This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json) Hash identifier: BoPfyVe39cHvxZgbBzS5nUBO+SNVsHBIAwjxI0ROyic= Subject key identifier: 47:7C:29:C3:6A:FC:6E:E6:25:07:44:E4:71:58:27:52:94:B9:B0:D4 Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Certificate serial: 019BF8AD19C27FB1593E088D75FA93FD11B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft Manifest number: 0205 Signing time: Mon 26 Jan 2026 05:00:52 +0000 Manifest this update: Mon 26 Jan 2026 05:00:52 +0000 Manifest next update: Tue 27 Jan 2026 05:00:52 +0000 Files and hashes: 1: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: Aqo3K7Ag+uH/eQPzJNxuJBluLFwM6zHkQqnazvw2hzU=) 2: bv4XO5zS2npXPyVaEioUa-aIjJ0.roa (hash: icKCmIQnuw0+kzV+kMR4IQooHIsyV92myhle/JdjMl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:19:c2:7f:b1:59:3e:08:8d:75:fa:93:fd:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Validity Not Before: Jan 26 05:00:52 2026 GMT Not After : Jan 27 05:00:52 2026 GMT Subject: CN=477c29c36afc6ee6250744e47158275294b9b0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:f5:61:0b:28:db:0d:5b:9b:5a:38:46:9f: 17:9f:ee:a1:9c:44:f0:83:2c:da:5f:50:ec:91:7f: ec:32:8c:a4:cc:c6:ed:94:7c:a1:e9:91:2c:4e:41: 1d:66:d6:9e:dd:cc:1b:39:eb:5d:ef:f5:54:d3:9f: 4a:2d:20:82:de:b8:50:e3:e0:60:51:c3:d1:ee:1a: be:b0:e1:bd:b9:8b:8f:ec:76:1f:bb:f5:78:e0:ed: 41:22:ed:be:c7:9a:f5:4d:ee:c8:1a:31:5f:bc:98: 37:27:bd:8b:61:89:ec:d6:86:90:45:2d:f9:b5:3b: 10:3e:62:21:30:47:f1:b9:86:f3:06:8e:7c:29:35: dc:43:dc:03:a8:4b:27:b5:ac:f4:10:05:8e:76:0a: 93:db:67:22:6a:e1:56:7b:fc:e8:12:3a:73:aa:f1: 5e:09:1e:fb:48:c9:98:a9:0b:91:65:8f:f4:32:05: 14:f1:81:28:72:2e:8f:33:e8:93:58:db:a3:e5:76: 90:36:0f:d7:ef:72:86:7c:e6:40:1b:d9:81:02:80: 2c:d2:02:ab:3c:55:67:7b:9d:ba:77:f6:82:21:2b: 2b:84:a3:25:76:a4:82:16:e2:a0:8d:ff:b8:df:21: 56:ca:44:34:b5:d4:be:c4:5f:c3:2f:b0:82:0f:9e: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:29:C3:6A:FC:6E:E6:25:07:44:E4:71:58:27:52:94:B9:B0:D4 X509v3 Authority Key Identifier: keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6e:26:e2:4c:07:09:5d:66:fe:f3:80:e2:54:07:5f:4e:8e: e1:41:5f:39:91:0c:c1:7d:e9:f5:81:8b:5b:bd:7a:77:cb:d0: b6:99:a7:fb:b5:09:de:f1:60:33:bb:9e:32:26:ea:34:68:62: 3b:d5:37:63:e3:ac:65:f2:fb:a8:97:b5:fe:21:24:6a:4d:b0: b2:8c:6b:14:38:53:7b:3e:e2:49:35:88:4d:69:61:65:3b:e5: 25:9d:03:7b:0c:d9:1d:b8:05:c0:c4:9b:4d:ee:78:1b:1f:01: 52:34:22:83:44:b1:c1:fe:2d:c1:2c:8e:92:74:7a:d8:df:ab: 79:13:83:90:f5:05:c9:dd:5c:23:51:c8:c7:76:dc:46:de:3a: 64:d6:c3:f9:11:76:47:6f:5d:dc:7d:e9:62:63:cd:2b:1c:84: 56:bf:39:56:c3:09:fa:8f:f9:52:c0:c9:e3:f0:7b:23:92:a6: 50:33:3c:b3:da:3a:53:d4:0d:a6:84:c0:89:8b:fc:3e:19:b6: 84:42:f0:87:98:e4:bd:20:10:62:d1:5a:6e:d6:84:f8:8b:32: 22:49:f5:b3:e1:7e:88:e5:e9:f2:fc:81:64:67:90:80:2e:f7: f2:92:f2:34:da:12:23:13:14:c0:2d:dd:f7:79:cc:7c:74:79: dd:a3:aa:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rRnCf7FZPgiNdfqT/RGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzMWM2ZWZkYjlhNDQ1YjhmMTcyZjBiZTBkZmQ1MTQy YmUwMDAwHhcNMjYwMTI2MDUwMDUyWhcNMjYwMTI3MDUwMDUyWjAzMTEwLwYDVQQD Eyg0NzdjMjljMzZhZmM2ZWU2MjUwNzQ0ZTQ3MTU4Mjc1Mjk0YjliMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ31YQso2w1bm1o4Rp8Xn+6hnETw gyzaX1DskX/sMoykzMbtlHyh6ZEsTkEdZtae3cwbOetd7/VU059KLSCC3rhQ4+Bg UcPR7hq+sOG9uYuP7HYfu/V44O1BIu2+x5r1Te7IGjFfvJg3J72LYYns1oaQRS35 tTsQPmIhMEfxuYbzBo58KTXcQ9wDqEsntaz0EAWOdgqT22ciauFWe/zoEjpzqvFe CR77SMmYqQuRZY/0MgUU8YEoci6PM+iTWNuj5XaQNg/X73KGfOZAG9mBAoAs0gKr PFVne526d/aCISsrhKMldqSCFuKgjf+43yFWykQ0tdS+xF/DL7CCD57sxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd8KcNq/G7mJQdE5HFYJ1KUubDUMB8GA1UdIwQY MBaAFE4PMcbv25pEW48XLwvg39UUK+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUt YmFkMmNiNDgwOTEyLzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUtYmFkMmNiNDgwOTEy LzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm4m4kwH CV1m/vOA4lQHX06O4UFfOZEMwX3p9YGLW716d8vQtpmn+7UJ3vFgM7ueMibqNGhi O9U3Y+OsZfL7qJe1/iEkak2wsoxrFDhTez7iSTWITWlhZTvlJZ0DewzZHbgFwMSb Te54Gx8BUjQig0Sxwf4twSyOknR62N+reRODkPUFyd1cI1HIx3bcRt46ZNbD+RF2 R29d3H3pYmPNKxyEVr85VsMJ+o/5UsDJ4/B7I5KmUDM8s9o6U9QNpoTAiYv8Phm2 hELwh5jkvSAQYtFabtaE+IsyIkn1s+F+iOXp8vyBZGeQgC738pLyNNoSIxMUwC3d 93nMfHR53aOqVw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:57 2026 by rpki-client