This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json) Hash identifier: xIFmRyH9nniAyeACIArc3tCzUS9o2dy74zhf+/F5iJ8= Subject key identifier: 08:FF:41:13:B7:02:B9:E3:BF:2A:3A:4D:F2:32:7B:CC:2E:D4:15:04 Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38 Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38 Certificate serial: 019BF876208E266018C761B32A0184AEDD9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 04:00:49 +0000 Manifest this update: Mon 26 Jan 2026 04:00:49 +0000 Manifest next update: Tue 27 Jan 2026 04:00:49 +0000 Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=) 2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: obATUJ7UUqWhZBsukd75XOeV/ImPKMFQrUuxdx6RCqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:20:8e:26:60:18:c7:61:b3:2a:01:84:ae:dd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38 Validity Not Before: Jan 26 04:00:49 2026 GMT Not After : Jan 27 04:00:49 2026 GMT Subject: CN=08ff4113b702b9e3bf2a3a4df2327bcc2ed41504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:a6:d5:d8:e5:f5:0a:0a:ab:69:cd:8d:c8: ef:b7:0b:7f:77:f8:ae:1d:4a:39:6b:d9:33:4f:ac: 15:11:a5:5b:02:02:0d:ac:cb:7c:fc:8f:fa:f8:a6: f2:d8:50:96:1d:9f:77:f7:ef:99:8a:60:8c:b0:68: b5:0f:57:01:39:52:0a:76:b2:fe:1b:cb:95:29:fe: 8e:8f:11:8b:77:06:54:e8:8b:27:dc:0e:6a:7d:ba: 8d:bf:11:54:46:74:1c:e8:40:0d:b7:39:02:e0:74: e4:7a:11:86:4e:ee:26:24:df:9b:e7:a0:49:07:d9: fa:ae:26:bc:32:fa:67:d4:ca:6a:b6:76:eb:a7:cc: dd:c1:53:c0:6d:49:35:b8:c8:d1:0e:be:a6:43:30: 5a:ba:ec:7f:fe:c7:69:0a:09:c9:70:fe:0e:85:43: 3b:46:56:97:6c:22:88:43:bd:ff:d9:ce:e0:32:c3: 19:f0:2f:46:e1:f4:74:8a:30:5f:9f:41:1e:79:2c: 23:e2:1a:d1:18:1e:f0:60:71:c7:d2:e7:0d:94:91: 39:11:87:38:2d:e8:de:5e:46:b2:7b:f8:00:a8:2c: 89:76:92:f6:8b:7a:e0:11:35:f8:b7:91:ca:03:ac: 25:e3:06:67:ca:37:06:3a:9c:37:20:69:95:fc:16: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FF:41:13:B7:02:B9:E3:BF:2A:3A:4D:F2:32:7B:CC:2E:D4:15:04 X509v3 Authority Key Identifier: keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2c:f4:0c:41:0c:d2:15:28:a8:7c:42:ec:39:bd:e9:db:57: 47:82:d7:a5:8b:69:9e:df:3a:5b:ed:c7:19:2b:d4:6d:4b:68: 76:56:a7:a6:9d:21:0e:a3:e1:b4:9b:12:bb:c8:8e:71:ec:7e: 4c:eb:31:90:95:54:71:a5:84:ff:67:15:b3:80:45:59:1e:90: 56:67:dc:be:0f:21:60:13:a6:6b:b7:46:7e:a5:0f:85:a5:f5: 50:10:57:f9:60:c8:7c:71:c1:4a:e6:7f:4a:a4:80:a1:e9:e7: 76:87:7b:79:90:41:41:8c:d8:9c:59:77:aa:f5:1c:0a:15:b7: 0a:fa:10:42:48:9a:e9:79:e2:02:75:27:22:7c:be:df:90:e0: 96:31:98:29:1b:3f:a2:e1:8e:09:58:45:90:38:52:12:92:72: 22:b1:d1:66:31:28:bb:48:13:ad:f3:7d:a1:ed:fb:32:ab:67: b9:6a:89:73:be:17:a4:a1:ac:32:25:a7:3b:31:1b:fd:64:42: 58:18:3a:19:ce:43:d6:48:63:1c:de:7f:59:07:27:21:77:7e: f1:50:c3:21:c7:39:6f:07:6d:2c:ac:03:1d:01:10:52:3f:6f: 85:7c:a8:6a:72:7e:72:9c:02:b8:c9:fc:ae:48:d4:8f:4b:73: b8:23:de:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4diCOJmAYx2GzKgGErt2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi YTNlMzgwHhcNMjYwMTI2MDQwMDQ5WhcNMjYwMTI3MDQwMDQ5WjAzMTEwLwYDVQQD EygwOGZmNDExM2I3MDJiOWUzYmYyYTNhNGRmMjMyN2JjYzJlZDQxNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK6m1djl9QoKq2nNjcjvtwt/d/iu HUo5a9kzT6wVEaVbAgINrMt8/I/6+Kby2FCWHZ939++ZimCMsGi1D1cBOVIKdrL+ G8uVKf6OjxGLdwZU6Isn3A5qfbqNvxFURnQc6EANtzkC4HTkehGGTu4mJN+b56BJ B9n6ria8Mvpn1Mpqtnbrp8zdwVPAbUk1uMjRDr6mQzBauux//sdpCgnJcP4OhUM7 RlaXbCKIQ73/2c7gMsMZ8C9G4fR0ijBfn0EeeSwj4hrRGB7wYHHH0ucNlJE5EYc4 LejeXkaye/gAqCyJdpL2i3rgETX4t5HKA6wl4wZnyjcGOpw3IGmV/BbsOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj/QRO3Arnjvyo6TfIye8wu1BUEMB8GA1UdIwQY MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2 LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyz0DEEM 0hUoqHxC7Dm96dtXR4LXpYtpnt86W+3HGSvUbUtodlanpp0hDqPhtJsSu8iOcex+ TOsxkJVUcaWE/2cVs4BFWR6QVmfcvg8hYBOma7dGfqUPhaX1UBBX+WDIfHHBSuZ/ SqSAoenndod7eZBBQYzYnFl3qvUcChW3CvoQQkia6XniAnUnIny+35DgljGYKRs/ ouGOCVhFkDhSEpJyIrHRZjEou0gTrfN9oe37MqtnuWqJc74XpKGsMiWnOzEb/WRC WBg6Gc5D1khjHN5/WQcnIXd+8VDDIcc5bwdtLKwDHQEQUj9vhXyoanJ+cpwCuMn8 rkjUj0tzuCPe2g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:11 2026 by rpki-client