This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json) Hash identifier: K4JC9UpJe+NYdJm2oA97DBDOcPFb/nVPfCOrOmmHZ0Q= Subject key identifier: 41:0C:23:BF:53:2B:4B:40:69:CA:D3:4D:32:5C:E9:D1:FF:76:E6:72 Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Certificate serial: 019BF687FE1BEC742F66D9DFED8618643712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft Manifest number: 1340 Signing time: Sun 25 Jan 2026 19:01:06 +0000 Manifest this update: Sun 25 Jan 2026 19:01:06 +0000 Manifest next update: Mon 26 Jan 2026 19:01:06 +0000 Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=) 2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=) 3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: 6ziOXsL9siodQGfybgnrYADDH6qd6vokjPTTZEjtr9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fe:1b:ec:74:2f:66:d9:df:ed:86:18:64:37:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Validity Not Before: Jan 25 19:01:06 2026 GMT Not After : Jan 26 19:01:06 2026 GMT Subject: CN=410c23bf532b4b4069cad34d325ce9d1ff76e672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:46:6f:4d:7d:57:ed:7e:c6:6f:f8:42:e3: 78:c6:5a:7a:e3:a2:f8:a3:08:dc:c1:1a:69:8f:5c: 86:16:a9:53:b9:9a:3c:ff:05:9f:29:74:36:7b:58: 04:6c:c0:99:10:e6:7d:57:dc:27:a7:26:5f:86:2d: b2:3c:77:c5:8a:a0:8c:2d:38:3b:90:a6:e5:88:37: ee:7f:5a:7b:63:5f:a4:f4:f0:87:77:75:75:74:68: d1:36:58:dc:26:1d:02:57:b5:b7:bb:21:20:1c:a2: 36:55:eb:8d:38:38:e2:ce:09:6f:6f:4d:1c:95:a4: 13:c4:cf:e9:20:ec:22:72:08:94:bf:59:3f:45:66: b1:54:9b:a5:90:f1:b4:61:ec:32:e1:1b:de:b1:dd: ad:d4:10:24:86:d4:6c:43:0f:6b:0a:4e:07:0e:9b: d8:1c:d7:71:51:d5:e4:a7:f5:e5:a3:5a:f7:1a:cf: a6:4f:34:60:16:96:88:73:a3:56:21:2e:4c:b0:89: 92:f9:87:87:11:88:9a:d7:5d:7c:4c:a8:fc:50:b7: d2:bd:92:e1:93:68:1e:50:41:04:e8:b9:e2:42:3d: d5:d7:89:f3:7b:ed:13:4c:1c:b6:9c:a7:ec:23:68: f3:bc:e9:6e:d6:58:d5:ad:d9:2b:7a:f0:17:2c:0e: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:23:BF:53:2B:4B:40:69:CA:D3:4D:32:5C:E9:D1:FF:76:E6:72 X509v3 Authority Key Identifier: keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5a:e5:16:0a:03:0d:71:fe:52:29:29:71:ca:a9:26:1b:3b: 7a:e6:d1:84:02:3b:9c:23:af:dd:39:73:2f:25:24:98:43:5a: a9:47:a1:e8:04:4c:fd:df:17:bb:12:43:ac:05:d2:e2:cb:85: b6:34:93:54:dc:fc:15:86:63:b8:1b:e3:30:df:5d:1f:3d:7b: 1b:31:e8:8f:7e:14:f8:52:e7:56:60:85:ee:bf:02:00:b9:ff: d9:e6:28:d0:fa:74:a4:28:84:ec:e5:24:19:93:cd:49:0a:3a: 05:0e:63:d2:f3:e6:2f:08:73:d0:c0:3f:f6:30:bd:b6:78:df: cf:83:bd:e4:9d:87:c2:2b:b8:a0:a3:5d:06:c4:63:ee:b5:d0: 9e:69:b4:8e:71:d2:de:8a:b1:2d:e3:e0:0d:2d:eb:b8:93:20: 62:9a:7c:76:c4:e6:38:0d:50:ad:56:65:94:75:58:f1:5c:98: 7e:ef:df:49:31:82:9b:41:0e:fc:34:c2:da:07:ba:1d:eb:78: 40:dd:b9:85:f2:0b:b2:90:7d:9e:43:79:a9:27:22:8f:cd:fb: 9f:d8:eb:bb:a5:7e:00:a6:65:ab:54:fc:5d:5c:1d:74:ae:43: ee:98:7b:74:0b:7e:c8:d8:af:bc:fb:c2:e9:96:09:54:50:ae: f2:cc:96:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/4b7HQvZtnf7YYYZDcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjcyZDM5OTI5NzMxYWVkOWUwMWJjNWE5ZTZkNjgwZjQ2 NTlhMGIwHhcNMjYwMTI1MTkwMTA2WhcNMjYwMTI2MTkwMTA2WjAzMTEwLwYDVQQD Eyg0MTBjMjNiZjUzMmI0YjQwNjljYWQzNGQzMjVjZTlkMWZmNzZlNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4FGb019V+1+xm/4QuN4xlp646L4 owjcwRppj1yGFqlTuZo8/wWfKXQ2e1gEbMCZEOZ9V9wnpyZfhi2yPHfFiqCMLTg7 kKbliDfuf1p7Y1+k9PCHd3V1dGjRNljcJh0CV7W3uyEgHKI2VeuNODjizglvb00c laQTxM/pIOwicgiUv1k/RWaxVJulkPG0Yewy4Rvesd2t1BAkhtRsQw9rCk4HDpvY HNdxUdXkp/Xlo1r3Gs+mTzRgFpaIc6NWIS5MsImS+YeHEYia1118TKj8ULfSvZLh k2geUEEE6LniQj3V14nze+0TTBy2nKfsI2jzvOlu1ljVrdkrevAXLA6NxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEMI79TK0tAacrTTTJc6dH/duZyMB8GA1UdIwQY MBaAFE9nLTmSlzGu2eAbxanm1oD0ZZoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAt N2UyODA3NTJkYTIxLzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAtN2UyODA3NTJkYTIx LzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFrlFgoD DXH+UikpccqpJhs7eubRhAI7nCOv3TlzLyUkmENaqUeh6ARM/d8XuxJDrAXS4suF tjSTVNz8FYZjuBvjMN9dHz17GzHoj34U+FLnVmCF7r8CALn/2eYo0Pp0pCiE7OUk GZPNSQo6BQ5j0vPmLwhz0MA/9jC9tnjfz4O95J2Hwiu4oKNdBsRj7rXQnmm0jnHS 3oqxLePgDS3ruJMgYpp8dsTmOA1QrVZllHVY8VyYfu/fSTGCm0EO/DTC2ge6Het4 QN25hfILspB9nkN5qScij837n9jru6V+AKZlq1T8XVwddK5D7ph7dAt+yNivvPvC 6ZYJVFCu8syWBQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:46 2026 by rpki-client