This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json) Hash identifier: N8ryy7MzOZOlaRgVfEPvLH6PhUu6fqrtJ86gN9zkUxo= Subject key identifier: 96:C0:7A:3B:DD:20:E6:C7:0D:06:78:AC:F0:85:0C:88:E1:F0:70:4B Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Certificate serial: 019BF5AC0448C1582835C5FCF1313F9CEF2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft Manifest number: 17E1 Signing time: Sun 25 Jan 2026 15:00:49 +0000 Manifest this update: Sun 25 Jan 2026 15:00:49 +0000 Manifest next update: Mon 26 Jan 2026 15:00:49 +0000 Files and hashes: 1: FKdM40ixAn5Mv7sd-loN1AAlLBg.roa (hash: oxhIXVSaVG2AzY2umVVW0jiHJlu6SrIl96kfe/IkKnU=) 2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: Fh/FMvZzaI4uE/M2Lik5zyNQcaurnAuQCmcwNeUtgPc=) 3: dSp5t5yc3Rt7eYLlXVB2tQkQOHA.roa (hash: yw0NTcVzGVZ2g9EeFJcemHgv4W1LoseyHXACsfaqr5E=) 4: vJlhFKQPyZf5xZGzPiwmwI0LYO8.roa (hash: laywAmoScLZ0Rr4l1pQdmjgh5OVBAWS5dqsDgjehWFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:04:48:c1:58:28:35:c5:fc:f1:31:3f:9c:ef:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Validity Not Before: Jan 25 15:00:49 2026 GMT Not After : Jan 26 15:00:49 2026 GMT Subject: CN=96c07a3bdd20e6c70d0678acf0850c88e1f0704b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:eb:27:4c:2b:51:22:00:9b:45:59:0a:44: 0a:a2:f2:a9:9d:2d:e2:6e:37:0f:17:ab:58:a1:ef: c4:46:9b:27:83:91:eb:af:f4:22:1e:60:9a:e1:48: 65:f5:3c:c9:23:7b:a0:09:e0:28:27:37:13:d3:2e: 73:5f:0d:0c:a1:3b:60:89:d4:b9:84:da:5b:a8:1a: 36:d5:1f:d4:22:9b:bb:94:59:20:72:38:fb:38:0e: c3:af:ff:93:81:8b:b3:cf:36:6f:5e:b8:01:58:7e: 35:9e:bb:12:ae:4b:ac:79:e4:f7:1d:03:33:3d:da: 6b:02:27:ff:9a:e0:af:4b:45:b1:f1:93:70:b0:3e: 25:9b:e5:87:36:0c:fd:80:ab:ed:92:d8:ee:39:39: 90:f0:cc:85:2a:90:2d:e4:b9:be:e8:92:5b:ed:37: 50:20:74:25:17:cb:0b:b9:df:77:7b:47:94:3a:68: 72:fd:36:ec:ed:e7:04:06:47:86:76:7c:26:78:01: 9f:46:a2:7f:83:1a:5a:db:23:fc:b4:39:5b:5f:74: 18:a2:74:23:a8:38:65:e1:f4:0e:b6:e8:f9:2c:ea: 44:91:0c:f9:8f:24:ad:61:78:d5:3f:3d:57:67:2e: 0b:ff:73:6b:80:ac:85:97:6c:ca:e6:04:a8:d7:c2: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C0:7A:3B:DD:20:E6:C7:0D:06:78:AC:F0:85:0C:88:E1:F0:70:4B X509v3 Authority Key Identifier: keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f2:7a:20:9a:8b:69:6e:5c:34:f1:03:1e:e1:00:16:03:a3: cb:6e:f8:7e:df:a9:2b:44:d8:4e:b1:49:0d:8b:da:ac:3e:e2: 24:86:d6:60:40:5f:ae:3b:cd:0e:0f:81:75:9f:71:ad:34:56: 4e:de:94:bd:da:49:8e:a8:e6:f4:bd:7f:5f:a5:32:eb:0a:fa: 4a:b8:8a:8b:2e:5a:36:f4:99:71:51:ea:42:6d:4b:e7:d8:e2: de:4d:41:89:62:09:c1:96:13:45:b3:30:32:d3:e3:96:08:90: 00:1b:30:b9:e9:49:e5:66:02:a6:08:69:fd:7b:ee:20:fd:d0: 5f:3b:56:8b:96:db:d0:ee:ae:3a:c5:79:5e:a0:77:89:29:e5: d0:0a:02:b3:96:91:29:42:ac:c1:1a:d5:cd:97:37:e4:0a:07: 76:08:b2:c0:27:bb:1d:4e:4f:65:bc:c7:b4:93:cc:f0:92:c0: c2:c7:2c:90:ef:74:e8:42:ce:aa:f3:a4:51:c6:64:4e:bc:b6: 95:3c:c8:48:09:5f:a2:9d:6a:9f:de:60:95:a0:29:02:d7:87: 44:5e:19:53:f0:f8:b3:31:4f:82:1f:bf:5b:43:c7:e4:01:51: 3b:b4:ff:f4:f7:a6:69:e1:19:d3:28:f9:3b:7a:77:3d:db:9e: 21:32:ef:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rARIwVgoNcX88TE/nO8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2 ZTg5ZWUwHhcNMjYwMTI1MTUwMDQ5WhcNMjYwMTI2MTUwMDQ5WjAzMTEwLwYDVQQD Eyg5NmMwN2EzYmRkMjBlNmM3MGQwNjc4YWNmMDg1MGM4OGUxZjA3MDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqzrJ0wrUSIAm0VZCkQKovKpnS3i bjcPF6tYoe/ERpsng5Hrr/QiHmCa4Uhl9TzJI3ugCeAoJzcT0y5zXw0MoTtgidS5 hNpbqBo21R/UIpu7lFkgcjj7OA7Dr/+TgYuzzzZvXrgBWH41nrsSrkuseeT3HQMz PdprAif/muCvS0Wx8ZNwsD4lm+WHNgz9gKvtktjuOTmQ8MyFKpAt5Lm+6JJb7TdQ IHQlF8sLud93e0eUOmhy/Tbs7ecEBkeGdnwmeAGfRqJ/gxpa2yP8tDlbX3QYonQj qDhl4fQOtuj5LOpEkQz5jyStYXjVPz1XZy4L/3NrgKyFl2zK5gSo18K63QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbAejvdIObHDQZ4rPCFDIjh8HBLMB8GA1UdIwQY MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt YzM3NzkwZTZkNDgyLzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPJ6IJqL aW5cNPEDHuEAFgOjy274ft+pK0TYTrFJDYvarD7iJIbWYEBfrjvNDg+BdZ9xrTRW Tt6UvdpJjqjm9L1/X6Uy6wr6SriKiy5aNvSZcVHqQm1L59ji3k1BiWIJwZYTRbMw MtPjlgiQABswuelJ5WYCpghp/XvuIP3QXztWi5bb0O6uOsV5XqB3iSnl0AoCs5aR KUKswRrVzZc35AoHdgiywCe7HU5PZbzHtJPM8JLAwscskO906ELOqvOkUcZkTry2 lTzISAlfop1qn95glaApAteHRF4ZU/D4szFPgh+/W0PH5AFRO7T/9PemaeEZ0yj5 O3p3PdueITLvPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:45 2026 by rpki-client