This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json) Hash identifier: kxd3UmQ1IwyQ6h75EleW6valIBDccyu1KRdwAWeMefY= Subject key identifier: 72:15:FA:F9:BA:7D:52:F4:6B:DE:56:7B:39:8E:16:C1:78:98:C5:40 Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019BF4629C7C901E6ABD6383B9FCCB2447CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft Manifest number: 0F70 Signing time: Sun 25 Jan 2026 09:01:01 +0000 Manifest this update: Sun 25 Jan 2026 09:01:01 +0000 Manifest next update: Mon 26 Jan 2026 09:01:01 +0000 Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=) 2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=) 3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: xSV9FN6FVzUYshIkCodFniZI5PJCC3toEW93fa5xd7c=) 4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:9c:7c:90:1e:6a:bd:63:83:b9:fc:cb:24:47:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Jan 25 09:01:01 2026 GMT Not After : Jan 26 09:01:01 2026 GMT Subject: CN=7215faf9ba7d52f46bde567b398e16c17898c540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:a0:36:73:be:c7:62:87:cf:b1:c4:d8:b0: 8c:94:72:85:f9:83:8e:39:72:7c:6a:0b:fd:03:f2: 48:5d:a0:ed:4c:10:a5:8a:72:8e:1e:ce:fc:6a:76: 3e:d9:b7:85:05:27:06:c7:37:40:8e:f1:a1:6a:12: d3:a7:a2:7d:af:bd:ab:8f:5a:0a:7e:4b:2c:96:f0: a9:65:61:51:a1:80:bb:da:ca:4f:79:25:78:34:90: ed:ef:f2:9d:88:8b:57:4f:b6:93:0b:a6:7b:5e:32: 82:69:ad:91:ee:4c:28:57:3d:b1:3f:b5:30:6f:c2: eb:75:7c:d2:ec:09:03:b9:26:18:e9:72:49:22:27: 33:6e:19:ac:46:72:2b:a5:b2:16:6b:11:ff:7d:3e: 35:bb:3a:fe:57:95:83:f1:30:0f:5a:50:d1:06:60: ca:5c:2c:d4:ec:15:b5:f8:2b:7b:d9:66:ab:b8:1a: 2d:dc:fb:31:b3:31:b1:20:74:97:73:50:5f:32:98: fb:60:30:19:30:9f:4a:f4:f4:e5:6c:24:a5:ab:9d: 3f:15:08:14:4b:f8:34:83:36:3b:2b:23:05:c3:12: 0d:9d:dd:97:32:b8:32:d7:12:90:23:42:40:e1:71: 00:b5:b7:f7:55:69:d9:10:3b:25:a0:ee:5e:ae:ff: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:FA:F9:BA:7D:52:F4:6B:DE:56:7B:39:8E:16:C1:78:98:C5:40 X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3c:c7:cb:21:2c:3c:1d:ab:f5:f6:0f:41:51:19:3a:5d:d3: b3:34:fa:d4:28:0b:0d:c4:19:19:38:77:d7:d6:5d:4d:86:a6: 6e:bc:14:8e:58:f7:6f:19:fc:84:f4:56:b1:17:bc:13:26:4c: 33:06:f7:95:da:94:ed:13:33:e7:ac:45:3e:6d:dc:39:b4:05: 5e:01:e6:4f:e2:14:73:56:2c:b9:a7:c0:34:bf:51:9d:fe:fc: 26:1e:59:04:35:df:40:ae:07:d4:2c:eb:61:40:20:f7:d6:6d: 49:be:07:88:37:96:86:c8:e3:1e:29:f6:70:0c:76:d5:d4:fb: ed:f5:e2:33:07:c8:6c:0d:e3:cc:b1:ba:58:62:81:05:96:26: 8e:69:d4:22:45:57:af:29:e7:18:00:af:76:54:30:45:3e:98: b6:9b:bf:1c:e1:16:56:b7:67:dc:3a:3b:f9:ce:40:d4:19:00: 5d:95:29:ac:b7:a7:d9:b0:04:6c:0a:ff:34:e4:31:fc:f0:3b: d4:6e:af:24:c4:ff:66:9a:b3:1d:e9:a3:88:a4:5e:b6:d2:4d: 81:33:e0:c0:34:dd:0c:26:fc:4c:9e:6e:8a:9c:f2:77:bb:f5: e5:fb:bd:41:92:2d:ea:b5:9e:fc:01:75:d5:6c:88:41:e1:41: 44:0f:46:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Ypx8kB5qvWODufzLJEfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjYwMTI1MDkwMTAxWhcNMjYwMTI2MDkwMTAxWjAzMTEwLwYDVQQD Eyg3MjE1ZmFmOWJhN2Q1MmY0NmJkZTU2N2IzOThlMTZjMTc4OThjNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6+gNnO+x2KHz7HE2LCMlHKF+YOO OXJ8agv9A/JIXaDtTBClinKOHs78anY+2beFBScGxzdAjvGhahLTp6J9r72rj1oK fksslvCpZWFRoYC72spPeSV4NJDt7/KdiItXT7aTC6Z7XjKCaa2R7kwoVz2xP7Uw b8LrdXzS7AkDuSYY6XJJIiczbhmsRnIrpbIWaxH/fT41uzr+V5WD8TAPWlDRBmDK XCzU7BW1+Ct72WaruBot3PsxszGxIHSXc1BfMpj7YDAZMJ9K9PTlbCSlq50/FQgU S/g0gzY7KyMFwxINnd2XMrgy1xKQI0JA4XEAtbf3VWnZEDsloO5erv9nqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIV+vm6fVL0a95WezmOFsF4mMVAMB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDzHyyEs PB2r9fYPQVEZOl3TszT61CgLDcQZGTh319ZdTYambrwUjlj3bxn8hPRWsRe8EyZM Mwb3ldqU7RMz56xFPm3cObQFXgHmT+IUc1YsuafANL9Rnf78Jh5ZBDXfQK4H1Czr YUAg99ZtSb4HiDeWhsjjHin2cAx21dT77fXiMwfIbA3jzLG6WGKBBZYmjmnUIkVX rynnGACvdlQwRT6Ytpu/HOEWVrdn3Do7+c5A1BkAXZUprLen2bAEbAr/NOQx/PA7 1G6vJMT/ZpqzHemjiKRettJNgTPgwDTdDCb8TJ5uipzyd7v15fu9QZIt6rWe/AF1 1WyIQeFBRA9Grw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:45:53 2026 by rpki-client