This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json) Hash identifier: 7U59cfAmlhKjd7H+1jIKjXeRMMzWJ98EtVXfmmfvHiY= Subject key identifier: 12:6A:CE:67:7F:44:6E:78:D2:5E:07:78:A6:63:65:E3:A7:7C:AA:0F Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c Certificate serial: 019BF8AD2BB0161A864F0A39B8F9EBDD01C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 05:00:56 +0000 Manifest this update: Mon 26 Jan 2026 05:00:56 +0000 Manifest next update: Tue 27 Jan 2026 05:00:56 +0000 Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=) 2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=) 3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: 2Z+al/CFQdqUMIY71ZEgfG4LtgIWVy7Bbdz6S1zFtI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:2b:b0:16:1a:86:4f:0a:39:b8:f9:eb:dd:01:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c Validity Not Before: Jan 26 05:00:56 2026 GMT Not After : Jan 27 05:00:56 2026 GMT Subject: CN=126ace677f446e78d25e0778a66365e3a77caa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:a0:85:63:d2:4c:0a:a2:80:f4:b4:ea:b9: bf:63:c8:d0:ca:52:c1:f1:9c:28:97:2b:46:ba:68: b7:12:99:24:b6:ef:e7:97:81:2e:a1:b4:5a:4d:2c: cc:53:2e:8e:1c:7f:44:ec:9a:0b:74:84:83:1e:23: aa:98:07:af:47:c4:14:02:18:49:2d:97:ae:44:b5: 0e:f4:a0:72:0a:fa:8c:a3:8e:53:d7:37:10:75:b2: af:01:a2:49:ab:5c:43:1f:6f:7c:89:fd:83:37:52: 94:f3:24:d9:cf:a9:1b:6c:ce:de:b7:aa:47:54:18: 4a:e1:8c:51:c3:ce:62:ce:63:dd:73:81:ed:0e:6c: 6f:82:43:cb:0d:0a:ba:2e:e7:25:5a:b1:75:0a:11: dd:f5:ab:e7:1c:21:34:1c:23:ee:e3:01:77:a3:51: 24:90:88:33:d6:d6:8d:cb:8d:73:4c:1a:a0:b9:7c: d7:bf:15:2a:3e:92:1f:6e:22:a8:50:0b:cd:70:59: 53:1f:c4:69:26:22:db:65:80:7f:d9:10:d7:23:70: e5:02:29:5e:c9:81:85:fc:f5:ca:e3:83:ca:e1:97: c8:c9:99:88:91:16:06:3b:0c:ea:53:50:81:aa:f9: 74:2d:1d:ce:e0:df:ff:80:af:51:2d:c5:b3:a3:20: 9e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6A:CE:67:7F:44:6E:78:D2:5E:07:78:A6:63:65:E3:A7:7C:AA:0F X509v3 Authority Key Identifier: keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3d:a2:22:82:c1:53:e7:72:8c:82:69:b9:23:72:7b:f5:df: 8f:2b:11:71:3e:d7:ea:b4:99:79:0e:db:0b:d7:ba:b4:c0:3f: 45:97:cb:3a:e8:27:12:1a:c2:bd:41:c9:91:8d:85:30:2f:8e: a5:ed:71:1d:ca:45:4d:8d:b8:53:2e:b4:15:68:4a:cc:1d:f5: d3:79:20:6e:97:82:4b:63:ff:e4:48:6d:ea:86:34:3c:f5:b8: ac:b1:af:0d:cc:ef:38:ee:39:7f:39:90:b1:c0:c4:14:47:33: 23:8e:76:f7:59:6f:67:04:8d:76:42:f5:3c:f7:a8:ae:03:70: 6f:37:63:23:20:3c:65:6f:6f:45:0d:96:d9:cd:9f:f1:6f:a1: c0:33:71:05:31:bd:91:0b:d9:a6:f5:a2:f8:b1:e0:d3:7a:ea: 95:5e:05:78:91:b8:db:ff:8a:95:b3:09:96:96:73:05:41:79: 0b:fa:e8:06:86:43:0e:49:36:41:42:e2:2a:22:f7:25:04:5f: 1a:00:f0:a7:9a:e4:a8:af:58:00:bd:ac:2e:9a:87:11:22:5c: d1:b8:6a:27:5e:9f:59:c3:ac:a6:b3:99:2d:ad:35:33:e8:7d: dc:ec:59:c6:7f:7b:20:87:2e:3a:55:d8:b0:42:8b:6b:54:17: 0d:c5:06:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rSuwFhqGTwo5uPnr3QHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx ZGUxMWMwHhcNMjYwMTI2MDUwMDU2WhcNMjYwMTI3MDUwMDU2WjAzMTEwLwYDVQQD EygxMjZhY2U2NzdmNDQ2ZTc4ZDI1ZTA3NzhhNjYzNjVlM2E3N2NhYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxByghWPSTAqigPS06rm/Y8jQylLB 8ZwolytGumi3Epkktu/nl4EuobRaTSzMUy6OHH9E7JoLdISDHiOqmAevR8QUAhhJ LZeuRLUO9KByCvqMo45T1zcQdbKvAaJJq1xDH298if2DN1KU8yTZz6kbbM7et6pH VBhK4YxRw85izmPdc4HtDmxvgkPLDQq6LuclWrF1ChHd9avnHCE0HCPu4wF3o1Ek kIgz1taNy41zTBqguXzXvxUqPpIfbiKoUAvNcFlTH8RpJiLbZYB/2RDXI3DlAile yYGF/PXK44PK4ZfIyZmIkRYGOwzqU1CBqvl0LR3O4N//gK9RLcWzoyCe6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJqzmd/RG540l4HeKZjZeOnfKoPMB8GA1UdIwQY MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD2iIoLB U+dyjIJpuSNye/XfjysRcT7X6rSZeQ7bC9e6tMA/RZfLOugnEhrCvUHJkY2FMC+O pe1xHcpFTY24Uy60FWhKzB3103kgbpeCS2P/5Eht6oY0PPW4rLGvDczvOO45fzmQ scDEFEczI45291lvZwSNdkL1PPeorgNwbzdjIyA8ZW9vRQ2W2c2f8W+hwDNxBTG9 kQvZpvWi+LHg03rqlV4FeJG42/+KlbMJlpZzBUF5C/roBoZDDkk2QULiKiL3JQRf GgDwp5rkqK9YAL2sLpqHESJc0bhqJ16fWcOsprOZLa01M+h93OxZxn97IIcuOlXY sEKLa1QXDcUGmA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:18 2026 by rpki-client