This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json) Hash identifier: jJsZW3uJoMs0G0GuXH/CAjoESRJnS+v40AbIBPIh6tM= Subject key identifier: 27:7A:50:44:4D:B1:A7:4F:5A:4D:6B:2E:7A:82:99:A6:6C:0D:8D:72 Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Certificate serial: 019BF57512D23CAED7E2DB5456DA2F994770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 14:00:48 +0000 Manifest this update: Sun 25 Jan 2026 14:00:48 +0000 Manifest next update: Mon 26 Jan 2026 14:00:48 +0000 Files and hashes: 1: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=) 2: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: QUuADXE9vJ5D3HFNUcb3C72RAkrcxNOYM0rO61xVM14=) 3: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=) 4: _RZuuIaoVL4ZscSmM6g3r1ENz24.roa (hash: zMhyfHJFmTEDKBoGH1NxoszfVQGyNpzD0AyGR7LdRGQ=) 5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:12:d2:3c:ae:d7:e2:db:54:56:da:2f:99:47:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Validity Not Before: Jan 25 14:00:48 2026 GMT Not After : Jan 26 14:00:48 2026 GMT Subject: CN=277a50444db1a74f5a4d6b2e7a8299a66c0d8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f4:40:6f:52:d5:ea:eb:6e:ee:96:bb:03:24: d6:29:ef:1d:b9:a0:91:9d:e5:9f:0f:24:d3:79:7d: 3a:ca:3c:51:55:f0:5f:7f:73:76:0c:fe:ac:37:88: 87:a6:eb:b4:c8:b3:be:28:9b:99:0a:8f:f5:3a:b2: 04:88:e7:af:b5:f4:83:23:db:2d:96:a3:f7:5a:d2: 3f:9a:a8:96:61:0d:8f:fd:5d:bd:79:37:42:1b:18: 4c:fe:f1:36:b1:32:c5:4b:8a:e8:fb:64:f9:eb:36: 80:6c:fc:67:0a:20:7c:8f:2d:b0:08:ad:a9:45:d8: 1e:ca:e6:63:0a:56:3f:2b:21:c2:d9:1f:26:2a:c9: 21:f3:83:0e:ea:27:8e:29:4d:af:67:e4:4f:f5:63: fc:fd:72:04:77:34:c9:b6:48:da:59:fd:1e:e6:35: d1:0e:d9:ac:b7:f1:b1:8f:b8:62:b8:9b:12:9f:37: c4:fa:4c:af:27:e1:fd:49:71:bc:9c:91:f0:c5:33: 14:7d:da:da:33:50:c0:2f:2f:fb:b8:b6:5e:1c:71: 8a:ba:09:a4:de:c8:c8:77:55:5b:50:6f:51:2f:16: 8c:4a:8f:47:de:0d:49:cb:00:9a:c7:9e:8f:b5:f1: d1:7a:60:1e:1b:66:d8:f7:51:85:5a:e6:ce:2a:66: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:50:44:4D:B1:A7:4F:5A:4D:6B:2E:7A:82:99:A6:6C:0D:8D:72 X509v3 Authority Key Identifier: keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6e:d2:5c:d9:ce:ea:34:8c:05:94:6f:0b:ac:7a:5b:12:7a: 07:8f:17:99:5a:d9:14:74:ac:53:5f:59:ff:c0:86:24:3a:10: ed:c0:ff:80:66:8a:65:d9:ad:70:12:56:03:11:38:a4:51:8d: ce:82:7a:59:42:dd:4e:23:da:f9:ac:3c:67:44:a5:07:e2:f6: f7:19:95:e0:f7:56:3c:f2:9f:5f:f9:98:7c:24:f8:34:2d:e1: 62:c1:94:8a:87:95:75:68:40:34:6f:17:04:f4:d3:e1:01:9c: c9:ae:c1:3a:8e:d3:70:eb:37:ce:a7:e0:69:c9:69:2b:bd:ca: ea:a1:5d:cd:a8:8a:6b:80:2c:c6:55:88:e7:66:b4:65:d3:cf: 64:1d:41:c9:08:83:91:dc:fb:08:3b:9f:8f:37:b9:2d:5c:b3: 0d:30:f1:5c:82:95:43:e9:c3:3d:75:7a:7f:d7:60:f2:12:61: 97:61:de:36:9f:9f:11:cd:11:28:b4:d1:57:49:07:a6:1a:3e: 27:d5:db:88:1c:c1:73:d2:4e:0f:d6:33:d2:54:05:bf:1c:3f: 12:08:b0:a9:47:31:3f:c3:8f:48:db:ef:41:e1:14:29:d1:bf: 7c:df:5f:f7:e9:4c:5b:f4:4f:f2:68:c8:2e:16:91:bf:5e:5e: 3a:cd:40:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dRLSPK7X4ttUVtovmUdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4 ZDM1ZmMwHhcNMjYwMTI1MTQwMDQ4WhcNMjYwMTI2MTQwMDQ4WjAzMTEwLwYDVQQD EygyNzdhNTA0NDRkYjFhNzRmNWE0ZDZiMmU3YTgyOTlhNjZjMGQ4ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PRAb1LV6utu7pa7AyTWKe8duaCR neWfDyTTeX06yjxRVfBff3N2DP6sN4iHpuu0yLO+KJuZCo/1OrIEiOevtfSDI9st lqP3WtI/mqiWYQ2P/V29eTdCGxhM/vE2sTLFS4ro+2T56zaAbPxnCiB8jy2wCK2p RdgeyuZjClY/KyHC2R8mKskh84MO6ieOKU2vZ+RP9WP8/XIEdzTJtkjaWf0e5jXR Dtmst/Gxj7hiuJsSnzfE+kyvJ+H9SXG8nJHwxTMUfdraM1DALy/7uLZeHHGKugmk 3sjId1VbUG9RLxaMSo9H3g1JywCax56PtfHRemAeG2bY91GFWubOKmYx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd6UERNsadPWk1rLnqCmaZsDY1yMB8GA1UdIwQY MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYW7SXNnO 6jSMBZRvC6x6WxJ6B48XmVrZFHSsU19Z/8CGJDoQ7cD/gGaKZdmtcBJWAxE4pFGN zoJ6WULdTiPa+aw8Z0SlB+L29xmV4PdWPPKfX/mYfCT4NC3hYsGUioeVdWhANG8X BPTT4QGcya7BOo7TcOs3zqfgaclpK73K6qFdzaiKa4AsxlWI52a0ZdPPZB1ByQiD kdz7CDufjze5LVyzDTDxXIKVQ+nDPXV6f9dg8hJhl2HeNp+fEc0RKLTRV0kHpho+ J9XbiBzBc9JOD9Yz0lQFvxw/EgiwqUcxP8OPSNvvQeEUKdG/fN9f9+lMW/RP8mjI LhaRv15eOs1Ahw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:39 2026 by rpki-client