This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json) Hash identifier: KclCeSJXn9Kbfgja6jeI4OSrfo3RQfdYQe1UN3DvOWQ= Subject key identifier: 6B:CE:9A:C0:91:8B:F2:C3:AD:DE:3D:25:45:14:1A:77:DE:CD:49:B1 Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019BF4995AF8B87ABB225E22823699D4FCE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft Manifest number: 137B Signing time: Sun 25 Jan 2026 10:00:49 +0000 Manifest this update: Sun 25 Jan 2026 10:00:49 +0000 Manifest next update: Mon 26 Jan 2026 10:00:49 +0000 Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=) 2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=) 3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=) 4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: zL79X03pEmtirDEipIyM7rrIBrzm7c00BquLxkpN/Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:5a:f8:b8:7a:bb:22:5e:22:82:36:99:d4:fc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Jan 25 10:00:49 2026 GMT Not After : Jan 26 10:00:49 2026 GMT Subject: CN=6bce9ac0918bf2c3adde3d2545141a77decd49b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:de:c7:cf:48:18:64:2b:15:b5:11:8f:f9: 70:00:75:4d:c6:af:e5:62:cb:47:19:c5:db:cb:36: c5:6a:34:fa:77:ee:76:31:31:68:7f:89:44:12:08: 3e:44:21:39:78:ce:95:dc:06:b6:16:b4:57:ea:8b: 82:8d:b3:9e:d1:e1:5f:a0:36:af:2c:18:18:a6:1d: f9:77:9e:9e:e9:ba:a0:8a:5e:e9:19:2d:2a:9e:e5: 2d:86:0d:c0:54:a2:e4:ee:96:e2:01:32:51:a1:ba: 0c:30:a7:9d:18:ab:c3:2c:38:17:af:96:65:c3:7d: 0e:8b:71:a9:c4:59:80:24:9a:f9:a3:32:83:12:df: 25:49:bd:6f:be:47:5f:9b:90:ce:83:ce:d3:91:81: 10:ba:95:67:60:0a:3c:12:11:90:f9:31:3c:7d:cb: f0:42:c6:8c:2d:08:a8:f8:fd:a7:b1:08:e9:d5:bf: cd:87:7e:be:86:a0:1d:a3:87:ed:3f:ef:23:3a:43: f1:00:67:6d:12:bb:ec:b5:4d:99:5d:80:1b:b3:1a: 98:a7:3f:f4:37:78:79:91:3b:a6:eb:84:5b:dc:9a: 50:c1:d0:c5:94:5b:d2:91:cf:8a:b4:14:67:64:c6: 2b:e7:22:4c:01:16:0d:32:fd:19:dd:28:f5:a2:2e: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CE:9A:C0:91:8B:F2:C3:AD:DE:3D:25:45:14:1A:77:DE:CD:49:B1 X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:06:10:2b:7e:9b:f6:6b:46:88:ec:88:e7:37:36:77:18:6b: d1:01:9d:1d:7f:81:04:fc:6b:62:29:7c:df:84:fc:73:3c:d1: 72:b4:11:38:c7:68:22:99:8c:9c:4c:6c:01:e2:91:bb:4f:52: 0b:e0:51:bb:68:ec:3c:6a:09:62:8a:f3:18:86:8c:5f:22:a9: 7f:c6:a7:92:fe:33:48:35:01:ad:2e:10:07:39:4b:4f:72:b7: 9c:14:4f:4c:1b:31:4f:2b:d3:92:45:cf:d5:44:6f:18:d9:ff: 00:3b:6f:90:bb:8f:3f:74:d9:2c:70:2d:e9:69:93:0a:09:74: 32:79:9c:e3:46:d5:d8:fe:62:b8:66:7c:ae:c1:c7:dc:a4:0c: cf:36:3a:8d:60:2d:b9:4d:87:07:0c:2b:bd:e1:70:50:79:45: b2:07:18:a7:b8:3d:93:2c:b1:2e:0f:ab:d8:e0:b2:58:62:9a: 5a:ce:2b:87:fb:1a:d0:be:0d:52:c6:d2:c7:3e:ac:ac:4e:ba: 61:4e:4a:a0:34:06:92:52:3c:08:62:75:30:05:ed:46:a6:b6: 89:20:eb:79:be:24:66:60:b0:1b:dc:d0:6b:fb:33:59:53:5a: b2:8e:b3:cb:25:1e:ae:d2:c4:41:b2:16:94:b9:ce:fa:4e:5e: 62:35:91:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mVr4uHq7Il4igjaZ1PzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjYwMTI1MTAwMDQ5WhcNMjYwMTI2MTAwMDQ5WjAzMTEwLwYDVQQD Eyg2YmNlOWFjMDkxOGJmMmMzYWRkZTNkMjU0NTE0MWE3N2RlY2Q0OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF7ex89IGGQrFbURj/lwAHVNxq/l YstHGcXbyzbFajT6d+52MTFof4lEEgg+RCE5eM6V3Aa2FrRX6ouCjbOe0eFfoDav LBgYph35d56e6bqgil7pGS0qnuUthg3AVKLk7pbiATJRoboMMKedGKvDLDgXr5Zl w30Oi3GpxFmAJJr5ozKDEt8lSb1vvkdfm5DOg87TkYEQupVnYAo8EhGQ+TE8fcvw QsaMLQio+P2nsQjp1b/Nh36+hqAdo4ftP+8jOkPxAGdtErvstU2ZXYAbsxqYpz/0 N3h5kTum64Rb3JpQwdDFlFvSkc+KtBRnZMYr5yJMARYNMv0Z3Sj1oi7JzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvOmsCRi/LDrd49JUUUGnfezUmxMB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgYQK36b 9mtGiOyI5zc2dxhr0QGdHX+BBPxrYil834T8czzRcrQROMdoIpmMnExsAeKRu09S C+BRu2jsPGoJYorzGIaMXyKpf8ankv4zSDUBrS4QBzlLT3K3nBRPTBsxTyvTkkXP 1URvGNn/ADtvkLuPP3TZLHAt6WmTCgl0Mnmc40bV2P5iuGZ8rsHH3KQMzzY6jWAt uU2HBwwrveFwUHlFsgcYp7g9kyyxLg+r2OCyWGKaWs4rh/sa0L4NUsbSxz6srE66 YU5KoDQGklI8CGJ1MAXtRqa2iSDreb4kZmCwG9zQa/szWVNaso6zyyUertLEQbIW lLnO+k5eYjWRjw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:21 2026 by rpki-client