This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json) Hash identifier: xLBfjiuTTXiqlD73IKAa30H2iV8Flqj4LQlpzRuH82M= Subject key identifier: B5:AD:08:31:EA:07:4B:FD:7D:8F:75:2A:CC:0B:95:49:AA:10:90:96 Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019BFA9B72F4ABA0F17DA5D5D321025E7A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 14:00:50 +0000 Manifest this update: Mon 26 Jan 2026 14:00:50 +0000 Manifest next update: Tue 27 Jan 2026 14:00:50 +0000 Files and hashes: 1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=) 2: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=) 3: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=) 4: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=) 5: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: cfihLPpzsdxZuihsJ4fhD6cfEfn5esnIWBvszCpvVDY=) 6: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=) 7: hFJA5_fA_Gp7BCxbMO_bes9nk40.roa (hash: s64nTqpmoBBkk6Hywj8GwfB0MNxG8qecnHtsYCweNdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:72:f4:ab:a0:f1:7d:a5:d5:d3:21:02:5e:7a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Jan 26 14:00:50 2026 GMT Not After : Jan 27 14:00:50 2026 GMT Subject: CN=b5ad0831ea074bfd7d8f752acc0b9549aa109096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:72:af:3d:38:bb:34:64:ac:57:1c:ef:3d: b6:33:a0:39:d3:62:33:41:1d:e4:25:95:b1:08:45: a6:fa:46:51:8f:51:a1:53:23:7f:ae:13:48:5b:cb: 6f:38:0a:15:67:44:82:dd:ed:da:0b:68:0c:9e:2d: 80:53:dd:bc:b7:ee:cf:f6:57:b5:b1:04:d4:b7:72: 43:de:d7:f4:3f:98:f0:59:15:58:c0:9c:94:bf:01: aa:5d:a3:0e:b4:15:3e:21:f1:9b:ad:20:98:94:53: 16:0c:40:7c:0b:71:ea:88:d7:6b:e2:5c:af:90:b1: fe:c1:21:d6:43:5f:51:c9:bc:84:7d:8f:ab:1e:aa: 85:bd:cf:1b:82:4c:d6:ce:88:d6:d3:9e:ad:7e:1e: 8f:42:8a:08:dc:6c:d1:3c:b4:98:15:4d:76:31:da: 1c:8c:8d:df:44:d1:2a:e0:b8:3f:da:58:54:bd:eb: 49:30:87:05:9d:0c:a5:11:88:2a:4e:4e:19:40:6d: a9:bc:d2:0f:5d:68:c2:f4:34:21:27:b7:39:1e:94: 92:99:b3:7d:98:1c:6d:07:f6:ea:79:0c:c2:6a:25: e6:44:c8:ca:a1:6c:32:0f:f2:02:22:fa:65:6f:2c: 1e:1c:0e:12:40:b6:1e:ed:ac:fb:1f:06:da:7c:0b: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:08:31:EA:07:4B:FD:7D:8F:75:2A:CC:0B:95:49:AA:10:90:96 X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b9:41:d2:69:b3:8a:4c:36:7e:b2:9f:03:69:c2:4b:77:a9: 56:b7:0c:a0:9b:d8:5e:98:8e:60:08:53:45:0e:d1:28:e3:23: 5b:f4:f9:eb:7d:bc:26:4b:48:c3:ed:fb:f8:ed:58:f8:af:cb: 1c:09:67:b0:a8:87:58:80:10:1a:b6:ba:9a:f8:27:d8:ed:cc: af:11:dd:23:74:3a:02:c8:65:7e:bd:05:70:26:0b:f2:1e:f8: e6:2f:6d:97:ee:96:3f:80:2b:b0:0f:ca:b1:fb:51:89:10:63: 10:88:c0:33:95:26:8d:8a:4f:89:df:16:4f:bb:64:7c:51:9b: 63:c8:a8:e3:fa:80:48:53:e6:45:c0:da:4f:8a:c8:df:53:46: c3:1a:a4:be:35:97:d5:b1:b2:fe:e8:f9:ba:c8:41:29:73:d5: d7:dc:af:52:10:a9:81:31:ca:4f:94:49:9a:bf:a6:3f:55:74: 0e:b6:93:43:d1:6b:cb:bd:8f:2a:d2:6a:18:cf:2f:14:89:64: 7e:62:92:9a:97:93:00:47:4a:9b:1d:bf:24:58:e6:92:86:2a: f9:7d:32:a5:ca:ce:d4:c6:20:70:9f:be:a1:48:0f:e5:79:c8: be:11:58:c2:4f:fa:21:b8:37:af:98:90:7b:07:15:b8:8a:f5: f4:73:9d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m3L0q6DxfaXV0yECXnoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjYwMTI2MTQwMDUwWhcNMjYwMTI3MTQwMDUwWjAzMTEwLwYDVQQD EyhiNWFkMDgzMWVhMDc0YmZkN2Q4Zjc1MmFjYzBiOTU0OWFhMTA5MDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hyrz04uzRkrFcc7z22M6A502Iz QR3kJZWxCEWm+kZRj1GhUyN/rhNIW8tvOAoVZ0SC3e3aC2gMni2AU928t+7P9le1 sQTUt3JD3tf0P5jwWRVYwJyUvwGqXaMOtBU+IfGbrSCYlFMWDEB8C3HqiNdr4lyv kLH+wSHWQ19RybyEfY+rHqqFvc8bgkzWzojW056tfh6PQooI3GzRPLSYFU12Mdoc jI3fRNEq4Lg/2lhUvetJMIcFnQylEYgqTk4ZQG2pvNIPXWjC9DQhJ7c5HpSSmbN9 mBxtB/bqeQzCaiXmRMjKoWwyD/ICIvplbyweHA4SQLYe7az7HwbafAsoxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWtCDHqB0v9fY91KswLlUmqEJCWMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLlB0mmz ikw2frKfA2nCS3epVrcMoJvYXpiOYAhTRQ7RKOMjW/T56328JktIw+37+O1Y+K/L HAlnsKiHWIAQGra6mvgn2O3MrxHdI3Q6Ashlfr0FcCYL8h745i9tl+6WP4ArsA/K sftRiRBjEIjAM5UmjYpPid8WT7tkfFGbY8io4/qASFPmRcDaT4rI31NGwxqkvjWX 1bGy/uj5ushBKXPV19yvUhCpgTHKT5RJmr+mP1V0DraTQ9Fry72PKtJqGM8vFIlk fmKSmpeTAEdKmx2/JFjmkoYq+X0ypcrO1MYgcJ++oUgP5XnIvhFYwk/6Ibg3r5iQ ewcVuIr19HOdXw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:25 2026 by rpki-client