This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json) Hash identifier: mKqeT9Qs+8jhzCuNqTB2XmSg8g1vRohb5BMqWusEFeQ= Subject key identifier: CE:77:CC:9F:F9:28:41:DD:EA:06:95:57:3C:F5:0F:B3:5E:35:4B:ED Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Certificate serial: 019BFC5335CD674C79851CE1C9915A09CE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 22:01:10 +0000 Manifest this update: Mon 26 Jan 2026 22:01:10 +0000 Manifest next update: Tue 27 Jan 2026 22:01:10 +0000 Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=) 2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=) 3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: 6WJIdVqdw7i0viuwDINcoubbsMHSyBke/ILdo7JTNB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:35:cd:67:4c:79:85:1c:e1:c9:91:5a:09:ce:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Validity Not Before: Jan 26 22:01:10 2026 GMT Not After : Jan 27 22:01:10 2026 GMT Subject: CN=ce77cc9ff92841ddea0695573cf50fb35e354bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:53:6b:38:5a:de:c9:9e:81:26:b9:68:f6: fa:2b:3c:5c:88:c8:e6:fd:19:2e:76:c3:dc:a5:3a: 23:68:7f:c6:4a:27:04:9b:60:8e:b9:9b:fc:48:ac: 89:10:f9:1e:64:50:fe:01:49:97:aa:f6:16:c9:a1: 06:a8:c8:0c:27:6e:87:65:0b:76:f7:26:53:34:72: 73:4c:f9:d2:92:55:bc:28:a9:b9:ba:d4:09:03:16: 57:63:60:67:c0:fb:e2:16:dd:ff:98:f5:be:32:72: 76:83:49:12:46:b8:76:9c:af:c7:77:76:85:c7:b1: 07:a2:83:60:e6:f1:db:5e:92:4a:25:73:97:bb:b5: 7e:3c:ac:ea:7f:44:79:96:c6:19:66:df:7a:26:66: 99:2b:af:33:3f:f1:eb:59:06:f0:8d:72:75:81:5c: 70:f0:f9:ec:1a:05:81:95:f6:dc:76:e4:8b:ca:0a: 7d:60:81:56:e6:8d:18:56:32:c0:6f:03:2e:0f:d2: 7a:4f:7f:8e:0c:1f:a5:81:ff:21:fa:ff:5f:41:e3: 75:28:61:1f:c7:6c:05:02:3f:b6:b4:2b:0b:27:19: c8:f6:87:0b:a8:a8:8d:f4:0c:c1:27:f8:bd:ca:bc: ed:d9:a5:6f:6e:88:e3:14:0b:ed:5c:83:4b:ef:ba: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:77:CC:9F:F9:28:41:DD:EA:06:95:57:3C:F5:0F:B3:5E:35:4B:ED X509v3 Authority Key Identifier: keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b8:24:a9:c4:3f:c9:94:09:23:0d:26:46:73:95:04:35:19: 6d:c3:eb:8e:4e:10:b5:fa:6b:80:00:38:67:8d:f2:f2:6f:e0: 72:a7:cc:13:b8:7f:f0:66:f9:ce:60:b7:6e:28:8d:73:39:ee: e2:e6:ab:ba:40:d7:9d:b1:45:28:69:22:3e:ca:53:90:6d:43: 3f:66:c8:e3:e5:1d:a6:ad:49:2e:85:83:96:2a:30:45:8b:21: f0:58:00:23:01:73:0e:38:af:cb:85:15:22:06:3a:e7:51:3f: d5:1d:33:31:36:14:00:cb:20:0b:57:1d:77:d4:45:0a:f1:0e: f8:f6:87:14:fe:99:0b:ca:ba:bb:82:43:8b:3e:15:cd:2a:24: e5:1e:c1:07:93:73:fe:4e:4a:07:ef:76:a5:f8:f8:11:37:29: 89:a9:2e:53:20:db:60:6a:56:e8:75:e8:27:fa:fb:28:6e:95: 03:a5:2a:b6:8a:0f:17:5b:05:e1:26:32:67:d4:dc:23:fb:19: 31:40:1c:2f:8a:6d:b9:6d:2e:cc:ea:ac:e2:e1:8b:f0:1c:20: 7f:19:67:47:87:96:70:46:d3:e0:19:8d:0f:70:3d:9c:a6:3c: cd:e2:35:04:85:b8:ff:e6:43:91:ef:02:ad:24:06:ca:0e:c4: f1:d3:ee:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UzXNZ0x5hRzhyZFaCc4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZmFlYzRiOGQ5OTJkZDZiOWNkODlhODQ4OWQzYzNhNjUy YWVjZDIwHhcNMjYwMTI2MjIwMTEwWhcNMjYwMTI3MjIwMTEwWjAzMTEwLwYDVQQD EyhjZTc3Y2M5ZmY5Mjg0MWRkZWEwNjk1NTczY2Y1MGZiMzVlMzU0YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBpTazha3smegSa5aPb6KzxciMjm /RkudsPcpTojaH/GSicEm2COuZv8SKyJEPkeZFD+AUmXqvYWyaEGqMgMJ26HZQt2 9yZTNHJzTPnSklW8KKm5utQJAxZXY2BnwPviFt3/mPW+MnJ2g0kSRrh2nK/Hd3aF x7EHooNg5vHbXpJKJXOXu7V+PKzqf0R5lsYZZt96JmaZK68zP/HrWQbwjXJ1gVxw 8PnsGgWBlfbcduSLygp9YIFW5o0YVjLAbwMuD9J6T3+ODB+lgf8h+v9fQeN1KGEf x2wFAj+2tCsLJxnI9ocLqKiN9AzBJ/i9yrzt2aVvbojjFAvtXINL77pwoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM53zJ/5KEHd6gaVVzz1D7NeNUvtMB8GA1UdIwQY MBaAFLX67EuNmS3Wuc2JqEidPDplKuzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjkt NDI0M2RlY2FkMzYwLzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjktNDI0M2RlY2FkMzYw LzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrgkqcQ/ yZQJIw0mRnOVBDUZbcPrjk4QtfprgAA4Z43y8m/gcqfME7h/8Gb5zmC3biiNcznu 4uarukDXnbFFKGkiPspTkG1DP2bI4+Udpq1JLoWDliowRYsh8FgAIwFzDjivy4UV IgY651E/1R0zMTYUAMsgC1cdd9RFCvEO+PaHFP6ZC8q6u4JDiz4VzSok5R7BB5Nz /k5KB+92pfj4ETcpiakuUyDbYGpW6HXoJ/r7KG6VA6UqtooPF1sF4SYyZ9TcI/sZ MUAcL4ptuW0uzOqs4uGL8BwgfxlnR4eWcEbT4BmND3A9nKY8zeI1BIW4/+ZDke8C rSQGyg7E8dPuVg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:46:06 2026 by rpki-client