This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json) Hash identifier: bXPK1QIrvrDHzlymNxg4NnB0WRyLc7CVgeUkCPMaySY= Subject key identifier: D4:73:4C:D8:54:C0:3B:77:AC:E2:D1:3A:18:ED:A5:91:0C:9C:56:37 Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362 Certificate serial: 019BF83FAE71E8A6FF2B36C284205890EC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 03:01:21 +0000 Manifest this update: Mon 26 Jan 2026 03:01:21 +0000 Manifest next update: Tue 27 Jan 2026 03:01:21 +0000 Files and hashes: 1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: esrXqvUrJFb1yV8CULmimVH0hNHv+aDGJWjdEJD8Hdw=) 2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:ae:71:e8:a6:ff:2b:36:c2:84:20:58:90:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362 Validity Not Before: Jan 26 03:01:21 2026 GMT Not After : Jan 27 03:01:21 2026 GMT Subject: CN=d4734cd854c03b77ace2d13a18eda5910c9c5637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:5a:d8:b0:1a:b7:c7:8c:10:b2:60:46:43: 18:43:a6:86:8a:ed:5a:ee:71:71:9e:b7:c5:1d:3f: bd:87:e6:df:6c:f0:f2:00:07:b6:e8:87:8a:9a:b5: b7:ba:e3:0a:f7:11:21:d4:77:5e:96:43:cc:50:bb: fd:db:46:c4:db:6e:42:25:c0:5c:13:1d:d6:da:1e: b6:0d:55:27:a0:39:83:de:24:71:d7:47:66:08:9a: 9c:4a:8f:e1:e0:bb:58:14:47:4e:b1:75:42:59:d7: 32:89:b6:56:83:57:8e:1f:6f:e9:e0:76:b4:63:54: 0e:a7:1d:60:fc:7d:ae:9c:b4:e2:b5:14:fc:c8:4c: 83:18:9d:52:c0:82:15:f5:43:6f:d8:4a:e6:15:11: 4c:2f:f7:e4:cf:44:d4:e3:83:47:3a:1a:e8:1f:ff: 79:c9:3d:0f:91:34:b6:c2:12:7c:4c:59:49:89:57: b2:7a:68:de:30:1f:40:2e:07:63:17:b3:bf:d5:cf: 78:5c:f3:84:10:49:03:d2:f8:40:c4:c8:08:2c:6f: d8:c1:ed:48:63:0b:ef:d2:2c:c0:eb:a4:6a:0b:97: cc:70:c8:bd:57:f3:8e:d0:93:b3:d6:8f:85:7f:79: 95:ca:65:b0:f6:c4:d4:b3:05:01:f1:5f:94:a1:99: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:4C:D8:54:C0:3B:77:AC:E2:D1:3A:18:ED:A5:91:0C:9C:56:37 X509v3 Authority Key Identifier: keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2f:66:1a:bc:10:01:49:f2:b8:28:2c:44:69:f0:3a:8a:0b: 93:d3:02:d7:ff:b9:89:b2:a2:95:21:60:85:e8:f2:41:f5:97: 9e:70:52:91:e6:f6:03:01:bb:60:59:d8:dc:d5:61:8b:70:e4: 95:08:cf:ab:92:08:51:0a:ce:6a:6c:93:68:b1:0b:d6:88:d5: b4:87:04:d8:2c:a9:58:c3:79:83:4d:a0:52:fb:89:58:4e:d2: e0:71:53:c7:03:24:3d:22:f0:2e:ba:69:80:90:6b:6e:46:f1: 2e:63:cf:24:95:0a:d8:50:85:a8:b0:c4:9b:3e:20:c1:28:96: cb:15:53:2f:12:7a:d6:c1:ed:d4:d4:c5:57:1d:4b:6f:2b:92: 6a:d9:71:23:3e:f6:80:0d:4a:22:fd:6d:0d:89:5c:3d:e3:67: a7:e5:4a:75:1f:69:0d:4e:d5:e8:c3:ab:07:49:bb:92:eb:21: bc:dd:d9:be:57:cd:cb:a4:1f:b6:f6:84:18:1c:4f:e4:93:92: 4d:8f:e0:0b:be:6b:4e:d3:a6:c6:cb:ca:33:e4:5b:17:2f:8a: 3d:f8:93:99:94:af:ee:8d:c6:06:2c:0b:a1:3d:8a:ae:60:18: c1:04:55:43:0e:1c:6e:c4:61:de:60:8f:92:d8:29:a7:52:02: e1:04:d7:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P65x6Kb/KzbChCBYkOwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTcwNDAzYzlkMmQ3OTYyY2YxMTNkOTNjNDYyZjk0OTNk ODczNjIwHhcNMjYwMTI2MDMwMTIxWhcNMjYwMTI3MDMwMTIxWjAzMTEwLwYDVQQD EyhkNDczNGNkODU0YzAzYjc3YWNlMmQxM2ExOGVkYTU5MTBjOWM1NjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFla2LAat8eMELJgRkMYQ6aGiu1a 7nFxnrfFHT+9h+bfbPDyAAe26IeKmrW3uuMK9xEh1HdelkPMULv920bE225CJcBc Ex3W2h62DVUnoDmD3iRx10dmCJqcSo/h4LtYFEdOsXVCWdcyibZWg1eOH2/p4Ha0 Y1QOpx1g/H2unLTitRT8yEyDGJ1SwIIV9UNv2ErmFRFML/fkz0TU44NHOhroH/95 yT0PkTS2whJ8TFlJiVeyemjeMB9ALgdjF7O/1c94XPOEEEkD0vhAxMgILG/Ywe1I Ywvv0izA66RqC5fMcMi9V/OO0JOz1o+Ff3mVymWw9sTUswUB8V+UoZnY8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRzTNhUwDt3rOLROhjtpZEMnFY3MB8GA1UdIwQY MBaAFE3nBAPJ0teWLPET2TxGL5ST2HNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUt YmYwZGE1ZThjZTdmLzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUtYmYwZGE1ZThjZTdm LzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy9mGrwQ AUnyuCgsRGnwOooLk9MC1/+5ibKilSFghejyQfWXnnBSkeb2AwG7YFnY3NVhi3Dk lQjPq5IIUQrOamyTaLEL1ojVtIcE2CypWMN5g02gUvuJWE7S4HFTxwMkPSLwLrpp gJBrbkbxLmPPJJUK2FCFqLDEmz4gwSiWyxVTLxJ61sHt1NTFVx1LbyuSatlxIz72 gA1KIv1tDYlcPeNnp+VKdR9pDU7V6MOrB0m7kushvN3ZvlfNy6QftvaEGBxP5JOS TY/gC75rTtOmxsvKM+RbFy+KPfiTmZSv7o3GBiwLoT2KrmAYwQRVQw4cbsRh3mCP ktgpp1IC4QTX/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:24 2026 by rpki-client