This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: yE/UrNHRLi/lB6WXuRmDkYcpNmGVzfezuNszLssdliQ= Subject key identifier: C2:36:2F:8D:25:7C:FA:10:08:99:C3:EF:7D:B5:16:19:F5:85:CE:57 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019BF50745539159A2AFD0B9EF6395F3324D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: A8 Signing time: Sun 25 Jan 2026 12:00:52 +0000 Manifest this update: Sun 25 Jan 2026 12:00:52 +0000 Manifest next update: Mon 26 Jan 2026 12:00:52 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: Bz/SVLrIEK55N6A0gWjOSx4ekGq6aM7ERBNmBVr+bb0=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:45:53:91:59:a2:af:d0:b9:ef:63:95:f3:32:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 25 12:00:52 2026 GMT Not After : Jan 26 12:00:52 2026 GMT Subject: CN=c2362f8d257cfa100899c3ef7db51619f585ce57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:2c:ea:e7:26:2e:87:2b:97:3c:21:dd:4c: c9:73:1f:27:3a:be:4f:a9:2d:b1:12:5d:22:83:87: 84:25:74:3f:04:1d:37:cc:4e:5d:31:27:4d:bd:0f: 0e:46:e3:b1:59:14:3a:d9:d0:89:8c:13:f7:d1:3a: 98:9b:38:42:24:7e:97:67:22:bf:4b:8d:16:7e:02: f0:3e:1a:3b:1d:6d:1e:2f:d8:83:c0:80:c0:ff:8c: 5a:51:1b:09:bd:95:79:ce:0f:bf:e5:44:8a:01:e9: ee:12:49:84:05:2e:61:df:13:01:f9:52:70:62:19: 9f:9c:c6:52:77:87:47:19:fe:b1:27:5d:d8:51:a6: 21:14:c3:25:39:bc:7b:33:d2:28:ce:7a:36:cf:56: b4:80:d7:06:c5:67:dd:2d:eb:f1:17:7c:65:c3:65: 3d:3a:05:b2:d8:05:2a:c1:37:a7:e3:bf:69:3e:f3: 39:2a:cd:fe:3d:2b:fc:c5:34:3b:9f:ea:12:cb:73: 0b:ca:ab:9e:6d:60:c3:de:9e:79:1d:23:95:31:b6: c8:e6:0e:e3:c0:7b:fe:c6:06:b8:8a:37:84:0e:b6: 9a:a6:04:10:7e:9b:d4:2e:69:93:36:35:44:06:ad: bf:10:19:c6:b8:bb:86:ff:77:4d:54:2b:cd:62:8b: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:36:2F:8D:25:7C:FA:10:08:99:C3:EF:7D:B5:16:19:F5:85:CE:57 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:ee:98:71:97:2d:41:5c:1e:5b:a1:9e:a6:82:01:4f:e2: d0:ed:ca:b2:ff:92:60:56:79:12:69:32:b2:14:38:07:00:2a: 83:e4:23:3b:76:a0:3b:5d:bc:6d:05:a9:0c:95:cd:27:d1:65: 90:5f:a3:11:fe:f8:dc:ca:97:8e:ff:c2:3e:20:91:d3:99:05: 85:c9:79:36:87:48:96:02:aa:94:55:bd:6e:c5:9c:4d:9f:f5: b6:42:94:3b:2b:89:0d:7c:7e:fb:47:bc:66:f5:a8:51:48:2b: 53:b7:3a:f2:57:e4:45:88:f0:40:df:a5:54:e9:ef:2b:93:89: 8d:3a:3c:ea:6a:66:13:a6:f8:0c:a5:55:f9:04:ab:23:b5:4b: 3e:5d:02:85:50:73:fd:2b:5a:41:d9:26:c9:7a:2f:fd:77:96: 66:35:3c:71:0b:e8:3c:96:cc:3f:d7:c0:e2:5b:9b:75:38:90: 06:23:98:94:a6:ee:85:1f:21:b4:51:b4:99:2d:5f:df:43:58: 16:22:c2:f9:8f:b9:6f:90:f3:12:9c:d1:cd:b0:65:8e:0e:1c: f0:ff:d1:b8:06:2c:98:22:03:a3:b0:14:63:d2:52:9b:07:88: 2c:d9:63:4d:02:96:b4:e6:89:3d:45:03:50:99:3e:08:7c:8b: fe:ae:e6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0VTkVmir9C572OV8zJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTI1MTIwMDUyWhcNMjYwMTI2MTIwMDUyWjAzMTEwLwYDVQQD EyhjMjM2MmY4ZDI1N2NmYTEwMDg5OWMzZWY3ZGI1MTYxOWY1ODVjZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLUs6ucmLocrlzwh3UzJcx8nOr5P qS2xEl0ig4eEJXQ/BB03zE5dMSdNvQ8ORuOxWRQ62dCJjBP30TqYmzhCJH6XZyK/ S40WfgLwPho7HW0eL9iDwIDA/4xaURsJvZV5zg+/5USKAenuEkmEBS5h3xMB+VJw YhmfnMZSd4dHGf6xJ13YUaYhFMMlObx7M9Iozno2z1a0gNcGxWfdLevxF3xlw2U9 OgWy2AUqwTen479pPvM5Ks3+PSv8xTQ7n+oSy3MLyquebWDD3p55HSOVMbbI5g7j wHv+xga4ijeEDraapgQQfpvULmmTNjVEBq2/EBnGuLuG/3dNVCvNYotYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI2L40lfPoQCJnD7321Fhn1hc5XMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhjumHGX LUFcHluhnqaCAU/i0O3Ksv+SYFZ5EmkyshQ4BwAqg+QjO3agO128bQWpDJXNJ9Fl kF+jEf743MqXjv/CPiCR05kFhcl5NodIlgKqlFW9bsWcTZ/1tkKUOyuJDXx++0e8 ZvWoUUgrU7c68lfkRYjwQN+lVOnvK5OJjTo86mpmE6b4DKVV+QSrI7VLPl0ChVBz /StaQdkmyXov/XeWZjU8cQvoPJbMP9fA4lubdTiQBiOYlKbuhR8htFG0mS1f30NY FiLC+Y+5b5DzEpzRzbBljg4c8P/RuAYsmCIDo7AUY9JSmweILNljTQKWtOaJPUUD UJk+CHyL/q7mgQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:48 2026 by rpki-client