This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json) Hash identifier: Cpnivz/gzSE9iJvUVpO5cADH/7ldsp8etJ3ITZWJWME= Subject key identifier: BA:56:34:B9:8F:E1:E4:58:C9:DA:8C:A8:83:45:48:81:D5:8F:64:BF Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Certificate serial: 019BF5752F14DDAD76A4723849F7B83791E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 14:00:56 +0000 Manifest this update: Sun 25 Jan 2026 14:00:56 +0000 Manifest next update: Mon 26 Jan 2026 14:00:56 +0000 Files and hashes: 1: EE1IR__hFo0NNKF6xFAxKCvJLLc.roa (hash: c5vHGMXBjtf9/OA6kUh+XleGeiDScbpifIZCP8WtbjI=) 2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: 9pETDIlqAx0OLzFtXlhMJpWbmy6jqVzJkufColDxo+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:2f:14:dd:ad:76:a4:72:38:49:f7:b8:37:91:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Validity Not Before: Jan 25 14:00:56 2026 GMT Not After : Jan 26 14:00:56 2026 GMT Subject: CN=ba5634b98fe1e458c9da8ca883454881d58f64bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:87:48:a3:af:8f:b1:56:d4:c7:3a:9e:65: eb:e5:db:2e:88:62:de:0b:e2:1e:bf:94:86:c3:64: 73:32:46:5b:91:75:7b:ff:c6:28:bf:d7:b9:99:a9: 30:4e:aa:65:72:e9:40:34:13:1f:7d:6b:a3:6f:0f: b6:ba:6f:d0:3b:6a:ac:00:9b:c3:96:d8:0f:89:c1: 3a:ab:e8:8b:52:18:72:73:9b:d6:37:b1:c6:62:ee: 47:e4:f7:a1:b5:b0:28:a9:26:13:f2:75:aa:f6:26: 27:66:fc:78:35:7a:a9:63:d2:63:66:4d:a2:aa:41: a9:c0:50:b7:59:9c:44:24:4b:59:a4:14:a1:a8:0e: 4e:f5:31:e7:07:4b:1b:05:67:3b:96:c3:c3:06:02: 5a:33:21:69:bc:f4:84:69:73:66:10:33:c8:05:50: 4c:97:e2:75:8c:7b:f4:8e:44:8c:50:ef:8c:87:eb: a3:c8:48:32:a7:4a:64:af:b2:26:7e:3c:46:3e:ca: 37:52:97:6c:79:5d:96:e3:57:ac:43:2b:c2:11:78: d9:5e:32:3c:2c:53:42:5a:cd:d9:35:c2:40:d6:7c: a4:5a:99:38:d3:d1:cb:51:24:f1:22:b4:79:d6:a7: 04:db:5a:3d:e1:b6:f5:c6:68:59:7e:3c:1c:2b:53: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:34:B9:8F:E1:E4:58:C9:DA:8C:A8:83:45:48:81:D5:8F:64:BF X509v3 Authority Key Identifier: keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7a:5a:ed:01:e2:af:3d:68:9e:b3:31:3f:f5:0c:90:bd:72: f7:de:b6:06:e1:e7:24:c3:72:62:5b:7f:3d:e3:49:c2:5d:3d: 7d:10:25:b5:4a:14:9f:f5:5e:d0:f4:0e:82:a3:81:bf:da:f5: cc:0f:68:20:d3:ad:85:27:e5:e7:f9:f8:db:cc:3d:72:e1:7a: 17:41:09:89:68:76:0f:85:86:c1:04:33:70:7c:05:16:cd:38: a4:0b:6c:f5:7a:bd:b1:39:47:b8:9b:68:2d:73:4b:0a:53:50: 1d:0d:d5:99:08:aa:26:77:cb:36:19:73:1b:15:2c:1e:e6:3f: 42:8f:ba:3a:17:c5:14:e6:94:62:06:95:ab:2f:04:62:e5:d8: 82:de:6b:18:0e:98:78:d3:60:bc:52:cf:c9:a4:f3:4e:5d:9d: cc:9d:ab:b7:ed:a6:9e:66:7c:7c:35:77:b1:5e:0f:c0:53:81: c4:0c:d8:79:25:47:86:d8:67:58:56:e5:b4:be:a7:fa:88:b6: 98:69:f6:e8:9f:8f:4d:7e:6b:9e:7d:5d:ca:ff:cf:b8:7a:2f: 6a:b9:72:8c:65:c9:af:fe:b2:f9:ae:7b:bf:ea:5a:46:02:bd: 33:45:0d:0d:53:28:24:81:75:22:db:46:5f:25:3a:a4:46:83: 47:4b:cc:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dS8U3a12pHI4Sfe4N5HjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy MTk0ZmEwHhcNMjYwMTI1MTQwMDU2WhcNMjYwMTI2MTQwMDU2WjAzMTEwLwYDVQQD EyhiYTU2MzRiOThmZTFlNDU4YzlkYThjYTg4MzQ1NDg4MWQ1OGY2NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpqHSKOvj7FW1Mc6nmXr5dsuiGLe C+Iev5SGw2RzMkZbkXV7/8Yov9e5makwTqplculANBMffWujbw+2um/QO2qsAJvD ltgPicE6q+iLUhhyc5vWN7HGYu5H5PehtbAoqSYT8nWq9iYnZvx4NXqpY9JjZk2i qkGpwFC3WZxEJEtZpBShqA5O9THnB0sbBWc7lsPDBgJaMyFpvPSEaXNmEDPIBVBM l+J1jHv0jkSMUO+Mh+ujyEgyp0pkr7ImfjxGPso3UpdseV2W41esQyvCEXjZXjI8 LFNCWs3ZNcJA1nykWpk409HLUSTxIrR51qcE21o94bb1xmhZfjwcK1MsrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpWNLmP4eRYydqMqINFSIHVj2S/MB8GA1UdIwQY MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXpa7QHi rz1onrMxP/UMkL1y9962BuHnJMNyYlt/PeNJwl09fRAltUoUn/Ve0PQOgqOBv9r1 zA9oINOthSfl5/n428w9cuF6F0EJiWh2D4WGwQQzcHwFFs04pAts9Xq9sTlHuJto LXNLClNQHQ3VmQiqJnfLNhlzGxUsHuY/Qo+6OhfFFOaUYgaVqy8EYuXYgt5rGA6Y eNNgvFLPyaTzTl2dzJ2rt+2mnmZ8fDV3sV4PwFOBxAzYeSVHhthnWFbltL6n+oi2 mGn26J+PTX5rnn1dyv/PuHovarlyjGXJr/6y+a57v+paRgK9M0UNDVMoJIF1IttG XyU6pEaDR0vMzw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:46 2026 by rpki-client