This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json) Hash identifier: gIKCDscja5/bXLW6VMPSMri2BNZRQfaXOhMYOYrNIEQ= Subject key identifier: CF:4B:08:E8:DB:A6:ED:8D:89:F3:96:F4:30:FB:9C:BE:8A:A4:92:A9 Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019BF72D33D14F9E8E99FBBB63519F14B25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft Manifest number: 0FE9 Signing time: Sun 25 Jan 2026 22:01:33 +0000 Manifest this update: Sun 25 Jan 2026 22:01:33 +0000 Manifest next update: Mon 26 Jan 2026 22:01:33 +0000 Files and hashes: 1: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (hash: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A=) 2: HR52VHb2xwQIwQ8nYo_MUxwRCms.roa (hash: TbFaT/PpzXVRAiKnbKd45KfqI8+dX+V6Uzbwpos22ak=) 3: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (hash: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY=) 4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: Phn7/YKx3pz6x6gbqmrfaHhCBr5p0rtpoB1jHRa5Op0=) 5: Zt0W_ABdMo3EotkTq9s4b1C7324.roa (hash: S159y02y02b8yf62OVx4JhM0oWbYWFSiWsof3ORZ+Q0=) 6: aOtkixPHmh2enUl6k6sKDrNg_wU.roa (hash: DP493uqQSZ8xRKm9VuJgcghqEcMtl7DiKLDMdLGXe08=) 7: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (hash: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw=) 8: ttShEhSFippZW2mlI_cMFuA1CNg.roa (hash: bXpk4WtzIL7RNvoOYrs7EBMG1GjbpYOMFtRXm7SQom8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:33:d1:4f:9e:8e:99:fb:bb:63:51:9f:14:b2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Jan 25 22:01:33 2026 GMT Not After : Jan 26 22:01:33 2026 GMT Subject: CN=cf4b08e8dba6ed8d89f396f430fb9cbe8aa492a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:6a:8d:5e:c1:b4:33:73:2d:b7:19:e6:df: a6:7b:ef:2e:b8:40:0a:d7:1d:88:42:cf:47:2e:fe: 5b:13:6b:9d:be:1a:6b:4c:3d:34:0e:a9:2d:d2:de: 86:10:b3:b5:fa:6f:45:fe:38:93:86:c3:01:30:2f: 98:cd:11:65:b0:dc:79:fe:8d:ff:12:66:7c:4b:03: 0d:da:56:5b:ab:07:ea:8f:af:bc:37:6e:0e:40:3c: 16:9c:ed:80:b9:1f:0a:39:40:38:db:36:96:69:bc: fc:34:98:2f:a8:b8:81:d9:77:1e:68:86:16:b1:61: e7:5a:d6:86:a9:82:e8:1a:0d:30:2d:88:0d:0e:18: a0:0c:fc:cf:1e:81:00:7a:b6:99:20:e6:96:c5:9a: ec:5c:fb:3a:53:c1:8b:db:72:d2:35:d7:a9:8c:ab: 7f:b7:8f:af:f1:b7:71:37:d4:8d:71:9b:dc:af:f1: 91:f9:59:f9:83:e2:61:fe:3a:be:75:c4:9f:24:0c: 6a:42:d5:fa:60:35:55:df:b7:f8:59:41:9c:c2:4b: 8d:ca:16:0d:0a:3b:18:54:f3:9a:4e:fe:9c:a9:e5: 4a:dd:7b:0b:c0:50:73:f4:65:06:d7:6b:ae:d2:8e: 72:bf:63:92:d1:58:18:52:bf:23:91:b0:36:49:0e: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:08:E8:DB:A6:ED:8D:89:F3:96:F4:30:FB:9C:BE:8A:A4:92:A9 X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:09:b4:1f:36:a4:e3:bb:a5:f8:a6:6f:96:6b:3f:8d:d7:e2: 71:7f:93:98:2a:08:a1:99:d7:32:49:4c:26:4a:5b:14:e8:9e: f5:15:83:e8:34:80:93:de:1a:1b:c8:2f:1c:c2:a1:7b:7b:f4: 77:db:3e:31:80:5e:d6:10:04:05:00:1b:9c:b5:6e:1a:08:9d: fc:95:91:b9:de:78:95:65:98:04:36:dc:6e:92:ec:36:f8:03: ba:8d:53:3e:63:58:98:6b:ed:62:ec:4f:ad:df:15:e7:54:1d: d1:9a:68:2f:f1:16:44:61:4f:a9:af:67:de:3d:67:a4:6a:f2: 03:9b:9a:70:f7:83:b1:76:0f:15:48:d8:5f:04:47:09:e8:38: 2b:64:9e:cd:90:2d:4c:97:46:eb:07:41:d2:bf:a9:0b:88:e3: 9a:ee:56:23:57:17:a4:f5:a2:46:1b:2d:3f:8e:a5:c0:23:0f: a0:59:b8:06:6f:4b:c1:bd:16:9c:da:2e:d0:07:f3:29:14:4c: e5:1a:24:3f:89:ed:81:40:c0:0c:4a:45:0f:89:5e:71:79:e2: 82:da:59:ae:90:03:51:97:eb:57:86:89:5e:b2:92:ad:19:09: bf:98:51:4f:90:f4:9a:a2:2a:19:19:54:42:7b:4a:c4:c3:ed: 26:7a:0a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LTPRT56Omfu7Y1GfFLJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjYwMTI1MjIwMTMzWhcNMjYwMTI2MjIwMTMzWjAzMTEwLwYDVQQD EyhjZjRiMDhlOGRiYTZlZDhkODlmMzk2ZjQzMGZiOWNiZThhYTQ5MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxqjV7BtDNzLbcZ5t+me+8uuEAK 1x2IQs9HLv5bE2udvhprTD00Dqkt0t6GELO1+m9F/jiThsMBMC+YzRFlsNx5/o3/ EmZ8SwMN2lZbqwfqj6+8N24OQDwWnO2AuR8KOUA42zaWabz8NJgvqLiB2XceaIYW sWHnWtaGqYLoGg0wLYgNDhigDPzPHoEAeraZIOaWxZrsXPs6U8GL23LSNdepjKt/ t4+v8bdxN9SNcZvcr/GR+Vn5g+Jh/jq+dcSfJAxqQtX6YDVV37f4WUGcwkuNyhYN CjsYVPOaTv6cqeVK3XsLwFBz9GUG12uu0o5yv2OS0VgYUr8jkbA2SQ5E+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9LCOjbpu2NifOW9DD7nL6KpJKpMB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAm0Hzak 47ul+KZvlms/jdficX+TmCoIoZnXMklMJkpbFOie9RWD6DSAk94aG8gvHMKhe3v0 d9s+MYBe1hAEBQAbnLVuGgid/JWRud54lWWYBDbcbpLsNvgDuo1TPmNYmGvtYuxP rd8V51Qd0ZpoL/EWRGFPqa9n3j1npGryA5uacPeDsXYPFUjYXwRHCeg4K2SezZAt TJdG6wdB0r+pC4jjmu5WI1cXpPWiRhstP46lwCMPoFm4Bm9Lwb0WnNou0AfzKRRM 5RokP4ntgUDADEpFD4lecXnigtpZrpADUZfrV4aJXrKSrRkJv5hRT5D0mqIqGRlU QntKxMPtJnoK6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:13 2026 by rpki-client