This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: rrOaPPg2t7gRp42Ohpd14Uz4/7tR+vnOgxeySijVTSo= Subject key identifier: C6:17:1F:4D:44:EE:B8:DC:2F:E3:05:E4:3C:9E:D2:86:56:A5:1A:4D Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019BF80850E123502892D809868832192C67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 0A5A Signing time: Mon 26 Jan 2026 02:00:53 +0000 Manifest this update: Mon 26 Jan 2026 02:00:53 +0000 Manifest next update: Tue 27 Jan 2026 02:00:53 +0000 Files and hashes: 1: 1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa (hash: bNfrVNzH2BXnE1dQKvpq85yCYPmZuhWsqc5IpPdYyzo=) 2: ANEuhIxGTh0gN0pm_5zFNRdf5ug.roa (hash: xOWr9sWoEVbPWgFS3DOCmN6xP+8pmNOay/7+vGgp/Os=) 3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=) 4: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: gjx2Otkx74/0gV73ERxySZz3kRRLcotGRR0/OwL9ong=) 5: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=) 6: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=) 7: iZcZ_-KRFzETMXfXgFqcCVyHHWw.roa (hash: rbsN5PPkcbMSn4E12T9YbjsvzB+VtJOV1oya4fK1cDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:50:e1:23:50:28:92:d8:09:86:88:32:19:2c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jan 26 02:00:53 2026 GMT Not After : Jan 27 02:00:53 2026 GMT Subject: CN=c6171f4d44eeb8dc2fe305e43c9ed28656a51a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:50:42:49:c6:60:00:8b:06:8e:d5:ef:ca: cc:72:1a:3a:46:60:c5:94:00:7c:ae:1c:3f:bd:4b: a7:f2:bc:44:af:83:db:af:75:eb:eb:1b:d8:81:94: 17:76:a9:d7:45:1a:c4:12:0e:35:e7:6e:a5:f3:31: ce:3e:7e:b5:ca:8e:cd:e6:6a:72:3e:7b:83:66:b1: 15:f8:48:66:47:46:1c:be:59:4d:c3:df:01:be:d3: f6:2f:b6:e9:60:b7:26:9e:a8:cd:6d:95:6d:0d:49: 03:bc:2d:c1:9d:f9:03:f4:cb:71:e8:d2:4d:f6:02: dc:66:59:89:02:81:ff:74:aa:57:52:65:f9:bd:70: cc:d5:56:e4:73:99:a1:ca:76:ea:4b:c0:31:43:93: f6:43:aa:35:6e:67:a1:93:ba:4a:76:9b:1f:fc:87: 67:c1:91:48:d7:fc:95:fc:40:96:09:71:e9:e6:2b: e3:2d:31:b9:f9:44:4e:9c:00:0e:e7:46:c2:3f:ed: 75:9a:1c:54:f7:2e:15:1e:30:3a:25:4d:29:0b:8b: 03:2f:32:ca:31:c1:ec:3e:bd:af:3e:fc:c6:6f:8b: b8:fa:3e:9f:5b:4d:5a:7f:d8:86:e9:ee:dd:0b:8c: 82:6c:f6:2d:1b:52:0f:67:7a:7c:5e:3a:ec:ab:e5: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:17:1F:4D:44:EE:B8:DC:2F:E3:05:E4:3C:9E:D2:86:56:A5:1A:4D X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b4:5e:f7:da:f0:56:61:d6:fc:8a:59:8b:28:ae:e8:71:6e: bd:d2:fd:5d:c7:47:56:14:ff:fd:91:c7:a0:98:ce:6f:fc:10: a2:d3:b7:99:ed:77:4d:d8:e1:0f:15:11:15:69:95:5a:be:42: 87:66:47:d2:0e:7d:22:09:ef:35:2e:67:28:34:05:eb:5f:ac: 4e:9d:4f:d6:28:9a:0a:3b:7f:c1:73:b0:f6:2e:1d:02:9f:98: 39:8a:9d:09:52:15:85:db:15:0e:5b:a2:b6:c1:ce:04:83:71: 4e:25:5c:73:8b:68:29:37:c8:15:77:2f:72:de:bb:45:11:2d: 9e:07:0b:76:e5:44:2b:e4:b2:45:9b:c8:35:d3:68:1d:3a:6b: ac:70:0a:c2:ef:64:96:24:a9:77:e3:ff:c6:80:0b:83:8b:4b: ce:08:65:0e:ac:12:a1:ce:42:eb:be:51:b2:cf:81:d9:f5:18: 7a:a1:8e:50:74:83:86:41:72:82:6c:15:7e:d0:15:d4:e7:7a: 18:5a:b2:9c:b0:d2:78:28:df:cd:3b:26:b9:1c:09:d2:c0:b8: f2:ce:38:f6:57:bf:41:4d:b8:6d:1b:e3:84:ec:9c:37:a9:41: 89:b0:c5:ab:b9:54:43:9d:78:d7:a8:b9:1c:02:77:c1:40:a2: 3c:f1:78:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CFDhI1AoktgJhogyGSxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwMTI2MDIwMDUzWhcNMjYwMTI3MDIwMDUzWjAzMTEwLwYDVQQD EyhjNjE3MWY0ZDQ0ZWViOGRjMmZlMzA1ZTQzYzllZDI4NjU2YTUxYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyghQQknGYACLBo7V78rMcho6RmDF lAB8rhw/vUun8rxEr4Pbr3Xr6xvYgZQXdqnXRRrEEg41526l8zHOPn61yo7N5mpy PnuDZrEV+EhmR0YcvllNw98BvtP2L7bpYLcmnqjNbZVtDUkDvC3BnfkD9Mtx6NJN 9gLcZlmJAoH/dKpXUmX5vXDM1Vbkc5mhynbqS8AxQ5P2Q6o1bmehk7pKdpsf/Idn wZFI1/yV/ECWCXHp5ivjLTG5+UROnAAO50bCP+11mhxU9y4VHjA6JU0pC4sDLzLK McHsPr2vPvzGb4u4+j6fW01af9iG6e7dC4yCbPYtG1IPZ3p8Xjrsq+WFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYXH01E7rjcL+MF5Dye0oZWpRpNMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7Re99rw VmHW/IpZiyiu6HFuvdL9XcdHVhT//ZHHoJjOb/wQotO3me13TdjhDxURFWmVWr5C h2ZH0g59IgnvNS5nKDQF61+sTp1P1iiaCjt/wXOw9i4dAp+YOYqdCVIVhdsVDlui tsHOBINxTiVcc4toKTfIFXcvct67RREtngcLduVEK+SyRZvINdNoHTprrHAKwu9k liSpd+P/xoALg4tLzghlDqwSoc5C675Rss+B2fUYeqGOUHSDhkFygmwVftAV1Od6 GFqynLDSeCjfzTsmuRwJ0sC48s449le/QU24bRvjhOycN6lBibDFq7lUQ51416i5 HAJ3wUCiPPF4GQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:14 2026 by rpki-client