This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft File: T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json) Hash identifier: MpsRmlZ4nOCNnLASQggse4dIgVaVdAc/wg4KvTm8roo= Subject key identifier: 70:67:8C:68:86:F4:EE:1A:10:61:98:92:A8:F0:0A:25:DE:16:7E:D5 Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Certificate serial: 019BF5AC8117ECC1F250C6DD13D04320DBB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 15:01:21 +0000 Manifest this update: Sun 25 Jan 2026 15:01:21 +0000 Manifest next update: Mon 26 Jan 2026 15:01:21 +0000 Files and hashes: 1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=) 2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=) 3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: 2uAHbUq3B8ZxkcTr8dB67O4Cg/ngIeokdtDnwy0LOco=) 4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=) 5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:81:17:ec:c1:f2:50:c6:dd:13:d0:43:20:db:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Validity Not Before: Jan 25 15:01:21 2026 GMT Not After : Jan 26 15:01:21 2026 GMT Subject: CN=70678c6886f4ee1a10619892a8f00a25de167ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:70:5c:67:43:69:ef:e9:dd:c8:d2:03:48:b0: eb:e4:8f:70:ce:5a:7e:29:cc:0b:aa:52:88:1e:a3: 04:9f:1d:9e:65:bc:d2:02:39:b8:60:85:84:2e:99: b7:46:9c:ba:62:03:86:77:cd:0f:b2:3d:c6:27:c7: 26:90:25:08:76:3f:8a:db:81:05:95:ee:33:e5:20: 23:e9:e7:ec:59:50:f7:0f:5d:53:6e:82:38:a0:36: d2:06:ad:e2:a0:66:44:25:11:62:d3:f8:85:31:76: 7a:08:92:2c:f7:97:a4:53:fe:f6:8a:f9:9f:07:7a: a9:c1:cd:b4:25:5e:cc:4c:35:e8:83:36:3d:b1:f1: 82:1f:be:3c:6c:ee:5a:d0:74:12:26:6c:75:35:95: 46:98:ff:4b:32:25:8f:81:8a:bd:a7:e4:d6:0d:15: e0:92:0d:08:c5:94:49:10:d3:f9:a9:f8:40:77:16: a2:95:c4:8c:cf:b8:d5:cb:26:89:e5:20:13:be:63: bd:d2:31:14:2b:f5:c7:82:6e:a4:d6:1e:af:1a:f2: 91:ea:4b:37:a8:21:c6:74:c3:bd:fe:48:68:10:94: 0a:21:2d:8e:2b:80:e6:03:e2:d3:59:53:69:75:84: 8e:79:da:56:33:75:7b:44:55:8c:24:9a:32:ae:43: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:8C:68:86:F4:EE:1A:10:61:98:92:A8:F0:0A:25:DE:16:7E:D5 X509v3 Authority Key Identifier: keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d0:b8:19:a9:0b:19:f9:65:b1:7d:f0:73:42:3d:6f:38:a1: 57:d0:d8:2d:72:b0:83:f3:e8:60:04:e6:23:50:4d:7a:f5:cc: 04:a1:fe:f2:60:43:73:66:74:1e:78:df:fc:95:c7:bb:37:72: 26:37:a4:6e:f7:3c:af:70:5d:61:ab:91:67:d9:4c:1b:70:2a: 59:60:92:ab:41:99:d8:22:79:e8:c1:9e:4c:b9:2f:d8:5c:e3: 32:a3:18:5f:df:5f:b8:52:3c:d0:9e:1c:86:55:be:ac:2e:8b: 2d:2c:2b:b0:59:e8:63:db:9f:0b:aa:15:d1:d3:c8:6f:5c:4a: 9d:ed:c3:f0:1b:5e:0a:ce:7f:f8:6b:9d:6c:01:b0:17:e4:71: 2b:1e:c0:dc:31:f0:bd:c5:98:7d:f9:fa:c0:cf:00:37:f4:98: eb:82:8a:e9:ee:a9:23:3b:a4:84:7d:9f:a0:13:3f:1b:a7:1d: 1f:df:6a:c0:ab:46:c6:09:55:41:d5:d0:c3:5d:dc:1b:1e:e6: be:fb:81:d4:ee:b3:c4:60:a1:a8:26:0b:ca:59:ed:31:42:aa: 8b:d1:92:3e:4b:cf:e0:d1:85:e2:48:c7:22:90:bd:d7:82:6a: cb:d5:46:44:c2:16:fa:be:3f:bc:6b:92:38:88:b3:ed:64:43: 06:dc:4a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIEX7MHyUMbdE9BDINuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3 MTFlMWUwHhcNMjYwMTI1MTUwMTIxWhcNMjYwMTI2MTUwMTIxWjAzMTEwLwYDVQQD Eyg3MDY3OGM2ODg2ZjRlZTFhMTA2MTk4OTJhOGYwMGEyNWRlMTY3ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nBcZ0Np7+ndyNIDSLDr5I9wzlp+ KcwLqlKIHqMEnx2eZbzSAjm4YIWELpm3Rpy6YgOGd80Psj3GJ8cmkCUIdj+K24EF le4z5SAj6efsWVD3D11TboI4oDbSBq3ioGZEJRFi0/iFMXZ6CJIs95ekU/72ivmf B3qpwc20JV7MTDXogzY9sfGCH748bO5a0HQSJmx1NZVGmP9LMiWPgYq9p+TWDRXg kg0IxZRJENP5qfhAdxailcSMz7jVyyaJ5SATvmO90jEUK/XHgm6k1h6vGvKR6ks3 qCHGdMO9/khoEJQKIS2OK4DmA+LTWVNpdYSOedpWM3V7RFWMJJoyrkP/BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBnjGiG9O4aEGGYkqjwCiXeFn7VMB8GA1UdIwQY MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct NTI4YTYzYmU0Yzg3LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3 LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9C4GakL GfllsX3wc0I9bzihV9DYLXKwg/PoYATmI1BNevXMBKH+8mBDc2Z0Hnjf/JXHuzdy Jjekbvc8r3BdYauRZ9lMG3AqWWCSq0GZ2CJ56MGeTLkv2FzjMqMYX99fuFI80J4c hlW+rC6LLSwrsFnoY9ufC6oV0dPIb1xKne3D8BteCs5/+GudbAGwF+RxKx7A3DHw vcWYffn6wM8AN/SY64KK6e6pIzukhH2foBM/G6cdH99qwKtGxglVQdXQw13cGx7m vvuB1O6zxGChqCYLylntMUKqi9GSPkvP4NGF4kjHIpC914Jqy9VGRMIW+r4/vGuS OIiz7WRDBtxKPg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:42 2026 by rpki-client