This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json) Hash identifier: OCbUBfvvj7UVIW/wi8B/rfBJoORqOO2uOhAgDy3NqT4= Subject key identifier: 4A:92:1E:C6:0B:36:DD:0D:9F:9D:99:F6:26:29:73:B5:B7:61:39:3B Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe Certificate serial: 019BF5072DC85E635777134772625C7F230A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 12:00:46 +0000 Manifest this update: Sun 25 Jan 2026 12:00:46 +0000 Manifest next update: Mon 26 Jan 2026 12:00:46 +0000 Files and hashes: 1: QMeWn3NQA2fbA8c1b6eFvzqzvWg.roa (hash: 8sNKEwPOI3VlePsjcLNbwBz/I6kJ5Yh/1lRoX0WjxkU=) 2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: IrBrLQuBUet+0rYVfSVL1gkUs0MFp/H17XtLB3mhoTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:2d:c8:5e:63:57:77:13:47:72:62:5c:7f:23:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe Validity Not Before: Jan 25 12:00:46 2026 GMT Not After : Jan 26 12:00:46 2026 GMT Subject: CN=4a921ec60b36dd0d9f9d99f6262973b5b761393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:c5:9c:56:30:41:81:ea:c2:0e:b6:ff:70: 70:54:0b:2a:de:79:80:3b:e1:dd:05:e8:63:cf:82: 79:f2:6e:c8:f2:1f:c2:2e:27:1a:29:28:69:29:c3: 06:dd:11:fd:bc:a4:8d:c8:5d:5c:eb:fd:df:9c:04: 78:bd:f4:ce:85:a8:ea:b0:d3:f4:31:48:c3:73:07: fb:5d:87:45:09:88:3b:b2:ca:c6:54:4b:a4:e0:aa: 53:6a:98:5e:37:82:ce:a6:dc:d9:2a:06:f1:8c:3a: c6:06:9c:e6:a5:57:f9:db:26:2f:61:8e:69:89:5b: 86:fb:0f:81:60:62:12:89:67:7f:7e:1a:d5:59:ab: cc:ec:b9:56:78:f1:67:74:83:66:18:eb:c3:a3:b2: 14:d9:be:ea:dc:0d:92:52:26:83:f6:cb:ec:a3:7b: 1b:f2:3a:06:01:cd:98:49:b0:f6:6d:25:cc:0a:01: 1c:ee:89:1b:71:4d:96:71:ec:aa:3d:f9:75:a4:d9: 73:e5:11:05:2c:41:fe:4e:2b:f4:72:6b:8c:f2:30: 7f:90:9a:39:81:c2:ff:38:e8:0d:7e:73:b2:f9:a5: 5f:fd:a4:c6:77:23:fe:24:da:2a:2a:2e:20:1f:3c: 91:29:c1:d4:2f:2a:cf:47:7b:eb:3b:d6:b7:4a:6e: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:92:1E:C6:0B:36:DD:0D:9F:9D:99:F6:26:29:73:B5:B7:61:39:3B X509v3 Authority Key Identifier: keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:bd:f8:ba:db:80:79:77:db:36:1a:c9:10:f9:42:e7:1e: f2:84:f7:62:6e:79:9c:71:88:66:0e:c3:95:0b:2a:f4:1c:e0: 56:88:4e:ed:31:1c:75:f5:0d:2e:f3:9b:40:1c:90:d1:81:07: 4e:31:00:9d:a9:59:45:49:94:10:03:c2:7e:4b:72:95:46:df: 18:dc:39:cc:d9:05:ac:d2:65:aa:96:30:cb:6e:de:13:83:8a: 12:9c:a9:63:b7:70:7c:b9:d3:b5:2d:3e:7a:54:ed:85:f0:d0: bf:84:b9:51:3d:ef:0d:7a:b3:5c:26:42:f0:12:c7:5e:ba:28: 8d:1d:ac:b4:36:4f:38:c8:a3:60:fc:1f:02:fc:c2:79:9c:ce: 56:15:0a:7c:c1:01:42:48:46:13:e1:32:cb:c8:12:ed:5e:81: 3e:2c:ae:41:14:56:cc:24:a9:fc:a9:69:64:fb:83:fe:79:07: 07:55:e3:79:b4:7c:9d:b2:4b:f9:9a:fc:27:21:23:cf:d6:a0: c6:2b:ea:33:3f:33:fc:e1:5d:69:cd:a5:77:62:16:f1:d1:e4: 98:0a:64:74:3e:62:be:44:02:da:0e:bb:12:65:7e:9d:e9:d9: 63:42:04:d2:b4:8f:be:59:1c:2c:a3:0b:97:89:50:09:7e:8a: 19:3b:ba:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1By3IXmNXdxNHcmJcfyMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4 MjcyZmUwHhcNMjYwMTI1MTIwMDQ2WhcNMjYwMTI2MTIwMDQ2WjAzMTEwLwYDVQQD Eyg0YTkyMWVjNjBiMzZkZDBkOWY5ZDk5ZjYyNjI5NzNiNWI3NjEzOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrjFnFYwQYHqwg62/3BwVAsq3nmA O+HdBehjz4J58m7I8h/CLicaKShpKcMG3RH9vKSNyF1c6/3fnAR4vfTOhajqsNP0 MUjDcwf7XYdFCYg7ssrGVEuk4KpTapheN4LOptzZKgbxjDrGBpzmpVf52yYvYY5p iVuG+w+BYGISiWd/fhrVWavM7LlWePFndINmGOvDo7IU2b7q3A2SUiaD9svso3sb 8joGAc2YSbD2bSXMCgEc7okbcU2WceyqPfl1pNlz5REFLEH+Tiv0cmuM8jB/kJo5 gcL/OOgNfnOy+aVf/aTGdyP+JNoqKi4gHzyRKcHULyrPR3vrO9a3Sm74sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqSHsYLNt0Nn52Z9iYpc7W3YTk7MB8GA1UdIwQY MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5 LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoi9+Lrb gHl32zYayRD5Quce8oT3Ym55nHGIZg7DlQsq9BzgVohO7TEcdfUNLvObQByQ0YEH TjEAnalZRUmUEAPCfktylUbfGNw5zNkFrNJlqpYwy27eE4OKEpypY7dwfLnTtS0+ elTthfDQv4S5UT3vDXqzXCZC8BLHXroojR2stDZPOMijYPwfAvzCeZzOVhUKfMEB QkhGE+Eyy8gS7V6BPiyuQRRWzCSp/KlpZPuD/nkHB1XjebR8nbJL+Zr8JyEjz9ag xivqMz8z/OFdac2ld2IW8dHkmApkdD5ivkQC2g67EmV+nenZY0IE0rSPvlkcLKML l4lQCX6KGTu6ug== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:17 2026 by rpki-client