This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json) Hash identifier: hFobY5F13KWIntxTzmwyKYhL9tadbn1WjBOoONvzzKU= Subject key identifier: 7F:5A:7B:5D:1F:AC:19:A6:5D:33:B6:2B:98:94:63:CA:1F:92:A6:58 Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90 Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590 Certificate serial: 019BF4D11688C3F82A0CEBE8493293C4ACDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 11:01:42 +0000 Manifest this update: Sun 25 Jan 2026 11:01:42 +0000 Manifest next update: Mon 26 Jan 2026 11:01:42 +0000 Files and hashes: 1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=) 2: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=) 3: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=) 4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: sH7hZjGtxBPyZf3OPV9qB5rTL1BsfcQT7QKtmqU8xvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:16:88:c3:f8:2a:0c:eb:e8:49:32:93:c4:ac:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b467367967dc763349fd0b50e31f75b823028590 Validity Not Before: Jan 25 11:01:42 2026 GMT Not After : Jan 26 11:01:42 2026 GMT Subject: CN=7f5a7b5d1fac19a65d33b62b989463ca1f92a658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:d6:ae:26:50:ec:34:a8:f5:2b:f5:f0:8e: 4f:d0:a5:f7:1a:c2:1f:1f:8a:fb:8b:93:63:9b:9a: 1d:85:92:7a:bc:e5:51:d7:10:ca:85:2b:85:68:89: 59:97:2e:97:f8:9d:10:09:2a:19:33:7d:bc:a0:c8: ed:bb:45:28:52:d1:3c:bb:55:bc:c8:5b:a5:3c:fe: 06:10:99:8d:73:c9:58:ae:01:fe:a7:de:0a:b7:16: 8d:60:02:0b:0d:25:bc:01:ea:bd:bb:17:5f:b9:a5: 45:ff:bb:a3:75:e2:ec:dd:a9:2d:19:f3:c8:af:53: 60:19:e2:59:81:2a:78:44:dc:f0:e5:c0:81:95:df: be:45:02:60:76:43:bb:38:32:3b:13:17:ab:b5:c6: e0:ce:6c:0d:49:4c:57:f8:62:72:db:70:cd:eb:ea: ae:1a:2c:73:fb:aa:8b:90:e0:f9:52:5b:41:eb:15: f5:91:41:64:92:34:b9:45:7f:67:85:cc:3c:ab:6a: 5d:1a:e8:41:7c:ca:ed:8a:22:3c:7d:6d:04:02:3c: 3a:b6:8b:ef:76:4f:29:b7:b7:dc:cb:45:8c:ff:8f: 4d:44:5b:3c:45:6f:3a:97:b6:4c:55:fd:c4:d6:2b: dc:a9:90:af:05:78:e4:f5:e8:5d:d4:51:b6:7e:18: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:7B:5D:1F:AC:19:A6:5D:33:B6:2B:98:94:63:CA:1F:92:A6:58 X509v3 Authority Key Identifier: keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:63:64:f1:05:f5:34:83:d4:c3:3f:db:23:8b:31:5e:2e:6b: 0c:2a:19:d7:50:de:39:3c:27:90:94:82:75:62:7a:27:aa:3d: 4e:1a:55:92:e5:53:dd:4c:ce:43:0d:ac:51:59:36:f2:c0:50: 69:c2:2e:ef:5a:c1:df:56:00:54:20:3c:5e:78:c6:36:e4:5e: e5:ca:14:e6:33:7b:bb:69:82:c5:9d:de:cc:31:53:dc:1a:14: b7:dc:7c:cc:18:37:f4:73:f3:c5:bc:bf:3a:42:2a:51:b7:2b: fe:b3:c1:5a:17:72:c0:64:ee:04:34:c7:4d:9a:d6:d4:41:40: 2f:08:06:ca:17:da:eb:b0:a6:9c:fb:ff:09:8b:f1:8d:ed:0d: ce:1e:42:01:f1:be:2a:08:c7:75:95:2b:1f:8e:6b:c8:bd:33: 34:ca:1a:a2:28:b1:a1:af:76:cc:5c:1b:56:ce:3a:6c:1d:05: 27:8b:a2:19:b7:3c:6f:20:6d:2c:6b:1f:d9:59:f5:61:93:98: ac:45:f9:80:f1:2f:86:29:87:3f:fa:d8:c8:6d:b8:4e:db:e3: 3a:56:5f:95:b4:05:9f:f3:75:3c:07:99:8a:7f:28:7a:67:40: ad:8a:95:52:d7:93:88:00:90:ac:87:48:a0:df:64:e5:fa:d6: e4:a8:6d:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RaIw/gqDOvoSTKTxKzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjczNjc5NjdkYzc2MzM0OWZkMGI1MGUzMWY3NWI4MjMw Mjg1OTAwHhcNMjYwMTI1MTEwMTQyWhcNMjYwMTI2MTEwMTQyWjAzMTEwLwYDVQQD Eyg3ZjVhN2I1ZDFmYWMxOWE2NWQzM2I2MmI5ODk0NjNjYTFmOTJhNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaLWriZQ7DSo9Sv18I5P0KX3GsIf H4r7i5Njm5odhZJ6vOVR1xDKhSuFaIlZly6X+J0QCSoZM328oMjtu0UoUtE8u1W8 yFulPP4GEJmNc8lYrgH+p94KtxaNYAILDSW8Aeq9uxdfuaVF/7ujdeLs3aktGfPI r1NgGeJZgSp4RNzw5cCBld++RQJgdkO7ODI7ExertcbgzmwNSUxX+GJy23DN6+qu Gixz+6qLkOD5UltB6xX1kUFkkjS5RX9nhcw8q2pdGuhBfMrtiiI8fW0EAjw6tovv dk8pt7fcy0WM/49NRFs8RW86l7ZMVf3E1ivcqZCvBXjk9ehd1FG2fhhp4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9ae10frBmmXTO2K5iUY8ofkqZYMB8GA1UdIwQY MBaAFLRnNnln3HYzSf0LUOMfdbgjAoWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMt YjgxMzczYzQwZGM5LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMtYjgxMzczYzQwZGM5 LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2Nk8QX1 NIPUwz/bI4sxXi5rDCoZ11DeOTwnkJSCdWJ6J6o9ThpVkuVT3UzOQw2sUVk28sBQ acIu71rB31YAVCA8XnjGNuRe5coU5jN7u2mCxZ3ezDFT3BoUt9x8zBg39HPzxby/ OkIqUbcr/rPBWhdywGTuBDTHTZrW1EFALwgGyhfa67CmnPv/CYvxje0Nzh5CAfG+ KgjHdZUrH45ryL0zNMoaoiixoa92zFwbVs46bB0FJ4uiGbc8byBtLGsf2Vn1YZOY rEX5gPEvhimHP/rYyG24TtvjOlZflbQFn/N1PAeZin8oemdArYqVUteTiACQrIdI oN9k5frW5KhtYA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:51 2026 by rpki-client