This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json) Hash identifier: ZuPdTsMQgDw+aiyQSJ1gCDOz4fkEkEOWrYxOmPJxYAk= Subject key identifier: 5A:4B:C4:08:9C:BD:1B:39:86:44:A4:DE:5D:BD:F0:B1:58:3A:24:42 Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Certificate serial: 019BF2AADB5B1156CC04C62B486C19AB504F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft Manifest number: 0EAA Signing time: Sun 25 Jan 2026 01:00:41 +0000 Manifest this update: Sun 25 Jan 2026 01:00:41 +0000 Manifest next update: Mon 26 Jan 2026 01:00:41 +0000 Files and hashes: 1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=) 2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=) 3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=) 4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: mQl8/VHOY39goN4gt60O8eAb77VNrdnwt5k800TGmh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:db:5b:11:56:cc:04:c6:2b:48:6c:19:ab:50:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Validity Not Before: Jan 25 01:00:41 2026 GMT Not After : Jan 26 01:00:41 2026 GMT Subject: CN=5a4bc4089cbd1b398644a4de5dbdf0b1583a2442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:8b:fe:62:19:2a:c4:78:81:00:53:5d:5b: ba:7d:40:21:3d:b5:66:dd:2f:ff:47:f4:c3:5b:d1: 27:a6:25:e7:8b:55:7b:5c:91:5c:ad:f7:d7:14:73: 1d:8f:76:47:60:82:f1:d9:5a:5d:bc:f6:ed:5a:b5: 9b:d9:26:92:bd:b2:33:0e:de:16:ca:71:29:ac:63: 2f:cf:66:60:36:6c:d9:56:cc:66:ab:14:3f:42:04: 70:36:cd:95:93:1b:7d:36:41:b9:9d:71:c1:b1:1a: b4:af:d0:a5:3a:74:8a:9f:44:55:88:50:09:07:6e: e5:80:c3:60:1b:30:10:72:3d:f7:63:97:85:84:2b: 20:54:df:29:77:e7:69:90:18:51:d0:7a:eb:89:80: d5:f7:41:20:f1:f8:46:fa:1a:bc:43:5c:d2:4e:ce: e2:33:ea:6e:2f:b9:4d:16:33:b7:34:ee:7e:c9:8a: b5:7d:2d:3e:2d:2e:18:e2:ab:5d:c5:34:c0:2c:e1: e5:a9:0f:f7:f9:2a:6f:c1:97:db:de:90:36:0b:b2: f9:e0:44:d5:db:23:6a:b7:c4:1a:14:a7:6b:fb:95: af:0e:93:66:56:85:bf:53:b2:e3:c7:6d:e6:d9:52: 20:57:db:cb:12:f1:db:42:65:d1:2d:07:03:00:23: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:C4:08:9C:BD:1B:39:86:44:A4:DE:5D:BD:F0:B1:58:3A:24:42 X509v3 Authority Key Identifier: keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9b:af:64:21:1f:59:7f:ef:8d:33:57:79:1a:52:1a:8b:fe: d9:e0:7f:32:fd:0d:e7:90:6f:fa:aa:16:46:48:93:6d:bf:fc: 9b:db:7d:a6:22:e4:4e:b8:f5:5e:0f:c2:db:94:12:9c:73:62: 6c:7c:cb:f5:46:02:28:3c:ac:e9:cf:ec:88:9f:cf:13:43:ef: ea:29:26:fe:f1:80:88:e8:66:4e:8c:ea:bc:b2:fa:d2:e9:29: e7:b7:0e:a7:0f:3e:92:be:84:9e:2a:4b:0b:98:5b:c2:4f:59: 25:90:bf:c2:4e:5b:e5:a8:47:3f:90:37:93:8d:c5:39:77:37: 10:51:11:2d:ed:ad:f0:29:dd:c2:67:63:b2:14:53:36:36:37: e8:de:21:b6:53:38:20:d1:a2:fd:b0:0a:8e:7f:81:87:78:e1: 72:80:01:e1:15:a7:5e:67:93:66:49:c8:2d:fd:ee:22:be:b6: d4:8f:e7:09:98:ba:14:be:d0:99:10:e3:14:b0:8a:31:53:57: 74:02:73:1a:4f:bf:60:51:0a:87:4b:0a:12:0e:b0:68:75:5e: 97:82:32:3b:d4:b1:de:ee:15:d2:4b:b5:26:53:1a:d7:d6:65: e6:77:e6:60:16:dd:f9:01:99:ab:e1:31:a3:53:8f:12:73:9e: 1d:dd:6a:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqttbEVbMBMYrSGwZq1BPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm ZmI0YzIwHhcNMjYwMTI1MDEwMDQxWhcNMjYwMTI2MDEwMDQxWjAzMTEwLwYDVQQD Eyg1YTRiYzQwODljYmQxYjM5ODY0NGE0ZGU1ZGJkZjBiMTU4M2EyNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmyL/mIZKsR4gQBTXVu6fUAhPbVm 3S//R/TDW9EnpiXni1V7XJFcrffXFHMdj3ZHYILx2VpdvPbtWrWb2SaSvbIzDt4W ynEprGMvz2ZgNmzZVsxmqxQ/QgRwNs2Vkxt9NkG5nXHBsRq0r9ClOnSKn0RViFAJ B27lgMNgGzAQcj33Y5eFhCsgVN8pd+dpkBhR0HrriYDV90Eg8fhG+hq8Q1zSTs7i M+puL7lNFjO3NO5+yYq1fS0+LS4Y4qtdxTTALOHlqQ/3+SpvwZfb3pA2C7L54ETV 2yNqt8QaFKdr+5WvDpNmVoW/U7Ljx23m2VIgV9vLEvHbQmXRLQcDACMntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpLxAicvRs5hkSk3l298LFYOiRCMB8GA1UdIwQY MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2 LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZuvZCEf WX/vjTNXeRpSGov+2eB/Mv0N55Bv+qoWRkiTbb/8m9t9piLkTrj1Xg/C25QSnHNi bHzL9UYCKDys6c/siJ/PE0Pv6ikm/vGAiOhmTozqvLL60ukp57cOpw8+kr6EnipL C5hbwk9ZJZC/wk5b5ahHP5A3k43FOXc3EFERLe2t8CndwmdjshRTNjY36N4htlM4 INGi/bAKjn+Bh3jhcoAB4RWnXmeTZknILf3uIr621I/nCZi6FL7QmRDjFLCKMVNX dAJzGk+/YFEKh0sKEg6waHVel4IyO9Sx3u4V0ku1JlMa19Zl5nfmYBbd+QGZq+Ex o1OPEnOeHd1qxg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:00:52 2026 by rpki-client