This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json) Hash identifier: v+PUHjVRW2RBx9XHyaHlvuNCnNWHEIR7H4Yh1ajdB4g= Subject key identifier: 02:A6:13:F9:BC:0B:10:87:99:85:25:53:9F:CA:C6:88:3C:FC:7D:F0 Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Certificate serial: 019BF619EFE4E22CD91790829140D636046D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft Manifest number: 1729 Signing time: Sun 25 Jan 2026 17:00:53 +0000 Manifest this update: Sun 25 Jan 2026 17:00:53 +0000 Manifest next update: Mon 26 Jan 2026 17:00:53 +0000 Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: irtOBKTx3kdicFd3Xy11+T0s+QtcDy4424rCGSz53is=) 2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ef:e4:e2:2c:d9:17:90:82:91:40:d6:36:04:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Validity Not Before: Jan 25 17:00:53 2026 GMT Not After : Jan 26 17:00:53 2026 GMT Subject: CN=02a613f9bc0b1087998525539fcac6883cfc7df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:48:65:6c:21:58:d9:46:1b:d2:92:8f:07: 30:4b:4c:eb:82:75:13:e1:57:63:91:41:7d:ac:a7: fb:69:31:0a:6d:66:35:b9:14:7a:4c:1c:da:c2:c2: 74:89:7b:b2:01:04:c9:34:2a:9a:d9:f2:2b:01:84: 6e:28:24:f7:82:05:a8:54:74:79:0b:2f:26:78:7a: 9a:be:c6:4d:17:6f:ce:ea:0b:b4:80:7e:36:76:b1: 79:09:e7:f0:ad:3f:92:70:73:97:33:b0:85:30:3b: f1:f9:4d:de:24:e5:10:a0:84:a2:4c:c1:09:09:9c: 1f:ab:30:6a:45:a4:13:4c:54:eb:24:3b:ce:86:fb: d5:c9:7f:bf:43:7e:d7:5e:00:d3:69:fe:36:7e:0b: 7b:a4:df:38:ad:18:65:19:a9:af:15:06:82:2a:72: bb:da:3e:c4:dc:53:da:24:a2:f9:3c:a6:a5:e0:4c: a4:26:d0:4f:cb:6f:27:ff:de:1c:b7:2c:62:20:a7: 7e:6a:61:03:1a:fd:71:b9:3b:b1:a7:ee:f5:5b:0f: 42:7a:c9:ad:f7:99:9f:76:ac:36:dc:ab:be:34:15: 9b:c0:2b:41:05:48:bb:b3:bc:86:81:10:89:22:c0: 33:0f:d3:97:8b:67:a0:54:78:7e:14:5f:93:bd:07: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:13:F9:BC:0B:10:87:99:85:25:53:9F:CA:C6:88:3C:FC:7D:F0 X509v3 Authority Key Identifier: keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ea:66:57:61:4f:5c:02:d4:43:18:02:9f:7e:16:38:ec:09: 85:96:64:49:91:17:72:24:dd:7a:8b:26:da:e3:18:b4:1b:c6: a3:1f:16:d9:d2:53:db:8a:95:ca:dd:9e:12:2d:03:78:84:29: ab:8b:b3:6b:9c:94:9a:01:34:ce:be:af:ef:2c:b1:bc:bc:d8: 4a:d3:eb:da:51:7c:9d:8a:1e:6b:20:2e:61:05:03:f8:a7:e0: 28:04:40:de:3b:0f:78:8d:a5:68:fa:04:a4:5e:bc:f9:74:d5: a8:52:ef:4e:86:78:aa:57:f8:0d:46:a5:01:e4:d2:17:3b:98: 54:18:4a:37:df:5d:13:3d:67:51:fd:de:5d:1b:60:65:42:c6: 38:d7:65:bf:00:26:0e:d9:ea:d0:82:96:25:fa:1f:48:b4:5d: 4d:34:89:32:ab:3f:f9:8a:dc:88:7b:68:32:b7:85:3e:25:d5: cb:62:cb:eb:55:3a:8f:72:8d:e1:d6:5a:b1:1c:55:79:bf:00: 11:c2:a2:c1:bc:b7:59:f7:61:95:15:f7:3b:07:af:c0:06:4c: cf:8b:53:52:6b:77:85:2e:93:96:03:2e:86:07:70:27:e1:48: 0c:50:72:b7:aa:ad:ab:49:4f:1c:6b:f4:ad:3d:91:75:d3:ac: 9a:c1:e3:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ge/k4izZF5CCkUDWNgRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm NThjOGQwHhcNMjYwMTI1MTcwMDUzWhcNMjYwMTI2MTcwMDUzWjAzMTEwLwYDVQQD EygwMmE2MTNmOWJjMGIxMDg3OTk4NTI1NTM5ZmNhYzY4ODNjZmM3ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGVIZWwhWNlGG9KSjwcwS0zrgnUT 4VdjkUF9rKf7aTEKbWY1uRR6TBzawsJ0iXuyAQTJNCqa2fIrAYRuKCT3ggWoVHR5 Cy8meHqavsZNF2/O6gu0gH42drF5CefwrT+ScHOXM7CFMDvx+U3eJOUQoISiTMEJ CZwfqzBqRaQTTFTrJDvOhvvVyX+/Q37XXgDTaf42fgt7pN84rRhlGamvFQaCKnK7 2j7E3FPaJKL5PKal4EykJtBPy28n/94ctyxiIKd+amEDGv1xuTuxp+71Ww9Cesmt 95mfdqw23Ku+NBWbwCtBBUi7s7yGgRCJIsAzD9OXi2egVHh+FF+TvQcU+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKmE/m8CxCHmYUlU5/Kxog8/H3wMB8GA1UdIwQY MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4 LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqupmV2FP XALUQxgCn34WOOwJhZZkSZEXciTdeosm2uMYtBvGox8W2dJT24qVyt2eEi0DeIQp q4uza5yUmgE0zr6v7yyxvLzYStPr2lF8nYoeayAuYQUD+KfgKARA3jsPeI2laPoE pF68+XTVqFLvToZ4qlf4DUalAeTSFzuYVBhKN99dEz1nUf3eXRtgZULGONdlvwAm Dtnq0IKWJfofSLRdTTSJMqs/+YrciHtoMreFPiXVy2LL61U6j3KN4dZasRxVeb8A EcKiwby3WfdhlRX3OwevwAZMz4tTUmt3hS6TlgMuhgdwJ+FIDFByt6qtq0lPHGv0 rT2RddOsmsHjXw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:10 2026 by rpki-client