This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json) Hash identifier: qhcpTWBI3JQXuSqZZPLtSZXtJBNfGS2Yd2G/vb8osRM= Subject key identifier: 04:4E:79:30:D6:0D:F5:FB:DB:FC:70:A2:33:A4:C7:B4:26:E7:9F:DD Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019C047A4D5448BD74F9F6B303F85C28B1BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft Manifest number: 17F2 Signing time: Wed 28 Jan 2026 12:00:49 +0000 Manifest this update: Wed 28 Jan 2026 12:00:49 +0000 Manifest next update: Thu 29 Jan 2026 12:00:49 +0000 Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=) 2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: vrmsn6uNshV/C0/VpBNC0iqw/hAadS2j/EltQzMsrnU=) 3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:7a:4d:54:48:bd:74:f9:f6:b3:03:f8:5c:28:b1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Jan 28 12:00:49 2026 GMT Not After : Jan 29 12:00:49 2026 GMT Subject: CN=044e7930d60df5fbdbfc70a233a4c7b426e79fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:bb:85:de:7d:a6:38:16:05:50:3d:b7:15: a4:84:16:53:3e:9f:56:68:9e:a3:3d:07:ee:45:73: fe:54:4b:10:ca:6a:a3:92:91:f6:83:bc:e7:46:42: 90:32:4a:d9:f2:cf:2c:af:d2:86:87:6f:df:70:a3: 4f:17:ab:81:bb:4b:7a:6c:6a:b0:8e:f7:b7:ee:e9: 0f:73:15:82:fc:85:21:9d:ba:df:85:6d:b4:4e:2e: fd:72:81:14:88:0f:72:d9:ab:7f:8f:1b:1f:74:ab: a3:ef:ea:26:fb:23:a6:7e:b0:1b:e5:6e:cc:7a:93: fe:e8:e0:69:a9:9b:a1:f7:74:79:23:71:f6:bc:e1: ea:21:28:c3:0f:32:ce:6c:6d:e4:29:63:19:a3:e2: e8:fe:21:6b:52:7d:78:99:64:0c:ef:60:0b:2a:7c: be:7b:10:a8:62:ec:54:5c:e7:cd:b9:13:15:ba:0f: d3:d0:71:80:bd:a4:2c:4b:76:5d:81:cb:c7:d3:b3: d9:27:2e:46:92:80:1b:9b:11:9f:37:53:60:07:65: 08:28:76:a1:48:eb:3f:48:e5:6e:5c:74:f5:d4:24: 2b:b8:c2:81:da:42:9f:e3:0e:e0:79:06:81:fc:fa: 56:41:20:da:1a:bb:5b:02:bc:fe:9f:d9:2a:d2:61: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4E:79:30:D6:0D:F5:FB:DB:FC:70:A2:33:A4:C7:B4:26:E7:9F:DD X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f7:fd:16:25:c8:9f:aa:54:ea:e5:d4:00:ff:61:79:8d:73: 96:cf:cc:9b:8c:87:27:57:d5:15:7e:65:8f:4d:48:a4:b7:94: 7d:04:22:e9:13:06:94:d9:e3:7b:2e:91:39:93:d6:99:7f:56: b6:16:9c:8a:d2:7a:5b:18:a1:75:e0:63:fa:fe:de:bb:13:c8: db:bb:d5:9f:43:ad:cb:e4:ab:a1:88:28:42:ca:d0:30:d7:20: 27:6d:7a:6a:2a:2c:99:58:99:5c:55:45:84:4e:a0:86:84:cc: b3:a0:8a:cf:42:f0:64:dd:f4:2c:6c:41:86:03:ce:c6:9f:10: c7:be:4f:8b:9a:d6:18:3b:06:e8:ca:58:04:7e:86:1c:58:27: 25:05:2a:13:67:9e:44:a5:93:97:3a:4e:9b:4b:8e:fe:5c:64: 98:2a:e0:97:06:c3:c6:84:96:59:fc:55:ab:30:c6:a6:9b:9d: f1:60:7f:95:e4:a0:79:bf:8c:aa:16:2e:83:20:43:7c:4d:08: 27:15:07:81:12:ec:c5:dc:be:31:6b:ea:33:18:9b:0c:5e:bd: 47:35:6b:3f:7c:df:b7:77:3e:37:b9:0e:5a:b9:48:41:13:fe: 55:f9:e5:c2:74:19:ba:d2:c4:4c:f8:f4:f0:c3:cf:c5:75:11: df:4b:98:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEek1USL10+fazA/hcKLG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjYwMTI4MTIwMDQ5WhcNMjYwMTI5MTIwMDQ5WjAzMTEwLwYDVQQD EygwNDRlNzkzMGQ2MGRmNWZiZGJmYzcwYTIzM2E0YzdiNDI2ZTc5ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3G7hd59pjgWBVA9txWkhBZTPp9W aJ6jPQfuRXP+VEsQymqjkpH2g7znRkKQMkrZ8s8sr9KGh2/fcKNPF6uBu0t6bGqw jve37ukPcxWC/IUhnbrfhW20Ti79coEUiA9y2at/jxsfdKuj7+om+yOmfrAb5W7M epP+6OBpqZuh93R5I3H2vOHqISjDDzLObG3kKWMZo+Lo/iFrUn14mWQM72ALKny+ exCoYuxUXOfNuRMVug/T0HGAvaQsS3ZdgcvH07PZJy5GkoAbmxGfN1NgB2UIKHah SOs/SOVuXHT11CQruMKB2kKf4w7geQaB/PpWQSDaGrtbArz+n9kq0mGWuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAROeTDWDfX72/xwojOkx7Qm55/dMB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPf9FiXI n6pU6uXUAP9heY1zls/Mm4yHJ1fVFX5lj01IpLeUfQQi6RMGlNnjey6ROZPWmX9W thacitJ6WxihdeBj+v7euxPI27vVn0Oty+SroYgoQsrQMNcgJ216aiosmViZXFVF hE6ghoTMs6CKz0LwZN30LGxBhgPOxp8Qx75Pi5rWGDsG6MpYBH6GHFgnJQUqE2ee RKWTlzpOm0uO/lxkmCrglwbDxoSWWfxVqzDGppud8WB/leSgeb+MqhYugyBDfE0I JxUHgRLsxdy+MWvqMxibDF69RzVrP3zft3c+N7kOWrlIQRP+VfnlwnQZutLETPj0 8MPPxXUR30uY1g== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:27 2026 by rpki-client