This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json) Hash identifier: aSJGW4DoBc8v+kQ4h0TMYjDzl2KbuZSOBpf7xR9k9S0= Subject key identifier: C1:10:F8:09:F4:6B:7F:4A:D8:7F:85:A5:A6:07:BD:03:AE:0F:3F:36 Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Certificate serial: 019BF5074015541A81B5EA5B8CE3FA746EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft Manifest number: 0C2D Signing time: Sun 25 Jan 2026 12:00:51 +0000 Manifest this update: Sun 25 Jan 2026 12:00:51 +0000 Manifest next update: Mon 26 Jan 2026 12:00:51 +0000 Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=) 2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=) 3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=) 4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: MBFLKTKW0Fpul+wRz+XTV4rfEhJ/EQ/U/fz2mTRIkWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:40:15:54:1a:81:b5:ea:5b:8c:e3:fa:74:6e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Validity Not Before: Jan 25 12:00:51 2026 GMT Not After : Jan 26 12:00:51 2026 GMT Subject: CN=c110f809f46b7f4ad87f85a5a607bd03ae0f3f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:00:15:c3:34:78:5e:e2:81:07:2a:43:a8: 67:dc:8f:44:c8:41:0b:0f:1b:d4:e0:82:b2:21:6f: 29:37:c6:44:87:83:eb:63:a7:6b:6d:68:9e:15:57: 5c:23:b5:cb:d8:f4:57:05:fd:51:15:1b:94:5c:16: f4:76:32:fa:b4:e2:bc:6c:43:20:2e:2c:9f:b9:f2: 5b:39:9e:dc:ab:63:5c:91:cd:95:d9:ff:cb:1a:bc: a6:84:0b:37:a2:a2:fd:de:e2:72:d9:79:53:10:04: 37:ac:ba:bc:af:64:4f:3c:24:21:7b:8f:fe:90:eb: 9e:60:a9:d2:03:a3:a5:0f:44:43:e7:df:6f:dd:bb: 9d:ae:9c:83:a3:ad:c4:1c:42:f3:81:0e:7f:e9:95: 29:6b:63:77:bf:94:a7:39:8d:d0:dd:38:0e:73:39: cd:b5:9d:b0:6c:85:d6:fe:24:be:3a:f0:a3:fe:4b: 60:04:e4:6d:31:45:b9:c4:fb:88:cc:4c:ba:53:70: 2e:ae:1e:28:4a:c4:d4:a5:a6:ab:ee:02:1f:af:b6: 86:7d:73:ae:80:15:1b:ea:97:4a:91:4b:91:96:a8: 9f:17:06:ef:95:f3:c0:f7:91:12:5e:c0:65:26:0b: 96:14:df:38:e7:14:d2:2e:04:29:28:52:76:e0:b8: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:10:F8:09:F4:6B:7F:4A:D8:7F:85:A5:A6:07:BD:03:AE:0F:3F:36 X509v3 Authority Key Identifier: keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e8:ce:e2:64:8c:45:f4:80:0e:30:73:e1:8c:82:51:d5:74: 4d:f7:fe:8c:66:6d:5a:d2:57:35:75:13:f8:62:19:a0:3b:0e: ae:95:af:f2:17:97:cc:c7:7c:81:40:5d:41:5d:74:38:43:9a: b2:96:d0:6f:67:4c:fa:92:65:58:9a:70:93:c8:a6:0f:37:7d: 76:0d:9f:a8:ef:20:89:fd:9a:65:95:a0:10:0a:7d:5d:e3:49: 7d:b4:85:c9:10:98:32:d2:6a:96:d9:a5:95:85:aa:a2:6b:66: 67:fd:ce:e0:18:38:df:32:be:5c:3c:20:bf:ea:98:79:23:40: e0:d6:97:13:80:d9:e5:ee:87:6d:7d:e5:df:32:26:10:d2:9c: 6c:fd:fc:3b:0d:97:63:09:49:b8:59:b0:c6:a0:38:55:a0:93: 6c:5b:47:ae:cd:ed:93:3e:ed:0e:97:16:50:98:ea:52:cc:46: 6f:4b:2b:1c:eb:3a:34:80:7f:1b:df:91:6a:a4:38:9f:12:19: fd:39:16:8d:2e:0b:5e:b9:51:0f:a4:2d:40:1e:a8:f4:90:3c: 73:ff:be:bd:5c:67:20:bf:9f:96:68:c0:d0:28:5f:9b:39:a6: 8c:04:f8:24:44:df:1c:f8:ec:f9:29:44:18:ae:7d:78:bf:ef: 0b:22:d4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0AVVBqBtepbjOP6dG6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz OTg3ZDgwHhcNMjYwMTI1MTIwMDUxWhcNMjYwMTI2MTIwMDUxWjAzMTEwLwYDVQQD EyhjMTEwZjgwOWY0NmI3ZjRhZDg3Zjg1YTVhNjA3YmQwM2FlMGYzZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAMAFcM0eF7igQcqQ6hn3I9EyEEL DxvU4IKyIW8pN8ZEh4PrY6drbWieFVdcI7XL2PRXBf1RFRuUXBb0djL6tOK8bEMg LiyfufJbOZ7cq2Nckc2V2f/LGrymhAs3oqL93uJy2XlTEAQ3rLq8r2RPPCQhe4/+ kOueYKnSA6OlD0RD599v3budrpyDo63EHELzgQ5/6ZUpa2N3v5SnOY3Q3TgOcznN tZ2wbIXW/iS+OvCj/ktgBORtMUW5xPuIzEy6U3Aurh4oSsTUpaar7gIfr7aGfXOu gBUb6pdKkUuRlqifFwbvlfPA95ESXsBlJguWFN845xTSLgQpKFJ24LiaewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEQ+An0a39K2H+FpaYHvQOuDz82MB8GA1UdIwQY MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACujO4mSM RfSADjBz4YyCUdV0Tff+jGZtWtJXNXUT+GIZoDsOrpWv8heXzMd8gUBdQV10OEOa spbQb2dM+pJlWJpwk8imDzd9dg2fqO8gif2aZZWgEAp9XeNJfbSFyRCYMtJqltml lYWqomtmZ/3O4Bg43zK+XDwgv+qYeSNA4NaXE4DZ5e6HbX3l3zImENKcbP38Ow2X YwlJuFmwxqA4VaCTbFtHrs3tkz7tDpcWUJjqUsxGb0srHOs6NIB/G9+RaqQ4nxIZ /TkWjS4LXrlRD6QtQB6o9JA8c/++vVxnIL+flmjA0ChfmzmmjAT4JETfHPjs+SlE GK59eL/vCyLUPw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:16 2026 by rpki-client