This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json) Hash identifier: H5utmd7kNWJVeYYN4NP40M+ecXWP9tu1nZi6dvPiDhk= Subject key identifier: 43:C8:CE:50:BB:19:38:59:FA:22:AA:AB:1A:49:EB:45:8B:45:D1:CB Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e Certificate serial: 019BEB5F53A3BBFF46DCBC4F4AFE6E85477E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft Manifest number: 17E4 Signing time: Fri 23 Jan 2026 15:00:51 +0000 Manifest this update: Fri 23 Jan 2026 15:00:51 +0000 Manifest next update: Sat 24 Jan 2026 15:00:51 +0000 Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=) 2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: zStP+nQ4jXHuqjG6ZZO+c5f9/pX9oKu+rEMlSKb+wE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:5f:53:a3:bb:ff:46:dc:bc:4f:4a:fe:6e:85:47:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e Validity Not Before: Jan 23 15:00:51 2026 GMT Not After : Jan 24 15:00:51 2026 GMT Subject: CN=43c8ce50bb193859fa22aaab1a49eb458b45d1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:95:25:c4:49:a9:a6:1d:e7:38:f5:3f:5c:af: b8:3c:c8:c8:02:c0:67:df:3b:f4:2e:0a:41:4e:98: 51:33:84:6e:a7:99:59:fc:e3:34:8a:ed:28:17:3b: 58:1c:1f:93:8b:8b:a4:85:28:96:ff:e6:4c:79:ef: 8d:ee:0a:a5:f3:44:1e:56:08:45:00:39:4f:ce:c2: a2:af:35:87:c5:56:92:96:72:13:8e:10:3e:54:c7: cb:dd:ac:14:41:08:b0:ce:ba:50:ca:fc:35:ce:19: a2:d8:32:7f:64:51:ea:11:35:0f:a7:37:e2:b9:00: c2:8d:30:07:ab:30:b0:7e:a5:b7:c6:98:26:2c:49: 16:97:77:73:2d:d9:15:0b:d0:ed:1a:71:1e:35:63: 4f:3c:94:58:73:71:5e:75:77:c0:e7:02:30:ce:d3: 71:6a:6e:c1:d8:fe:fc:21:45:2b:fa:41:8c:bb:0b: ac:28:fc:ec:c4:e8:d5:8b:eb:68:f1:0a:63:29:1e: 67:17:21:ae:e3:86:7b:4e:77:52:78:24:2c:bc:c5: 31:30:a6:f4:8c:3d:6f:c4:8e:17:af:7e:c1:e6:bc: 44:07:72:08:d8:e2:26:2c:2f:18:b1:ec:c4:22:a2: 54:17:5d:fc:02:3b:02:d8:ca:52:98:73:c6:f9:74: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:CE:50:BB:19:38:59:FA:22:AA:AB:1A:49:EB:45:8B:45:D1:CB X509v3 Authority Key Identifier: keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e2:ec:ba:fe:0b:c2:ac:3f:d0:6b:d7:ad:92:ee:78:29:93: 55:84:cc:b8:f6:e4:41:ae:ff:5b:bf:91:96:11:75:89:ad:23: 40:d0:e0:1d:5e:bf:93:6d:d9:3f:2a:48:c6:c3:26:87:c0:e7: e9:4f:5f:d3:18:e1:b8:d5:4b:75:d9:f0:c1:31:e3:c3:1b:2a: 73:ac:a8:fb:30:e5:b1:30:9e:8b:5d:ea:46:47:6f:b0:48:0a: 29:ac:a4:6d:e0:d3:64:4c:53:02:b3:b1:ec:cd:fd:ab:b1:87: 83:4e:3c:f8:66:2d:92:57:e8:65:36:bf:29:b7:6f:12:c6:35: b3:1f:31:31:53:80:93:23:fb:d6:be:56:f6:a7:f9:9e:ce:56: 8b:cf:94:bf:b7:93:b4:bf:1c:56:6e:77:d4:f5:aa:6c:6a:7e: bf:3e:72:5d:23:cc:c4:ab:95:0e:10:66:b3:01:2b:98:41:84: a5:78:f6:20:d2:5c:63:b6:8f:0f:0b:d5:9a:a4:f2:66:e5:66: c4:65:57:b9:d2:27:ff:5a:f5:6a:51:f7:04:f8:bf:d4:cd:3f: 5f:c3:ed:a1:31:3f:15:0d:66:78:a3:fb:24:b4:6c:46:46:8c: 16:14:c0:a7:04:ae:d2:69:c6:bb:86:7c:81:0e:80:56:fb:83: ad:8f:1d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvrX1Oju/9G3LxPSv5uhUd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy MjgxOGUwHhcNMjYwMTIzMTUwMDUxWhcNMjYwMTI0MTUwMDUxWjAzMTEwLwYDVQQD Eyg0M2M4Y2U1MGJiMTkzODU5ZmEyMmFhYWIxYTQ5ZWI0NThiNDVkMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZUlxEmpph3nOPU/XK+4PMjIAsBn 3zv0LgpBTphRM4Rup5lZ/OM0iu0oFztYHB+Ti4ukhSiW/+ZMee+N7gql80QeVghF ADlPzsKirzWHxVaSlnITjhA+VMfL3awUQQiwzrpQyvw1zhmi2DJ/ZFHqETUPpzfi uQDCjTAHqzCwfqW3xpgmLEkWl3dzLdkVC9DtGnEeNWNPPJRYc3FedXfA5wIwztNx am7B2P78IUUr+kGMuwusKPzsxOjVi+to8QpjKR5nFyGu44Z7TndSeCQsvMUxMKb0 jD1vxI4Xr37B5rxEB3II2OImLC8YsezEIqJUF138AjsC2MpSmHPG+XTFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPIzlC7GThZ+iKqqxpJ60WLRdHLMB8GA1UdIwQY MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4 LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+Lsuv4L wqw/0GvXrZLueCmTVYTMuPbkQa7/W7+RlhF1ia0jQNDgHV6/k23ZPypIxsMmh8Dn 6U9f0xjhuNVLddnwwTHjwxsqc6yo+zDlsTCei13qRkdvsEgKKaykbeDTZExTArOx 7M39q7GHg048+GYtklfoZTa/KbdvEsY1sx8xMVOAkyP71r5W9qf5ns5Wi8+Uv7eT tL8cVm531PWqbGp+vz5yXSPMxKuVDhBmswErmEGEpXj2INJcY7aPDwvVmqTyZuVm xGVXudIn/1r1alH3BPi/1M0/X8PtoTE/FQ1meKP7JLRsRkaMFhTApwSu0mnGu4Z8 gQ6AVvuDrY8dMw== -----END CERTIFICATE-----Generated at Fri Jan 23 23:04:41 2026 by rpki-client