This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json) Hash identifier: azqOTMhrqgUBEsWcTVzr9nDjkwNTPmmBo51E44gmpRU= Subject key identifier: 54:FB:40:37:7E:F2:59:56:5A:E7:10:32:E6:02:0A:73:EE:F3:01:C1 Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Certificate serial: 019BFB409BD837F90F761E0918E5E55514CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 17:01:13 +0000 Manifest this update: Mon 26 Jan 2026 17:01:13 +0000 Manifest next update: Tue 27 Jan 2026 17:01:13 +0000 Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=) 2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: dTz6VSuWjnI0ZmmeDK7+zbZTSuoQjgC1g2buHY/xzq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:9b:d8:37:f9:0f:76:1e:09:18:e5:e5:55:14:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Validity Not Before: Jan 26 17:01:13 2026 GMT Not After : Jan 27 17:01:13 2026 GMT Subject: CN=54fb40377ef259565ae71032e6020a73eef301c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:77:74:32:f6:9d:4e:c8:9f:0a:25:5d:f1: 1c:fe:a0:5b:17:23:65:05:92:f7:d2:00:94:b1:d6: ab:4b:64:b6:c9:d5:04:75:71:6a:ce:e9:33:1d:c1: 9d:f0:3c:81:37:46:42:66:62:87:eb:09:46:5a:aa: 02:b9:45:4e:a3:db:a4:12:52:7c:3d:85:30:e7:58: f6:8d:7b:4e:0b:a7:64:da:ab:4a:0b:99:79:23:eb: df:6a:0e:12:ea:f2:2b:48:3c:00:81:1f:60:24:ee: 92:05:b3:32:61:4e:3e:eb:6f:54:48:d0:2f:75:89: 65:57:5c:ed:6a:7e:f4:e3:43:ba:c9:81:40:c4:38: ed:0f:fb:6c:35:48:f8:79:bf:13:cb:f1:7a:fd:83: 1e:bc:43:99:34:21:b2:20:a4:a0:c6:7d:bd:e1:25: 31:bd:9c:f3:1d:ad:85:a0:bb:f7:ec:e5:5e:02:f1: 4a:14:d6:9e:36:09:41:39:95:96:6a:e9:89:62:2b: 77:69:6a:bc:78:18:e7:23:73:00:c6:14:b2:bd:3b: 58:fc:69:4a:0e:6d:d6:0c:97:4a:1f:75:ac:a2:ca: 43:f3:be:19:e7:11:1b:a2:20:19:db:c6:50:b4:46: 0b:05:0e:f9:0b:42:60:07:61:f0:e7:c1:4c:a5:cb: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FB:40:37:7E:F2:59:56:5A:E7:10:32:E6:02:0A:73:EE:F3:01:C1 X509v3 Authority Key Identifier: keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ec:af:9c:06:99:80:16:b6:87:fa:4b:b2:ed:2d:92:9a:f3: eb:34:44:5a:05:be:05:35:68:fe:f5:47:06:d5:6e:30:e6:bd: ec:5b:89:b8:aa:4a:d2:6b:7d:7b:83:6b:8d:4a:47:4e:f6:ab: 87:3c:1a:0b:4b:7f:73:7d:03:92:35:18:09:00:6a:31:71:21: 49:34:ca:7f:2e:6c:e4:db:3f:81:92:6e:de:c5:28:25:3f:00: 75:88:2c:41:04:78:e2:35:1c:e2:6a:e3:3f:63:c4:83:09:83: 75:66:0b:17:83:7c:60:0d:b0:62:0d:40:2d:eb:43:37:e1:c9: 02:9b:06:68:45:99:4a:3f:d6:fb:71:3e:dc:8f:68:59:80:fa: c1:09:56:c7:39:ad:2c:47:7a:e6:0b:d3:45:8e:d8:e8:a5:4f: 99:fd:29:f5:44:6e:e9:e7:cb:bc:0f:70:d0:5b:22:41:ff:3d: d6:3f:ce:04:74:21:8d:a1:17:1b:cf:95:86:6c:28:7d:0c:72: bd:cc:d5:4a:21:6e:ef:6d:7c:f1:49:fc:0a:01:2b:9c:95:69: 6b:58:ea:1d:3b:ec:c5:6d:f9:80:c1:47:25:8d:4a:f5:1f:02: 80:36:1d:a4:b3:1e:fe:51:af:dc:37:ea:32:87:20:22:a8:97: 24:db:7f:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QJvYN/kPdh4JGOXlVRTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWQyOGI3ZDAyOGNhYmI5Njg0YTgwZTE0YmFhZjE1Y2E2 ZmQyZjYwHhcNMjYwMTI2MTcwMTEzWhcNMjYwMTI3MTcwMTEzWjAzMTEwLwYDVQQD Eyg1NGZiNDAzNzdlZjI1OTU2NWFlNzEwMzJlNjAyMGE3M2VlZjMwMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueB3dDL2nU7InwolXfEc/qBbFyNl BZL30gCUsdarS2S2ydUEdXFqzukzHcGd8DyBN0ZCZmKH6wlGWqoCuUVOo9ukElJ8 PYUw51j2jXtOC6dk2qtKC5l5I+vfag4S6vIrSDwAgR9gJO6SBbMyYU4+629USNAv dYllV1ztan7040O6yYFAxDjtD/tsNUj4eb8Ty/F6/YMevEOZNCGyIKSgxn294SUx vZzzHa2FoLv37OVeAvFKFNaeNglBOZWWaumJYit3aWq8eBjnI3MAxhSyvTtY/GlK Dm3WDJdKH3WsospD874Z5xEboiAZ28ZQtEYLBQ75C0JgB2Hw58FMpcusiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT7QDd+8llWWucQMuYCCnPu8wHBMB8GA1UdIwQY MBaAFLadKLfQKMq7loSoDhS6rxXKb9L2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTIt NWM5MzIzOWU1ZTJlLzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTItNWM5MzIzOWU1ZTJl LzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+yvnAaZ gBa2h/pLsu0tkprz6zREWgW+BTVo/vVHBtVuMOa97FuJuKpK0mt9e4NrjUpHTvar hzwaC0t/c30DkjUYCQBqMXEhSTTKfy5s5Ns/gZJu3sUoJT8AdYgsQQR44jUc4mrj P2PEgwmDdWYLF4N8YA2wYg1ALetDN+HJApsGaEWZSj/W+3E+3I9oWYD6wQlWxzmt LEd65gvTRY7Y6KVPmf0p9URu6efLvA9w0FsiQf891j/OBHQhjaEXG8+VhmwofQxy vczVSiFu72188Un8CgErnJVpa1jqHTvsxW35gMFHJY1K9R8CgDYdpLMe/lGv3Dfq MocgIqiXJNt/nA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:17 2026 by rpki-client