This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json) Hash identifier: TqpJAeKpkKCWxStpQzLsXkvRwR5QtmDbZLIm8aSbVL4= Subject key identifier: 7B:12:27:7A:7A:30:41:EB:99:E4:04:02:75:4E:5B:1F:66:46:AC:D3 Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Certificate serial: 019BFD6566C445BA833D8C86737E45DD941F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft Manifest number: 087E Signing time: Tue 27 Jan 2026 03:00:39 +0000 Manifest this update: Tue 27 Jan 2026 03:00:39 +0000 Manifest next update: Wed 28 Jan 2026 03:00:39 +0000 Files and hashes: 1: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (hash: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc=) 2: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: u6PiG+InO7Yk3TzZxKOrKhBM5ENWG3UQpOlQtDBu/R4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:66:c4:45:ba:83:3d:8c:86:73:7e:45:dd:94:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Validity Not Before: Jan 27 03:00:39 2026 GMT Not After : Jan 28 03:00:39 2026 GMT Subject: CN=7b12277a7a3041eb99e40402754e5b1f6646acd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:88:75:ec:e2:5b:29:93:d3:24:40:ac:e3: a4:f6:01:56:a9:41:74:39:a2:5d:2d:43:e8:ce:85: 84:76:5a:ba:8f:1a:f3:80:5c:21:f7:99:29:e7:57: d6:da:f5:ec:2d:00:54:d7:5d:03:56:0f:cf:54:1e: fb:dc:5b:36:89:df:9e:bb:ed:ca:f6:2d:23:22:bd: 44:9b:16:f8:72:c6:34:00:b1:7e:37:79:4d:a7:09: 80:cc:3a:74:b5:8b:01:75:e6:1c:f8:c9:f1:a0:ef: b8:1d:13:1b:11:5a:ef:db:61:2f:29:51:40:22:53: d1:15:9d:89:88:2f:a8:59:19:18:7e:cf:e1:c6:d4: 5a:19:b7:3d:b6:e8:39:1a:b3:82:8a:f3:3a:f8:0d: 29:da:00:54:30:23:ab:c6:8e:98:fa:39:fd:1f:32: fe:77:d2:ec:3f:a6:46:f3:d6:db:8c:44:16:5e:17: 22:b3:fe:1b:9f:7d:61:25:b7:f4:61:88:e6:a6:5f: e3:fc:7c:34:17:b1:ec:ca:e9:c9:82:83:1a:1e:b2: 05:10:ca:07:bd:c1:40:ba:0d:ff:3f:64:5b:3c:ea: 78:2f:a8:f8:85:a4:b6:97:6c:36:47:ed:e0:cd:95: ea:cd:ab:56:0c:7e:3e:f1:7a:af:b9:2f:50:e9:7c: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:12:27:7A:7A:30:41:EB:99:E4:04:02:75:4E:5B:1F:66:46:AC:D3 X509v3 Authority Key Identifier: keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d9:25:f0:da:3c:69:0b:be:d9:9b:46:ce:93:1c:41:1a:b0: 9c:69:06:bc:3f:9d:ee:bd:8f:9f:4c:84:f9:77:72:ec:5c:2e: b6:cf:00:2f:83:fa:13:4f:31:a9:67:a3:32:de:24:89:cb:ad: 0e:db:42:38:70:31:eb:00:8f:1b:3e:2c:e5:ed:ff:f9:49:1d: 77:c7:d8:9c:d9:26:60:28:75:1d:60:f8:4a:08:ca:20:04:0a: e7:95:6d:cb:ee:f3:23:93:0b:3e:1a:f1:95:80:7b:8a:91:af: ac:e0:54:85:ab:2f:69:e1:b7:bd:50:46:60:62:43:62:03:73: 9c:fd:2a:cd:8c:49:36:40:33:c1:c3:35:97:40:a2:21:13:d8: 34:11:34:34:12:8d:b8:0a:f2:dd:d4:a1:84:dd:0b:89:5c:55: 10:39:99:d6:64:4e:21:72:e9:d2:e9:3d:6d:99:11:98:99:8a: 57:a8:62:46:df:eb:03:7c:60:5e:78:d9:0e:29:4d:10:32:03: 9d:53:4e:0c:01:90:4a:68:06:27:a8:15:7b:92:8d:3f:66:d8: df:95:23:e0:77:24:06:45:32:54:9a:5d:f8:07:b5:80:32:7f: 5d:c8:2f:03:cb:3c:d4:71:7a:04:59:ae:46:fd:4b:58:05:72: 7d:58:87:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZWbERbqDPYyGc35F3ZQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy YzI0ZDAwHhcNMjYwMTI3MDMwMDM5WhcNMjYwMTI4MDMwMDM5WjAzMTEwLwYDVQQD Eyg3YjEyMjc3YTdhMzA0MWViOTllNDA0MDI3NTRlNWIxZjY2NDZhY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF2IdeziWymT0yRArOOk9gFWqUF0 OaJdLUPozoWEdlq6jxrzgFwh95kp51fW2vXsLQBU110DVg/PVB773Fs2id+eu+3K 9i0jIr1Emxb4csY0ALF+N3lNpwmAzDp0tYsBdeYc+MnxoO+4HRMbEVrv22EvKVFA IlPRFZ2JiC+oWRkYfs/hxtRaGbc9tug5GrOCivM6+A0p2gBUMCOrxo6Y+jn9HzL+ d9LsP6ZG89bbjEQWXhcis/4bn31hJbf0YYjmpl/j/Hw0F7HsyunJgoMaHrIFEMoH vcFAug3/P2RbPOp4L6j4haS2l2w2R+3gzZXqzatWDH4+8XqvuS9Q6XyaGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsSJ3p6MEHrmeQEAnVOWx9mRqzTMB8GA1UdIwQY MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4 LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNkl8No8 aQu+2ZtGzpMcQRqwnGkGvD+d7r2Pn0yE+Xdy7Fwuts8AL4P6E08xqWejMt4kicut DttCOHAx6wCPGz4s5e3/+Ukdd8fYnNkmYCh1HWD4SgjKIAQK55Vty+7zI5MLPhrx lYB7ipGvrOBUhasvaeG3vVBGYGJDYgNznP0qzYxJNkAzwcM1l0CiIRPYNBE0NBKN uAry3dShhN0LiVxVEDmZ1mROIXLp0uk9bZkRmJmKV6hiRt/rA3xgXnjZDilNEDID nVNODAGQSmgGJ6gVe5KNP2bY35Uj4HckBkUyVJpd+Ae1gDJ/XcgvA8s81HF6BFmu Rv1LWAVyfViHbQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:30 2026 by rpki-client