This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json) Hash identifier: 0oR2cYH4GvjAdizEKY27GAvrzcqtKWkoFyWAlVikoV0= Subject key identifier: C4:25:6A:FD:99:25:6C:1D:97:E8:0A:8E:53:2E:C3:83:16:75:2C:6D Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Certificate serial: 019BFD2EE04E3B45E844240CCC3DF63DDD6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft Manifest number: 01A7 Signing time: Tue 27 Jan 2026 02:01:06 +0000 Manifest this update: Tue 27 Jan 2026 02:01:06 +0000 Manifest next update: Wed 28 Jan 2026 02:01:06 +0000 Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: 5JMjKidLYq/VxCvTtO7Hf08RQqg19JLRNRlGaN1ez7A=) 2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:e0:4e:3b:45:e8:44:24:0c:cc:3d:f6:3d:dd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65 Validity Not Before: Jan 27 02:01:06 2026 GMT Not After : Jan 28 02:01:06 2026 GMT Subject: CN=c4256afd99256c1d97e80a8e532ec38316752c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:49:81:3c:1b:34:24:0c:a7:68:bc:84:35: f0:b9:1d:4f:26:58:81:e6:a7:b9:ca:b2:7c:ab:5b: 70:3e:dc:84:ea:f0:28:22:eb:22:c3:de:71:3d:87: 1b:df:0d:5d:06:83:41:0d:cb:d7:6a:43:76:c4:2f: 97:9f:7b:8d:d7:a3:d6:a3:79:ae:0f:87:af:fd:72: b1:13:31:0c:6a:a5:c1:69:92:36:fe:1d:a7:50:f4: 2c:b9:31:47:cf:4b:07:13:5e:f2:54:7f:4a:41:4e: 68:4e:d0:87:a2:04:96:cb:71:32:15:34:25:5e:85: b5:5a:34:5f:0f:14:cf:79:ef:a2:6f:83:95:38:c8: 0a:f7:82:c7:8c:40:a7:a7:79:43:d0:87:d2:7e:41: 27:9b:88:e9:f0:4c:84:50:21:a8:0c:ea:41:58:bc: 92:c1:62:97:38:1f:ca:fc:bd:d4:36:0d:b6:43:83: ad:e8:d5:7c:60:b2:6b:63:d1:21:25:7e:01:28:60: df:8c:21:c2:d7:08:6e:5e:fe:d5:ec:f1:c9:3e:00: fd:d8:2d:fc:a8:da:5f:ab:04:a9:a9:61:6b:a2:03: 14:d4:c2:4a:c1:69:ce:48:62:36:53:dd:f9:8a:bc: 2c:09:12:f2:c5:b0:5d:e3:6c:0b:1c:66:cc:fb:63: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:25:6A:FD:99:25:6C:1D:97:E8:0A:8E:53:2E:C3:83:16:75:2C:6D X509v3 Authority Key Identifier: keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:65:5e:2a:19:22:f8:21:a3:40:77:87:33:b2:aa:e0:b2:29: a2:b6:ed:56:c5:65:dc:40:5e:bd:12:7c:15:c8:30:6f:a4:65: 93:bd:68:77:c8:96:1b:bd:1c:5f:e9:fd:7a:6a:d2:e0:68:2f: 99:4d:07:a4:e3:36:25:48:98:2b:88:a9:c4:51:63:26:43:9d: 00:f1:9f:9e:6d:cd:08:75:c3:b3:40:b8:f8:a3:22:08:ba:ca: 27:d1:00:68:46:1b:ff:0f:1c:73:2e:cc:d0:0f:a3:aa:8b:d3: aa:27:08:99:37:4f:45:fe:a0:38:ad:cb:14:72:02:8b:f6:16: 4a:60:01:e8:bf:db:3c:be:eb:9b:60:40:d1:3a:b2:b1:52:89: 4c:1f:19:56:14:d1:50:31:3e:2f:28:20:6c:4c:f5:b5:f6:ed: 74:57:78:f9:15:2c:8d:7b:eb:47:27:e5:02:70:a0:da:06:76: bf:52:68:e3:f2:17:bf:53:9a:3f:a3:1d:bd:aa:87:6b:11:5e: 7d:8c:69:29:8e:82:9c:2f:e1:07:1c:4d:e5:48:30:f9:31:da: 7a:b3:c9:f5:b9:c1:c1:0e:5b:a5:58:43:5d:c6:1d:45:11:c6: e6:8c:1d:5c:67:ee:de:16:34:b7:10:a4:91:23:b5:a8:92:37: 9f:8c:ff:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LuBOO0XoRCQMzD32Pd1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzU2ZTI1YjAwMjU2ZTI0Y2RhMzI0ZGViMjFhYTlkMTMw MTVmNjUwHhcNMjYwMTI3MDIwMTA2WhcNMjYwMTI4MDIwMTA2WjAzMTEwLwYDVQQD EyhjNDI1NmFmZDk5MjU2YzFkOTdlODBhOGU1MzJlYzM4MzE2NzUyYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK1JgTwbNCQMp2i8hDXwuR1PJliB 5qe5yrJ8q1twPtyE6vAoIusiw95xPYcb3w1dBoNBDcvXakN2xC+Xn3uN16PWo3mu D4ev/XKxEzEMaqXBaZI2/h2nUPQsuTFHz0sHE17yVH9KQU5oTtCHogSWy3EyFTQl XoW1WjRfDxTPee+ib4OVOMgK94LHjECnp3lD0IfSfkEnm4jp8EyEUCGoDOpBWLyS wWKXOB/K/L3UNg22Q4Ot6NV8YLJrY9EhJX4BKGDfjCHC1whuXv7V7PHJPgD92C38 qNpfqwSpqWFrogMU1MJKwWnOSGI2U935irwsCRLyxbBd42wLHGbM+2NfOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQlav2ZJWwdl+gKjlMuw4MWdSxtMB8GA1UdIwQY MBaAFE7FbiWwAlbiTNoyTeshqp0TAV9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAt MDlhMmM5Y2E3MTU1LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82NmU2YmEtMDE3Ny00MmYzLWFhOTAtMDlhMmM5Y2E3MTU1 LzEvVHNWdUpiQUNWdUpNMmpKTjZ5R3FuUk1CWDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2VeKhki +CGjQHeHM7Kq4LIporbtVsVl3EBevRJ8Fcgwb6Rlk71od8iWG70cX+n9emrS4Ggv mU0HpOM2JUiYK4ipxFFjJkOdAPGfnm3NCHXDs0C4+KMiCLrKJ9EAaEYb/w8ccy7M 0A+jqovTqicImTdPRf6gOK3LFHICi/YWSmAB6L/bPL7rm2BA0TqysVKJTB8ZVhTR UDE+LyggbEz1tfbtdFd4+RUsjXvrRyflAnCg2gZ2v1Jo4/IXv1OaP6MdvaqHaxFe fYxpKY6CnC/hBxxN5Ugw+THaerPJ9bnBwQ5bpVhDXcYdRRHG5owdXGfu3hY0txCk kSO1qJI3n4z/Nw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:12 2026 by rpki-client