This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json) Hash identifier: xW81bgFlks+ku4TU0tfLd3V+Ti0P21ewkJMq6ptUbpo= Subject key identifier: 30:62:C0:89:CB:1E:7F:94:C5:DF:E7:DF:46:C8:EA:4D:B9:A9:BC:A6 Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Certificate serial: 019C24AA28EFE0D6FCA78455D49D1647ECE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft Manifest number: 05FA Signing time: Tue 03 Feb 2026 18:00:57 +0000 Manifest this update: Tue 03 Feb 2026 18:00:57 +0000 Manifest next update: Wed 04 Feb 2026 18:00:57 +0000 Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: sL3XKbH621HdvvSpDOE/3e/2tU4ARlW/VswDBeqyUgc=) 2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:aa:28:ef:e0:d6:fc:a7:84:55:d4:9d:16:47:ec:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Validity Not Before: Feb 3 18:00:57 2026 GMT Not After : Feb 4 18:00:57 2026 GMT Subject: CN=3062c089cb1e7f94c5dfe7df46c8ea4db9a9bca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:8e:58:ae:9b:c4:19:b5:51:39:32:54:31: 3a:6b:b9:9d:aa:08:9c:44:cc:cc:ad:f3:38:e2:60: eb:c8:d8:55:ee:75:cd:5d:04:55:82:1e:5b:45:4d: 20:92:9b:0d:79:34:d7:7a:52:ad:39:8d:f6:5f:e3: 0d:18:45:67:cc:ef:3b:cf:69:17:dd:40:99:59:40: 3f:dc:c4:b5:6f:2a:27:62:9e:7a:8f:23:4b:d8:7e: 87:f8:e7:41:c1:9e:9f:bd:44:04:f7:86:42:6e:2a: f0:4d:0f:16:6a:b2:3f:8c:69:63:d9:e2:cf:57:b2: b7:ce:e2:e4:0e:29:4b:b0:12:ea:45:c9:69:37:1f: 0b:fa:10:ae:c8:29:84:e1:88:50:f2:e4:47:2e:38: 64:0c:ee:e4:0b:8f:72:0c:9c:b6:73:7c:8d:e4:58: f1:92:74:c1:83:d8:cc:4a:46:a3:9f:6e:0e:0f:8c: 83:00:e3:ab:56:c4:49:8a:fb:37:3c:6d:8b:ed:38: c1:bb:ba:36:6e:b1:b4:5b:58:1b:de:10:ea:78:4a: ac:0e:2b:0e:c9:88:6a:a2:0f:5b:bd:7d:1d:c5:20: a2:4f:bc:98:ef:53:9b:21:b7:51:01:59:dd:7f:75: 4f:dd:48:3e:36:0d:4c:55:1c:e2:90:43:41:43:8e: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:62:C0:89:CB:1E:7F:94:C5:DF:E7:DF:46:C8:EA:4D:B9:A9:BC:A6 X509v3 Authority Key Identifier: keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:99:c2:e6:ae:bd:40:81:36:ff:95:95:f2:05:b2:df:53:cd: d2:6d:a3:2d:19:35:c2:8b:6d:dd:fb:4a:89:70:e1:70:0c:4c: 72:b1:37:98:34:cb:3c:3f:1f:f3:df:c2:a1:3f:13:ed:1f:ab: 47:be:15:96:c7:2a:1c:14:8e:07:3e:d0:7a:a7:ce:a7:b9:24: 28:91:2c:12:56:a3:21:eb:18:8f:bd:f7:b8:f0:04:07:16:bb: 68:70:1e:f9:f1:e7:bf:d6:4b:63:3a:4d:5f:bd:f9:2e:4f:0a: 85:8d:39:06:ac:c2:61:ae:2c:8e:34:f7:cf:b0:56:62:44:6b: 8d:97:38:1a:97:f4:aa:22:d8:84:c3:0b:17:bd:d4:72:da:66: 27:ed:fc:0b:26:96:f7:95:c3:be:6e:13:68:25:e9:81:ab:f1: a0:76:64:be:41:e9:1d:67:d7:b7:88:9d:92:17:78:2b:c0:52: 39:c1:ce:2a:6a:75:d4:2e:73:75:20:17:a5:ed:0f:b0:03:59: a1:a4:70:19:1b:f8:c6:fb:57:ea:54:1d:83:79:d0:3f:73:ec: 7a:88:fb:b4:4f:ac:05:3d:3d:fd:d1:67:8d:5c:cb:51:8f:10: 61:cb:18:aa:01:1c:1a:c8:fa:a8:2a:50:fe:66:9d:30:3d:ca: 41:b5:4a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwkqijv4Nb8p4RV1J0WR+zoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh MTkxYmYwHhcNMjYwMjAzMTgwMDU3WhcNMjYwMjA0MTgwMDU3WjAzMTEwLwYDVQQD EygzMDYyYzA4OWNiMWU3Zjk0YzVkZmU3ZGY0NmM4ZWE0ZGI5YTliY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOiOWK6bxBm1UTkyVDE6a7mdqgic RMzMrfM44mDryNhV7nXNXQRVgh5bRU0gkpsNeTTXelKtOY32X+MNGEVnzO87z2kX 3UCZWUA/3MS1byonYp56jyNL2H6H+OdBwZ6fvUQE94ZCbirwTQ8WarI/jGlj2eLP V7K3zuLkDilLsBLqRclpNx8L+hCuyCmE4YhQ8uRHLjhkDO7kC49yDJy2c3yN5Fjx knTBg9jMSkajn24OD4yDAOOrVsRJivs3PG2L7TjBu7o2brG0W1gb3hDqeEqsDisO yYhqog9bvX0dxSCiT7yY71ObIbdRAVndf3VP3Ug+Ng1MVRzikENBQ44G+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBiwInLHn+Uxd/n30bI6k25qbymMB8GA1UdIwQY MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4 LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5nC5q69 QIE2/5WV8gWy31PN0m2jLRk1wott3ftKiXDhcAxMcrE3mDTLPD8f89/CoT8T7R+r R74VlscqHBSOBz7QeqfOp7kkKJEsElajIesYj733uPAEBxa7aHAe+fHnv9ZLYzpN X735Lk8KhY05BqzCYa4sjjT3z7BWYkRrjZc4Gpf0qiLYhMMLF73UctpmJ+38CyaW 95XDvm4TaCXpgavxoHZkvkHpHWfXt4idkhd4K8BSOcHOKmp11C5zdSAXpe0PsANZ oaRwGRv4xvtX6lQdg3nQP3Pseoj7tE+sBT09/dFnjVzLUY8QYcsYqgEcGsj6qCpQ /madMD3KQbVKog== -----END CERTIFICATE-----Generated at Tue Feb 3 21:13:45 2026 by rpki-client