This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json) Hash identifier: nFjOubiLf8TgQa5NpIm/w7ju0rzSp47ST/muC51rygw= Subject key identifier: D2:7C:CA:61:96:EE:2B:86:F6:F6:44:70:CC:01:A7:4E:81:BB:49:EC Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Certificate serial: 019BFAD2BBFBF9442A4A9B9C98CDD316CA10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft Manifest number: 02C1 Signing time: Mon 26 Jan 2026 15:01:13 +0000 Manifest this update: Mon 26 Jan 2026 15:01:13 +0000 Manifest next update: Tue 27 Jan 2026 15:01:13 +0000 Files and hashes: 1: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: DmNhVtvZxORjSMP1K+2VbcTtd+MdUbbhSjj4FlywQ+4=) 2: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (hash: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:bb:fb:f9:44:2a:4a:9b:9c:98:cd:d3:16:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Validity Not Before: Jan 26 15:01:13 2026 GMT Not After : Jan 27 15:01:13 2026 GMT Subject: CN=d27cca6196ee2b86f6f64470cc01a74e81bb49ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:df:a4:cc:51:41:0d:ac:ea:4a:d3:72:62: 3d:be:49:67:77:ac:23:9f:3e:60:ef:8c:eb:1e:3a: 28:e2:4c:f7:96:c9:15:67:08:a7:39:68:25:ad:19: d3:b5:c1:fb:cb:ba:15:5f:1a:aa:fe:9b:b8:01:b5: 51:ba:c9:76:52:19:11:f6:af:83:96:f1:33:ea:e4: d7:49:62:15:c6:0b:2c:42:fd:26:f9:a3:29:40:65: 73:b0:53:23:d0:cf:80:85:2e:0f:5d:c3:68:88:21: 46:f4:0f:66:16:9e:1e:6c:8a:2a:09:89:53:e3:26: 81:f3:6b:39:63:b5:94:1a:52:5b:3b:b2:ae:18:b1: 60:43:67:48:8d:7e:c5:0d:c4:43:f5:3a:93:83:02: ca:53:10:56:ab:e9:75:8b:a6:64:4b:fe:e2:7c:24: 73:9e:ea:26:2c:9f:1c:4d:a3:58:4d:cb:42:68:8c: 8f:45:f8:00:32:9e:37:12:65:d7:d2:71:7e:26:91: 85:e7:d5:2c:93:0a:b1:c6:af:10:cd:ea:78:de:ff: 16:96:d8:45:90:7f:8d:d2:1e:67:08:18:c7:97:17: 21:0d:6b:3a:e4:fc:ee:c8:e4:79:6e:4d:fa:46:83: 78:d3:47:67:9d:38:fa:3f:51:40:15:2c:0a:5a:8e: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7C:CA:61:96:EE:2B:86:F6:F6:44:70:CC:01:A7:4E:81:BB:49:EC X509v3 Authority Key Identifier: keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1b:11:a0:40:85:ed:5a:61:ae:7d:ac:6c:02:7a:7f:b3:dc: 33:f3:42:13:7c:a8:ba:16:db:64:4d:4e:aa:05:20:2d:57:cf: 24:1a:b6:f7:db:b1:ff:eb:e7:7d:6e:7b:89:0e:6d:ec:7e:d8: ff:e2:39:28:57:60:be:df:68:71:91:8f:96:e7:98:8f:61:0c: bb:b2:21:f0:10:f8:ff:ed:af:41:62:eb:d3:ba:16:c7:fd:e2: ff:cf:61:9d:b5:b0:ed:c4:a1:66:5e:3b:df:21:13:12:0b:50: 43:69:2c:3b:2c:a3:58:a9:ac:4e:ee:49:8b:39:b3:ff:92:de: 5a:e4:84:d1:46:21:38:46:cb:e3:9f:38:0d:3f:12:e7:10:76: ab:a0:09:40:41:ae:4b:10:7f:21:7d:1f:45:05:c7:fb:4b:c6: 43:b5:89:16:49:0a:5d:16:ee:38:ac:12:62:8d:36:e7:a7:77: 5e:d2:4c:0a:24:ae:f4:b8:cf:5a:f6:e5:f0:9b:d8:69:6a:89: 2f:76:09:f7:b0:6d:ab:75:41:e8:b0:ed:a9:a7:ea:ed:68:a1: 3b:c0:f6:b7:27:ec:99:68:ae:61:92:99:18:6e:49:6f:00:c5: 2d:57:c4:d6:db:8e:59:69:30:30:4f:7a:06:a8:6f:c6:03:79: 00:f5:01:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60rv7+UQqSpucmM3TFsoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3 MmNkMTcwHhcNMjYwMTI2MTUwMTEzWhcNMjYwMTI3MTUwMTEzWjAzMTEwLwYDVQQD EyhkMjdjY2E2MTk2ZWUyYjg2ZjZmNjQ0NzBjYzAxYTc0ZTgxYmI0OWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj27fpMxRQQ2s6krTcmI9vklnd6wj nz5g74zrHjoo4kz3lskVZwinOWglrRnTtcH7y7oVXxqq/pu4AbVRusl2UhkR9q+D lvEz6uTXSWIVxgssQv0m+aMpQGVzsFMj0M+AhS4PXcNoiCFG9A9mFp4ebIoqCYlT 4yaB82s5Y7WUGlJbO7KuGLFgQ2dIjX7FDcRD9TqTgwLKUxBWq+l1i6ZkS/7ifCRz nuomLJ8cTaNYTctCaIyPRfgAMp43EmXX0nF+JpGF59Uskwqxxq8Qzep43v8WlthF kH+N0h5nCBjHlxchDWs65PzuyOR5bk36RoN400dnnTj6P1FAFSwKWo7dHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ8ymGW7iuG9vZEcMwBp06Bu0nsMB8GA1UdIwQY MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRsRoECF 7Vphrn2sbAJ6f7PcM/NCE3youhbbZE1OqgUgLVfPJBq299ux/+vnfW57iQ5t7H7Y /+I5KFdgvt9ocZGPlueYj2EMu7Ih8BD4/+2vQWLr07oWx/3i/89hnbWw7cShZl47 3yETEgtQQ2ksOyyjWKmsTu5Jizmz/5LeWuSE0UYhOEbL4584DT8S5xB2q6AJQEGu SxB/IX0fRQXH+0vGQ7WJFkkKXRbuOKwSYo0256d3XtJMCiSu9LjPWvbl8JvYaWqJ L3YJ97Btq3VB6LDtqafq7WihO8D2tyfsmWiuYZKZGG5JbwDFLVfE1tuOWWkwME96 BqhvxgN5APUBZg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:54 2026 by rpki-client