This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json) Hash identifier: 0zPIi5NL8pqrga8e9rkMHnLbECg/HmZhO5EeuOEoV7Q= Subject key identifier: C7:FB:AA:52:B7:0E:FD:5B:8C:71:00:FA:68:C3:F5:6B:57:BD:75:7F Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f Certificate serial: 019BF763D36F9EF49B9FFEC138E0C0FB37D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft Manifest number: 08DE Signing time: Sun 25 Jan 2026 23:01:13 +0000 Manifest this update: Sun 25 Jan 2026 23:01:13 +0000 Manifest next update: Mon 26 Jan 2026 23:01:13 +0000 Files and hashes: 1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: CXgjKy7Ei3FmpZZBfSLz4cAt3DF7yrhWOZg1eiVnZFA=) 2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d3:6f:9e:f4:9b:9f:fe:c1:38:e0:c0:fb:37:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f Validity Not Before: Jan 25 23:01:13 2026 GMT Not After : Jan 26 23:01:13 2026 GMT Subject: CN=c7fbaa52b70efd5b8c7100fa68c3f56b57bd757f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:e0:9a:04:81:aa:84:ca:66:21:51:c6:0c: e7:36:3c:64:80:31:c0:9e:a7:24:d0:4d:62:e0:a5: 0c:9a:85:15:04:72:6c:bf:c6:d6:77:2e:71:98:a1: b0:63:7f:7a:7c:86:91:32:c9:f0:b3:63:6b:61:ad: c4:53:04:cc:4a:04:4c:a3:58:5d:93:7d:74:f8:74: 50:d2:a4:fb:95:46:ec:55:22:ac:48:9a:6d:50:a9: 4d:01:e6:aa:b9:31:03:76:c5:dd:f6:2d:97:de:3e: db:9c:8d:71:ca:d9:42:38:f5:66:6c:53:3c:2b:e7: 42:3a:91:85:54:ca:97:b2:79:2d:57:74:20:48:07: f0:05:0d:90:c6:af:60:84:6e:92:7d:c8:ae:af:3b: 3c:72:a3:b2:37:14:92:8f:91:c5:2b:f0:58:73:08: b3:77:ae:c4:f8:bf:b4:ed:6b:69:f7:0f:23:82:c2: 74:da:53:04:0c:f5:aa:2e:39:fa:a8:fc:34:d2:94: 6f:36:34:42:65:59:dc:09:84:b6:77:f8:75:42:00: 1c:cb:34:08:95:00:8b:65:96:e2:09:e6:7d:99:03: bd:0e:a0:ee:2a:ca:a3:ef:a5:41:a1:4e:db:14:d0: 1a:b0:eb:89:7e:91:a6:4c:63:df:3e:74:c2:a6:64: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:AA:52:B7:0E:FD:5B:8C:71:00:FA:68:C3:F5:6B:57:BD:75:7F X509v3 Authority Key Identifier: keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:06:0e:f2:f4:ec:c1:61:29:15:fe:b3:8b:c9:aa:3d:ac:a9: d4:19:d2:d7:53:43:ee:eb:b3:6a:64:ce:a9:b2:fb:29:98:9d: 6d:19:4b:e7:16:5d:5a:93:77:d3:41:8c:c9:e3:c1:6b:f6:75: 20:92:c4:f9:03:b3:5e:a3:1a:c0:c5:7c:0f:df:0a:4b:f0:e9: 89:38:82:02:22:66:c3:b4:43:da:86:51:fb:59:41:55:a1:9a: c9:11:ca:2f:d1:53:f0:5f:28:ff:d9:14:62:5a:94:d4:41:02: 1a:20:70:bd:16:ee:9a:61:49:6f:3b:ae:c4:c7:1c:dc:c1:14: 72:d8:a6:5c:1e:8d:5f:1f:a9:1c:17:13:a7:80:c3:13:e5:fc: 2a:7d:53:4e:15:c5:35:32:0c:ed:cf:4d:2f:7b:a7:f4:65:9d: 93:89:cd:26:d2:89:39:69:6d:ef:f4:bb:4d:86:54:b2:36:41: 16:8c:11:3e:12:98:59:e3:6a:ec:9a:c2:6f:33:05:f2:83:e1: 76:2e:b4:9d:8c:c8:36:9f:f7:4f:7c:cc:21:a8:56:a5:9d:08: f7:af:34:90:96:10:75:0a:8b:32:35:2f:a8:2e:e4:90:34:74: 3c:3e:0f:b0:80:14:c7:be:be:37:36:4b:48:8e:6d:be:d6:df: ab:a7:26:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9NvnvSbn/7BOODA+zfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm NjcxNGYwHhcNMjYwMTI1MjMwMTEzWhcNMjYwMTI2MjMwMTEzWjAzMTEwLwYDVQQD EyhjN2ZiYWE1MmI3MGVmZDViOGM3MTAwZmE2OGMzZjU2YjU3YmQ3NTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkTgmgSBqoTKZiFRxgznNjxkgDHA nqck0E1i4KUMmoUVBHJsv8bWdy5xmKGwY396fIaRMsnws2NrYa3EUwTMSgRMo1hd k310+HRQ0qT7lUbsVSKsSJptUKlNAeaquTEDdsXd9i2X3j7bnI1xytlCOPVmbFM8 K+dCOpGFVMqXsnktV3QgSAfwBQ2Qxq9ghG6Sfciurzs8cqOyNxSSj5HFK/BYcwiz d67E+L+07Wtp9w8jgsJ02lMEDPWqLjn6qPw00pRvNjRCZVncCYS2d/h1QgAcyzQI lQCLZZbiCeZ9mQO9DqDuKsqj76VBoU7bFNAasOuJfpGmTGPfPnTCpmRb7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf7qlK3Dv1bjHEA+mjD9WtXvXV/MB8GA1UdIwQY MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2 LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwYO8vTs wWEpFf6zi8mqPayp1BnS11ND7uuzamTOqbL7KZidbRlL5xZdWpN300GMyePBa/Z1 IJLE+QOzXqMawMV8D98KS/DpiTiCAiJmw7RD2oZR+1lBVaGayRHKL9FT8F8o/9kU YlqU1EECGiBwvRbummFJbzuuxMcc3MEUctimXB6NXx+pHBcTp4DDE+X8Kn1TThXF NTIM7c9NL3un9GWdk4nNJtKJOWlt7/S7TYZUsjZBFowRPhKYWeNq7JrCbzMF8oPh di60nYzINp/3T3zMIahWpZ0I9680kJYQdQqLMjUvqC7kkDR0PD4PsIAUx76+NzZL SI5tvtbfq6cmww== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:55 2026 by rpki-client