This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json) Hash identifier: Oit7tL4PklB9LgK6aCcIHMf0yPkt/G+AMqjB+Jr8jgU= Subject key identifier: 43:73:25:C4:89:E6:9A:96:3C:5E:14:E5:97:31:F3:E9:64:4E:D4:01 Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019BF4D108F457A37C6C0A384E6DABB72E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 11:01:38 +0000 Manifest this update: Sun 25 Jan 2026 11:01:38 +0000 Manifest next update: Mon 26 Jan 2026 11:01:38 +0000 Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=) 2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=) 3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: W7jVBw7gR8QocmXHK95YbkeGCnCpPDW1Y4/hQsNyG7w=) 4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:08:f4:57:a3:7c:6c:0a:38:4e:6d:ab:b7:2e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Jan 25 11:01:38 2026 GMT Not After : Jan 26 11:01:38 2026 GMT Subject: CN=437325c489e69a963c5e14e59731f3e9644ed401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:cb:8c:2f:3a:dd:28:d2:6d:9c:04:6d:39: d8:35:f9:c4:9d:1c:6b:45:45:bc:c5:d0:b0:11:a0: 16:62:cc:f7:f5:e9:7a:75:9b:02:08:29:b2:a4:1f: 0a:1d:4b:32:4f:63:9d:a2:97:03:3f:14:4a:26:91: c6:69:88:85:78:f3:dd:20:59:b8:23:91:d3:0d:73: 8d:8e:d3:21:0a:56:49:4a:b0:53:7f:1a:30:3d:c7: 48:c4:ee:b1:4f:9a:c0:38:de:9b:94:8a:4f:9f:a7: 2b:f4:1f:b8:0a:e4:35:1e:fa:3a:22:57:77:94:f8: 68:7a:a7:cc:23:4e:c9:eb:a9:24:13:c3:85:66:06: b9:81:5f:97:f3:6a:40:da:b4:91:17:d2:d9:cb:e6: 6a:66:3e:f2:07:a8:8f:9b:cb:c5:8d:14:a4:78:60: 51:01:09:14:e3:f8:42:11:a1:01:f6:46:4b:5f:72: b5:ba:e9:4c:88:18:4e:d4:f7:50:31:8f:e1:e7:6d: f8:3e:1b:4b:f5:0c:9d:4d:c1:3e:86:c5:28:5e:4e: f4:17:69:05:4c:66:28:82:4a:09:0a:aa:7f:89:34: 1c:7b:57:f8:ad:c8:09:4b:e5:50:78:08:65:c3:58: 3e:b2:fd:24:fd:af:29:61:8b:7d:6f:df:00:b7:f2: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:73:25:C4:89:E6:9A:96:3C:5E:14:E5:97:31:F3:E9:64:4E:D4:01 X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:67:0f:87:1b:54:59:5a:20:e0:30:30:26:16:89:55:be:6a: 2e:f7:7f:44:c1:8d:b2:e6:be:05:13:c3:8c:98:37:21:4a:d7: 21:0e:4a:e4:af:1f:ce:02:df:83:ee:93:be:89:20:07:b0:85: 60:7b:72:bc:25:24:46:12:38:7d:17:2d:b0:db:05:21:08:83: e8:fd:97:01:49:58:c3:9b:16:00:9d:f9:3d:56:b5:54:8f:0d: d0:d7:15:3d:76:20:de:a4:e8:ff:cc:a9:07:98:80:a3:34:17: 63:2b:37:fa:62:5c:94:07:c3:3b:88:ca:63:c0:4a:b4:49:1b: c2:77:b2:65:5a:59:99:a4:d3:ad:a4:8a:68:33:66:b4:f3:50: ff:6b:35:db:0a:fe:20:3b:32:d6:5a:07:43:73:d0:63:3e:c3: 12:7f:4d:f3:4a:14:8d:28:eb:61:c1:83:28:a1:59:dc:15:fc: f0:b1:22:71:58:1b:5b:f3:e2:d1:d2:5b:84:94:2a:ec:ba:5b: d6:8c:4c:b8:e9:8b:a1:65:55:ef:8f:84:85:46:08:3a:70:7e: 2b:99:56:c4:c0:50:cb:64:1e:84:dc:7b:09:2d:b2:15:ad:8c: 1d:1d:11:1e:f3:82:0c:88:5e:41:ec:c5:02:ee:76:a4:33:79: d8:0a:bd:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Qj0V6N8bAo4Tm2rty4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjYwMTI1MTEwMTM4WhcNMjYwMTI2MTEwMTM4WjAzMTEwLwYDVQQD Eyg0MzczMjVjNDg5ZTY5YTk2M2M1ZTE0ZTU5NzMxZjNlOTY0NGVkNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5fLjC863SjSbZwEbTnYNfnEnRxr RUW8xdCwEaAWYsz39el6dZsCCCmypB8KHUsyT2OdopcDPxRKJpHGaYiFePPdIFm4 I5HTDXONjtMhClZJSrBTfxowPcdIxO6xT5rAON6blIpPn6cr9B+4CuQ1Hvo6Ild3 lPhoeqfMI07J66kkE8OFZga5gV+X82pA2rSRF9LZy+ZqZj7yB6iPm8vFjRSkeGBR AQkU4/hCEaEB9kZLX3K1uulMiBhO1PdQMY/h5234PhtL9QydTcE+hsUoXk70F2kF TGYogkoJCqp/iTQce1f4rcgJS+VQeAhlw1g+sv0k/a8pYYt9b98At/KDRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENzJcSJ5pqWPF4U5Zcx8+lkTtQBMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWcPhxtU WVog4DAwJhaJVb5qLvd/RMGNsua+BRPDjJg3IUrXIQ5K5K8fzgLfg+6TvokgB7CF YHtyvCUkRhI4fRctsNsFIQiD6P2XAUlYw5sWAJ35PVa1VI8N0NcVPXYg3qTo/8yp B5iAozQXYys3+mJclAfDO4jKY8BKtEkbwneyZVpZmaTTraSKaDNmtPNQ/2s12wr+ IDsy1loHQ3PQYz7DEn9N80oUjSjrYcGDKKFZ3BX88LEicVgbW/Pi0dJbhJQq7Lpb 1oxMuOmLoWVV74+EhUYIOnB+K5lWxMBQy2QehNx7CS2yFa2MHR0RHvOCDIheQezF Au52pDN52Aq9Fw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:01:42 2026 by rpki-client