This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json) Hash identifier: 9HOQQIgEMz/L4XadUgUuvKn2d4P6kvfvCniLUEunMZE= Subject key identifier: E0:4C:18:52:ED:85:D2:1C:ED:ED:30:DE:52:03:78:05:E6:A8:0B:52 Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Certificate serial: 019BF619FA19343FFCC71D9FE2E6E0704CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:00:56 +0000 Manifest this update: Sun 25 Jan 2026 17:00:56 +0000 Manifest next update: Mon 26 Jan 2026 17:00:56 +0000 Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=) 2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: 77o79++dzszch7huUF5nr8+81Ky4NWtksjtmu1vfxiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:fa:19:34:3f:fc:c7:1d:9f:e2:e6:e0:70:4c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Validity Not Before: Jan 25 17:00:56 2026 GMT Not After : Jan 26 17:00:56 2026 GMT Subject: CN=e04c1852ed85d21ceded30de52037805e6a80b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:58:74:6a:d4:de:78:1f:4b:56:80:aa:9d:14: 03:f2:97:21:2d:98:27:41:19:f8:ad:ce:cf:bd:04: 2b:13:6f:21:fa:0c:ff:40:1e:53:ae:9e:0f:13:1b: c6:2b:2e:09:16:78:b0:52:fb:66:6a:26:93:06:45: 07:86:af:df:d2:7b:87:97:67:71:c1:c5:4e:81:df: b5:bf:d9:62:fd:c1:1b:06:fa:5c:8f:b8:ba:0e:cb: 2e:d4:f8:d5:9d:0a:9e:d0:c3:a1:b8:bc:1b:1d:71: 96:46:55:d5:cb:ad:68:cb:ed:5d:af:d6:43:4d:49: a5:95:c6:20:20:8a:05:ce:43:03:52:41:3f:90:03: 45:87:45:a4:11:e3:1c:25:1e:eb:f5:31:5a:df:ad: 53:ef:55:59:19:ab:a2:76:0d:06:5f:36:76:17:2f: bf:98:fd:4d:c5:a8:9f:c4:47:98:76:f0:76:d4:53: 96:1c:bb:19:9b:93:ca:18:06:d6:e7:92:f4:c5:f1: c9:db:0f:18:b7:c4:3f:2d:16:d4:72:71:73:6d:6d: 0a:ed:7b:f4:29:35:04:18:c8:19:5b:0f:c3:a5:7d: 24:d2:d4:ee:db:7c:c7:9f:bb:ee:d8:08:e7:2a:77: f5:53:4a:d5:8a:76:70:32:50:ac:31:65:a3:26:d8: 73:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:18:52:ED:85:D2:1C:ED:ED:30:DE:52:03:78:05:E6:A8:0B:52 X509v3 Authority Key Identifier: keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c0:74:7e:77:2b:5b:f4:01:1d:ce:15:48:d9:27:02:1e:5c: 8e:0a:71:1b:ee:33:59:57:cd:31:e8:da:93:76:96:19:a4:98: 37:c4:e5:25:56:58:d9:d6:7d:ec:67:91:27:e1:68:b0:a0:a3: e6:34:61:51:56:12:e6:3f:61:93:d8:d9:2b:26:d9:10:98:33: e0:14:23:c1:b0:31:7b:66:97:fe:68:a2:52:05:e3:24:d2:8f: 68:b6:cd:8b:03:a1:c4:68:59:ac:11:14:59:39:96:cc:cb:70: e9:20:0f:a2:62:e2:b3:bc:9e:3e:c4:83:97:3b:bb:48:ac:d3: be:0c:9d:27:29:a1:6e:51:d0:50:69:65:07:15:c2:b9:b7:e5: 01:66:3e:bc:d3:df:e2:33:db:82:bb:c7:4f:40:4f:df:a3:32: 53:03:1a:0c:d5:7b:df:48:46:a1:8f:bc:80:c4:95:3e:4d:6c: ea:ef:df:22:e6:45:9d:7c:bb:0e:96:0f:e3:93:05:38:6b:1a: 31:ed:47:d3:d9:4c:72:42:8d:2a:73:e0:a0:f3:c3:51:8f:78: 98:b5:76:b3:3f:b7:72:42:d8:82:8f:2a:74:8a:48:1d:38:24: fb:11:50:ed:c1:f6:b2:e7:38:26:0b:e9:9b:98:6e:5a:b6:63: a1:46:b2:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GfoZND/8xx2f4ubgcEzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi ZTJiZDAwHhcNMjYwMTI1MTcwMDU2WhcNMjYwMTI2MTcwMDU2WjAzMTEwLwYDVQQD EyhlMDRjMTg1MmVkODVkMjFjZWRlZDMwZGU1MjAzNzgwNWU2YTgwYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vh0atTeeB9LVoCqnRQD8pchLZgn QRn4rc7PvQQrE28h+gz/QB5Trp4PExvGKy4JFniwUvtmaiaTBkUHhq/f0nuHl2dx wcVOgd+1v9li/cEbBvpcj7i6Dssu1PjVnQqe0MOhuLwbHXGWRlXVy61oy+1dr9ZD TUmllcYgIIoFzkMDUkE/kANFh0WkEeMcJR7r9TFa361T71VZGauidg0GXzZ2Fy+/ mP1NxaifxEeYdvB21FOWHLsZm5PKGAbW55L0xfHJ2w8Yt8Q/LRbUcnFzbW0K7Xv0 KTUEGMgZWw/DpX0k0tTu23zHn7vu2AjnKnf1U0rVinZwMlCsMWWjJthznQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBMGFLthdIc7e0w3lIDeAXmqAtSMB8GA1UdIwQY MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3 LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8B0fncr W/QBHc4VSNknAh5cjgpxG+4zWVfNMejak3aWGaSYN8TlJVZY2dZ97GeRJ+FosKCj 5jRhUVYS5j9hk9jZKybZEJgz4BQjwbAxe2aX/miiUgXjJNKPaLbNiwOhxGhZrBEU WTmWzMtw6SAPomLis7yePsSDlzu7SKzTvgydJymhblHQUGllBxXCubflAWY+vNPf 4jPbgrvHT0BP36MyUwMaDNV730hGoY+8gMSVPk1s6u/fIuZFnXy7DpYP45MFOGsa Me1H09lMckKNKnPgoPPDUY94mLV2sz+3ckLYgo8qdIpIHTgk+xFQ7cH2suc4Jgvp m5huWrZjoUay/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:44 2026 by rpki-client