This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json) Hash identifier: kmVmTN58OzqmohmO7lFjYngpAaUD3GXcV3/9Pfads/Q= Subject key identifier: 1A:10:36:6F:A3:DB:5B:22:2D:32:84:28:37:06:86:26:C3:B7:C9:EE Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Certificate serial: 019C01B00439B89AEFB109AA281F61968AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft Manifest number: 0C8B Signing time: Tue 27 Jan 2026 23:00:38 +0000 Manifest this update: Tue 27 Jan 2026 23:00:38 +0000 Manifest next update: Wed 28 Jan 2026 23:00:38 +0000 Files and hashes: 1: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: appX+C2zW02FOaB5WKXBVcDlvkNdiQYPLKlKFQL++bY=) 2: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (hash: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:b0:04:39:b8:9a:ef:b1:09:aa:28:1f:61:96:8a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Validity Not Before: Jan 27 23:00:38 2026 GMT Not After : Jan 28 23:00:38 2026 GMT Subject: CN=1a10366fa3db5b222d32842837068626c3b7c9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:87:9c:c6:f0:9c:49:bc:be:04:d0:0f:2d: e7:f6:bd:29:0e:b3:7c:a2:cb:82:a7:bc:2c:3a:42: b7:3c:bf:f1:21:ce:39:9f:d4:9b:cd:0a:64:95:90: 0f:fa:9b:57:42:f3:fb:be:32:8b:70:96:4a:0c:01: 37:3c:bf:eb:4a:c8:78:8d:74:09:7f:7f:c3:3b:ff: ef:e5:f7:cf:9d:33:5a:ab:58:da:54:fc:0b:6e:cf: 0e:5b:c3:95:cf:12:67:27:91:34:29:90:13:68:68: 1e:bd:e4:c3:fe:42:5a:56:55:ce:4b:d6:0e:cd:68: c7:80:ea:c9:79:d7:d0:d1:a8:44:00:e0:7d:e3:aa: 66:b8:48:c2:ea:2a:b5:26:a1:a2:b4:73:0e:24:95: 6a:28:04:75:d9:08:91:a8:c4:5a:21:2e:00:4d:84: 50:3e:b7:f0:8b:dd:75:ed:7c:33:4b:b1:51:1b:49: 64:3e:63:a3:0c:cb:3a:31:3c:8c:0b:7c:6e:aa:ce: 62:40:cc:85:61:6d:4b:a0:a4:30:35:92:6d:f8:1e: 57:5e:d0:9b:2f:ec:13:8b:8a:51:7b:e9:0d:9c:75: 91:95:57:82:9a:43:3f:ac:cc:2b:cf:45:e7:61:70: b3:26:ca:7d:cd:d1:d4:63:a1:e7:6c:ef:1e:63:a5: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:36:6F:A3:DB:5B:22:2D:32:84:28:37:06:86:26:C3:B7:C9:EE X509v3 Authority Key Identifier: keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ec:01:4e:00:03:36:d0:48:18:8e:01:d7:54:5a:3e:7c:6b: bd:f9:af:77:9a:80:80:6c:c3:54:7a:44:8f:93:16:1d:e5:47: a8:4b:65:aa:65:e1:15:31:7b:fa:87:af:4e:8f:e2:dd:93:26: 05:06:51:9b:1d:eb:9c:b3:da:25:cd:54:d1:8b:e7:b6:b6:ae: ed:74:6e:cd:45:cd:3f:c4:3f:8e:36:b6:5a:ce:1d:97:1b:c0: f3:e3:3a:67:f1:d1:c2:78:52:f7:30:c2:e7:de:49:5d:e8:1b: ea:70:11:bb:91:c1:38:c2:42:68:44:e7:8d:71:ff:38:e2:e3: 9b:4b:c2:00:fa:e0:f3:3f:ab:7e:39:d3:f6:75:07:ba:26:da: 0d:b3:59:5f:14:78:b0:69:18:c8:92:14:a9:48:4c:e5:35:79: 90:90:f0:00:61:e4:6b:1a:13:86:47:76:e4:ee:45:13:a1:0f: a7:2c:70:92:f3:f7:89:39:54:5d:4d:9a:1a:d9:46:9c:95:c3: f9:58:d0:3c:de:f4:3d:74:34:29:ff:81:61:e4:64:e7:63:e8: 2c:1e:8c:f8:bf:88:90:42:7f:b1:5c:a0:03:db:a5:ed:00:a4: 22:1e:82:18:22:a4:29:27:9f:18:d2:16:ea:dd:60:97:c2:7b: 45:7e:7c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBsAQ5uJrvsQmqKB9hlorsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3 ZjM3MzIwHhcNMjYwMTI3MjMwMDM4WhcNMjYwMTI4MjMwMDM4WjAzMTEwLwYDVQQD EygxYTEwMzY2ZmEzZGI1YjIyMmQzMjg0MjgzNzA2ODYyNmMzYjdjOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdmHnMbwnEm8vgTQDy3n9r0pDrN8 osuCp7wsOkK3PL/xIc45n9SbzQpklZAP+ptXQvP7vjKLcJZKDAE3PL/rSsh4jXQJ f3/DO//v5ffPnTNaq1jaVPwLbs8OW8OVzxJnJ5E0KZATaGgeveTD/kJaVlXOS9YO zWjHgOrJedfQ0ahEAOB946pmuEjC6iq1JqGitHMOJJVqKAR12QiRqMRaIS4ATYRQ Prfwi9117XwzS7FRG0lkPmOjDMs6MTyMC3xuqs5iQMyFYW1LoKQwNZJt+B5XXtCb L+wTi4pRe+kNnHWRlVeCmkM/rMwrz0XnYXCzJsp9zdHUY6HnbO8eY6VbVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoQNm+j21siLTKEKDcGhibDt8nuMB8GA1UdIwQY MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt YWI2M2Q0NWY0YjZhLzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+wBTgAD NtBIGI4B11RaPnxrvfmvd5qAgGzDVHpEj5MWHeVHqEtlqmXhFTF7+oevTo/i3ZMm BQZRmx3rnLPaJc1U0Yvntrau7XRuzUXNP8Q/jja2Ws4dlxvA8+M6Z/HRwnhS9zDC 595JXegb6nARu5HBOMJCaETnjXH/OOLjm0vCAPrg8z+rfjnT9nUHuibaDbNZXxR4 sGkYyJIUqUhM5TV5kJDwAGHkaxoThkd25O5FE6EPpyxwkvP3iTlUXU2aGtlGnJXD +VjQPN70PXQ0Kf+BYeRk52PoLB6M+L+IkEJ/sVygA9ul7QCkIh6CGCKkKSefGNIW 6t1gl8J7RX58Cg== -----END CERTIFICATE-----Generated at Wed Jan 28 06:24:54 2026 by rpki-client