This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json) Hash identifier: hSbCNRI4kt4qmO25eGsJ/j/HKdUvVV6HiRQvNgEHsyk= Subject key identifier: D5:6A:8C:FC:59:19:D0:09:3E:36:F3:54:68:6A:69:B5:21:7E:E1:E0 Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Certificate serial: 019BFD2EA218D761BD40E0467AB07071018C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft Manifest number: 0312 Signing time: Tue 27 Jan 2026 02:00:50 +0000 Manifest this update: Tue 27 Jan 2026 02:00:50 +0000 Manifest next update: Wed 28 Jan 2026 02:00:50 +0000 Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=) 2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=) 3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: GVDkx67GSAEZshXKW08o55SvQRSDJBwvfwnzdu8YSYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:a2:18:d7:61:bd:40:e0:46:7a:b0:70:71:01:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Validity Not Before: Jan 27 02:00:50 2026 GMT Not After : Jan 28 02:00:50 2026 GMT Subject: CN=d56a8cfc5919d0093e36f354686a69b5217ee1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:ae:77:b7:ec:55:31:47:b8:77:21:54:c0: 27:8e:72:90:e6:fe:9a:f3:ed:95:8e:8e:9f:2a:d4: 14:e2:59:4f:39:6c:3a:a1:e7:da:34:3c:07:c1:ca: 88:f9:8e:14:6d:08:32:31:5c:da:12:3e:09:23:6b: 91:35:52:65:03:c0:a4:76:16:53:d6:09:fc:54:71: 7a:56:c3:14:62:22:73:bd:bf:9a:05:6a:32:1e:7e: 10:ab:e4:a9:8b:ed:d1:44:d6:7d:46:5b:8d:a8:b5: 29:b6:60:59:c5:3c:c9:49:81:e0:71:a3:ad:c9:31: a7:02:a3:c4:a3:c4:6e:43:5e:c4:ff:7b:7f:9b:46: 49:3b:6e:33:ad:cb:4f:12:dc:35:d2:d7:3a:11:b1: af:92:d5:8d:b3:f0:b3:9e:b7:40:75:6e:e0:4e:cc: 75:1e:96:d0:c0:57:14:0f:d7:f4:f5:0a:30:85:bc: 16:8a:a1:4e:94:b3:5e:78:00:87:b8:d6:20:70:4c: 7d:61:d2:26:76:b8:d0:de:40:90:74:f3:c5:bf:c4: 18:45:f8:d1:25:0a:61:8a:ed:42:86:cb:66:87:a3: 21:67:87:f7:55:bc:72:a1:65:4a:a0:dc:82:09:e8: f9:0a:de:e1:b1:26:32:41:1e:ca:4b:38:d7:b7:7c: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6A:8C:FC:59:19:D0:09:3E:36:F3:54:68:6A:69:B5:21:7E:E1:E0 X509v3 Authority Key Identifier: keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d5:e5:a1:0c:0c:7c:e9:b1:f6:bc:71:cd:30:e6:58:1b:16: f1:d0:24:5e:78:02:78:1c:34:3c:89:3c:1d:d3:49:a7:22:86: 38:1f:7b:48:7f:4d:ea:46:be:7d:c6:4c:88:91:8d:14:96:d2: f2:8d:ac:29:66:c8:b8:c5:76:90:b8:1b:3d:96:72:f2:09:0c: 01:c8:3b:87:48:3c:ee:21:0c:5e:17:57:50:ed:84:10:ad:77: 4d:92:d5:39:4b:21:7b:47:a1:ce:06:f0:b6:0a:b6:72:1b:33: bd:94:5a:9e:f2:da:0a:82:ad:2f:3f:3f:0c:2a:77:c2:1f:72: 5b:f9:99:3d:1e:fe:00:40:08:8e:42:62:2c:25:2f:c8:96:a4: 6c:52:0a:20:7d:f6:59:b3:ad:0f:ad:78:3c:29:37:b5:57:33: ea:e4:f4:0d:42:af:ee:01:d4:04:b3:35:90:ac:d8:96:0b:86: b9:4e:85:e0:37:e5:06:40:59:69:21:61:61:b2:86:ed:96:27: 24:b7:99:e0:41:7b:39:c9:eb:7e:56:01:d0:d2:be:ff:ea:e6: 85:2f:21:99:7d:29:e7:13:f7:ba:8b:94:31:79:04:cc:b1:f5: 4a:24:d4:2a:0a:d8:e1:92:f1:49:06:d2:73:83:1e:fc:f8:c0: d1:df:2d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LqIY12G9QOBGerBwcQGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy MTFjMGYwHhcNMjYwMTI3MDIwMDUwWhcNMjYwMTI4MDIwMDUwWjAzMTEwLwYDVQQD EyhkNTZhOGNmYzU5MTlkMDA5M2UzNmYzNTQ2ODZhNjliNTIxN2VlMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YKud7fsVTFHuHchVMAnjnKQ5v6a 8+2Vjo6fKtQU4llPOWw6oefaNDwHwcqI+Y4UbQgyMVzaEj4JI2uRNVJlA8CkdhZT 1gn8VHF6VsMUYiJzvb+aBWoyHn4Qq+Spi+3RRNZ9RluNqLUptmBZxTzJSYHgcaOt yTGnAqPEo8RuQ17E/3t/m0ZJO24zrctPEtw10tc6EbGvktWNs/CznrdAdW7gTsx1 HpbQwFcUD9f09QowhbwWiqFOlLNeeACHuNYgcEx9YdImdrjQ3kCQdPPFv8QYRfjR JQphiu1Chstmh6MhZ4f3VbxyoWVKoNyCCej5Ct7hsSYyQR7KSzjXt3wBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVqjPxZGdAJPjbzVGhqabUhfuHgMB8GA1UdIwQY MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0 LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdXloQwM fOmx9rxxzTDmWBsW8dAkXngCeBw0PIk8HdNJpyKGOB97SH9N6ka+fcZMiJGNFJbS 8o2sKWbIuMV2kLgbPZZy8gkMAcg7h0g87iEMXhdXUO2EEK13TZLVOUshe0ehzgbw tgq2chszvZRanvLaCoKtLz8/DCp3wh9yW/mZPR7+AEAIjkJiLCUvyJakbFIKIH32 WbOtD614PCk3tVcz6uT0DUKv7gHUBLM1kKzYlguGuU6F4DflBkBZaSFhYbKG7ZYn JLeZ4EF7OcnrflYB0NK+/+rmhS8hmX0p5xP3uouUMXkEzLH1SiTUKgrY4ZLxSQbS c4Me/PjA0d8tcg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:36 2026 by rpki-client