This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json) Hash identifier: cMQZJvDOCWB8+eQ/m/rOZDOsMluxY1P81Rkzdiw5weQ= Subject key identifier: A7:4C:A4:52:3D:58:FE:6B:60:EF:9E:BE:2C:AF:76:B1:89:9C:AC:68 Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Certificate serial: 019BF8082102846D10ADAE08BDE82AC85904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft Manifest number: 04CD Signing time: Mon 26 Jan 2026 02:00:40 +0000 Manifest this update: Mon 26 Jan 2026 02:00:40 +0000 Manifest next update: Tue 27 Jan 2026 02:00:40 +0000 Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: rNcp2LNrVMzhI5kN+0m3nQSH8Rw9g6ZyGooea0GFBsY=) 2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:21:02:84:6d:10:ad:ae:08:bd:e8:2a:c8:59:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Validity Not Before: Jan 26 02:00:40 2026 GMT Not After : Jan 27 02:00:40 2026 GMT Subject: CN=a74ca4523d58fe6b60ef9ebe2caf76b1899cac68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dd:55:99:64:fb:2d:b5:91:62:c4:bc:e8:07: f0:f7:02:34:d9:23:07:75:44:6e:d1:f8:86:dd:47: df:91:cc:77:62:db:d8:af:17:f5:d1:e2:17:56:41: d8:f0:d4:36:ee:b4:13:6b:10:cd:10:2a:7e:aa:d5: f6:1a:1f:79:c1:a0:f9:33:de:ee:0a:4a:06:c9:e3: c4:d9:56:f0:47:f7:77:21:11:41:c8:ee:d5:e7:b5: c7:ae:d2:5f:35:55:81:b1:06:b8:c6:93:ae:5a:33: 6b:dd:7f:38:ce:44:a1:98:66:ec:fa:2f:cd:2e:14: 72:97:37:93:ef:c1:0a:eb:9c:74:a2:3f:18:e6:50: 6e:dc:41:f5:a7:a2:6d:1e:98:fc:10:ae:8b:9f:45: 9a:62:6e:04:02:11:5f:c5:20:68:77:a5:36:23:93: ac:40:8b:0b:63:bd:20:66:4e:39:a4:c5:04:6e:7b: b4:ae:3e:77:24:f3:ba:2f:ad:aa:dc:72:12:9d:85: fc:11:24:03:60:ca:12:66:3b:b4:8a:ff:0a:73:78: b3:1c:78:55:9c:99:0f:33:72:99:c6:d7:72:e6:06: 30:da:b8:4c:dc:9f:8d:cc:46:49:06:d1:ee:bd:3b: d2:8b:21:6e:a5:a7:dc:b8:eb:1b:79:4b:be:fc:20: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4C:A4:52:3D:58:FE:6B:60:EF:9E:BE:2C:AF:76:B1:89:9C:AC:68 X509v3 Authority Key Identifier: keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:91:c4:36:0f:28:3e:df:60:e2:0b:d9:ea:15:b3:25:2a:a8: ac:3f:c4:8b:15:09:f9:20:aa:c1:2a:3c:8f:af:f6:d7:a0:4b: 9e:7c:94:c9:ed:0c:c6:4a:90:61:db:bd:b1:b6:ff:68:f4:59: 18:dd:65:0c:05:f7:34:62:32:b3:31:26:12:57:e1:33:53:77: aa:c8:90:e3:9f:1a:8a:4c:4e:7e:d3:14:19:69:af:58:c2:fb: 04:c1:64:9e:69:87:6e:47:82:14:28:3d:2c:c5:d9:04:15:7a: 30:c8:17:60:b4:cf:da:a9:51:c8:4c:15:f0:e7:09:ea:09:8f: 7e:d8:01:29:dd:d7:fe:2e:e0:f3:59:72:b3:be:35:09:7b:40: 35:9e:14:6e:25:de:f2:6e:e8:01:f9:48:b7:54:0a:a5:0f:7b: 38:59:9e:86:92:2e:ba:af:b2:23:a7:c9:8b:4f:e2:18:7e:19: 8e:92:ff:45:ba:db:87:5f:f0:fa:1e:1b:c2:ce:b8:3f:94:f5: ec:6f:82:07:10:9c:50:de:7e:4e:5c:43:f4:da:7a:40:a0:cf: 2e:e6:06:73:43:c0:70:b7:f3:32:59:25:b0:16:db:59:a5:c4: 21:32:08:a9:bd:91:80:92:28:71:d2:75:ee:34:2c:b6:95:28: 1d:40:ff:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CCEChG0Qra4IvegqyFkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3 ZmZhZjEwHhcNMjYwMTI2MDIwMDQwWhcNMjYwMTI3MDIwMDQwWjAzMTEwLwYDVQQD EyhhNzRjYTQ1MjNkNThmZTZiNjBlZjllYmUyY2FmNzZiMTg5OWNhYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA891VmWT7LbWRYsS86Afw9wI02SMH dURu0fiG3Uffkcx3YtvYrxf10eIXVkHY8NQ27rQTaxDNECp+qtX2Gh95waD5M97u CkoGyePE2VbwR/d3IRFByO7V57XHrtJfNVWBsQa4xpOuWjNr3X84zkShmGbs+i/N LhRylzeT78EK65x0oj8Y5lBu3EH1p6JtHpj8EK6Ln0WaYm4EAhFfxSBod6U2I5Os QIsLY70gZk45pMUEbnu0rj53JPO6L62q3HISnYX8ESQDYMoSZju0iv8Kc3izHHhV nJkPM3KZxtdy5gYw2rhM3J+NzEZJBtHuvTvSiyFupafcuOsbeUu+/CBI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdMpFI9WP5rYO+eviyvdrGJnKxoMB8GA1UdIwQY MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt NjYxYmIwZTllNmVjLzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepHENg8o Pt9g4gvZ6hWzJSqorD/EixUJ+SCqwSo8j6/216BLnnyUye0MxkqQYdu9sbb/aPRZ GN1lDAX3NGIyszEmElfhM1N3qsiQ458aikxOftMUGWmvWML7BMFknmmHbkeCFCg9 LMXZBBV6MMgXYLTP2qlRyEwV8OcJ6gmPftgBKd3X/i7g81lys741CXtANZ4UbiXe 8m7oAflIt1QKpQ97OFmehpIuuq+yI6fJi0/iGH4ZjpL/Rbrbh1/w+h4bws64P5T1 7G+CBxCcUN5+TlxD9Np6QKDPLuYGc0PAcLfzMlklsBbbWaXEITIIqb2RgJIocdJ1 7jQstpUoHUD/CQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:10 2026 by rpki-client