno2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:6c:87:d5:fb:f2:00:a6:f2:63:fe:da:bd:26:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Validity Not Before: Jan 25 23:00:46 2026 GMT Not After : Jan 26 23:00:46 2026 GMT Subject: CN=fc43661d26e5bab6cdbbe7e8f3e216fa63a93548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:41:cc:e8:35:f2:ea:ef:d7:1d:36:13:95: fa:5a:fc:b6:73:3c:c7:8a:02:71:02:a3:d7:b8:c6: 2d:da:5a:87:96:62:ed:de:2b:5a:a4:8b:6a:a4:18: 7d:a8:62:53:21:ef:12:b6:09:96:cf:cb:2c:04:d7: ae:77:09:da:34:60:e4:df:ce:f5:c7:f8:65:c4:6b: 17:5d:c4:12:03:2b:57:f8:4d:2f:49:28:4a:9b:e2: 92:ac:69:8e:4f:14:d9:1c:ae:c3:6d:10:0f:39:e3: 13:01:9b:e4:52:11:10:62:b1:c4:79:d0:ab:f4:8b: 83:20:b0:e3:2e:8b:e5:31:05:9e:df:c7:ed:c2:a1: 24:71:51:41:48:a1:07:d5:ec:b1:8d:df:d2:36:d6: ae:2a:eb:18:08:15:da:ea:07:24:4d:0b:4e:fa:ce: f6:29:46:c0:a1:4b:19:e1:2f:9a:85:a3:fd:31:39: 44:68:6f:72:e8:8c:40:41:c9:85:e6:8d:0c:89:c7: ad:7c:72:53:5f:a0:8c:28:b6:c7:5b:03:d4:4f:d9: 3d:68:1e:90:ed:82:e5:bd:ea:d8:bc:4c:f6:7f:6c: 9c:9c:fa:3b:3b:9a:7c:15:ff:75:3e:bc:a0:da:a5: c8:e2:70:2e:9d:b4:43:8f:07:95:d4:ea:32:84:88: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:66:1D:26:E5:BA:B6:CD:BB:E7:E8:F3:E2:16:FA:63:A9:35:48 X509v3 Authority Key Identifier: keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:cb:7e:39:15:16:db:6d:76:58:18:70:c6:86:da:c4:7d: 61:ce:86:d3:45:02:4f:87:34:66:f9:66:f9:39:ac:48:57:65: 4d:71:0e:eb:da:f4:02:0f:ef:70:d1:a0:7d:e1:ab:ad:96:ef: 9a:52:f6:2f:c8:69:1e:ab:80:fd:b4:ad:cf:52:b2:41:ba:e8: 32:f0:51:45:06:15:56:23:0d:be:de:93:c2:de:52:1f:20:e2: 32:79:33:f8:f9:c3:dc:ca:50:76:8f:69:04:11:a6:34:3a:01: 68:f5:0e:75:53:d4:67:55:44:bf:2b:3e:8e:f3:35:09:fd:fb: 7e:de:ee:da:b1:f7:89:45:28:4f:80:d2:49:6b:bd:86:33:01: 79:18:f7:c3:8f:59:2a:f4:93:42:52:b6:ef:aa:0a:ea:89:c9: a6:56:19:71:41:92:cc:72:0a:a1:67:db:cc:27:8b:12:e2:1c: d8:81:85:8d:3a:c4:c3:5a:f5:fb:a0:77:e3:b9:88:7e:a1:e9: 1e:0c:44:ef:41:cf:9d:16:9c:69:c1:4a:1b:94:ab:52:03:e1: df:c4:11:33:83:ef:bb:47:d9:4b:be:c9:54:2a:d7:29:60:ab: 71:f6:18:30:a0:ca:78:46:3d:7a:35:f5:2b:0b:40:31:98:d1: 48:92:7a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2yH1fvyAKbyY/7avSbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzAwZGQ2YjEzOGQ2YWRiOGY3Yzg0MzhkZDBiMmQ4NTgz ZGM1NjYwHhcNMjYwMTI1MjMwMDQ2WhcNMjYwMTI2MjMwMDQ2WjAzMTEwLwYDVQQD EyhmYzQzNjYxZDI2ZTViYWI2Y2RiYmU3ZThmM2UyMTZmYTYzYTkzNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEFBzOg18urv1x02E5X6Wvy2czzH igJxAqPXuMYt2lqHlmLt3itapItqpBh9qGJTIe8StgmWz8ssBNeudwnaNGDk3871 x/hlxGsXXcQSAytX+E0vSShKm+KSrGmOTxTZHK7DbRAPOeMTAZvkUhEQYrHEedCr 9IuDILDjLovlMQWe38ftwqEkcVFBSKEH1eyxjd/SNtauKusYCBXa6gckTQtO+s72 KUbAoUsZ4S+ahaP9MTlEaG9y6IxAQcmF5o0MicetfHJTX6CMKLbHWwPUT9k9aB6Q 7YLlverYvEz2f2ycnPo7O5p8Ff91Pryg2qXI4nAunbRDjweV1OoyhIiG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxDZh0m5bq2zbvn6PPiFvpjqTVIMB8GA1UdIwQY MBaAFLbADdaxONatuPfIQ43QsthYPcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUt NTY0ZDE4YzY4NjJiLzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUtNTY0ZDE4YzY4NjJi LzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoDLfjkV FtttdlgYcMaG2sR9Yc6G00UCT4c0Zvlm+TmsSFdlTXEO69r0Ag/vcNGgfeGrrZbv mlL2L8hpHquA/bStz1KyQbroMvBRRQYVViMNvt6Twt5SHyDiMnkz+PnD3MpQdo9p BBGmNDoBaPUOdVPUZ1VEvys+jvM1Cf37ft7u2rH3iUUoT4DSSWu9hjMBeRj3w49Z KvSTQlK276oK6onJplYZcUGSzHIKoWfbzCeLEuIc2IGFjTrEw1r1+6B347mIfqHp HgxE70HPnRacacFKG5SrUgPh38QRM4Pvu0fZS77JVCrXKWCrcfYYMKDKeEY9ejX1 KwtAMZjRSJJ66w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:59 2026 by rpki-client