This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json) Hash identifier: xMtZAKAk/VS9KgoIKZNteCNwhIpxaxWr91I4H3GMS/M= Subject key identifier: CB:BA:4E:CB:CB:54:CD:5F:31:CA:0C:E8:CE:25:69:82:90:7A:8B:E7 Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace Certificate serial: 019BF7D15436475B00923DB247D2A953724C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft Manifest number: 02F9 Signing time: Mon 26 Jan 2026 01:00:49 +0000 Manifest this update: Mon 26 Jan 2026 01:00:49 +0000 Manifest next update: Tue 27 Jan 2026 01:00:49 +0000 Files and hashes: 1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=) 2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: uB4b4RApH/Nay0CJb2DwZW/CaANB+fEVXpRCz2AmfEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:54:36:47:5b:00:92:3d:b2:47:d2:a9:53:72:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace Validity Not Before: Jan 26 01:00:49 2026 GMT Not After : Jan 27 01:00:49 2026 GMT Subject: CN=cbba4ecbcb54cd5f31ca0ce8ce256982907a8be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:01:28:a6:ff:e2:7f:d3:a9:fa:f7:d5:c9: 8a:a5:b9:82:db:87:ef:14:48:34:be:b9:c5:9b:a9: f5:14:0d:c6:df:be:b1:16:bd:1a:29:2b:b4:ee:1b: ae:fa:51:63:dd:4d:c7:5d:d3:87:c3:c7:52:96:33: 64:31:91:55:55:b8:4b:06:2b:a9:ee:3d:88:9c:07: 75:c4:c7:f2:44:26:48:01:73:08:e3:63:53:0e:3c: 61:58:f8:eb:66:47:a3:83:eb:9c:da:c0:4d:94:2b: 15:28:0f:66:59:f3:a8:55:9a:60:01:8a:5a:ba:b2: 21:21:d0:24:16:d4:8c:58:e7:84:29:c3:12:61:43: 39:b3:21:c3:7e:3a:5d:c2:5f:f1:d2:f4:70:63:e1: 96:74:08:7c:15:9c:e6:ee:5b:46:d8:88:ee:cd:af: a4:ff:26:e9:3c:52:f1:a0:19:46:2c:aa:73:7f:35: f1:f5:84:c6:ed:70:66:1b:78:5e:30:0b:d7:88:0f: 9a:2b:ea:66:14:da:dc:f3:a4:6d:e4:64:79:7e:04: a0:9c:e1:af:17:e2:d2:da:b8:ba:fa:54:f1:b8:ac: 29:b3:6e:6c:13:2c:0c:7a:b0:c6:4a:02:70:df:6d: a0:79:68:95:17:4a:89:fc:d8:5a:a0:7a:57:e5:95: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:4E:CB:CB:54:CD:5F:31:CA:0C:E8:CE:25:69:82:90:7A:8B:E7 X509v3 Authority Key Identifier: keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:37:52:02:ae:c3:5b:69:5f:41:fe:81:9b:2d:51:20:0e:54: 84:cd:f9:5e:ac:38:f1:08:0f:26:70:0f:3b:0a:b8:61:4d:52: 56:e2:60:65:a7:8f:18:31:c6:96:5e:93:b8:e0:12:0c:0f:ab: b8:b1:49:27:be:e5:5b:17:86:24:c2:ae:4a:e7:a6:20:68:f1: 92:a3:62:2d:fe:59:6e:32:2a:37:0e:40:14:3b:e5:b5:f5:d2: b5:19:12:6a:cf:df:93:d0:19:c7:db:8d:59:56:e6:6e:be:1c: 3a:ce:ab:22:30:3f:ff:5b:84:96:41:b9:ef:50:c4:26:bd:2c: 71:5f:ea:fc:7e:07:f5:f8:a0:d6:73:49:4c:9a:ed:93:e1:81: fd:16:23:54:34:55:56:67:15:a5:4c:ee:57:35:1b:08:8e:5a: 03:07:1d:8b:4e:5a:0b:59:07:6f:3e:ad:db:63:ac:d5:65:92: 4c:9d:8e:b4:f0:17:01:b9:78:0d:a1:01:fc:fe:56:d3:2e:6b: aa:7e:0e:77:97:39:dd:c4:3d:81:79:f4:bf:6b:74:57:46:44: 37:a1:f5:97:20:bc:c5:15:27:a5:5b:6d:66:b9:47:8f:5d:69: 82:cd:ae:74:df:8a:bb:a7:af:b2:c4:1b:1b:3b:65:31:57:d9: 96:1a:d5:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30VQ2R1sAkj2yR9KpU3JMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz NDRhY2UwHhcNMjYwMTI2MDEwMDQ5WhcNMjYwMTI3MDEwMDQ5WjAzMTEwLwYDVQQD EyhjYmJhNGVjYmNiNTRjZDVmMzFjYTBjZThjZTI1Njk4MjkwN2E4YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfIBKKb/4n/Tqfr31cmKpbmC24fv FEg0vrnFm6n1FA3G376xFr0aKSu07huu+lFj3U3HXdOHw8dSljNkMZFVVbhLBiup 7j2InAd1xMfyRCZIAXMI42NTDjxhWPjrZkejg+uc2sBNlCsVKA9mWfOoVZpgAYpa urIhIdAkFtSMWOeEKcMSYUM5syHDfjpdwl/x0vRwY+GWdAh8FZzm7ltG2Ijuza+k /ybpPFLxoBlGLKpzfzXx9YTG7XBmG3heMAvXiA+aK+pmFNrc86Rt5GR5fgSgnOGv F+LS2ri6+lTxuKwps25sEywMerDGSgJw322geWiVF0qJ/NhaoHpX5ZVXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu6TsvLVM1fMcoM6M4laYKQeovnMB8GA1UdIwQY MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3 LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTdSAq7D W2lfQf6Bmy1RIA5UhM35Xqw48QgPJnAPOwq4YU1SVuJgZaePGDHGll6TuOASDA+r uLFJJ77lWxeGJMKuSuemIGjxkqNiLf5ZbjIqNw5AFDvltfXStRkSas/fk9AZx9uN WVbmbr4cOs6rIjA//1uElkG571DEJr0scV/q/H4H9fig1nNJTJrtk+GB/RYjVDRV VmcVpUzuVzUbCI5aAwcdi05aC1kHbz6t22Os1WWSTJ2OtPAXAbl4DaEB/P5W0y5r qn4Od5c53cQ9gXn0v2t0V0ZEN6H1lyC8xRUnpVttZrlHj11pgs2udN+Ku6evssQb GztlMVfZlhrVLw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:01 2026 by rpki-client