This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json) Hash identifier: kfG+SeJ/VKmzPtrMhFE/97nuzl2vJEUvuFrm7JL8w6I= Subject key identifier: 2C:0A:61:1B:98:D6:AF:F9:C6:BA:88:DB:5C:AE:D3:66:DA:97:48:E9 Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9 Certificate serial: 019BF5757BEE59FA584780AB806F3F901284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft Manifest number: 1351 Signing time: Sun 25 Jan 2026 14:01:15 +0000 Manifest this update: Sun 25 Jan 2026 14:01:15 +0000 Manifest next update: Mon 26 Jan 2026 14:01:15 +0000 Files and hashes: 1: HUsAlOvemtR2fE4jnbiG5JPoxag.roa (hash: f7lJEppqzDneJ9AJzuUYrOlyEaByUZeV+0bof3SkTsE=) 2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: vtpP7Vlz2AILvw6lRMixFmdC9tXYOLtcvmSQxA+UWAA=) 3: l0q8XWJ1Kq-tzhNgucWKrkROmtg.roa (hash: 6lWXlqZNdk+BzRRkFfjQUwCi/8dW4M9stYINXvYCgl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:7b:ee:59:fa:58:47:80:ab:80:6f:3f:90:12:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9 Validity Not Before: Jan 25 14:01:15 2026 GMT Not After : Jan 26 14:01:15 2026 GMT Subject: CN=2c0a611b98d6aff9c6ba88db5caed366da9748e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:cd:ba:de:42:ee:99:a3:ec:e4:ad:a3:5a: 48:1e:ec:fd:26:ae:76:6b:40:d4:90:af:7e:9b:66: 63:67:28:68:9a:fb:31:c9:ed:3f:27:3e:da:4f:62: ed:cd:a3:67:8c:59:5f:54:95:07:66:7a:2a:3a:bd: 45:62:5a:f2:e0:3d:89:b3:ab:17:cc:91:0d:55:33: 0b:c9:7f:e2:e9:d0:e1:51:1a:54:c2:2b:14:eb:e6: 75:ae:85:c5:90:49:8c:eb:27:94:1d:b0:e5:f1:48: 4f:f5:0c:b9:42:e6:5d:f5:fc:03:eb:eb:79:3b:b7: a8:2a:06:b3:f7:90:a0:d7:2e:97:1c:e3:2d:bb:29: d1:d2:50:3b:b9:3e:4a:84:ca:5b:6b:e8:17:70:cd: 58:cb:b9:06:3d:34:e0:bf:ed:c7:1f:f0:8f:a5:b4: da:90:a1:a4:9b:e7:33:8f:f5:e4:4c:ab:de:cc:2b: a6:6e:30:1f:36:01:09:3e:5e:23:84:db:9a:51:80: 47:47:02:01:75:67:d6:40:67:4a:58:27:3c:92:a5: 71:1a:83:32:e0:ad:b9:7d:09:44:d6:5f:f9:31:5c: 08:19:26:7f:6a:a7:0c:50:aa:22:b5:9c:e3:75:12: 9f:77:ae:92:95:ec:35:31:65:81:f2:67:bf:16:2a: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:61:1B:98:D6:AF:F9:C6:BA:88:DB:5C:AE:D3:66:DA:97:48:E9 X509v3 Authority Key Identifier: keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f2:80:34:80:24:18:de:a1:dc:c3:29:9b:a6:15:c5:de:70: bc:ba:32:3c:88:0d:c0:7f:16:2a:a5:5c:c6:6d:83:66:99:1a: da:bf:0b:ca:c6:76:c6:79:e0:e8:a5:dd:9d:99:0b:a5:81:ba: 96:6f:a1:a7:ac:86:28:1a:a9:2a:a0:60:cf:2a:84:79:5b:20: e0:41:37:52:08:37:27:b4:c4:10:31:a1:5b:ff:dc:c5:8a:72: 42:fb:07:c2:f8:36:5b:68:99:8d:0f:73:cf:d1:59:08:bd:58: 2b:6d:40:b1:08:d2:82:39:13:6c:84:3b:31:9d:1b:3d:a5:24: 26:d1:f9:39:01:3d:06:d1:45:0e:ad:4a:87:39:b8:91:df:86: f9:05:0a:01:76:8e:cb:02:cf:28:50:33:28:80:b2:59:c6:29: bc:f8:f3:1b:78:32:ee:06:c2:e6:71:6b:9c:fd:1b:4c:49:91: 9c:88:61:2d:01:0e:bf:20:cf:27:ba:4d:a2:08:97:c9:11:0e: 92:8d:9e:3d:5e:d8:60:86:ae:01:34:23:7c:ad:fc:d1:80:53: c4:c5:26:a1:b6:86:ef:21:f3:0c:57:76:e0:3b:35:ab:32:d5: 18:34:7b:f6:36:eb:b9:9c:65:74:0a:93:7d:00:3a:ba:69:84: 46:fb:74:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXvuWfpYR4CrgG8/kBKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0 OWE0YzkwHhcNMjYwMTI1MTQwMTE1WhcNMjYwMTI2MTQwMTE1WjAzMTEwLwYDVQQD EygyYzBhNjExYjk4ZDZhZmY5YzZiYTg4ZGI1Y2FlZDM2NmRhOTc0OGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/LNut5C7pmj7OSto1pIHuz9Jq52 a0DUkK9+m2ZjZyhomvsxye0/Jz7aT2LtzaNnjFlfVJUHZnoqOr1FYlry4D2Js6sX zJENVTMLyX/i6dDhURpUwisU6+Z1roXFkEmM6yeUHbDl8UhP9Qy5QuZd9fwD6+t5 O7eoKgaz95Cg1y6XHOMtuynR0lA7uT5KhMpba+gXcM1Yy7kGPTTgv+3HH/CPpbTa kKGkm+czj/XkTKvezCumbjAfNgEJPl4jhNuaUYBHRwIBdWfWQGdKWCc8kqVxGoMy 4K25fQlE1l/5MVwIGSZ/aqcMUKoitZzjdRKfd66Slew1MWWB8me/FipDcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwKYRuY1q/5xrqI21yu02bal0jpMB8GA1UdIwQY MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/KANIAk GN6h3MMpm6YVxd5wvLoyPIgNwH8WKqVcxm2DZpka2r8LysZ2xnng6KXdnZkLpYG6 lm+hp6yGKBqpKqBgzyqEeVsg4EE3Ugg3J7TEEDGhW//cxYpyQvsHwvg2W2iZjQ9z z9FZCL1YK21AsQjSgjkTbIQ7MZ0bPaUkJtH5OQE9BtFFDq1Khzm4kd+G+QUKAXaO ywLPKFAzKICyWcYpvPjzG3gy7gbC5nFrnP0bTEmRnIhhLQEOvyDPJ7pNogiXyREO ko2ePV7YYIauATQjfK380YBTxMUmobaG7yHzDFd24Ds1qzLVGDR79jbruZxldAqT fQA6ummERvt01A== -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:46 2026 by rpki-client