This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json) Hash identifier: 7VbPqbgfNZGBna9eGWbQUAFSlglNjcatrm/rqk5nhoE= Subject key identifier: 2C:0E:F2:38:31:13:81:10:6B:A4:31:2E:66:AA:E9:8F:38:D4:85:C1 Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Certificate serial: 019BF6F57D04319FDE8786E918A825D822AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 21:00:41 +0000 Manifest this update: Sun 25 Jan 2026 21:00:41 +0000 Manifest next update: Mon 26 Jan 2026 21:00:41 +0000 Files and hashes: 1: iMHns26Twh_iKXADF620qDAnTy0.roa (hash: GWSmHWITFYygfJHovjbtsHzKxtolOYsM+f2kV7+EZnY=) 2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: 35SHLfw2yNFuPcJWyqmMANF3azO+0jxKypSHfhFTcXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:7d:04:31:9f:de:87:86:e9:18:a8:25:d8:22:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Validity Not Before: Jan 25 21:00:41 2026 GMT Not After : Jan 26 21:00:41 2026 GMT Subject: CN=2c0ef238311381106ba4312e66aae98f38d485c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:62:2d:27:ae:a9:c1:20:8e:0b:09:30:ea: bb:15:c8:d2:d2:4f:e0:52:89:69:74:4d:d3:34:aa: 18:80:74:be:69:30:b8:c7:33:27:a8:b7:c4:c6:51: 32:3f:ed:5b:18:88:c4:68:80:15:a0:41:11:5d:91: 05:ab:5c:3f:1e:79:0c:f0:63:33:90:53:f7:1d:c6: ea:1f:5c:ad:ea:79:be:dd:0f:fd:d4:53:aa:7a:c1: dc:93:ef:8e:9e:5a:84:d7:ab:9b:48:85:c5:a1:f6: e1:0e:6b:32:75:ca:13:9e:ee:be:d4:8b:d1:a9:76: 60:73:01:d0:b5:0c:c3:fb:5d:95:6f:54:f7:0d:18: 39:f6:42:18:12:64:b8:f2:dc:db:1b:c1:da:34:63: bd:9c:fc:c3:a7:52:9d:7f:2f:6f:c3:73:ab:92:7b: c1:cb:76:ba:24:97:49:a4:24:16:81:46:5e:20:24: 1a:66:cb:4e:7b:22:6f:8a:4f:83:0a:89:11:78:5d: 2c:ae:4f:0b:01:2e:56:17:a0:13:50:6e:fc:04:85: c1:8d:ef:03:0b:e2:fe:36:f8:da:d1:20:37:c3:d6: 88:02:08:80:a2:9e:ee:91:8a:a8:63:08:ed:ea:02: f2:67:cc:47:35:99:aa:4c:b9:d7:08:1c:e7:e3:46: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:F2:38:31:13:81:10:6B:A4:31:2E:66:AA:E9:8F:38:D4:85:C1 X509v3 Authority Key Identifier: keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:41:de:ee:d8:9d:1e:b9:c8:47:4e:b3:85:16:17:07:c4:1a: 7c:08:4b:3d:76:01:b0:13:d5:e3:f6:13:2b:95:6a:a9:5b:c6: 5e:0b:6e:1f:35:26:a4:72:43:17:3d:18:cd:eb:98:ea:f2:6c: 13:3d:5c:1b:89:be:00:c4:17:2b:1a:74:a8:a0:ee:be:80:1d: 5f:85:ff:8e:61:c7:9c:d2:a0:ec:84:cf:bd:3b:5c:11:b3:cc: 18:f4:61:4b:6b:7e:df:b3:1b:a9:14:f7:63:71:40:9d:0c:07: 4e:ab:6e:4b:19:42:20:4a:19:0c:1f:c6:6f:57:19:ef:c5:e1: 02:4b:5a:96:78:30:6a:a7:ba:6f:f0:35:36:73:b0:30:18:d4: da:7a:46:a2:66:22:3a:98:67:6e:1e:ca:8e:36:14:1b:9e:54: 1c:62:e6:13:36:a0:ab:83:4d:a9:89:f7:58:04:b9:67:31:4f: 45:2a:c7:98:b4:2f:43:8f:c6:88:ec:b8:4b:7b:03:95:06:e2: bc:89:c3:40:20:bc:4a:96:bb:ae:54:62:cb:e5:91:9e:92:7b: a6:92:b8:b3:5a:25:7e:2d:f8:d3:bd:64:84:34:f9:0b:fd:de: d1:2a:94:b1:5b:12:47:48:f4:f4:96:ca:81:14:62:cc:80:1a: e8:36:87:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29X0EMZ/eh4bpGKgl2CKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl MjFhYjEwHhcNMjYwMTI1MjEwMDQxWhcNMjYwMTI2MjEwMDQxWjAzMTEwLwYDVQQD EygyYzBlZjIzODMxMTM4MTEwNmJhNDMxMmU2NmFhZTk4ZjM4ZDQ4NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAhiLSeuqcEgjgsJMOq7FcjS0k/g UolpdE3TNKoYgHS+aTC4xzMnqLfExlEyP+1bGIjEaIAVoEERXZEFq1w/HnkM8GMz kFP3HcbqH1yt6nm+3Q/91FOqesHck++OnlqE16ubSIXFofbhDmsydcoTnu6+1IvR qXZgcwHQtQzD+12Vb1T3DRg59kIYEmS48tzbG8HaNGO9nPzDp1Kdfy9vw3OrknvB y3a6JJdJpCQWgUZeICQaZstOeyJvik+DCokReF0srk8LAS5WF6ATUG78BIXBje8D C+L+Nvja0SA3w9aIAgiAop7ukYqoYwjt6gLyZ8xHNZmqTLnXCBzn40Z4eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwO8jgxE4EQa6QxLmaq6Y841IXBMB8GA1UdIwQY MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkHe7tid HrnIR06zhRYXB8QafAhLPXYBsBPV4/YTK5VqqVvGXgtuHzUmpHJDFz0YzeuY6vJs Ez1cG4m+AMQXKxp0qKDuvoAdX4X/jmHHnNKg7ITPvTtcEbPMGPRhS2t+37MbqRT3 Y3FAnQwHTqtuSxlCIEoZDB/Gb1cZ78XhAktalngwaqe6b/A1NnOwMBjU2npGomYi Ophnbh7KjjYUG55UHGLmEzagq4NNqYn3WAS5ZzFPRSrHmLQvQ4/GiOy4S3sDlQbi vInDQCC8Spa7rlRiy+WRnpJ7ppK4s1olfi34071khDT5C/3e0SqUsVsSR0j09JbK gRRizIAa6DaHKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:37 2026 by rpki-client