This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json) Hash identifier: +DMhAVdFImGYzacTS+hcPW8QNMYx0MAglyIx27nlo2Q= Subject key identifier: 63:A9:D9:65:A5:ED:FA:B4:90:9F:01:9D:02:89:F2:DD:31:3D:80:52 Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Certificate serial: 019BF499181DFC67623B3BE2D01054FE474F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 10:00:32 +0000 Manifest this update: Sun 25 Jan 2026 10:00:32 +0000 Manifest next update: Mon 26 Jan 2026 10:00:32 +0000 Files and hashes: 1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=) 2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: qb2lKSH5RFjR9LaMEuiyNJxiGJPsvn4MdRwjNgZAmYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:18:1d:fc:67:62:3b:3b:e2:d0:10:54:fe:47:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Validity Not Before: Jan 25 10:00:32 2026 GMT Not After : Jan 26 10:00:32 2026 GMT Subject: CN=63a9d965a5edfab4909f019d0289f2dd313d8052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:83:21:cd:4c:bc:60:9c:42:45:ed:8b:c8: 70:66:0d:96:41:45:dc:2e:72:13:25:41:c4:92:c6: f4:6d:6a:60:26:29:dc:b0:67:85:ef:e5:ec:64:bb: fe:3d:9e:7b:8f:f7:1a:f9:fe:74:11:79:dc:0c:87: d2:8c:63:25:92:12:d6:f6:c8:b3:64:56:a4:ce:69: e6:51:a8:cb:e6:41:c8:a3:ac:5a:d6:65:bc:72:8e: b2:35:17:8b:24:a3:cf:64:7b:26:a8:a1:c7:7c:6d: 6e:9f:af:c0:f8:94:91:8e:5d:64:86:1b:0b:c5:29: 1c:eb:51:9b:51:05:74:0b:bf:1a:d9:39:1b:62:e1: 6e:17:91:eb:aa:59:89:3a:cd:86:05:db:b5:3c:bf: e3:b2:ea:ab:84:02:25:c3:9f:84:3d:b7:ec:b5:04: 30:e0:e7:a5:fa:77:74:7a:4e:ea:1a:d0:6a:83:ab: 50:7c:ce:08:ae:53:ab:d1:ee:9c:59:7f:7f:9a:61: c3:36:a9:e0:53:b8:e2:a7:d3:08:50:ca:09:af:16: f3:d0:95:0e:fd:cf:49:cd:4e:d2:bb:4e:c5:54:08: 06:25:36:b2:23:e9:ea:6f:9a:58:c3:4e:4f:78:ee: 45:37:0b:14:b7:d4:06:fd:f6:9c:5b:f9:65:e8:98: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A9:D9:65:A5:ED:FA:B4:90:9F:01:9D:02:89:F2:DD:31:3D:80:52 X509v3 Authority Key Identifier: keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5b:28:8d:64:5c:bc:d0:bc:c9:08:f9:7b:5e:2b:e8:01:b5: 4d:64:f3:01:11:20:24:e9:b8:2c:97:98:39:70:d1:1c:6f:a3: 61:40:00:d3:5b:35:b4:de:b0:3a:67:75:d2:5e:ac:a2:a9:16: 24:4e:69:b3:ac:87:ad:71:81:2a:64:47:0c:0d:bb:80:b5:04: 29:22:5f:aa:6a:84:44:78:2d:c6:a6:95:8c:25:c6:90:63:6a: db:be:ab:ca:07:01:fe:8d:37:5a:a1:bf:59:89:e6:12:0f:5d: 2c:00:bb:84:a6:0a:7c:92:3f:b3:c4:ae:40:18:44:5d:46:1f: fa:ee:ea:84:26:c4:ae:14:15:ea:94:72:b0:72:4c:ea:b3:46: bf:41:50:52:57:d5:02:49:ed:af:d1:be:65:2f:9d:8d:9c:56: 47:fd:06:c1:c6:2d:3c:5c:c8:86:4a:72:ee:59:b8:60:fa:63: 46:56:06:4c:4a:fa:7c:f1:a7:32:c3:ff:da:89:62:27:21:a9: 38:b7:64:99:da:f8:a7:80:07:52:12:c7:0e:9b:2a:87:4a:6a: ce:bd:75:0b:80:2e:e9:4b:f4:c5:de:97:f6:b7:1b:39:ac:48: 27:f8:8f:3f:83:7d:59:f1:e3:48:93:39:ae:8a:70:56:db:8e: 06:f5:78:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mRgd/GdiOzvi0BBU/kdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlM2MwMWJhMGM1Y2JmMjBhZTNlOTNjYTNkMzc5ZTYyZGY1 Yzk1OWEwHhcNMjYwMTI1MTAwMDMyWhcNMjYwMTI2MTAwMDMyWjAzMTEwLwYDVQQD Eyg2M2E5ZDk2NWE1ZWRmYWI0OTA5ZjAxOWQwMjg5ZjJkZDMxM2Q4MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+GDIc1MvGCcQkXti8hwZg2WQUXc LnITJUHEksb0bWpgJincsGeF7+XsZLv+PZ57j/ca+f50EXncDIfSjGMlkhLW9siz ZFakzmnmUajL5kHIo6xa1mW8co6yNReLJKPPZHsmqKHHfG1un6/A+JSRjl1khhsL xSkc61GbUQV0C78a2TkbYuFuF5HrqlmJOs2GBdu1PL/jsuqrhAIlw5+EPbfstQQw 4Oel+nd0ek7qGtBqg6tQfM4IrlOr0e6cWX9/mmHDNqngU7jip9MIUMoJrxbz0JUO /c9JzU7Su07FVAgGJTayI+nqb5pYw05PeO5FNwsUt9QG/facW/ll6JjKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOp2WWl7fq0kJ8BnQKJ8t0xPYBSMB8GA1UdIwQY MBaAFE48AboMXL8grj6Tyj03nmLfXJWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEt YjI3ZjU1MjY3MmUwLzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEtYjI3ZjU1MjY3MmUw LzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVsojWRc vNC8yQj5e14r6AG1TWTzAREgJOm4LJeYOXDRHG+jYUAA01s1tN6wOmd10l6soqkW JE5ps6yHrXGBKmRHDA27gLUEKSJfqmqERHgtxqaVjCXGkGNq276rygcB/o03WqG/ WYnmEg9dLAC7hKYKfJI/s8SuQBhEXUYf+u7qhCbErhQV6pRysHJM6rNGv0FQUlfV Akntr9G+ZS+djZxWR/0GwcYtPFzIhkpy7lm4YPpjRlYGTEr6fPGnMsP/2oliJyGp OLdkmdr4p4AHUhLHDpsqh0pqzr11C4Au6Uv0xd6X9rcbOaxIJ/iPP4N9WfHjSJM5 ropwVtuOBvV4/A== -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:21 2026 by rpki-client