This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json) Hash identifier: QSaY+TJS+Jp2M54BtvEpbok5T6D/C/5gSLZSR++IgGI= Subject key identifier: 22:F0:68:24:F1:4C:49:B8:16:16:DA:69:80:A5:83:C1:67:C2:19:FF Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b Certificate serial: 019BF4999C3FD68076BEC5D338DB6FDA20C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 10:01:06 +0000 Manifest this update: Sun 25 Jan 2026 10:01:06 +0000 Manifest next update: Mon 26 Jan 2026 10:01:06 +0000 Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=) 2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=) 3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=) 4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: 27ipViKq86WFgnTrbKC5XCSauSXvSnODUvtcOpJ0IFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:9c:3f:d6:80:76:be:c5:d3:38:db:6f:da:20:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b Validity Not Before: Jan 25 10:01:06 2026 GMT Not After : Jan 26 10:01:06 2026 GMT Subject: CN=22f06824f14c49b81616da6980a583c167c219ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:04:5a:46:ee:ac:d6:ec:b2:40:40:57:e7: fb:00:31:c3:6f:e9:0f:d2:31:04:0c:a6:2b:ee:c1: 57:a5:41:93:86:f4:d3:b8:c0:7d:49:f9:7e:82:1a: 15:eb:6a:d0:1a:2d:d3:8c:60:b6:7b:2c:0d:76:9a: 81:4e:7b:fe:e8:fc:de:87:14:a1:42:63:d6:ba:37: 98:1a:7a:c8:d2:a6:59:00:35:b2:bc:ed:1d:d8:e8: c0:88:15:eb:f0:99:59:cd:19:99:4b:c0:ec:c1:79: dd:8a:2b:84:af:fd:82:5b:46:5f:39:b2:6e:aa:4c: 79:e6:70:3f:9f:f1:f5:69:4b:bf:12:a4:f3:0d:a4: 29:a9:22:59:ca:a4:1f:64:11:03:18:3d:17:2d:53: 79:4a:33:a1:91:56:fc:0d:cf:8b:67:2a:cd:70:c6: 20:f1:f0:8b:94:fa:0c:80:89:34:89:41:98:af:82: 96:14:5e:c2:d8:0f:d3:b2:93:9a:af:5a:c4:85:f1: 77:7c:31:e6:48:36:0f:30:f1:5b:d1:32:e8:e9:39: c4:78:99:37:7c:35:8b:87:dc:d7:e2:5e:51:83:b1: ef:39:30:b1:4f:55:73:d8:08:79:6a:af:02:c4:85: 45:cd:95:16:4d:b1:49:82:73:f2:69:7d:97:88:34: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:68:24:F1:4C:49:B8:16:16:DA:69:80:A5:83:C1:67:C2:19:FF X509v3 Authority Key Identifier: keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3d:23:53:c2:2c:ee:ec:54:9b:8b:63:30:bb:3b:9e:dd:c1: 8f:01:c0:3b:eb:05:89:5f:94:d1:4e:69:a1:02:56:7c:8c:8a: 3a:2f:d2:7f:9e:80:57:39:0b:74:5f:d7:84:cd:53:cd:0e:4d: 56:dd:3e:c3:b6:66:4b:04:f3:17:82:f3:ad:a9:ec:48:c8:08: a6:75:54:2a:88:f6:51:81:bd:23:e1:f6:2b:5a:76:4b:ae:3f: 11:85:09:d5:ee:01:2b:1d:67:a5:2e:76:b8:ed:f0:f1:83:ef: c2:32:24:1a:8b:b9:cc:3b:6c:bd:34:f7:cc:ab:bb:28:a3:19: cf:20:23:d9:99:c6:5d:be:6c:37:76:f4:08:83:99:70:9b:01: ae:69:77:eb:9b:bc:91:1b:8e:2c:ef:25:dd:92:04:22:75:11: 0d:d6:b4:3c:e2:9e:b7:bb:47:89:6f:5c:f1:dd:37:9d:13:ae: 34:26:c6:7a:72:49:12:8b:58:0e:48:24:69:bf:30:f8:16:9b: 44:c7:62:b0:ca:1c:4b:0e:93:25:17:40:1f:6d:7e:f0:57:7e: 3c:be:82:fd:42:f6:79:1e:97:51:fd:af:18:db:ed:50:bc:80: 81:41:73:70:45:3a:5d:dd:13:bc:0e:f6:7c:ac:9b:12:c5:48: dc:08:5d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZw/1oB2vsXTONtv2iDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YTkwZjY4OTY2Nzg0NDJhZmFlZTFiYWFhYTZiMmEyZGVj YWNkM2IwHhcNMjYwMTI1MTAwMTA2WhcNMjYwMTI2MTAwMTA2WjAzMTEwLwYDVQQD EygyMmYwNjgyNGYxNGM0OWI4MTYxNmRhNjk4MGE1ODNjMTY3YzIxOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7gEWkburNbsskBAV+f7ADHDb+kP 0jEEDKYr7sFXpUGThvTTuMB9Sfl+ghoV62rQGi3TjGC2eywNdpqBTnv+6PzehxSh QmPWujeYGnrI0qZZADWyvO0d2OjAiBXr8JlZzRmZS8DswXndiiuEr/2CW0ZfObJu qkx55nA/n/H1aUu/EqTzDaQpqSJZyqQfZBEDGD0XLVN5SjOhkVb8Dc+LZyrNcMYg 8fCLlPoMgIk0iUGYr4KWFF7C2A/TspOar1rEhfF3fDHmSDYPMPFb0TLo6TnEeJk3 fDWLh9zX4l5Rg7HvOTCxT1Vz2Ah5aq8CxIVFzZUWTbFJgnPyaX2XiDTiqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLwaCTxTEm4FhbaaYClg8Fnwhn/MB8GA1UdIwQY MBaAFLSpD2iWZ4RCr67huqqmsqLeys07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAt OWQxODEyOTk5YTM1LzEvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAtOWQxODEyOTk5YTM1 LzEvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj0jU8Is 7uxUm4tjMLs7nt3BjwHAO+sFiV+U0U5poQJWfIyKOi/Sf56AVzkLdF/XhM1TzQ5N Vt0+w7ZmSwTzF4LzransSMgIpnVUKoj2UYG9I+H2K1p2S64/EYUJ1e4BKx1npS52 uO3w8YPvwjIkGou5zDtsvTT3zKu7KKMZzyAj2ZnGXb5sN3b0CIOZcJsBrml365u8 kRuOLO8l3ZIEInURDda0POKet7tHiW9c8d03nROuNCbGenJJEotYDkgkab8w+Bab RMdisMocSw6TJRdAH21+8Fd+PL6C/UL2eR6XUf2vGNvtULyAgUFzcEU6Xd0TvA72 fKybEsVI3Ahdbw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:48:49 2026 by rpki-client