This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: onmkiay6tEgoNKaolBlG6EFEMp9pXJhipOjGU/0PfQc= Subject key identifier: 2D:AC:D3:BD:DB:4E:7A:7D:34:C9:BB:DE:B5:37:55:2F:A7:4F:59:1E Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019BF72CBA256E85FC66BA6ADEE91D3152DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0FE1 Signing time: Sun 25 Jan 2026 22:01:02 +0000 Manifest this update: Sun 25 Jan 2026 22:01:02 +0000 Manifest next update: Mon 26 Jan 2026 22:01:02 +0000 Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=) 2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=) 3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=) 4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=) 5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=) 6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=) 7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: EVxJ+jcepg01EqWyEswtjaUr3RXaw5/HXHJ1tOA6l4c=) 8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=) 9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=) 10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ba:25:6e:85:fc:66:ba:6a:de:e9:1d:31:52:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Jan 25 22:01:02 2026 GMT Not After : Jan 26 22:01:02 2026 GMT Subject: CN=2dacd3bddb4e7a7d34c9bbdeb537552fa74f591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:17:63:1d:e3:83:a3:52:57:2a:38:33:04: f3:b3:f2:7e:fc:80:10:4f:97:41:41:32:0e:16:bd: ce:0b:64:4e:c9:95:b9:60:5c:74:64:b8:e0:2a:85: 7d:43:fe:17:7b:46:b0:85:73:b0:da:a9:ed:5c:29: c1:0c:48:a9:67:e6:c1:d5:00:be:80:4f:f2:06:b4: 62:a0:30:0c:08:f2:f1:6e:42:81:1a:a6:69:b0:a3: 69:58:ad:42:ea:f9:c6:9b:62:aa:f3:fa:27:18:75: f0:36:3c:d6:cf:f4:3f:97:4f:0c:6b:e0:b0:9f:c2: 7e:71:49:1c:0f:8a:8f:e3:f4:d8:87:49:f7:53:e2: d0:3b:08:a3:ad:c9:e3:d6:31:7f:9f:16:1b:82:72: eb:78:74:65:72:2b:fa:81:19:5c:9e:24:ce:19:42: 0d:92:1c:98:b9:14:97:e9:bc:6e:08:5b:38:d5:af: 6d:63:25:69:92:b8:39:4d:64:02:d4:c4:ed:93:9b: ae:dd:80:ce:47:89:bc:ff:e3:3e:25:31:70:b4:24: 59:f0:14:fc:87:95:9e:56:2b:15:d0:49:05:87:11: 58:31:c3:37:2b:4c:0e:fb:5b:b8:7d:b8:a4:48:9f: d1:b7:e7:f0:01:bd:fe:f7:eb:c0:f6:a4:4d:ed:94: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AC:D3:BD:DB:4E:7A:7D:34:C9:BB:DE:B5:37:55:2F:A7:4F:59:1E X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f4:49:ac:e5:2f:d5:e4:92:e6:70:95:c9:f8:c9:48:47:da: 46:24:c6:94:6a:50:b4:db:5c:4b:af:15:29:7c:06:d2:88:62: 99:a5:68:32:1e:c3:dc:0e:e2:f9:95:17:44:7a:7b:ba:6b:e9: 53:f8:67:1d:aa:80:e4:ba:05:87:20:ba:6b:d8:85:45:74:cc: d0:24:3c:e9:fd:aa:68:14:c8:2b:c3:55:f0:86:6f:a6:2e:de: 9c:f6:ad:71:79:ad:78:e1:5b:de:00:b7:aa:2e:ff:0b:44:97: 0a:bc:fb:f7:d0:2a:c6:f0:0a:28:e9:00:bd:fd:b4:75:3b:d0: 4d:58:7b:da:21:2e:54:73:7c:d5:fd:4d:7e:e3:f1:35:6e:48: b8:1e:b4:29:26:d5:7b:ea:dc:42:e5:90:57:a1:f7:12:95:14: fb:da:38:85:06:f0:da:b8:a8:07:59:51:fc:ae:6c:c9:da:f8: 43:b6:5d:43:15:b3:fe:ff:95:a8:c1:81:e0:4d:73:67:25:06: 2a:0a:29:2a:c7:0e:1e:86:f9:49:fa:73:f8:1a:54:3b:b8:4f: 22:e2:30:98:d6:8d:65:31:0b:87:81:20:19:3b:82:03:e5:15: e7:33:82:7a:be:34:62:61:89:13:f3:74:68:a9:66:bf:bb:10: 4c:6b:44:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LLolboX8Zrpq3ukdMVLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwMTI1MjIwMTAyWhcNMjYwMTI2MjIwMTAyWjAzMTEwLwYDVQQD EygyZGFjZDNiZGRiNGU3YTdkMzRjOWJiZGViNTM3NTUyZmE3NGY1OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsAXYx3jg6NSVyo4MwTzs/J+/IAQ T5dBQTIOFr3OC2ROyZW5YFx0ZLjgKoV9Q/4Xe0awhXOw2qntXCnBDEipZ+bB1QC+ gE/yBrRioDAMCPLxbkKBGqZpsKNpWK1C6vnGm2Kq8/onGHXwNjzWz/Q/l08Ma+Cw n8J+cUkcD4qP4/TYh0n3U+LQOwijrcnj1jF/nxYbgnLreHRlciv6gRlcniTOGUIN khyYuRSX6bxuCFs41a9tYyVpkrg5TWQC1MTtk5uu3YDOR4m8/+M+JTFwtCRZ8BT8 h5WeVisV0EkFhxFYMcM3K0wO+1u4fbikSJ/Rt+fwAb3+9+vA9qRN7ZQGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2s073bTnp9NMm73rU3VS+nT1keMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvRJrOUv 1eSS5nCVyfjJSEfaRiTGlGpQtNtcS68VKXwG0ohimaVoMh7D3A7i+ZUXRHp7umvp U/hnHaqA5LoFhyC6a9iFRXTM0CQ86f2qaBTIK8NV8IZvpi7enPatcXmteOFb3gC3 qi7/C0SXCrz799AqxvAKKOkAvf20dTvQTVh72iEuVHN81f1NfuPxNW5IuB60KSbV e+rcQuWQV6H3EpUU+9o4hQbw2rioB1lR/K5sydr4Q7ZdQxWz/v+VqMGB4E1zZyUG KgopKscOHob5Sfpz+BpUO7hPIuIwmNaNZTELh4EgGTuCA+UV5zOCer40YmGJE/N0 aKlmv7sQTGtEgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:23 2026 by rpki-client