This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json) Hash identifier: EVf30L27Z09C97dEDal+62/kqOoWQtmD9yFgEaX6sa4= Subject key identifier: 19:DE:DD:C5:94:B5:E8:87:47:11:5D:91:E7:0B:37:F9:37:EB:E4:92 Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Certificate serial: 019BE1136D48B48B0B0BF0D936BE2FE3416A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft Manifest number: 17E0 Signing time: Wed 21 Jan 2026 15:01:45 +0000 Manifest this update: Wed 21 Jan 2026 15:01:45 +0000 Manifest next update: Thu 22 Jan 2026 15:01:45 +0000 Files and hashes: 1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=) 2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: pfOrVxAQpQylbEiLgU1QQwoLZqiH1+Rl3eHBTOAxVwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:13:6d:48:b4:8b:0b:0b:f0:d9:36:be:2f:e3:41:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Validity Not Before: Jan 21 15:01:45 2026 GMT Not After : Jan 22 15:01:45 2026 GMT Subject: CN=19deddc594b5e88747115d91e70b37f937ebe492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:2a:f6:f1:10:da:1b:68:bf:00:da:46:0d: fc:eb:41:76:c2:51:b9:13:4b:09:8a:94:86:66:3e: 2d:26:c4:ca:5a:62:3a:9f:96:89:42:05:53:6b:34: 9d:67:76:92:eb:2e:58:3f:db:53:da:eb:e6:48:20: d0:1a:5f:35:82:e9:22:b3:cc:91:77:97:2d:ef:34: 1a:bc:0b:47:77:26:9d:43:33:71:2c:87:4f:b8:a3: e6:87:03:17:c9:e1:9a:63:f6:07:a1:5b:13:e9:4a: 24:68:25:dd:31:9c:25:0e:18:1c:98:35:36:e5:2b: 70:4d:e1:5c:22:09:7c:e3:76:28:12:b6:d1:ab:93: ae:4f:bf:2a:b9:e1:6a:f0:f6:5c:e8:a2:75:5b:46: ad:ca:d3:53:65:2f:20:b5:d6:6d:dd:3b:64:ad:e0: 4f:5f:a5:23:ce:8d:a8:3a:69:1a:3b:92:31:2b:b5: cb:0e:fb:94:5f:4d:38:86:da:69:4a:df:24:22:cb: 66:fa:fd:7a:62:39:b3:5d:54:46:22:3a:fc:41:a4: ed:23:32:67:8c:32:dd:55:be:17:74:81:e9:41:bd: ca:65:11:93:e1:8c:34:e4:ed:3a:c3:b7:5b:b9:c1: 38:c0:2d:99:76:01:7d:30:54:57:ff:24:53:f2:87: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DE:DD:C5:94:B5:E8:87:47:11:5D:91:E7:0B:37:F9:37:EB:E4:92 X509v3 Authority Key Identifier: keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0d:45:b4:61:d0:05:ea:52:15:6e:f7:8a:46:d6:38:cb:94: 7d:29:b7:80:6e:5d:10:ae:fc:fa:1a:d3:81:53:df:a4:28:c2: 15:0a:67:01:fc:5b:3e:33:3b:75:fb:2a:0a:4d:c9:04:12:58: f6:d3:9b:6e:5e:b1:5b:1b:07:ad:91:50:2c:29:74:6b:d7:65: ca:a8:c2:7c:24:de:f1:e6:4b:fc:73:76:8b:06:56:96:aa:fc: 3b:ea:e5:c5:42:bf:0d:d7:32:45:1d:d0:df:7e:f0:55:7d:4a: ee:90:cc:68:da:89:da:75:ac:22:01:16:cc:d0:98:ab:51:83: 05:be:f7:5d:c0:b8:ac:b1:49:5d:cb:b9:fe:fb:94:5c:51:42: 4d:3f:b1:f5:56:5b:92:cf:be:e2:31:e3:5c:95:44:30:a8:21: f0:38:30:4e:81:20:34:36:42:93:7f:eb:dd:aa:fb:15:ce:17: 67:76:7e:f7:ba:94:62:c5:b7:a6:6a:f7:a0:d3:9f:1e:1d:e2: 16:79:68:4d:b4:01:71:0e:94:b6:c7:c0:02:b0:a9:c1:70:48: d6:5a:09:5f:70:80:97:02:e1:43:ec:26:f1:8f:54:5b:33:8e: 2f:27:4c:80:88:a8:1c:ee:40:af:03:55:0e:af:d7:c2:f9:f7: fc:c1:bf:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvhE21ItIsLC/DZNr4v40FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk ODcyYzUwHhcNMjYwMTIxMTUwMTQ1WhcNMjYwMTIyMTUwMTQ1WjAzMTEwLwYDVQQD EygxOWRlZGRjNTk0YjVlODg3NDcxMTVkOTFlNzBiMzdmOTM3ZWJlNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWEq9vEQ2htovwDaRg3860F2wlG5 E0sJipSGZj4tJsTKWmI6n5aJQgVTazSdZ3aS6y5YP9tT2uvmSCDQGl81gukis8yR d5ct7zQavAtHdyadQzNxLIdPuKPmhwMXyeGaY/YHoVsT6UokaCXdMZwlDhgcmDU2 5StwTeFcIgl843YoErbRq5OuT78queFq8PZc6KJ1W0atytNTZS8gtdZt3TtkreBP X6Ujzo2oOmkaO5IxK7XLDvuUX004htppSt8kIstm+v16YjmzXVRGIjr8QaTtIzJn jDLdVb4XdIHpQb3KZRGT4Yw05O06w7dbucE4wC2ZdgF9MFRX/yRT8oeRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBne3cWUteiHRxFdkecLN/k36+SSMB8GA1UdIwQY MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt Y2EzYjcyNzhkZGUyLzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg1FtGHQ BepSFW73ikbWOMuUfSm3gG5dEK78+hrTgVPfpCjCFQpnAfxbPjM7dfsqCk3JBBJY 9tObbl6xWxsHrZFQLCl0a9dlyqjCfCTe8eZL/HN2iwZWlqr8O+rlxUK/DdcyRR3Q 337wVX1K7pDMaNqJ2nWsIgEWzNCYq1GDBb73XcC4rLFJXcu5/vuUXFFCTT+x9VZb ks++4jHjXJVEMKgh8DgwToEgNDZCk3/r3ar7Fc4XZ3Z+97qUYsW3pmr3oNOfHh3i FnloTbQBcQ6UtsfAArCpwXBI1loJX3CAlwLhQ+wm8Y9UWzOOLydMgIioHO5ArwNV Dq/Xwvn3/MG/Fw== -----END CERTIFICATE-----Generated at Wed Jan 21 22:43:56 2026 by rpki-client