This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json) Hash identifier: oKTybb84C6pZoZLTEwCJ4b/wuHpwjoA5mgCNqnvJ9Gk= Subject key identifier: B8:C8:DF:15:08:96:4E:2C:60:9F:16:B0:D0:42:1B:1C:46:B9:8A:85 Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Certificate serial: 019BF4625B02E5C78D82831872E7D14BAFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft Manifest number: 0CFE Signing time: Sun 25 Jan 2026 09:00:45 +0000 Manifest this update: Sun 25 Jan 2026 09:00:45 +0000 Manifest next update: Mon 26 Jan 2026 09:00:45 +0000 Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=) 2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: SdbDwFAD6nrjI3hlUPluS1MyYifJpfJ1Mu9OnE+8MEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:5b:02:e5:c7:8d:82:83:18:72:e7:d1:4b:af:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Validity Not Before: Jan 25 09:00:45 2026 GMT Not After : Jan 26 09:00:45 2026 GMT Subject: CN=b8c8df1508964e2c609f16b0d0421b1c46b98a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:11:e6:54:70:99:76:73:a1:b8:dc:95:06: 04:19:15:f6:ff:25:1c:f9:f5:96:35:7c:27:63:46: 61:a7:2a:5d:4e:95:f8:e0:a4:1c:46:5b:eb:a8:ab: 72:d3:88:59:9f:ba:1f:51:1c:74:43:ae:dd:d1:ee: f7:b1:c8:4b:85:3e:7f:a7:be:2f:ec:18:29:44:14: 8e:f0:67:5f:35:ee:39:97:12:6f:16:7f:77:22:5d: 82:4b:3c:2a:6c:83:aa:24:1a:e6:f6:c4:f4:0f:57: 5a:91:1a:48:25:bd:62:57:f2:b4:86:a9:04:76:d1: 74:44:f0:79:12:d6:86:6f:2a:14:6b:3d:6a:b6:44: 58:a7:16:d4:af:5e:0d:a3:15:fa:61:f9:55:0d:e2: b4:02:c3:56:f7:ef:d0:c4:1f:68:de:ac:d9:aa:fb: f0:b0:6e:7c:ab:16:8d:e1:89:54:fc:07:f6:a4:76: 54:bc:81:2c:70:92:db:4a:f0:1a:52:aa:19:a0:30: 64:b1:25:5f:7d:fd:0f:dc:04:55:6f:7e:59:9a:82: 30:c4:0e:b7:04:7b:96:8b:24:f9:6a:27:5e:32:82: 60:48:c6:c7:7e:9b:38:a7:9f:31:0e:c6:a1:20:2c: fc:53:d6:04:93:d0:5f:56:54:17:2e:20:12:3e:75: 46:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C8:DF:15:08:96:4E:2C:60:9F:16:B0:D0:42:1B:1C:46:B9:8A:85 X509v3 Authority Key Identifier: keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f6:1b:0e:43:c4:29:b2:e0:49:58:02:75:8c:fa:a8:64:3d: 75:49:bc:2f:cd:e6:c3:c7:c5:25:75:17:24:1a:1c:e4:0c:b9: c1:56:fc:99:0d:c0:d4:80:91:7b:60:f5:bd:44:8f:fb:e3:31: 0c:08:96:87:b0:bc:ff:8d:3b:d0:48:d9:c0:e0:f6:20:7d:48: ed:2f:5e:9d:46:c9:2f:7f:bd:14:51:38:94:9a:fa:f9:11:cf: 1a:26:24:f9:a0:45:00:a0:ed:3b:a7:ba:77:74:4b:db:07:f3: 7e:94:05:85:c1:eb:54:ba:77:15:fb:15:be:aa:e5:c4:d4:65: 2f:6c:54:92:df:7d:53:17:4b:82:56:a6:09:ce:ee:e2:5e:be: 30:5c:d3:c4:70:c3:c1:9c:60:ba:a3:d5:03:02:06:42:b5:7b: 64:69:ea:d7:d3:b8:cd:ac:9f:ec:77:d6:11:02:7f:b7:4f:73: 1c:21:0a:5f:a7:5f:23:23:b1:fa:42:8d:f1:52:d4:9f:07:13: bd:d9:67:b5:be:d5:af:8e:bf:bb:1d:5d:dc:b8:8d:86:14:45: d3:e3:dd:92:cf:b4:c1:fb:ad:b6:58:64:d6:6f:5d:96:3c:45: 45:30:d1:dc:a0:f8:e2:47:4b:fd:99:b6:e4:60:60:2c:ea:d2: 0c:13:dc:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YlsC5ceNgoMYcufRS6/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy MDQyYjIwHhcNMjYwMTI1MDkwMDQ1WhcNMjYwMTI2MDkwMDQ1WjAzMTEwLwYDVQQD EyhiOGM4ZGYxNTA4OTY0ZTJjNjA5ZjE2YjBkMDQyMWIxYzQ2Yjk4YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJsR5lRwmXZzobjclQYEGRX2/yUc +fWWNXwnY0ZhpypdTpX44KQcRlvrqKty04hZn7ofURx0Q67d0e73schLhT5/p74v 7BgpRBSO8GdfNe45lxJvFn93Il2CSzwqbIOqJBrm9sT0D1dakRpIJb1iV/K0hqkE dtF0RPB5EtaGbyoUaz1qtkRYpxbUr14NoxX6YflVDeK0AsNW9+/QxB9o3qzZqvvw sG58qxaN4YlU/Af2pHZUvIEscJLbSvAaUqoZoDBksSVfff0P3ARVb35ZmoIwxA63 BHuWiyT5aideMoJgSMbHfps4p58xDsahICz8U9YEk9BfVlQXLiASPnVGTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjI3xUIlk4sYJ8WsNBCGxxGuYqFMB8GA1UdIwQY MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3 LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfYbDkPE KbLgSVgCdYz6qGQ9dUm8L83mw8fFJXUXJBoc5Ay5wVb8mQ3A1ICRe2D1vUSP++Mx DAiWh7C8/4070EjZwOD2IH1I7S9enUbJL3+9FFE4lJr6+RHPGiYk+aBFAKDtO6e6 d3RL2wfzfpQFhcHrVLp3FfsVvqrlxNRlL2xUkt99UxdLglamCc7u4l6+MFzTxHDD wZxguqPVAwIGQrV7ZGnq19O4zayf7HfWEQJ/t09zHCEKX6dfIyOx+kKN8VLUnwcT vdlntb7Vr46/ux1d3LiNhhRF0+Pdks+0wfuttlhk1m9dljxFRTDR3KD44kdL/Zm2 5GBgLOrSDBPctQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:47 2026 by rpki-client