This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json) Hash identifier: 7ZZQRjJ2V+dFelLdnZK6maectSeochaghzY/2jwZElI= Subject key identifier: 10:17:B4:AA:30:B9:34:E3:E6:EB:C1:F4:61:D1:57:E8:27:99:EA:97 Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Certificate serial: 019BFA2E8E23F7F003E88C0A91654DEC7291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 12:01:53 +0000 Manifest this update: Mon 26 Jan 2026 12:01:53 +0000 Manifest next update: Tue 27 Jan 2026 12:01:53 +0000 Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=) 2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=) 3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: r+AiamIySv3A0AdSoJEXp9gf/4toDQTIHNbCc1Uxl94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:8e:23:f7:f0:03:e8:8c:0a:91:65:4d:ec:72:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Validity Not Before: Jan 26 12:01:53 2026 GMT Not After : Jan 27 12:01:53 2026 GMT Subject: CN=1017b4aa30b934e3e6ebc1f461d157e82799ea97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:b2:80:76:41:a7:9c:fa:85:c9:d0:4c:0d: 1e:a6:00:ee:0e:06:78:d3:89:a6:8e:c7:90:a2:11: 0e:37:1c:cb:a4:61:64:a4:20:ca:80:68:93:2b:c2: 3a:3d:b5:c3:29:0c:70:c0:8e:84:1e:4f:2d:e8:1f: 41:0b:1a:af:4c:ae:53:fb:c5:c7:74:7e:7a:1f:c5: 0b:d2:19:cc:ff:ae:50:4d:2d:7e:5b:c4:e4:58:08: c8:9a:33:1e:f3:21:66:8a:ad:7c:1e:a7:f8:5a:e9: 80:42:e7:78:b4:21:43:90:a0:92:8f:42:fb:ad:db: 88:b5:f5:81:d7:c4:2c:b2:33:0d:ba:0c:d9:1a:78: 66:97:a3:6f:2c:bd:7e:ab:fd:c2:5c:9b:84:04:74: 88:22:41:c0:39:64:f7:f3:b6:cc:b1:6e:e3:1c:a4: e9:35:2d:7a:0e:e6:cd:03:f8:82:36:0f:0b:f5:78: 32:ef:57:dc:bf:2f:d9:e0:33:ba:f1:b3:ad:88:0d: 3f:15:34:ce:4e:df:19:2a:e9:b0:a5:ad:d1:14:ca: 08:90:2a:32:7f:09:1f:19:79:8a:52:b4:b3:1b:ac: d2:0c:40:41:18:d2:c1:7a:a9:52:a3:1a:fa:60:81: e3:44:a0:73:f2:4d:b3:7c:c9:23:0c:a4:7e:7f:7e: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:17:B4:AA:30:B9:34:E3:E6:EB:C1:F4:61:D1:57:E8:27:99:EA:97 X509v3 Authority Key Identifier: keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4f:33:7c:25:57:c7:8d:29:84:67:18:6e:26:80:f6:63:02: 4e:3a:51:5e:cf:e1:2d:ef:0a:34:64:0f:fb:e3:16:1b:f7:8f: 69:35:f4:f7:10:e0:f2:60:9d:8a:57:68:29:e5:ff:70:46:a0: 88:b5:0d:a5:33:66:77:7b:2e:a1:70:79:07:dc:ad:a2:9c:ed: 31:8c:7a:5c:09:ef:d8:ce:5e:68:22:5e:1b:54:9b:2a:ba:b3: e8:7b:5d:90:fa:8c:80:6c:7a:54:53:e7:65:22:7a:fe:cc:41: de:61:49:95:33:40:d5:a6:d5:81:6f:01:13:7d:ec:97:81:e2: 3b:6a:69:37:27:bf:b7:21:61:83:58:05:77:ff:80:8e:3e:4a: a8:3b:48:58:9f:ae:a7:49:22:85:c6:ca:7f:0a:ca:63:f0:94: 9d:cf:42:43:8b:4c:e2:a1:8f:09:b3:18:0d:be:e9:d6:ac:e3: 62:51:69:b4:6a:50:aa:26:5e:3b:81:4a:92:3b:59:28:98:67: 5e:1e:cf:65:bf:9d:f0:bd:92:35:b4:f1:82:f8:45:93:95:9d: b6:22:7a:f9:04:fb:ae:5f:75:37:4e:65:1c:04:ea:27:6e:1a: 97:5c:d8:aa:e7:52:a6:fc:25:e6:46:8e:16:e3:12:4c:07:a3: 4b:9b:23:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lo4j9/AD6IwKkWVN7HKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh NzIwZjgwHhcNMjYwMTI2MTIwMTUzWhcNMjYwMTI3MTIwMTUzWjAzMTEwLwYDVQQD EygxMDE3YjRhYTMwYjkzNGUzZTZlYmMxZjQ2MWQxNTdlODI3OTllYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv+ygHZBp5z6hcnQTA0epgDuDgZ4 04mmjseQohEONxzLpGFkpCDKgGiTK8I6PbXDKQxwwI6EHk8t6B9BCxqvTK5T+8XH dH56H8UL0hnM/65QTS1+W8TkWAjImjMe8yFmiq18Hqf4WumAQud4tCFDkKCSj0L7 rduItfWB18QssjMNugzZGnhml6NvLL1+q/3CXJuEBHSIIkHAOWT387bMsW7jHKTp NS16DubNA/iCNg8L9Xgy71fcvy/Z4DO68bOtiA0/FTTOTt8ZKumwpa3RFMoIkCoy fwkfGXmKUrSzG6zSDEBBGNLBeqlSoxr6YIHjRKBz8k2zfMkjDKR+f343swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAXtKowuTTj5uvB9GHRV+gnmeqXMB8GA1UdIwQY MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt MWIwOGY3ZjUwMTVkLzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUU8zfCVX x40phGcYbiaA9mMCTjpRXs/hLe8KNGQP++MWG/ePaTX09xDg8mCdildoKeX/cEag iLUNpTNmd3suoXB5B9ytopztMYx6XAnv2M5eaCJeG1SbKrqz6HtdkPqMgGx6VFPn ZSJ6/sxB3mFJlTNA1abVgW8BE33sl4HiO2ppNye/tyFhg1gFd/+Ajj5KqDtIWJ+u p0kihcbKfwrKY/CUnc9CQ4tM4qGPCbMYDb7p1qzjYlFptGpQqiZeO4FKkjtZKJhn Xh7PZb+d8L2SNbTxgvhFk5WdtiJ6+QT7rl91N05lHATqJ24al1zYqudSpvwl5kaO FuMSTAejS5sjrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:03 2026 by rpki-client