This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json) Hash identifier: HZXBIgmPCrx/2nvDD1hp1lvTYHG6IvTBA/8c4i/+cKY= Subject key identifier: E1:D3:B7:F9:F4:15:0F:5D:D9:A9:5E:EB:FC:E9:C9:E8:75:58:93:E8 Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2 Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2 Certificate serial: 019BF83F2703D3F7CABA93AAC666F4A7E91F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft Manifest number: 0287 Signing time: Mon 26 Jan 2026 03:00:46 +0000 Manifest this update: Mon 26 Jan 2026 03:00:46 +0000 Manifest next update: Tue 27 Jan 2026 03:00:46 +0000 Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=) 2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: csEp87i5oK7v+9FoGVm61nwm3nXcCrsbRA1jWSX+vxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:27:03:d3:f7:ca:ba:93:aa:c6:66:f4:a7:e9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2 Validity Not Before: Jan 26 03:00:46 2026 GMT Not After : Jan 27 03:00:46 2026 GMT Subject: CN=e1d3b7f9f4150f5dd9a95eebfce9c9e8755893e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:72:ae:34:cd:d7:a7:fb:d1:71:50:50:61: 93:2a:71:56:df:3a:d5:78:2d:7b:d6:a1:c9:7f:c7: 35:fc:82:65:73:56:f4:d6:c6:0e:1c:0c:c0:1c:76: 92:85:c3:b4:e7:cf:2b:ba:37:f9:49:e7:e8:41:4b: ad:62:64:39:14:c1:b3:65:06:9d:ac:ef:3f:9d:e4: e6:1a:6a:af:36:4a:06:82:e3:a0:38:ca:63:ed:a4: eb:cc:92:72:3f:3b:79:8e:0a:b1:1b:42:0b:53:c7: cb:49:66:8e:b3:03:65:13:6f:ea:e2:3b:6d:b9:37: cf:95:27:b0:97:ba:c2:0f:76:d1:97:cb:62:e4:2c: 3f:fd:d3:c0:b6:4d:6b:c3:af:a6:d3:17:35:7c:dc: 17:1a:f4:9b:f5:27:c6:62:82:e9:59:84:d5:4d:11: eb:1f:70:c0:92:29:8f:21:4c:8a:9a:9d:d1:b6:1f: e2:2a:33:d4:29:a7:6f:a8:32:98:d1:e0:59:f2:63: 97:4c:6d:a9:7d:a3:47:e5:09:56:0a:8d:ea:fe:e0: 84:2a:c5:0d:a9:d7:d1:ad:eb:24:8a:3d:49:69:28: 17:a9:85:87:ca:7b:ee:49:40:80:3b:6b:c2:de:63: dd:9c:3b:bc:1e:bf:df:77:fe:81:53:15:a5:f4:bd: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D3:B7:F9:F4:15:0F:5D:D9:A9:5E:EB:FC:E9:C9:E8:75:58:93:E8 X509v3 Authority Key Identifier: keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c4:82:e4:f8:6e:21:32:d4:43:7b:53:8e:61:ba:14:35:03: 14:67:59:10:c0:c3:0e:06:3b:e4:d2:de:b0:bd:aa:ae:30:38: 44:81:f3:63:fa:4b:7a:6b:69:8b:42:02:b4:b7:0d:31:b1:74: bd:ca:01:7a:44:ff:47:73:41:40:24:2a:ff:98:5f:1c:f3:73: 61:96:44:d8:a5:1e:86:73:50:24:ee:4f:0a:65:46:cb:a5:73: 33:0a:3a:54:d2:24:21:a5:6e:6f:3f:e7:82:dd:da:ba:e7:01: 3b:e4:db:90:9c:9d:0d:35:44:5f:1d:a8:60:05:09:71:d1:29: 17:ab:ca:02:62:88:74:70:d9:b6:55:6b:86:d8:3e:e8:ea:ce: 83:a3:3d:b7:aa:62:a8:d1:86:07:19:e7:33:22:72:ff:9f:f8: c7:45:ce:d4:42:c1:dd:5d:48:c7:ac:5f:65:4a:69:10:9a:82: 50:09:16:3a:88:4d:3f:bc:e3:9a:65:c2:fb:a8:f9:19:fe:bd: 31:1c:95:fe:be:d1:04:d0:3b:d8:2f:40:85:b7:52:32:de:f6: 8c:f0:22:8c:c8:31:8a:50:4e:cb:4c:4d:d4:6a:84:8f:11:f2: e2:e6:95:a6:fc:ce:34:58:4c:c7:46:84:e1:b3:c6:d6:e5:52: 37:a1:3a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PycD0/fKupOqxmb0p+kfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzNkMmRkYTkzZTQyMDQwOTE2M2RhNTllNzQxNGVlOTFh MmVlZjIwHhcNMjYwMTI2MDMwMDQ2WhcNMjYwMTI3MDMwMDQ2WjAzMTEwLwYDVQQD EyhlMWQzYjdmOWY0MTUwZjVkZDlhOTVlZWJmY2U5YzllODc1NTg5M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurFyrjTN16f70XFQUGGTKnFW3zrV eC171qHJf8c1/IJlc1b01sYOHAzAHHaShcO0588rujf5SefoQUutYmQ5FMGzZQad rO8/neTmGmqvNkoGguOgOMpj7aTrzJJyPzt5jgqxG0ILU8fLSWaOswNlE2/q4jtt uTfPlSewl7rCD3bRl8ti5Cw//dPAtk1rw6+m0xc1fNwXGvSb9SfGYoLpWYTVTRHr H3DAkimPIUyKmp3Rth/iKjPUKadvqDKY0eBZ8mOXTG2pfaNH5QlWCo3q/uCEKsUN qdfRreskij1JaSgXqYWHynvuSUCAO2vC3mPdnDu8Hr/fd/6BUxWl9L05hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHTt/n0FQ9d2ale6/zpyeh1WJPoMB8GA1UdIwQY MBaAFLVz0t2pPkIECRY9pZ50FO6Rou7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYt MDhkMGY0YmQyYzI4LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYtMDhkMGY0YmQyYzI4 LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsSC5Phu ITLUQ3tTjmG6FDUDFGdZEMDDDgY75NLesL2qrjA4RIHzY/pLemtpi0ICtLcNMbF0 vcoBekT/R3NBQCQq/5hfHPNzYZZE2KUehnNQJO5PCmVGy6VzMwo6VNIkIaVubz/n gt3auucBO+TbkJydDTVEXx2oYAUJcdEpF6vKAmKIdHDZtlVrhtg+6OrOg6M9t6pi qNGGBxnnMyJy/5/4x0XO1ELB3V1Ix6xfZUppEJqCUAkWOohNP7zjmmXC+6j5Gf69 MRyV/r7RBNA72C9AhbdSMt72jPAijMgxilBOy0xN1GqEjxHy4uaVpvzONFhMx0aE 4bPG1uVSN6E62A== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:40 2026 by rpki-client