This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: 1U3uB+ieuT34fbILvVO2gywwBuY5x874eunBN0HSZgo= Subject key identifier: 82:58:43:40:C0:F4:34:EA:2D:EA:19:01:95:56:AD:7E:94:DC:21:14 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019BFBAEABC49BA0A5EEB1963DA8D124F5CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 17F5 Signing time: Mon 26 Jan 2026 19:01:26 +0000 Manifest this update: Mon 26 Jan 2026 19:01:26 +0000 Manifest next update: Tue 27 Jan 2026 19:01:26 +0000 Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 2: cz3i4996YniCM04uBoqxYULZ1OE.roa (hash: nyw3jhYkbjvahgBCKXr44jUJF3r/xMEzYzkBBzdxVio=) 3: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 4: dzLIS_uUBmT5ML31y6NFSMyd71k.roa (hash: DlezeaLLQKyU+Fuzh+ngOJx/wOMos/kw2vfD167ugl8=) 5: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 6: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 7: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 8: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: Kig7TJCLGusH8FQdidIGOCCBflnYHRfqtYeJO9lDl08=) 9: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 10: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:ab:c4:9b:a0:a5:ee:b1:96:3d:a8:d1:24:f5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 26 19:01:26 2026 GMT Not After : Jan 27 19:01:26 2026 GMT Subject: CN=82584340c0f434ea2dea19019556ad7e94dc2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:33:12:6e:96:d7:f9:de:c9:21:b7:2e:77: c5:f0:8f:f8:6b:f0:2a:62:44:02:66:2e:aa:cd:5c: bc:d1:e4:d9:d9:f8:16:15:c1:d3:3e:53:52:e7:e4: bc:bf:93:5c:33:2f:b7:e7:31:8c:d2:09:1e:26:84: 77:22:08:d5:38:45:86:59:52:90:9d:3c:1c:bf:d2: e4:06:59:a4:80:3e:3f:bd:eb:10:0d:99:d4:39:1b: 25:9e:75:a4:b5:d8:01:7b:4c:c2:97:84:27:ab:d2: 6d:c4:f6:71:ce:3e:6d:9f:41:56:05:d9:e5:04:1b: a5:17:46:5b:17:6e:82:28:92:3e:dd:d1:7d:22:e3: 72:84:20:3e:1f:ff:e0:69:0c:e3:84:06:08:3b:d2: 77:2e:cc:5e:16:61:e7:90:f5:0a:53:a6:84:5a:92: d9:9c:e4:32:25:0b:cc:3b:13:7f:c4:70:94:13:29: 2f:3b:d2:19:08:ab:61:85:22:71:90:80:a9:70:16: e3:41:c5:70:0a:ca:04:e8:b1:91:11:86:27:02:87: 92:c4:28:12:97:2b:92:d0:09:9e:79:54:4c:0a:17: c1:03:22:0a:2d:4a:e2:6b:b5:cd:7d:b4:af:79:91: 04:10:6c:78:50:bd:74:cd:a4:53:f6:c8:93:a7:39: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:43:40:C0:F4:34:EA:2D:EA:19:01:95:56:AD:7E:94:DC:21:14 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9b:a9:76:de:d7:ab:90:29:e0:63:69:a7:23:ee:03:25:dc: c9:2f:4d:1b:0f:5e:27:2c:43:6d:8b:8b:95:3c:72:bc:f0:e3: b4:9d:06:ca:e2:eb:8d:db:96:f9:df:39:e9:41:8c:4c:46:31: 6a:b2:d7:90:51:db:a1:e6:29:8b:08:03:06:ea:4d:30:2e:56: 1f:ee:e2:05:4b:25:bc:18:8c:70:c2:48:4b:3c:69:e0:59:cd: df:49:e3:4f:8b:03:34:1f:e1:16:b4:0a:ad:0a:de:c8:9e:3c: d2:b8:b8:58:47:b8:3f:0e:2d:72:e2:4d:1f:a1:1b:7b:50:83: 13:b7:e4:e3:c0:d5:7b:7a:ae:d2:1d:0c:83:f4:82:ea:c0:b7: b9:75:3a:d6:b6:a8:52:2b:ab:80:bb:70:5b:3c:e4:df:ff:e5: 8e:c5:fd:c3:95:33:44:bf:26:f1:7d:2c:7f:f5:42:22:39:f8: 5b:f1:58:30:5a:03:be:65:bc:77:05:28:c3:86:5f:ed:f0:8b: f9:b7:81:96:9c:f1:a3:23:88:97:c0:14:87:af:db:50:97:b3: 27:6e:ee:11:a7:91:ed:64:f2:2a:46:2e:0e:47:ac:13:4a:57: 90:db:c6:b0:e9:e2:24:56:fe:a2:fd:ea:ab:7e:2e:51:4f:8e: fe:2d:4b:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rqvEm6Cl7rGWPajRJPXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTI2MTkwMTI2WhcNMjYwMTI3MTkwMTI2WjAzMTEwLwYDVQQD Eyg4MjU4NDM0MGMwZjQzNGVhMmRlYTE5MDE5NTU2YWQ3ZTk0ZGMyMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqogzEm6W1/neySG3LnfF8I/4a/Aq YkQCZi6qzVy80eTZ2fgWFcHTPlNS5+S8v5NcMy+35zGM0gkeJoR3IgjVOEWGWVKQ nTwcv9LkBlmkgD4/vesQDZnUORslnnWktdgBe0zCl4Qnq9JtxPZxzj5tn0FWBdnl BBulF0ZbF26CKJI+3dF9IuNyhCA+H//gaQzjhAYIO9J3LsxeFmHnkPUKU6aEWpLZ nOQyJQvMOxN/xHCUEykvO9IZCKthhSJxkICpcBbjQcVwCsoE6LGREYYnAoeSxCgS lyuS0AmeeVRMChfBAyIKLUria7XNfbSveZEEEGx4UL10zaRT9siTpzkOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJYQ0DA9DTqLeoZAZVWrX6U3CEUMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5updt7X q5Ap4GNppyPuAyXcyS9NGw9eJyxDbYuLlTxyvPDjtJ0GyuLrjduW+d856UGMTEYx arLXkFHboeYpiwgDBupNMC5WH+7iBUslvBiMcMJISzxp4FnN30njT4sDNB/hFrQK rQreyJ480ri4WEe4Pw4tcuJNH6Ebe1CDE7fk48DVe3qu0h0Mg/SC6sC3uXU61rao UiurgLtwWzzk3//ljsX9w5UzRL8m8X0sf/VCIjn4W/FYMFoDvmW8dwUow4Zf7fCL +beBlpzxoyOIl8AUh6/bUJezJ27uEaeR7WTyKkYuDkesE0pXkNvGsOniJFb+ov3q q34uUU+O/i1LGg== -----END CERTIFICATE-----Generated at Tue Jan 27 04:27:25 2026 by rpki-client