This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json) Hash identifier: Hkue7Qg+3i0kAwQi1RW6PfWaDZsdxxyHvXMaSupElY4= Subject key identifier: F1:97:BF:A3:0A:94:25:81:D9:29:07:BF:0F:E8:2E:1A:1B:A9:26:AA Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Certificate serial: 019BF8AD2716386BAB80DAE1562AC1018CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 05:00:55 +0000 Manifest this update: Mon 26 Jan 2026 05:00:55 +0000 Manifest next update: Tue 27 Jan 2026 05:00:55 +0000 Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=) 2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: lFEKMdFIyXwPl5q/RD4lWY8erh+qApvAYQ1R8pN5wIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:27:16:38:6b:ab:80:da:e1:56:2a:c1:01:8c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Validity Not Before: Jan 26 05:00:55 2026 GMT Not After : Jan 27 05:00:55 2026 GMT Subject: CN=f197bfa30a942581d92907bf0fe82e1a1ba926aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:03:bb:98:55:de:a0:de:dc:30:df:4b:04: 3d:c4:8c:3a:3c:70:47:25:1f:de:00:53:70:f2:53: ff:f8:ad:a6:1f:27:d8:5d:cf:d9:a0:01:85:d0:0b: cf:f5:69:62:d9:32:37:90:f6:96:1d:3c:a5:40:10: 02:ea:e0:e4:9e:8c:c6:8d:0d:cd:42:e3:0d:76:c6: d7:8c:f2:10:36:78:d1:93:71:3a:71:77:63:4f:f7: d7:64:d2:3e:43:95:f8:43:1c:d3:ea:1c:09:6b:42: 83:9a:9f:bb:1e:56:49:60:88:9a:c5:fd:67:38:8d: bf:93:7f:a4:a4:63:f9:77:16:b6:79:f0:78:8b:89: 5e:7b:a3:93:18:c8:d7:d9:c4:44:a1:58:a4:77:6a: 70:f2:c5:fa:09:0c:6f:dd:48:07:d9:a0:cc:7a:00: df:c5:df:2e:51:fc:f4:32:d7:f4:44:1f:0c:d6:a8: fe:81:9e:db:9c:08:89:32:4f:53:fa:8b:4f:b4:0b: 5d:40:f6:7f:1b:e4:d6:68:af:da:88:04:75:22:3d: 9a:e7:46:59:94:19:05:7d:84:d0:9e:43:2b:50:69: 18:7c:82:82:67:3d:68:32:14:6b:3f:af:93:6f:b1: f5:df:56:82:a3:7a:c7:96:aa:fa:f1:eb:5c:bd:4b: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:97:BF:A3:0A:94:25:81:D9:29:07:BF:0F:E8:2E:1A:1B:A9:26:AA X509v3 Authority Key Identifier: keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:da:7f:d1:97:b1:d9:8f:59:bf:aa:10:9d:85:69:d5:af:bf: cc:3b:1e:4f:b0:3d:61:b1:2b:61:cd:9c:6a:c9:a6:48:0d:da: bc:67:2a:9a:b8:6d:c7:6c:eb:34:3d:21:21:43:4d:60:40:4a: 89:f3:72:a5:b7:61:0a:44:fe:46:b2:a1:91:0f:f9:ab:23:95: 7e:cd:3f:7a:a4:a2:66:dc:40:80:9d:09:d4:00:e3:56:7a:bd: ff:c8:1e:9d:20:7f:8f:70:ff:58:ef:65:37:6a:15:7b:ca:31: 37:1a:a8:f3:f3:de:31:b1:3e:e0:e5:a3:4e:42:02:a4:52:a5: d2:1f:a5:db:40:74:6d:72:ed:ac:c6:97:5c:96:28:b6:90:b9: 9a:d4:77:6f:a1:be:f4:40:06:cd:03:f1:09:cb:51:c3:25:a4: b6:5c:4b:86:fb:cf:16:14:31:c0:e0:f9:7a:ec:bf:99:b2:15: 2e:6e:f7:58:11:0d:31:02:64:72:4c:98:d3:c5:fd:60:9e:65: 87:75:a0:3e:18:53:9b:9d:bd:ed:82:77:6d:86:14:25:dd:4d: df:ac:e4:6e:9e:ab:6c:30:46:02:cb:f4:a7:de:42:5a:16:af: 88:c9:37:0a:34:7d:44:2f:22:09:98:a8:a5:fe:02:06:85:3b: dd:62:b8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rScWOGurgNrhVirBAYzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1 MmI0ZTcwHhcNMjYwMTI2MDUwMDU1WhcNMjYwMTI3MDUwMDU1WjAzMTEwLwYDVQQD EyhmMTk3YmZhMzBhOTQyNTgxZDkyOTA3YmYwZmU4MmUxYTFiYTkyNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHYDu5hV3qDe3DDfSwQ9xIw6PHBH JR/eAFNw8lP/+K2mHyfYXc/ZoAGF0AvP9Wli2TI3kPaWHTylQBAC6uDknozGjQ3N QuMNdsbXjPIQNnjRk3E6cXdjT/fXZNI+Q5X4QxzT6hwJa0KDmp+7HlZJYIiaxf1n OI2/k3+kpGP5dxa2efB4i4lee6OTGMjX2cREoVikd2pw8sX6CQxv3UgH2aDMegDf xd8uUfz0Mtf0RB8M1qj+gZ7bnAiJMk9T+otPtAtdQPZ/G+TWaK/aiAR1Ij2a50ZZ lBkFfYTQnkMrUGkYfIKCZz1oMhRrP6+Tb7H131aCo3rHlqr68etcvUulcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGXv6MKlCWB2SkHvw/oLhobqSaqMB8GA1UdIwQY MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtp/0Zex 2Y9Zv6oQnYVp1a+/zDseT7A9YbErYc2casmmSA3avGcqmrhtx2zrND0hIUNNYEBK ifNypbdhCkT+RrKhkQ/5qyOVfs0/eqSiZtxAgJ0J1ADjVnq9/8genSB/j3D/WO9l N2oVe8oxNxqo8/PeMbE+4OWjTkICpFKl0h+l20B0bXLtrMaXXJYotpC5mtR3b6G+ 9EAGzQPxCctRwyWktlxLhvvPFhQxwOD5euy/mbIVLm73WBENMQJkckyY08X9YJ5l h3WgPhhTm5297YJ3bYYUJd1N36zkbp6rbDBGAsv0p95CWhaviMk3CjR9RC8iCZio pf4CBoU73WK4kg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:20 2026 by rpki-client