This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: 4OBRBR0JWAxsHP/Pu1j9DcE+O4Ks8Z2w2tAl5JPSgsM= Subject key identifier: CF:7A:0B:4B:FA:29:2D:EE:66:C0:F0:A0:39:05:DA:EF:6F:B1:6B:4B Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019BF6F5858A57C47ED3447E57C61C982B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 21:00:44 +0000 Manifest this update: Sun 25 Jan 2026 21:00:44 +0000 Manifest next update: Mon 26 Jan 2026 21:00:44 +0000 Files and hashes: 1: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (hash: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE=) 2: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 3: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 4: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: wrxI8IKFVxDYF/tKV2rsGXBK+Ba22EnhyX1G4i5I/uA=) 5: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:85:8a:57:c4:7e:d3:44:7e:57:c6:1c:98:2b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Jan 25 21:00:44 2026 GMT Not After : Jan 26 21:00:44 2026 GMT Subject: CN=cf7a0b4bfa292dee66c0f0a03905daef6fb16b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:fd:e9:83:39:9f:c6:fe:84:7b:b2:86:64: 2b:8a:13:ef:43:bd:bf:62:be:1c:5a:18:bd:82:71: 80:8b:12:35:9c:fe:40:bc:39:e8:d8:e5:24:4e:bb: af:d3:38:d0:21:f5:13:50:7d:d4:cd:ef:ed:9b:43: 84:61:97:35:67:2b:44:93:13:d8:42:7d:64:46:6b: 1e:88:2b:0a:13:d1:b8:50:5b:8f:f5:e6:d1:17:f4: d6:35:91:f7:c8:02:c8:88:fc:19:4b:55:58:d9:c7: a6:b4:34:a1:c5:5f:e9:c3:6f:40:0e:c9:24:3b:9e: be:e1:80:60:32:90:91:5b:17:97:93:23:b1:db:a6: 4e:d7:74:07:f1:74:e9:11:94:82:39:68:5e:19:dc: b3:4c:b8:8d:85:cb:bc:d8:e2:a2:99:5e:ac:91:a3: 7c:d9:30:50:9a:c5:d1:d9:54:05:45:bf:22:a3:87: dc:58:12:62:36:18:ab:d5:78:6a:a4:33:af:ab:96: 7a:31:82:99:7e:7a:c4:a8:7d:0b:55:dd:32:24:6e: 11:7f:d0:a6:09:8b:ac:02:34:3b:17:e6:08:2c:da: 6e:04:61:10:96:77:7a:4b:9e:06:72:3d:a0:71:ca: a6:98:72:83:bb:e0:02:44:dc:75:e6:fd:76:36:af: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7A:0B:4B:FA:29:2D:EE:66:C0:F0:A0:39:05:DA:EF:6F:B1:6B:4B X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c8:80:3d:ce:df:bb:38:9e:d2:29:dc:b5:63:34:77:67:db: 28:75:27:cc:c4:7b:d8:df:e5:fa:0a:bd:80:08:01:c2:b6:d7: 2d:15:45:50:d1:98:64:7a:6a:e2:ce:1a:47:e7:6d:c2:e0:e0: 88:07:92:b8:b8:85:41:f5:92:14:00:e4:2c:7b:c7:1c:a0:2a: 04:e4:20:dc:20:2a:de:11:b1:5e:57:7b:79:d6:73:2d:b1:83: d3:3d:90:e0:f6:69:14:c0:45:26:51:11:c5:6a:15:cf:cc:28: 1d:73:a9:10:be:4e:b0:36:de:2c:fe:00:f4:23:e6:e9:b2:4d: 60:67:a0:99:1c:45:0c:31:1d:3b:c8:e4:61:9e:b6:35:e7:af: 1b:87:b9:37:13:1e:83:69:5e:de:0b:c9:24:ed:42:db:f3:5c: 56:9c:f4:7e:79:05:7f:52:a6:e0:5d:88:7b:65:4a:25:4f:ee: 05:9b:3b:2e:4a:f6:7d:42:8e:21:8a:59:7c:d1:21:fd:32:e5: 44:4b:3a:7f:3a:63:c1:8a:20:37:c1:c3:7c:a4:79:3c:0d:4b: b4:d3:66:1e:ca:b3:e5:92:11:a6:72:c0:21:a1:7b:0d:cf:e6: 3f:b1:67:1e:e3:3f:ef:b6:10:0d:07:eb:b6:52:54:83:56:2e: 1b:fb:02:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YWKV8R+00R+V8YcmCs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwMTI1MjEwMDQ0WhcNMjYwMTI2MjEwMDQ0WjAzMTEwLwYDVQQD EyhjZjdhMGI0YmZhMjkyZGVlNjZjMGYwYTAzOTA1ZGFlZjZmYjE2YjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwn96YM5n8b+hHuyhmQrihPvQ72/ Yr4cWhi9gnGAixI1nP5AvDno2OUkTruv0zjQIfUTUH3Uze/tm0OEYZc1ZytEkxPY Qn1kRmseiCsKE9G4UFuP9ebRF/TWNZH3yALIiPwZS1VY2cemtDShxV/pw29ADskk O56+4YBgMpCRWxeXkyOx26ZO13QH8XTpEZSCOWheGdyzTLiNhcu82OKimV6skaN8 2TBQmsXR2VQFRb8io4fcWBJiNhir1XhqpDOvq5Z6MYKZfnrEqH0LVd0yJG4Rf9Cm CYusAjQ7F+YILNpuBGEQlnd6S54Gcj2gccqmmHKDu+ACRNx15v12Nq+6QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM96C0v6KS3uZsDwoDkF2u9vsWtLMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMiAPc7f uzie0inctWM0d2fbKHUnzMR72N/l+gq9gAgBwrbXLRVFUNGYZHpq4s4aR+dtwuDg iAeSuLiFQfWSFADkLHvHHKAqBOQg3CAq3hGxXld7edZzLbGD0z2Q4PZpFMBFJlER xWoVz8woHXOpEL5OsDbeLP4A9CPm6bJNYGegmRxFDDEdO8jkYZ62NeevG4e5NxMe g2le3gvJJO1C2/NcVpz0fnkFf1Km4F2Ie2VKJU/uBZs7Lkr2fUKOIYpZfNEh/TLl REs6fzpjwYogN8HDfKR5PA1LtNNmHsqz5ZIRpnLAIaF7Dc/mP7FnHuM/77YQDQfr tlJUg1YuG/sCkQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:15 2026 by rpki-client