This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json) Hash identifier: qMdUCO56Viy5GbRlPgKhd2lphuVu8xVzqTTozGYlzjw= Subject key identifier: 75:7A:11:80:28:4E:74:51:FE:5A:EF:6C:8B:D4:0F:0B:8C:C9:8B:00 Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce Certificate serial: 019BF72D88EA53C699BA88B5B9D2138F3B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft Manifest number: 0A54 Signing time: Sun 25 Jan 2026 22:01:54 +0000 Manifest this update: Sun 25 Jan 2026 22:01:54 +0000 Manifest next update: Mon 26 Jan 2026 22:01:54 +0000 Files and hashes: 1: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: h3SGrVOs8p1Poxp84CK/4B3vi0sTm0spDy/9yCkj9O4=) 2: bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa (hash: TI3RmrhW13Nq6yDFyJTeXpPjioYudBC6EapBtlWy/gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:88:ea:53:c6:99:ba:88:b5:b9:d2:13:8f:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df92658601094ed64985c64c6952be3416301ce Validity Not Before: Jan 25 22:01:54 2026 GMT Not After : Jan 26 22:01:54 2026 GMT Subject: CN=757a1180284e7451fe5aef6c8bd40f0b8cc98b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:06:19:dd:0d:29:2a:b3:bf:c5:b6:df:53: 8a:a8:f7:e8:b2:de:9a:5b:42:14:92:ac:3c:52:10: 29:fe:9d:17:33:ea:5f:46:fe:1d:4a:68:5c:c0:de: be:73:98:19:47:f3:55:95:c3:f7:09:9e:80:43:c5: 7a:86:8f:40:9b:5b:e2:cd:6c:e1:14:30:a4:d3:01: 9e:1e:cc:06:f6:cd:12:1f:f8:55:4d:75:e9:65:97: 75:39:30:1a:6e:f9:a1:3d:1c:94:90:63:0c:70:c7: 87:42:90:5b:53:bb:d4:c4:3f:ab:9e:0e:4c:c1:bb: f1:bb:1c:43:3e:11:7f:81:b4:8f:6e:67:ce:25:06: fa:88:68:31:7b:4f:fa:dc:ac:1c:20:36:e9:f0:c1: ed:43:71:9d:21:a6:93:a0:8f:fa:d0:5f:dd:e7:96: fc:c7:16:ce:87:77:c9:db:bd:d9:c4:5c:0b:17:de: 79:c8:2d:b8:2d:7b:b8:90:79:bf:4a:36:43:65:6e: 7d:b6:4e:6d:27:6f:e6:d7:3d:92:8f:0d:23:83:2b: d8:7c:d6:74:43:23:72:32:b0:20:ce:a7:e1:cf:a5: 8a:88:eb:ef:07:ee:1c:a6:74:aa:53:8d:01:5d:73: 5c:3a:78:0d:62:01:67:ad:9b:e5:97:fc:6c:21:14: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7A:11:80:28:4E:74:51:FE:5A:EF:6C:8B:D4:0F:0B:8C:C9:8B:00 X509v3 Authority Key Identifier: keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9e:a6:90:73:e2:09:b9:42:11:05:b9:6d:16:a1:e4:b8:57: 6f:82:f4:6a:0a:7a:c2:99:e6:1b:a8:88:ce:75:de:da:47:f4: 6c:70:4d:c4:32:fc:de:c5:6e:83:47:04:c3:ff:9e:86:e1:7d: 94:74:a0:9f:7f:d2:ad:8c:a5:c5:5c:f4:89:e3:d2:b5:a0:8e: 41:1f:7c:40:ba:67:03:bb:b8:80:c1:43:99:9e:68:b2:c1:44: e2:0b:cf:21:62:53:40:5f:4b:60:ce:f4:d9:03:92:19:ab:af: 66:74:e1:67:a9:5e:61:fa:86:21:d6:15:a7:75:72:ce:54:91: 95:1f:f7:20:4e:3f:8d:56:5a:e8:d0:e9:21:04:c6:57:3e:ba: 31:91:6a:a0:68:d1:e6:6e:6c:f8:a4:e6:02:7c:c0:01:08:1d: a3:23:70:c2:ac:d9:5d:42:d9:a3:d7:87:06:4a:28:bf:70:0e: c8:36:ec:bc:bb:f2:e1:99:ca:8e:c3:fa:46:eb:68:44:59:b7: 15:7f:e7:cb:63:43:02:82:5b:ad:74:72:1f:25:90:90:f0:48: 25:b9:e0:71:72:7a:5b:25:54:31:43:d1:50:9c:f6:1a:f0:53: e8:e1:30:21:25:0b:70:3f:a2:36:b6:bd:8e:7c:19:7b:b7:6c: fe:42:58:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYjqU8aZuoi1udITjztAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2 MzAxY2UwHhcNMjYwMTI1MjIwMTU0WhcNMjYwMTI2MjIwMTU0WjAzMTEwLwYDVQQD Eyg3NTdhMTE4MDI4NGU3NDUxZmU1YWVmNmM4YmQ0MGYwYjhjYzk4YjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYkGGd0NKSqzv8W231OKqPfost6a W0IUkqw8UhAp/p0XM+pfRv4dSmhcwN6+c5gZR/NVlcP3CZ6AQ8V6ho9Am1vizWzh FDCk0wGeHswG9s0SH/hVTXXpZZd1OTAabvmhPRyUkGMMcMeHQpBbU7vUxD+rng5M wbvxuxxDPhF/gbSPbmfOJQb6iGgxe0/63KwcIDbp8MHtQ3GdIaaToI/60F/d55b8 xxbOh3fJ273ZxFwLF955yC24LXu4kHm/SjZDZW59tk5tJ2/m1z2Sjw0jgyvYfNZ0 QyNyMrAgzqfhz6WKiOvvB+4cpnSqU40BXXNcOngNYgFnrZvll/xsIRT0NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV6EYAoTnRR/lrvbIvUDwuMyYsAMB8GA1UdIwQY MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt ODc0MzMxNTdhMjViLzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG56mkHPi CblCEQW5bRah5LhXb4L0agp6wpnmG6iIznXe2kf0bHBNxDL83sVug0cEw/+ehuF9 lHSgn3/SrYylxVz0iePStaCOQR98QLpnA7u4gMFDmZ5ossFE4gvPIWJTQF9LYM70 2QOSGauvZnThZ6leYfqGIdYVp3VyzlSRlR/3IE4/jVZa6NDpIQTGVz66MZFqoGjR 5m5s+KTmAnzAAQgdoyNwwqzZXULZo9eHBkoov3AOyDbsvLvy4ZnKjsP6RutoRFm3 FX/ny2NDAoJbrXRyHyWQkPBIJbngcXJ6WyVUMUPRUJz2GvBT6OEwISULcD+iNra9 jnwZe7ds/kJYTg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:58 2026 by rpki-client