This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json) Hash identifier: WpQMDOqngiQ5BJPbPKI/73uQQr1t/y4SXYNbCaKUxu4= Subject key identifier: 48:47:D1:8A:DE:B7:84:CB:21:30:CE:D2:74:6B:FF:9E:C4:F7:FE:2B Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019BF83F6B47BBE68A40AB8586D343554695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 03:01:04 +0000 Manifest this update: Mon 26 Jan 2026 03:01:04 +0000 Manifest next update: Tue 27 Jan 2026 03:01:04 +0000 Files and hashes: 1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=) 2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=) 3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=) 4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=) 5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: kzgL/45DE/Ch7c/iwSGvRmTjTt5tOVIPpYUVAGxFBTw=) 6: cefT8Znon0EMvLEa4jZbAItaX68.roa (hash: zuUKY/0e1yWLD2162lMycJrs/wJncsLp3x6qIl7VWD4=) 7: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:6b:47:bb:e6:8a:40:ab:85:86:d3:43:55:46:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Jan 26 03:01:04 2026 GMT Not After : Jan 27 03:01:04 2026 GMT Subject: CN=4847d18adeb784cb2130ced2746bff9ec4f7fe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:cf:c3:71:47:42:0f:64:26:b2:c0:24:19: 0a:0b:e4:9d:c4:4f:fc:33:a9:0a:72:ff:bf:50:d5: 6a:f7:cf:7b:c5:67:c0:f3:b7:f4:29:01:e5:28:36: 03:7d:ea:c3:15:3b:e0:f7:c5:2e:b9:be:33:ae:b5: 17:9c:ab:d6:a9:98:53:29:db:99:51:26:74:3c:2b: fa:fc:0c:2f:34:4a:ef:27:35:32:40:0b:c5:e4:0f: 86:79:89:9b:09:9e:12:98:19:47:83:42:25:bb:33: bd:8f:48:01:d8:ec:d0:be:39:a7:b9:60:0e:db:b9: 02:6b:39:09:c7:b6:2a:e6:0a:25:1c:31:14:05:ea: bd:95:e8:bd:cc:03:f5:d1:15:4b:ac:56:b3:6b:d3: be:03:21:94:f8:e6:94:49:9a:06:d5:e6:e6:89:a0: af:38:96:52:c3:21:a7:44:4d:fd:f8:36:8d:0c:3a: 96:02:26:f2:8f:2a:6d:9c:54:7f:d2:ef:64:b7:d5: ff:d3:31:cf:dc:1f:d1:25:91:fd:8c:57:c8:b0:91: 41:96:87:35:b8:90:8c:af:e1:bb:b7:97:fe:d4:d8: 0c:04:a4:8d:92:af:10:76:e2:b7:8b:a2:a7:a5:ab: e6:a1:89:de:6f:f6:e7:77:b5:f2:f7:ed:2c:83:e0: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:47:D1:8A:DE:B7:84:CB:21:30:CE:D2:74:6B:FF:9E:C4:F7:FE:2B X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:85:b1:89:92:8d:8c:53:c6:de:14:b9:8b:a7:fa:3c:df:41: 4c:d5:b3:58:cf:8a:27:db:70:03:3d:9d:bf:75:ed:d1:39:b3: db:12:82:59:0a:df:94:0c:22:b3:53:b1:b5:49:17:5c:29:37: c7:f7:1c:7f:f4:dd:ac:83:0c:c0:e6:dd:19:50:ad:a4:3e:f2: b2:fa:aa:1a:dd:e7:d6:24:dd:e9:f4:9f:2f:ec:b8:19:2d:19: c7:f2:fd:5a:f2:5c:26:f0:91:e7:17:94:44:13:d1:c8:51:00: 42:60:db:1e:bf:31:55:df:44:67:b2:bf:1f:3d:b8:67:95:c3: d1:3a:87:0b:d5:97:5a:87:66:b7:39:44:a9:a3:5a:2c:7e:72: 1e:4d:d6:01:f9:6e:0f:8d:37:7a:5d:90:38:3e:67:10:7f:e6: 9d:d1:96:87:0a:dc:fb:bf:8a:f9:ef:c6:2c:f2:5f:91:ba:63: 8f:5f:a5:cb:b1:4b:77:6e:50:d5:d0:2e:8e:39:56:c9:6e:ee: 45:57:79:a9:f3:70:17:42:a5:a7:4c:82:0d:7e:5f:a3:37:08: c2:cb:cc:a0:5a:33:bd:2c:b6:dd:43:59:d9:38:24:77:a4:b7: 2b:04:57:18:10:0f:49:07:4d:69:37:83:75:ff:e0:3d:e8:1e: b0:e3:4b:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2tHu+aKQKuFhtNDVUaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjYwMTI2MDMwMTA0WhcNMjYwMTI3MDMwMTA0WjAzMTEwLwYDVQQD Eyg0ODQ3ZDE4YWRlYjc4NGNiMjEzMGNlZDI3NDZiZmY5ZWM0ZjdmZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tvPw3FHQg9kJrLAJBkKC+SdxE/8 M6kKcv+/UNVq9897xWfA87f0KQHlKDYDferDFTvg98Uuub4zrrUXnKvWqZhTKduZ USZ0PCv6/AwvNErvJzUyQAvF5A+GeYmbCZ4SmBlHg0IluzO9j0gB2OzQvjmnuWAO 27kCazkJx7Yq5golHDEUBeq9lei9zAP10RVLrFaza9O+AyGU+OaUSZoG1ebmiaCv OJZSwyGnRE39+DaNDDqWAibyjyptnFR/0u9kt9X/0zHP3B/RJZH9jFfIsJFBloc1 uJCMr+G7t5f+1NgMBKSNkq8QduK3i6KnpavmoYneb/bnd7Xy9+0sg+CdEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhH0Yret4TLITDO0nRr/57E9/4rMB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIWxiZKN jFPG3hS5i6f6PN9BTNWzWM+KJ9twAz2dv3Xt0Tmz2xKCWQrflAwis1OxtUkXXCk3 x/ccf/TdrIMMwObdGVCtpD7ysvqqGt3n1iTd6fSfL+y4GS0Zx/L9WvJcJvCR5xeU RBPRyFEAQmDbHr8xVd9EZ7K/Hz24Z5XD0TqHC9WXWodmtzlEqaNaLH5yHk3WAflu D403el2QOD5nEH/mndGWhwrc+7+K+e/GLPJfkbpjj1+ly7FLd25Q1dAujjlWyW7u RVd5qfNwF0Klp0yCDX5fozcIwsvMoFozvSy23UNZ2Tgkd6S3KwRXGBAPSQdNaTeD df/gPegesONL7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:40 2026 by rpki-client