This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json) Hash identifier: t8D1T9CL/3htCFxZ8iDunqKKFRZyfjA/5JPM0HDs1aU= Subject key identifier: 61:AF:E5:1B:EF:79:24:94:66:DA:92:F0:C0:1D:62:03:98:ED:23:B4 Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019BF687BE5C8EC0FB0077F4D0A730B28E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft Manifest number: 137C Signing time: Sun 25 Jan 2026 19:00:49 +0000 Manifest this update: Sun 25 Jan 2026 19:00:49 +0000 Manifest next update: Mon 26 Jan 2026 19:00:49 +0000 Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=) 2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=) 3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=) 4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: C6E9p2GjkdyGi2+lIbFcJ6oH44+CmdH1UlHrlcavPJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:be:5c:8e:c0:fb:00:77:f4:d0:a7:30:b2:8e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Jan 25 19:00:49 2026 GMT Not After : Jan 26 19:00:49 2026 GMT Subject: CN=61afe51bef79249466da92f0c01d620398ed23b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:2d:3d:ef:1c:dd:6f:22:46:28:b9:3a:78: dd:a3:98:5f:e9:44:fa:17:2f:04:8f:35:7a:e9:69: 69:5f:bf:d9:9f:5a:5e:2e:40:b5:e7:9c:33:2d:2d: 4a:c9:e3:ef:62:ed:4d:17:2c:30:1f:4c:6c:d3:b0: 00:cd:94:76:51:0d:6a:7d:80:96:b0:7d:73:4b:b7: b6:f2:b7:a0:eb:df:83:71:55:22:52:44:77:0a:e9: 82:38:00:21:75:f6:19:5e:62:6f:04:b9:a2:47:5c: c8:55:64:59:7c:58:8e:d8:b1:ab:9a:a3:d7:d9:7c: 6e:ed:55:0d:6a:78:9e:89:c6:27:09:dc:1f:41:c8: b6:93:20:24:88:93:72:22:a6:3c:be:fb:9d:4a:1e: c5:e5:22:02:33:89:d3:24:3b:8f:be:0f:32:a6:fa: cb:20:2c:f0:f1:15:13:58:9d:4c:e0:34:d7:40:bc: a8:a8:d4:d1:83:20:f2:5a:8f:b0:b2:10:be:9c:da: 39:a7:1e:9d:dd:b9:3d:9e:26:26:80:40:9c:c3:69: 36:92:09:e7:ae:93:f5:b6:f9:d0:a9:94:04:71:f5: 36:a2:9a:23:30:f5:58:84:c4:55:78:30:a1:e2:d9: 70:e7:58:c2:b1:22:97:fe:00:eb:47:95:48:89:c4: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AF:E5:1B:EF:79:24:94:66:DA:92:F0:C0:1D:62:03:98:ED:23:B4 X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7f:d4:1b:59:9c:06:17:b4:9a:77:1a:7d:08:a0:f9:01:1a: 62:e4:5f:c4:9d:7f:bc:a9:4a:34:66:6b:20:7e:8d:24:f2:66: 9f:79:51:06:76:c6:29:9c:8d:e4:8a:96:55:9f:ff:e4:1c:39: 3a:30:d3:15:c3:06:bb:c6:d6:98:a0:62:68:e6:05:20:af:e9: 82:e0:e8:fa:4e:44:46:4d:a0:57:59:8c:d8:14:d8:d0:2b:0e: db:9c:ee:22:b9:13:f8:fc:ab:a0:bd:9d:f3:a4:fa:0c:8c:15: 95:79:49:49:f3:16:b3:0f:91:68:8a:b9:d8:5d:71:8b:4b:e8: 98:f2:4a:28:bb:7c:10:ca:8e:51:b5:4c:32:9e:39:cb:a1:ca: cd:a7:1b:5d:35:e4:27:fd:7d:54:36:5a:33:7b:b9:9c:93:0a: 7e:9c:26:f0:9f:50:97:ee:0e:bb:7c:1f:79:aa:49:2b:8c:06: 03:3a:02:be:9b:67:b0:38:a5:f4:92:eb:17:ac:08:ea:0e:98: 48:9d:c7:6f:ae:8b:8e:47:27:a5:01:9f:53:7b:37:f4:bf:41: 60:2e:a1:14:6b:8e:14:01:0f:8b:48:9f:0c:21:d3:a4:c8:bc: ee:13:b4:9c:88:20:9f:c7:64:50:e8:ba:cc:30:55:ce:f3:b6: 2d:50:a2:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h75cjsD7AHf00Kcwso47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjYwMTI1MTkwMDQ5WhcNMjYwMTI2MTkwMDQ5WjAzMTEwLwYDVQQD Eyg2MWFmZTUxYmVmNzkyNDk0NjZkYTkyZjBjMDFkNjIwMzk4ZWQyM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrItPe8c3W8iRii5Onjdo5hf6UT6 Fy8EjzV66WlpX7/Zn1peLkC155wzLS1KyePvYu1NFywwH0xs07AAzZR2UQ1qfYCW sH1zS7e28reg69+DcVUiUkR3CumCOAAhdfYZXmJvBLmiR1zIVWRZfFiO2LGrmqPX 2Xxu7VUNanieicYnCdwfQci2kyAkiJNyIqY8vvudSh7F5SICM4nTJDuPvg8ypvrL ICzw8RUTWJ1M4DTXQLyoqNTRgyDyWo+wshC+nNo5px6d3bk9niYmgECcw2k2kgnn rpP1tvnQqZQEcfU2opojMPVYhMRVeDCh4tlw51jCsSKX/gDrR5VIicR10wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGv5RvveSSUZtqS8MAdYgOY7SO0MB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOH/UG1mc Bhe0mncafQig+QEaYuRfxJ1/vKlKNGZrIH6NJPJmn3lRBnbGKZyN5IqWVZ//5Bw5 OjDTFcMGu8bWmKBiaOYFIK/pguDo+k5ERk2gV1mM2BTY0CsO25zuIrkT+PyroL2d 86T6DIwVlXlJSfMWsw+RaIq52F1xi0vomPJKKLt8EMqOUbVMMp45y6HKzacbXTXk J/19VDZaM3u5nJMKfpwm8J9Ql+4Ou3wfeapJK4wGAzoCvptnsDil9JLrF6wI6g6Y SJ3Hb66LjkcnpQGfU3s39L9BYC6hFGuOFAEPi0ifDCHTpMi87hO0nIggn8dkUOi6 zDBVzvO2LVCirA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:48 2026 by rpki-client