This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json) Hash identifier: wnJcvQgnOapKgwOzKaRpgVZli3no8YWlglDpueGUMRo= Subject key identifier: 62:A8:E6:E9:46:88:FC:1B:26:C5:8A:9A:B7:5B:54:05:38:EF:C1:44 Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Certificate serial: 019BF68849673A8E5777B808E59BFDBCBB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:01:25 +0000 Manifest this update: Sun 25 Jan 2026 19:01:25 +0000 Manifest next update: Mon 26 Jan 2026 19:01:25 +0000 Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 6ZbupwgSKB2D9ivUSfEVYJ4d8FfgMAbps/muxUCNUPY=) 2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:49:67:3a:8e:57:77:b8:08:e5:9b:fd:bc:bb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Validity Not Before: Jan 25 19:01:25 2026 GMT Not After : Jan 26 19:01:25 2026 GMT Subject: CN=62a8e6e94688fc1b26c58a9ab75b540538efc144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:19:b7:9e:ff:7c:e2:f3:11:5a:41:43:eb: 59:c5:c9:1a:2d:8b:2b:e1:ac:74:9d:50:2f:d6:fc: e3:7e:1d:f5:f5:11:f8:01:2b:3d:ed:41:95:55:14: 99:5c:d9:a3:78:ce:56:c6:82:f6:ad:c7:7e:4b:1e: 88:68:97:d4:59:7c:41:83:9d:66:7e:b8:a1:9a:ad: ec:86:fb:57:e2:79:ff:6b:ca:f1:ba:52:01:a8:52: 1b:66:ba:c2:b8:a0:c4:2d:3a:82:44:12:11:a1:f1: 8c:a9:44:52:95:f7:b0:4e:78:9f:e4:11:60:de:e1: 6e:c9:c8:1a:fb:70:69:24:9e:8a:e2:19:14:df:9a: 5f:ae:ff:4b:15:ce:38:e1:e3:f7:50:03:01:6c:cb: 11:21:36:c8:68:94:38:fb:36:9a:c1:d7:ad:84:9b: 62:2f:1b:b3:b9:27:55:14:f6:f1:04:9f:66:04:f6: ec:b7:bf:23:c1:c2:ad:d5:be:0b:f2:e0:1d:cd:05: 72:9b:2d:4b:e6:8c:84:46:6a:0a:de:d9:2a:0d:c3: f6:e2:94:24:2d:39:2d:b1:46:02:ee:d1:62:7e:9b: 2d:65:e6:32:0b:9f:7b:a6:56:ff:c7:1c:ae:d7:9d: da:89:d4:9f:ad:f5:b6:c5:71:36:6a:2d:b7:4d:0e: 85:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A8:E6:E9:46:88:FC:1B:26:C5:8A:9A:B7:5B:54:05:38:EF:C1:44 X509v3 Authority Key Identifier: keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:71:a5:42:97:9b:7d:4f:1b:2a:6f:04:fa:d4:4e:59:2d:45: a3:1d:34:8e:f8:a1:9a:1f:81:f1:d4:d9:c7:9b:e0:7c:0e:29: 64:61:fa:5e:05:06:38:fd:33:3d:d1:91:57:80:57:3a:18:bb: 58:72:86:36:36:41:9e:ff:b9:d1:f5:4d:95:4c:d4:ac:ff:18: ff:13:55:69:22:a2:c9:2e:61:9a:c7:c5:9e:a9:8f:e0:c5:3f: 9d:c9:ec:fa:31:21:b0:16:ee:a8:a2:d4:5c:01:b2:0d:f0:ed: 20:99:0d:2c:66:09:f4:c1:e0:a1:d9:6a:d0:3e:e7:63:1a:b8: c7:2d:75:f4:52:2b:7e:7e:4b:c7:75:6f:e6:a9:76:9b:13:93: bf:1b:2b:fb:77:9a:9c:98:31:df:fe:77:71:00:4b:cd:bf:a4: 6f:cc:db:f7:73:82:fc:93:8b:00:7c:ea:a6:39:fe:c4:59:7b: 89:33:76:8f:6d:1e:53:af:5a:72:1e:fc:d0:e8:6d:c9:04:60: ad:1d:00:d4:72:eb:ed:02:23:2d:1f:37:f0:b4:1c:19:79:6d: 97:ef:2d:0a:20:3d:1b:b2:f3:65:bf:47:03:95:f8:26:ff:2d: a8:c9:7b:d5:78:31:b2:c4:9d:be:dd:ea:b8:9d:ae:97:84:95: e6:74:10:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iElnOo5Xd7gI5Zv9vLtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi MWE5OGEwHhcNMjYwMTI1MTkwMTI1WhcNMjYwMTI2MTkwMTI1WjAzMTEwLwYDVQQD Eyg2MmE4ZTZlOTQ2ODhmYzFiMjZjNThhOWFiNzViNTQwNTM4ZWZjMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzYZt57/fOLzEVpBQ+tZxckaLYsr 4ax0nVAv1vzjfh319RH4ASs97UGVVRSZXNmjeM5WxoL2rcd+Sx6IaJfUWXxBg51m frihmq3shvtX4nn/a8rxulIBqFIbZrrCuKDELTqCRBIRofGMqURSlfewTnif5BFg 3uFuycga+3BpJJ6K4hkU35pfrv9LFc444eP3UAMBbMsRITbIaJQ4+zaawdethJti LxuzuSdVFPbxBJ9mBPbst78jwcKt1b4L8uAdzQVymy1L5oyERmoK3tkqDcP24pQk LTktsUYC7tFifpstZeYyC597plb/xxyu153aidSfrfW2xXE2ai23TQ6FZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKo5ulGiPwbJsWKmrdbVAU478FEMB8GA1UdIwQY MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHGlQpeb fU8bKm8E+tROWS1Fox00jvihmh+B8dTZx5vgfA4pZGH6XgUGOP0zPdGRV4BXOhi7 WHKGNjZBnv+50fVNlUzUrP8Y/xNVaSKiyS5hmsfFnqmP4MU/ncns+jEhsBbuqKLU XAGyDfDtIJkNLGYJ9MHgodlq0D7nYxq4xy119FIrfn5Lx3Vv5ql2mxOTvxsr+3ea nJgx3/53cQBLzb+kb8zb93OC/JOLAHzqpjn+xFl7iTN2j20eU69ach780OhtyQRg rR0A1HLr7QIjLR838LQcGXltl+8tCiA9G7LzZb9HA5X4Jv8tqMl71XgxssSdvt3q uJ2ul4SV5nQQfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:36 2026 by rpki-client