This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json) Hash identifier: azviVAStJxsH56BY9P4HaON7d/o6dkNh9fZQ1NgoJ78= Subject key identifier: 42:F7:A9:06:EF:D0:2A:BB:40:9F:80:AF:E9:22:FC:A3:4C:BA:63:7D Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36 Certificate serial: 019BF6BE8E3107BE4B402A6F9D1A87C78F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft Manifest number: 1522 Signing time: Sun 25 Jan 2026 20:00:41 +0000 Manifest this update: Sun 25 Jan 2026 20:00:41 +0000 Manifest next update: Mon 26 Jan 2026 20:00:41 +0000 Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: jkufOfve++sn+736dsX/IHGfDBYWeFM0OGIhv62rpnc=) 2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=) 3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:8e:31:07:be:4b:40:2a:6f:9d:1a:87:c7:8f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Validity Not Before: Jan 25 20:00:41 2026 GMT Not After : Jan 26 20:00:41 2026 GMT Subject: CN=42f7a906efd02abb409f80afe922fca34cba637d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:44:7d:a1:6b:4f:f3:a5:c0:c4:1d:71:ce: 5d:00:08:4b:f0:2c:bb:31:fc:a7:ae:2f:c5:02:80: 30:48:95:e8:a8:29:aa:1b:74:bf:5e:b7:fe:19:86: ff:86:20:43:2e:cf:f8:07:11:a6:1f:ad:bf:0c:6b: 0f:3c:40:f5:67:db:23:35:8e:85:8a:4f:cb:1f:d6: f2:d8:15:24:2c:fa:02:6f:f4:ef:3a:9a:49:53:9c: 0b:ba:02:84:7d:0e:b2:19:e9:48:75:05:62:0a:99: 17:8c:90:25:fe:75:de:13:64:d0:bd:51:9c:7a:d9: 59:64:3e:31:49:34:fb:1b:46:f7:7f:5b:bb:57:1f: d8:71:c0:85:09:4f:a3:db:62:ca:b9:dc:ad:22:3f: 9b:30:73:ff:ab:a5:eb:b2:d1:40:78:39:8d:23:8e: 53:ca:e3:c4:2c:32:85:a9:82:46:e6:6b:9d:cb:57: 09:55:4a:55:85:4b:ee:f3:17:53:9f:85:44:a6:6a: ac:88:d1:fa:27:b0:27:60:d6:51:0a:9c:9d:7d:c5: a2:d7:1d:8f:40:8d:a4:c9:79:9d:2d:54:87:b0:53: eb:f8:fd:ba:2b:85:3f:be:70:e8:97:48:29:d7:ae: ac:d5:03:e4:18:7c:8c:ed:25:ed:da:56:7a:cf:14: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F7:A9:06:EF:D0:2A:BB:40:9F:80:AF:E9:22:FC:A3:4C:BA:63:7D X509v3 Authority Key Identifier: keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:28:54:25:a2:f1:ef:ee:0a:0e:7a:c9:b9:f1:10:e1:b1:ac: 35:12:af:25:5c:41:f6:9c:ac:42:64:50:84:eb:4b:c0:8b:c1: e0:6e:1d:a5:2d:2a:6c:cc:5b:43:8c:cc:e7:94:ec:4a:81:53: 57:a4:3e:38:f9:f9:8f:f6:84:97:99:9a:82:8b:0b:0d:c3:aa: 7a:e1:bf:d2:1f:27:7a:c2:ce:b6:2e:65:f6:0e:f1:c6:7b:4c: a5:7b:ea:0c:de:4c:b9:ab:08:77:1f:00:a5:e9:36:97:cf:52: 69:88:85:6d:86:2f:03:78:3f:a4:56:f5:fb:a3:ca:50:f5:12: f3:05:e2:f7:7e:f3:0b:92:c0:e8:97:2f:95:3e:b5:db:9e:63: e1:3a:b9:3f:cd:6c:6c:a6:88:5e:b6:13:c7:9c:e2:94:f8:8d: b4:4e:de:be:bc:16:2b:27:c6:16:e0:11:f5:cb:88:18:01:53: 9b:ad:6a:66:2a:4e:fc:7c:1e:fb:25:0b:16:23:e7:d2:c3:8a: 38:44:40:b8:46:68:88:1b:b6:e4:9d:84:e8:39:26:8a:32:ca: 34:0b:44:64:27:d2:c2:7c:59:05:83:41:d0:5e:bb:e9:23:a1: d6:29:cc:83:16:8a:c3:f4:2e:50:4f:bc:37:2d:6f:d4:c9:51: b3:7e:ad:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vo4xB75LQCpvnRqHx49LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz ZTRkMzYwHhcNMjYwMTI1MjAwMDQxWhcNMjYwMTI2MjAwMDQxWjAzMTEwLwYDVQQD Eyg0MmY3YTkwNmVmZDAyYWJiNDA5ZjgwYWZlOTIyZmNhMzRjYmE2MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjshEfaFrT/OlwMQdcc5dAAhL8Cy7 Mfynri/FAoAwSJXoqCmqG3S/Xrf+GYb/hiBDLs/4BxGmH62/DGsPPED1Z9sjNY6F ik/LH9by2BUkLPoCb/TvOppJU5wLugKEfQ6yGelIdQViCpkXjJAl/nXeE2TQvVGc etlZZD4xSTT7G0b3f1u7Vx/YccCFCU+j22LKudytIj+bMHP/q6XrstFAeDmNI45T yuPELDKFqYJG5mudy1cJVUpVhUvu8xdTn4VEpmqsiNH6J7AnYNZRCpydfcWi1x2P QI2kyXmdLVSHsFPr+P26K4U/vnDol0gp166s1QPkGHyM7SXt2lZ6zxSZTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL3qQbv0Cq7QJ+Ar+ki/KNMumN9MB8GA1UdIwQY MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3 LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyhUJaLx 7+4KDnrJufEQ4bGsNRKvJVxB9pysQmRQhOtLwIvB4G4dpS0qbMxbQ4zM55TsSoFT V6Q+OPn5j/aEl5magosLDcOqeuG/0h8nesLOti5l9g7xxntMpXvqDN5MuasIdx8A pek2l89SaYiFbYYvA3g/pFb1+6PKUPUS8wXi937zC5LA6JcvlT61255j4Tq5P81s bKaIXrYTx5zilPiNtE7evrwWKyfGFuAR9cuIGAFTm61qZipO/Hwe+yULFiPn0sOK OERAuEZoiBu25J2E6DkmijLKNAtEZCfSwnxZBYNB0F676SOh1inMgxaKw/QuUE+8 Ny1v1MlRs36tug== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:48 2026 by rpki-client