This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json) Hash identifier: oVMNQILNRsfnQRVNh7RSfLlvcZRjvq5D7oMiFhtO2mo= Subject key identifier: E4:91:36:5D:DB:BC:9B:6B:F4:A5:2F:60:DA:25:7B:59:A5:E9:05:8E Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Certificate serial: 019BFB09B382384ADE0B37A9F28A90659A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 16:01:15 +0000 Manifest this update: Mon 26 Jan 2026 16:01:15 +0000 Manifest next update: Tue 27 Jan 2026 16:01:15 +0000 Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: h5vQTcgDpQ1FijS/UQxEp4i1HwtEPkiA0VJxy4qZdUM=) 2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:b3:82:38:4a:de:0b:37:a9:f2:8a:90:65:9a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Validity Not Before: Jan 26 16:01:15 2026 GMT Not After : Jan 27 16:01:15 2026 GMT Subject: CN=e491365ddbbc9b6bf4a52f60da257b59a5e9058e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:70:6b:96:5c:16:b1:30:d9:ae:58:96:c4: 81:f1:01:a8:a8:0e:54:69:00:ee:44:d1:d7:38:81: cd:68:fe:93:f5:55:e8:2d:d3:45:77:1a:80:0c:ef: 5b:43:14:c0:a5:55:54:d1:7f:85:bb:f5:9b:b2:f4: 5d:92:1a:77:2e:19:42:8e:46:47:c4:43:c5:0a:02: 83:7c:a6:aa:ac:0e:87:f9:9a:ec:c5:53:d6:77:c0: 8f:70:8c:da:ff:a0:db:9e:1a:22:57:3d:58:b9:0b: 27:e6:8c:d2:44:55:eb:6d:7c:6c:a6:58:8e:51:27: a0:a5:42:88:13:71:d6:f7:47:45:8d:24:47:0e:7d: d7:cd:25:5e:99:c2:67:78:ef:c1:79:e5:cf:a5:44: 6d:c6:b9:4e:ea:cd:d4:47:f0:04:04:92:4c:2c:c9: bc:18:02:c5:eb:e5:77:85:59:ce:3d:84:ce:10:02: 2a:0a:ed:43:e2:cf:ab:63:d9:66:11:aa:82:1b:59: 5c:07:30:f9:ea:e7:76:56:ea:63:62:f3:f4:91:a0: f8:b7:b2:fb:5f:c4:0c:2b:39:cb:b5:d6:4d:00:d1: e8:ed:d0:74:50:c1:dc:c1:9a:8f:a0:1d:81:d0:80: c0:2a:a2:ca:69:b0:58:14:05:5e:8f:1a:11:94:a8: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:91:36:5D:DB:BC:9B:6B:F4:A5:2F:60:DA:25:7B:59:A5:E9:05:8E X509v3 Authority Key Identifier: keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0a:59:38:3b:da:9f:94:b7:cd:45:13:60:f0:d9:cb:ef:c4: 1a:8c:35:df:ab:a3:10:6f:42:07:38:c5:65:c1:bd:3e:ad:c5: 13:75:0c:99:b3:d6:86:fe:ee:a5:91:4c:11:a7:76:16:2b:d4: cf:fc:9a:ef:09:9f:d7:ef:2c:4e:7e:96:38:b4:94:5f:d5:7a: be:a7:43:c5:08:e4:a8:61:7d:65:7d:c9:b1:3c:44:56:3b:46: d6:f6:93:0e:62:d9:65:53:2c:43:29:0f:77:cc:79:2a:0d:60: 30:97:46:c0:4a:0c:f1:96:c2:39:0c:69:f8:14:01:61:ba:79: 4b:ba:cb:27:3c:b2:f3:a5:e2:23:94:a6:0c:b1:26:6a:07:ea: e7:09:66:cb:80:d9:ea:9e:aa:15:79:6b:0a:de:ed:ee:36:1b: 46:33:8c:68:51:73:ce:3a:24:17:da:67:9e:d4:73:4a:ec:c3: 4f:c9:dd:ed:10:39:8a:11:a3:51:75:8d:30:ab:8e:16:2f:e5: cb:52:db:79:89:50:1e:3b:34:c6:34:32:fc:b7:f7:5d:58:d2: bd:0d:78:0b:6d:20:12:99:e2:89:45:f0:1f:6f:c6:5a:74:49: b0:df:d9:ce:61:de:39:1b:93:6e:f3:09:e1:c6:d4:36:6b:34: df:3d:65:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CbOCOEreCzep8oqQZZqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh YzVjZDUwHhcNMjYwMTI2MTYwMTE1WhcNMjYwMTI3MTYwMTE1WjAzMTEwLwYDVQQD EyhlNDkxMzY1ZGRiYmM5YjZiZjRhNTJmNjBkYTI1N2I1OWE1ZTkwNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArehwa5ZcFrEw2a5YlsSB8QGoqA5U aQDuRNHXOIHNaP6T9VXoLdNFdxqADO9bQxTApVVU0X+Fu/WbsvRdkhp3LhlCjkZH xEPFCgKDfKaqrA6H+ZrsxVPWd8CPcIza/6DbnhoiVz1YuQsn5ozSRFXrbXxspliO USegpUKIE3HW90dFjSRHDn3XzSVemcJneO/BeeXPpURtxrlO6s3UR/AEBJJMLMm8 GALF6+V3hVnOPYTOEAIqCu1D4s+rY9lmEaqCG1lcBzD56ud2VupjYvP0kaD4t7L7 X8QMKznLtdZNANHo7dB0UMHcwZqPoB2B0IDAKqLKabBYFAVejxoRlKgIdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSRNl3bvJtr9KUvYNole1ml6QWOMB8GA1UdIwQY MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewpZODva n5S3zUUTYPDZy+/EGow136ujEG9CBzjFZcG9Pq3FE3UMmbPWhv7upZFMEad2FivU z/ya7wmf1+8sTn6WOLSUX9V6vqdDxQjkqGF9ZX3JsTxEVjtG1vaTDmLZZVMsQykP d8x5Kg1gMJdGwEoM8ZbCOQxp+BQBYbp5S7rLJzyy86XiI5SmDLEmagfq5wlmy4DZ 6p6qFXlrCt7t7jYbRjOMaFFzzjokF9pnntRzSuzDT8nd7RA5ihGjUXWNMKuOFi/l y1LbeYlQHjs0xjQy/Lf3XVjSvQ14C20gEpniiUXwH2/GWnRJsN/ZzmHeORuTbvMJ 4cbUNms03z1loA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:42 2026 by rpki-client