This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json) Hash identifier: wn7DiQb8DVWBpx2imWCd7RxhQdU2RmDEUb3I4uqBS5Q= Subject key identifier: 95:EF:3D:BC:C7:5E:E1:E5:20:E6:C0:81:06:D9:D0:91:45:2C:D2:5E Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Certificate serial: 019BF763D92C5B1334DF17F0B9D75F44727D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft Manifest number: 068C Signing time: Sun 25 Jan 2026 23:01:14 +0000 Manifest this update: Sun 25 Jan 2026 23:01:14 +0000 Manifest next update: Mon 26 Jan 2026 23:01:14 +0000 Files and hashes: 1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=) 2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: kneqysrxMGI/YafLkf5p3IQFNEtw97tMygD7UV0d8Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d9:2c:5b:13:34:df:17:f0:b9:d7:5f:44:72:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Validity Not Before: Jan 25 23:01:14 2026 GMT Not After : Jan 26 23:01:14 2026 GMT Subject: CN=95ef3dbcc75ee1e520e6c08106d9d091452cd25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:22:60:f4:0b:1e:92:84:00:88:5d:3c:92:54: 4d:66:d8:1d:7d:26:3b:c7:f0:34:72:4f:61:2e:4c: 23:c5:db:33:fd:df:aa:81:ff:2b:b1:c2:fd:bf:70: 45:0c:67:21:f7:94:2f:6b:d2:0d:c5:01:2e:84:c5: fd:0e:f6:c6:b2:a3:30:93:2a:ef:5b:df:e3:d3:e5: 1a:22:2f:78:40:03:64:b1:76:08:19:5c:91:9f:69: 1e:b8:3a:6c:af:62:ba:63:df:62:86:4e:0c:11:a9: 97:66:06:78:0d:88:8c:21:e9:73:3a:74:95:da:a8: b4:ee:91:95:71:c7:0a:ff:6d:f4:29:db:ce:04:7d: 80:d4:d1:f6:45:f6:93:9a:dc:5a:37:95:90:ff:6f: 4a:2b:94:b2:3c:47:9b:73:23:f6:bd:5a:73:b9:08: c1:19:f7:c0:b6:b7:e2:5d:44:d2:0a:90:5d:52:83: be:0a:f5:e5:78:f4:11:3d:9a:ab:8d:5f:2e:6c:be: c9:48:57:f3:ab:a8:f2:50:8b:e4:2c:2f:c9:99:ae: 6a:cf:82:46:ef:d8:bb:c0:d7:75:1a:97:87:a2:ae: 0c:34:b3:a8:d9:9c:64:e8:41:9c:f7:06:8b:f0:39: f5:cc:d0:a7:35:d5:20:58:dd:0e:c3:b7:79:29:42: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EF:3D:BC:C7:5E:E1:E5:20:E6:C0:81:06:D9:D0:91:45:2C:D2:5E X509v3 Authority Key Identifier: keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:73:f6:07:58:e4:b9:a4:52:d7:1a:34:7c:7c:fb:b5:46: 32:8e:99:93:3f:0e:86:f9:2c:d8:36:dd:2a:af:b2:89:f9:a3: 98:16:68:0e:55:82:23:44:e5:4b:bf:d0:fd:90:74:c0:c4:1a: 3d:97:e9:7e:b0:3f:62:eb:08:4e:bd:6d:14:92:73:d6:72:e8: b8:36:a6:b8:df:f2:6e:af:5b:71:e8:21:55:f7:91:c1:b5:7a: bc:f8:17:26:be:dd:66:d1:f2:30:50:fb:8a:5a:17:06:ac:b1: 7e:3b:69:86:54:89:55:ec:bd:b3:32:61:a8:20:9f:56:e1:47: 03:57:b9:2d:d2:cd:99:55:79:1d:6e:45:66:bf:f9:8e:33:dc: e3:26:85:ea:01:d1:05:45:01:f0:df:db:06:78:79:75:90:02: 6e:ad:47:0f:7e:ed:48:f0:ad:6e:76:1a:76:12:e8:1f:47:06: f8:fb:af:d9:11:dd:0e:d0:13:55:5e:96:ef:e8:1f:ea:25:ae: b1:53:ef:b8:a2:a0:7f:ab:16:cf:31:11:6d:1c:2b:cd:5c:0d: 8e:c1:9b:7c:9c:08:05:0a:af:49:29:f3:8e:01:02:1e:50:3b: 83:7a:01:37:19:aa:a8:f0:cd:49:37:f5:5f:0e:09:11:27:fc: d6:a3:ed:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9ksWxM03xfwuddfRHJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODU5NGViZGM3ZDdjZjdkYTJlMDAzYzg0ZDg2YTdjMWFm ODcxYmMwHhcNMjYwMTI1MjMwMTE0WhcNMjYwMTI2MjMwMTE0WjAzMTEwLwYDVQQD Eyg5NWVmM2RiY2M3NWVlMWU1MjBlNmMwODEwNmQ5ZDA5MTQ1MmNkMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJg9AsekoQAiF08klRNZtgdfSY7 x/A0ck9hLkwjxdsz/d+qgf8rscL9v3BFDGch95Qva9INxQEuhMX9DvbGsqMwkyrv W9/j0+UaIi94QANksXYIGVyRn2keuDpsr2K6Y99ihk4MEamXZgZ4DYiMIelzOnSV 2qi07pGVcccK/230KdvOBH2A1NH2RfaTmtxaN5WQ/29KK5SyPEebcyP2vVpzuQjB GffAtrfiXUTSCpBdUoO+CvXlePQRPZqrjV8ubL7JSFfzq6jyUIvkLC/Jma5qz4JG 79i7wNd1GpeHoq4MNLOo2Zxk6EGc9waL8Dn1zNCnNdUgWN0Ow7d5KUKBdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXvPbzHXuHlIObAgQbZ0JFFLNJeMB8GA1UdIwQY MBaAFE6FlOvcfXz32i4APITYanwa+HG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUt Y2U5NGUzOGU4MmQ2LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUtY2U5NGUzOGU4MmQ2 LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYBz9gdY 5LmkUtcaNHx8+7VGMo6Zkz8Ohvks2DbdKq+yifmjmBZoDlWCI0TlS7/Q/ZB0wMQa PZfpfrA/YusITr1tFJJz1nLouDamuN/ybq9bceghVfeRwbV6vPgXJr7dZtHyMFD7 iloXBqyxfjtphlSJVey9szJhqCCfVuFHA1e5LdLNmVV5HW5FZr/5jjPc4yaF6gHR BUUB8N/bBnh5dZACbq1HD37tSPCtbnYadhLoH0cG+Puv2RHdDtATVV6W7+gf6iWu sVPvuKKgf6sWzzERbRwrzVwNjsGbfJwIBQqvSSnzjgECHlA7g3oBNxmqqPDNSTf1 Xw4JESf81qPtvg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:31 2026 by rpki-client