This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json) Hash identifier: BqbzB9xXav06QCZ8ah3iJeEHVoQgWSNj0iWmYpd9PQ0= Subject key identifier: 0D:3D:C7:23:2B:4A:70:BB:94:03:C2:73:D8:3A:55:BD:9F:DB:5A:CA Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Certificate serial: 019BF57503863BEA3A0337FE590F3E48412D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 14:00:45 +0000 Manifest this update: Sun 25 Jan 2026 14:00:45 +0000 Manifest next update: Mon 26 Jan 2026 14:00:45 +0000 Files and hashes: 1: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=) 2: nUF12WZsvpoiPI9C00eeFdJfaVo.roa (hash: 9SbxvhyRlkdpKS3ff2WOCyOa7It2KK0x1wSPI6mJgOw=) 3: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=) 4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: 4W/W4f3o//kgHi5rovTfOHhfxHUgHS+O68pJFfy4zGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:03:86:3b:ea:3a:03:37:fe:59:0f:3e:48:41:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Validity Not Before: Jan 25 14:00:45 2026 GMT Not After : Jan 26 14:00:45 2026 GMT Subject: CN=0d3dc7232b4a70bb9403c273d83a55bd9fdb5aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:36:6d:34:86:9e:e4:45:33:92:91:a7:2e: b5:8a:7d:7f:18:a7:5d:5e:f1:f8:46:df:c3:74:93: 0d:15:a4:ea:51:ee:c6:8a:9d:e4:5f:23:47:02:69: 4d:99:ad:00:63:6f:93:42:65:7a:17:f5:09:2f:51: da:5e:53:53:9b:33:bf:07:6c:7b:63:68:32:b7:00: 46:91:f3:e3:c6:ba:9a:25:a2:c0:55:dd:ac:33:bf: 96:82:5d:3d:e7:0c:c5:e8:b6:01:88:4f:37:8d:f0: d0:0f:79:0c:76:6f:aa:9c:66:d4:6b:a0:5b:8d:4f: 7b:17:2e:b0:5f:93:61:6e:67:c4:79:d7:12:34:37: 64:32:34:82:5d:24:9e:b1:39:cd:00:ab:38:f4:d9: f8:cb:62:14:b7:04:e2:e6:6b:a7:bb:a6:5b:e5:4b: 0b:2b:11:67:9f:0d:39:42:dd:fd:e1:bd:cd:15:c4: 44:4f:5e:28:9c:1d:8c:15:d1:f8:b0:33:e4:b0:06: 8a:a9:14:f1:b9:3b:b3:1a:57:cd:d7:35:bd:eb:49: 6d:28:30:da:4d:33:74:97:26:00:8b:d7:f4:b2:d6: 8a:34:54:44:2d:b3:f8:42:55:12:9a:bc:cc:a1:9f: 1f:ec:d4:2d:b6:d3:b1:ab:e4:d4:91:ce:bf:4c:d4: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3D:C7:23:2B:4A:70:BB:94:03:C2:73:D8:3A:55:BD:9F:DB:5A:CA X509v3 Authority Key Identifier: keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a8:92:ba:ca:e1:15:b9:74:d3:d5:9a:50:45:9b:bd:56:16: 37:1b:e5:20:0b:e8:2f:5a:6a:85:35:fc:1e:5c:51:ec:8a:84: 0f:0d:5c:aa:bf:87:a5:78:9e:f9:92:2d:02:3b:96:8f:94:1e: a0:f4:13:5f:ed:d3:d7:23:75:28:42:b8:17:33:cd:c5:bf:96: 1a:7b:88:51:3a:30:0f:bc:d4:b7:41:87:46:42:32:fc:25:3f: 85:5f:2f:1a:74:97:9a:8e:3f:14:b9:18:76:6d:b9:e4:30:3d: 94:74:0f:24:e8:d5:28:bf:bf:46:b4:6e:e7:da:b6:a4:43:e4: 8e:05:6b:88:28:48:4d:fb:02:9a:b5:d1:11:f4:e2:72:4d:ab: cb:3c:81:9d:2e:43:c8:6c:68:ba:ac:64:82:ee:fd:fa:89:54: 3f:ca:e3:0e:cd:6a:36:29:e2:bf:14:6f:38:12:c1:19:44:96: b5:49:0e:95:7d:89:6e:8e:ef:41:db:81:4f:ca:e1:d3:a5:31: 76:02:a3:63:a7:7a:c6:34:38:8b:5e:c4:3f:8a:56:39:7a:65: e9:8d:e4:bf:a0:d2:89:64:f3:4e:30:c9:3f:84:f2:7d:09:c5: 96:20:24:15:97:e0:98:61:4b:5b:10:92:27:ee:bf:e1:27:e1: e2:33:4e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQOGO+o6Azf+WQ8+SEEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw ZDVkN2EwHhcNMjYwMTI1MTQwMDQ1WhcNMjYwMTI2MTQwMDQ1WjAzMTEwLwYDVQQD EygwZDNkYzcyMzJiNGE3MGJiOTQwM2MyNzNkODNhNTViZDlmZGI1YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsI2bTSGnuRFM5KRpy61in1/GKdd XvH4Rt/DdJMNFaTqUe7Gip3kXyNHAmlNma0AY2+TQmV6F/UJL1HaXlNTmzO/B2x7 Y2gytwBGkfPjxrqaJaLAVd2sM7+Wgl095wzF6LYBiE83jfDQD3kMdm+qnGbUa6Bb jU97Fy6wX5NhbmfEedcSNDdkMjSCXSSesTnNAKs49Nn4y2IUtwTi5munu6Zb5UsL KxFnnw05Qt394b3NFcRET14onB2MFdH4sDPksAaKqRTxuTuzGlfN1zW960ltKDDa TTN0lyYAi9f0staKNFRELbP4QlUSmrzMoZ8f7NQtttOxq+TUkc6/TNS6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA09xyMrSnC7lAPCc9g6Vb2f21rKMB8GA1UdIwQY MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt MGM0OTU0NzdjYTEwLzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6iSusrh Fbl009WaUEWbvVYWNxvlIAvoL1pqhTX8HlxR7IqEDw1cqr+HpXie+ZItAjuWj5Qe oPQTX+3T1yN1KEK4FzPNxb+WGnuIUTowD7zUt0GHRkIy/CU/hV8vGnSXmo4/FLkY dm255DA9lHQPJOjVKL+/RrRu59q2pEPkjgVriChITfsCmrXREfTick2ryzyBnS5D yGxouqxkgu79+olUP8rjDs1qNinivxRvOBLBGUSWtUkOlX2Jbo7vQduBT8rh06Ux dgKjY6d6xjQ4i17EP4pWOXpl6Y3kv6DSiWTzTjDJP4TyfQnFliAkFZfgmGFLWxCS J+6/4Sfh4jNOlA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:27 2026 by rpki-client