This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json) Hash identifier: oiz5iHUYnbUwKWJpArIsDTGxX0li/NAUKBou5gYgCPw= Subject key identifier: B3:1B:C3:7C:05:4D:D7:65:9E:E6:3A:BF:AB:76:90:A8:75:A7:5F:12 Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Certificate serial: 019BFA64FBBC10D1CF021BD4D59FED65DDC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 13:01:20 +0000 Manifest this update: Mon 26 Jan 2026 13:01:20 +0000 Manifest next update: Tue 27 Jan 2026 13:01:20 +0000 Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: N3wEAwEU4AAZ0ptlVJQL7ppPxdU4/FNGjk01tzw1J04=) 2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:fb:bc:10:d1:cf:02:1b:d4:d5:9f:ed:65:dd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8 Validity Not Before: Jan 26 13:01:20 2026 GMT Not After : Jan 27 13:01:20 2026 GMT Subject: CN=b31bc37c054dd7659ee63abfab7690a875a75f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3d:a8:41:c2:b4:31:2e:d2:93:8c:d4:a6:33: 91:74:04:01:79:55:8d:52:02:3d:0b:aa:d1:97:46: dd:53:80:f4:2a:7a:1a:87:b0:6e:e5:30:ad:16:08: 9d:de:5f:c4:1d:55:4d:a3:b5:d9:4e:db:3e:cc:99: 36:f6:6e:7b:f1:08:4d:d3:da:fd:37:17:ae:c6:ab: d5:8f:30:53:d4:75:3c:b0:81:82:c0:fa:f3:01:d1: a2:e3:34:fe:19:9e:79:c4:89:f8:ba:fa:5c:9b:b7: 06:69:01:8b:0d:69:60:20:99:a2:81:21:4f:16:d3: 93:44:d2:d0:7f:33:a9:37:cf:bd:f3:26:22:fc:9d: af:47:73:6f:33:d0:9d:00:f1:40:46:a7:dd:5e:76: d7:fa:da:f5:a3:6a:0a:75:2f:61:e7:56:ac:99:38: 0a:1d:60:55:33:55:2c:74:e8:29:77:da:b9:f8:41: 06:7f:b0:69:2d:0a:64:2c:80:0b:b6:3e:8b:f7:a8: e6:a1:66:dd:7b:cb:e0:72:38:12:cd:dd:4f:b2:b1: 0c:61:ee:e9:a9:2d:bc:c5:4d:ea:b7:37:06:d6:0f: b8:c0:8f:c4:1b:fa:36:fe:7c:6e:31:b1:1b:47:a0: 90:f1:06:05:22:e5:29:e3:c4:8b:cd:80:73:0a:f7: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1B:C3:7C:05:4D:D7:65:9E:E6:3A:BF:AB:76:90:A8:75:A7:5F:12 X509v3 Authority Key Identifier: keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2c:ac:a4:02:14:5c:95:72:58:ad:b7:1c:e4:b1:2c:31:2a: 96:13:c5:94:59:ec:6d:5c:75:fe:c9:1a:a4:2d:b5:f1:8d:83: 5a:86:ae:b7:d8:df:4c:eb:20:07:d0:9e:65:a0:8d:76:f7:c8: f1:c8:e0:2a:22:6b:da:8d:53:43:80:b7:a2:0b:78:23:59:9c: 7d:4a:aa:6b:22:22:8a:62:ac:c7:5d:68:43:81:f2:f0:08:55: 5e:01:c3:96:a3:de:29:de:58:c4:77:e5:dd:d8:52:f1:be:55: 3a:54:c2:62:c3:d0:b1:49:1f:28:3c:d9:03:0c:8b:3c:7a:88: 52:a4:ca:84:4f:ba:2a:68:0b:c4:72:1c:9c:8c:c0:b1:74:89: b4:01:17:87:e7:78:7a:1d:6f:0c:ce:65:86:44:04:a9:42:d8: ae:88:b9:cc:a4:fd:3b:cc:ac:7e:cc:8e:34:35:b4:16:36:5d: aa:2d:42:d1:9b:eb:9d:4d:e7:ff:3d:90:37:5e:99:c5:f5:d5: cf:fb:dc:ba:83:50:32:40:aa:a0:0f:f0:a6:fa:a4:f9:a7:4b: 4a:e7:7a:b2:53:ac:22:96:2e:b9:ac:a7:57:f4:19:a0:c5:4b: 54:3c:0f:c7:45:41:03:be:45:96:51:ef:36:66:bb:18:71:c1: d8:f7:d3:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZPu8ENHPAhvU1Z/tZd3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmE5NDQ0YWRhYTUyM2M1NzY4ZTlmNmJlMTQwNjUxODNh YzIwYTgwHhcNMjYwMTI2MTMwMTIwWhcNMjYwMTI3MTMwMTIwWjAzMTEwLwYDVQQD EyhiMzFiYzM3YzA1NGRkNzY1OWVlNjNhYmZhYjc2OTBhODc1YTc1ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j2oQcK0MS7Sk4zUpjORdAQBeVWN UgI9C6rRl0bdU4D0Knoah7Bu5TCtFgid3l/EHVVNo7XZTts+zJk29m578QhN09r9 NxeuxqvVjzBT1HU8sIGCwPrzAdGi4zT+GZ55xIn4uvpcm7cGaQGLDWlgIJmigSFP FtOTRNLQfzOpN8+98yYi/J2vR3NvM9CdAPFARqfdXnbX+tr1o2oKdS9h51asmTgK HWBVM1UsdOgpd9q5+EEGf7BpLQpkLIALtj6L96jmoWbde8vgcjgSzd1PsrEMYe7p qS28xU3qtzcG1g+4wI/EG/o2/nxuMbEbR6CQ8QYFIuUp48SLzYBzCvflWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMbw3wFTddlnuY6v6t2kKh1p18SMB8GA1UdIwQY MBaAFE9qlEStqlI8V2jp9r4UBlGDrCCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODct MGE5MWNhZGJlZTY2LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85YzRmYjAtYzQ3NS00MjA0LTk5ODctMGE5MWNhZGJlZTY2 LzEvVDJxVVJLMnFVanhYYU9uMnZoUUdVWU9zSUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyyspAIU XJVyWK23HOSxLDEqlhPFlFnsbVx1/skapC218Y2DWoaut9jfTOsgB9CeZaCNdvfI 8cjgKiJr2o1TQ4C3ogt4I1mcfUqqayIiimKsx11oQ4Hy8AhVXgHDlqPeKd5YxHfl 3dhS8b5VOlTCYsPQsUkfKDzZAwyLPHqIUqTKhE+6KmgLxHIcnIzAsXSJtAEXh+d4 eh1vDM5lhkQEqULYroi5zKT9O8ysfsyONDW0FjZdqi1C0ZvrnU3n/z2QN16ZxfXV z/vcuoNQMkCqoA/wpvqk+adLSud6slOsIpYuuaynV/QZoMVLVDwPx0VBA75FllHv Nma7GHHB2PfTqw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:54 2026 by rpki-client