This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json) Hash identifier: MOgOV3gCpeRauL+KOLDX7ncfYWxHOitFFYiS9s+qCGg= Subject key identifier: A0:15:C0:6E:19:F1:FA:F9:02:82:A0:9E:53:4A:19:7C:DC:44:1B:B0 Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Certificate serial: 019BF318996B66D58142EF780F7F6708718E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft Manifest number: 046F Signing time: Sun 25 Jan 2026 03:00:34 +0000 Manifest this update: Sun 25 Jan 2026 03:00:34 +0000 Manifest next update: Mon 26 Jan 2026 03:00:34 +0000 Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=) 2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=) 3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: g8eS49i/5hFP3dSCrmankzekzs1MY895pG/FaguiFQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:99:6b:66:d5:81:42:ef:78:0f:7f:67:08:71:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Validity Not Before: Jan 25 03:00:34 2026 GMT Not After : Jan 26 03:00:34 2026 GMT Subject: CN=a015c06e19f1faf90282a09e534a197cdc441bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:bd:fa:83:78:78:89:3a:c0:9b:1f:5d:db: 1e:f0:ad:48:0f:89:07:4d:4e:88:e9:8f:71:d1:67: e5:0c:0f:32:63:3d:ec:8d:ab:bf:3b:a0:c4:77:03: 63:0e:01:de:58:b6:c6:8c:47:54:79:3b:59:00:8a: c3:16:8d:10:ee:1d:21:4e:5f:93:fd:31:5b:64:4b: c1:70:6d:d3:5b:2c:72:e2:8f:f0:00:48:5c:35:ad: 4e:9b:3a:31:63:74:75:23:6c:15:b0:a9:b6:e3:28: 08:46:07:20:96:bb:cd:56:e7:93:46:5e:10:10:ec: 39:bc:88:a9:c6:b5:67:b5:01:5f:ab:f6:e6:08:be: ad:fd:97:a0:c2:a2:c6:c3:11:27:ff:b0:a6:08:5f: d7:ed:be:43:ef:d6:e2:54:db:a5:00:71:df:57:48: af:e2:f1:41:1d:13:37:1f:38:71:b8:84:ea:cf:f9: 3f:10:07:1f:2d:5e:f8:18:e8:00:c1:3e:41:26:3e: 92:80:3d:c7:b9:ac:0c:18:40:47:6a:fa:32:3b:15: a6:63:ea:0a:31:be:0a:2b:24:9d:89:59:5f:c4:90: 90:f4:ae:6f:15:ea:dd:13:50:f6:bf:82:c6:84:bd: f1:36:53:39:fd:c7:a7:45:0a:56:86:92:b5:73:76: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:C0:6E:19:F1:FA:F9:02:82:A0:9E:53:4A:19:7C:DC:44:1B:B0 X509v3 Authority Key Identifier: keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:27:2f:4c:9b:66:2f:a6:cc:93:dc:e1:10:bb:f2:45:a3: d4:c0:ac:57:b1:a2:c9:a7:1d:99:49:c0:eb:3b:f6:95:8e:8d: 54:8d:bb:4b:07:2d:f1:96:30:3e:2a:05:85:8f:25:83:96:95: b5:a8:f0:f9:47:47:98:32:f8:f2:74:97:4a:ec:47:85:a3:08: ba:89:a3:69:40:79:c6:2d:d1:46:ec:73:74:46:f9:80:8a:ad: ad:88:45:87:c4:eb:07:f3:46:86:90:87:02:5f:02:50:ac:a1: 90:46:6b:bc:12:95:3c:96:d2:c9:d4:0b:47:94:fb:19:72:e1: d2:59:3c:a9:a6:76:3c:c5:53:1b:9c:fc:49:5f:a3:18:df:47: 84:92:a8:8f:65:85:2d:2a:ed:35:9f:6e:0e:ea:57:4c:00:71: b3:43:ff:47:ce:16:7e:de:a8:d1:df:2a:6c:c3:cd:b4:cc:64: a3:9c:93:cf:3b:14:d3:a2:9a:24:60:54:89:b1:db:c5:eb:f4: 55:da:75:cb:33:91:0c:4d:c3:80:ba:be:2c:79:42:19:86:af: f5:7d:81:c5:df:71:d6:49:84:62:57:61:a9:50:af:93:8a:11: ab:f1:89:4f:f1:41:9b:cf:19:89:6a:d6:04:2c:2d:a7:88:83: b7:00:29:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGJlrZtWBQu94D39nCHGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh MDEzZDcwHhcNMjYwMTI1MDMwMDM0WhcNMjYwMTI2MDMwMDM0WjAzMTEwLwYDVQQD EyhhMDE1YzA2ZTE5ZjFmYWY5MDI4MmEwOWU1MzRhMTk3Y2RjNDQxYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDu9+oN4eIk6wJsfXdse8K1ID4kH TU6I6Y9x0WflDA8yYz3sjau/O6DEdwNjDgHeWLbGjEdUeTtZAIrDFo0Q7h0hTl+T /TFbZEvBcG3TWyxy4o/wAEhcNa1OmzoxY3R1I2wVsKm24ygIRgcglrvNVueTRl4Q EOw5vIipxrVntQFfq/bmCL6t/ZegwqLGwxEn/7CmCF/X7b5D79biVNulAHHfV0iv 4vFBHRM3HzhxuITqz/k/EAcfLV74GOgAwT5BJj6SgD3HuawMGEBHavoyOxWmY+oK Mb4KKySdiVlfxJCQ9K5vFerdE1D2v4LGhL3xNlM5/cenRQpWhpK1c3ZYKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAVwG4Z8fr5AoKgnlNKGXzcRBuwMB8GA1UdIwQY MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5 LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf4nL0yb Zi+mzJPc4RC78kWj1MCsV7GiyacdmUnA6zv2lY6NVI27Swct8ZYwPioFhY8lg5aV tajw+UdHmDL48nSXSuxHhaMIuomjaUB5xi3RRuxzdEb5gIqtrYhFh8TrB/NGhpCH Al8CUKyhkEZrvBKVPJbSydQLR5T7GXLh0lk8qaZ2PMVTG5z8SV+jGN9HhJKoj2WF LSrtNZ9uDupXTABxs0P/R84Wft6o0d8qbMPNtMxko5yTzzsU06KaJGBUibHbxev0 Vdp1yzORDE3DgLq+LHlCGYav9X2Bxd9x1kmEYldhqVCvk4oRq/GJT/FBm88ZiWrW BCwtp4iDtwApRw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:41 2026 by rpki-client