This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json) Hash identifier: izY3whNPCaXhLUo9dDrT6Xjrc0nGQZFVMpx3c+uCl8g= Subject key identifier: B7:E0:15:8F:B0:15:7E:83:B6:F5:22:D3:E4:4B:C8:48:8E:87:73:CB Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e Certificate serial: 019BF5E3F36FD45EB3F045B64E82911E5ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft Manifest number: 163F Signing time: Sun 25 Jan 2026 16:01:55 +0000 Manifest this update: Sun 25 Jan 2026 16:01:55 +0000 Manifest next update: Mon 26 Jan 2026 16:01:55 +0000 Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=) 2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: ybSaruafdDxP+X9CledblL/Ads5wkmr8zykUtudgWHo=) 3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f3:6f:d4:5e:b3:f0:45:b6:4e:82:91:1e:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e Validity Not Before: Jan 25 16:01:55 2026 GMT Not After : Jan 26 16:01:55 2026 GMT Subject: CN=b7e0158fb0157e83b6f522d3e44bc8488e8773cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:d3:55:47:66:3b:a4:ba:9c:dd:7b:4a:51: 3f:80:ab:ae:6e:90:ee:88:99:37:6e:21:03:46:87: 28:4e:a6:b4:f0:3d:76:76:b2:e0:b0:45:be:e3:21: 15:bf:76:4c:bb:24:b4:a5:89:ff:2f:99:cf:9c:5b: 43:98:ae:38:04:c1:58:04:45:2c:36:2e:0b:3f:da: 71:0b:37:bc:e8:35:94:77:e6:83:22:dd:94:f2:e5: aa:2d:d5:6a:77:66:91:6b:35:41:0a:60:0b:38:42: 51:cf:cc:4d:5d:16:47:00:8b:8e:1c:53:14:33:57: 53:5a:eb:0e:fc:2a:a9:5f:dd:13:40:07:53:db:b3: 74:28:e7:cb:52:ae:e7:20:e9:64:65:6f:33:85:d1: e9:6c:0f:16:d4:a9:fe:cf:7a:f8:e7:cd:52:ec:d5: 24:7a:32:3e:57:91:63:61:9a:83:b4:d6:bb:cc:20: 2b:77:c3:34:9c:41:32:9d:32:a4:f4:16:f7:80:d0: d3:a1:59:e6:53:83:6d:8a:bd:0c:e7:08:fe:51:8d: 2c:d7:b2:ac:06:6c:ef:cf:6b:9e:38:cc:b2:f4:01: e0:f8:61:6f:6b:f5:02:f2:d7:9d:c7:87:f6:61:9f: 2a:13:ae:fd:bb:d8:0f:0d:85:99:e2:68:e7:64:41: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E0:15:8F:B0:15:7E:83:B6:F5:22:D3:E4:4B:C8:48:8E:87:73:CB X509v3 Authority Key Identifier: keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:22:c6:ef:f8:53:51:a2:97:49:6d:14:62:89:74:54:dc:ca: 2d:f3:63:94:f7:bc:24:e6:3d:35:34:1f:bf:ab:1e:44:60:fc: 00:af:ef:05:7d:2f:cc:e0:d2:24:02:86:77:9f:38:90:2f:50: 8c:04:20:d1:4c:46:03:cb:4a:8a:11:84:72:fc:a8:c3:27:67: 62:7d:98:39:e6:6d:c2:14:c6:30:53:07:d9:8f:cf:ad:0d:81: 51:06:07:93:f7:5f:68:8a:9d:3e:4d:04:05:f4:6d:24:7b:77: 72:78:e2:5d:0b:d4:99:eb:91:ef:7d:3e:bb:22:cd:6f:3a:10: 4f:59:62:2c:b8:7c:11:7b:b6:fd:1c:6f:2e:33:4c:6a:65:0d: 18:f4:f0:2b:9b:a6:ea:1c:b0:68:03:e3:4c:1e:01:14:f4:75: 4c:82:5f:e9:15:67:f6:f2:c8:1c:0a:c7:c6:7d:d9:b4:e8:8f: b0:62:ca:57:bd:f5:4e:bd:7a:b0:d7:e6:51:c4:c7:a3:7c:cb: f9:95:cb:32:5f:8a:3f:6d:cf:70:65:63:33:18:ac:1b:53:8c: 42:83:14:c8:a5:e5:14:2d:ff:cc:97:dd:b9:e5:b4:8f:d6:82: 75:3a:da:a4:a3:93:46:14:d8:ad:ec:f7:4b:a5:8d:9b:ac:8a: ea:bf:e7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/Nv1F6z8EW2ToKRHl7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTQwNTdmOWVhMDE0MGNlZjdjZTQ3ODkzNjljNWNmMDFm N2M2OGUwHhcNMjYwMTI1MTYwMTU1WhcNMjYwMTI2MTYwMTU1WjAzMTEwLwYDVQQD EyhiN2UwMTU4ZmIwMTU3ZTgzYjZmNTIyZDNlNDRiYzg0ODhlODc3M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SXTVUdmO6S6nN17SlE/gKuubpDu iJk3biEDRocoTqa08D12drLgsEW+4yEVv3ZMuyS0pYn/L5nPnFtDmK44BMFYBEUs Ni4LP9pxCze86DWUd+aDIt2U8uWqLdVqd2aRazVBCmALOEJRz8xNXRZHAIuOHFMU M1dTWusO/CqpX90TQAdT27N0KOfLUq7nIOlkZW8zhdHpbA8W1Kn+z3r4581S7NUk ejI+V5FjYZqDtNa7zCArd8M0nEEynTKk9Bb3gNDToVnmU4Ntir0M5wj+UY0s17Ks Bmzvz2ueOMyy9AHg+GFva/UC8tedx4f2YZ8qE679u9gPDYWZ4mjnZEFNYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfgFY+wFX6DtvUi0+RLyEiOh3PLMB8GA1UdIwQY MBaAFE7kBX+eoBQM73zkeJNpxc8B98aOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUt YTE2NTM1OWE2MjExLzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUtYTE2NTM1OWE2MjEx LzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCLG7/hT UaKXSW0UYol0VNzKLfNjlPe8JOY9NTQfv6seRGD8AK/vBX0vzODSJAKGd584kC9Q jAQg0UxGA8tKihGEcvyowydnYn2YOeZtwhTGMFMH2Y/PrQ2BUQYHk/dfaIqdPk0E BfRtJHt3cnjiXQvUmeuR730+uyLNbzoQT1liLLh8EXu2/RxvLjNMamUNGPTwK5um 6hywaAPjTB4BFPR1TIJf6RVn9vLIHArHxn3ZtOiPsGLKV731Tr16sNfmUcTHo3zL +ZXLMl+KP23PcGVjMxisG1OMQoMUyKXlFC3/zJfdueW0j9aCdTrapKOTRhTYrez3 S6WNm6yK6r/nGw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:23 2026 by rpki-client