This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json) Hash identifier: d9giAwkrUaIe01J9DpVepbUM19uAspHuHX8aHRh6Bc8= Subject key identifier: 46:A7:99:02:49:A3:8E:DC:4D:E4:3B:01:89:48:F0:5D:0F:64:22:8E Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79 Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979 Certificate serial: 019BD01F41E0D471E923354B104F86B2D9A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft Manifest number: 17DB Signing time: Sun 18 Jan 2026 08:01:07 +0000 Manifest this update: Sun 18 Jan 2026 08:01:07 +0000 Manifest next update: Mon 19 Jan 2026 08:01:07 +0000 Files and hashes: 1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=) 2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: 6/YXaRR2rSBKv4vhvX9zadKwf5Bln1ClJVkBXlzPHdA=) 3: hG7korJHdX3J-VQRQpsautEAs5k.roa (hash: Iemgb9cSM4wP9xZ65kMEtq49P3Moq93S8ieRnN38Nu4=) 4: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=) 5: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:1f:41:e0:d4:71:e9:23:35:4b:10:4f:86:b2:d9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979 Validity Not Before: Jan 18 08:01:07 2026 GMT Not After : Jan 19 08:01:07 2026 GMT Subject: CN=46a7990249a38edc4de43b018948f05d0f64228e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:8a:fc:90:36:d1:6b:b6:ea:08:9d:0b:88: 7a:40:ae:fa:4f:c4:16:ce:c1:22:52:7e:c8:85:1a: 08:d2:e7:e0:8f:6e:f4:9b:18:49:e4:e1:b9:ab:5b: ad:67:a1:1c:f6:4f:56:f5:16:b2:82:ac:c8:49:9c: d0:27:11:d3:f1:ab:bd:69:82:ea:ff:38:24:db:a9: 7f:a1:58:17:b3:89:b3:3e:1f:ab:34:72:a7:a1:a6: 30:2f:96:91:35:0e:ae:ef:ed:b6:7e:15:14:d6:99: 89:54:4e:6c:ad:18:a9:17:c7:65:68:ae:36:84:5a: b1:ce:22:59:e6:31:06:86:38:be:d2:2a:1d:c5:cc: 26:9a:32:b4:03:93:e4:f3:8f:0c:37:7e:76:96:8c: bd:cc:65:2b:e2:70:13:68:7b:e9:cb:73:8b:19:c9: 0b:b5:1c:ba:75:1a:d3:de:be:5b:83:3d:12:1e:49: 77:dc:d3:4b:38:dd:85:13:52:fd:20:1a:70:12:5f: bd:9f:ad:96:64:63:cf:27:44:77:a2:c8:f3:94:1f: 74:8d:fd:90:67:61:72:4c:6f:ec:e0:2a:bd:e1:4d: c7:fe:0d:c3:ad:1f:e3:e8:f8:c9:c4:77:00:a6:be: 27:1d:22:9f:df:87:bd:40:58:39:37:d0:67:f6:67: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A7:99:02:49:A3:8E:DC:4D:E4:3B:01:89:48:F0:5D:0F:64:22:8E X509v3 Authority Key Identifier: keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1a:0f:6d:be:4a:e0:49:00:9f:b5:cf:a9:73:1b:c7:07:8e: 7e:67:10:51:99:d9:1c:25:28:cb:e1:94:3d:2c:f9:a0:28:0f: f5:22:d0:77:cd:27:58:43:21:c1:7a:29:14:02:33:2a:b5:ae: 7b:ad:a7:65:4b:ab:a2:02:7d:65:4b:24:be:af:7d:7b:e4:ad: 48:b4:e9:77:c2:2d:49:35:7a:ba:eb:ef:d5:63:11:d7:d4:12: 38:6f:02:1d:7a:76:44:bb:c3:b5:f9:78:c8:cf:b9:38:9d:7e: 5c:17:fb:04:d7:d9:99:4e:10:c1:73:d6:87:0f:16:c4:a9:29: 25:b0:0b:2e:a9:6c:a0:0e:34:17:96:2d:c7:63:16:d0:76:d8: 01:97:be:79:a8:81:1f:61:ec:1e:18:8b:c6:e6:13:3e:bf:bc: 56:32:72:1b:6d:76:68:3b:62:45:57:60:21:28:6b:21:8f:be: bf:9d:a3:dc:ad:7a:cf:3c:19:58:ab:0b:4b:f5:65:dd:c4:83: 33:16:01:6a:be:74:e2:99:56:3b:35:0d:4e:57:30:ab:68:65: 53:7f:1e:83:b8:04:92:ef:40:65:24:3a:d7:1c:5d:c9:5a:a8: dc:7d:a6:c2:5b:54:77:55:33:80:9d:4a:97:04:26:b4:b4:ce: 56:28:43:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQH0Hg1HHpIzVLEE+GstmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0 NDE5NzkwHhcNMjYwMTE4MDgwMTA3WhcNMjYwMTE5MDgwMTA3WjAzMTEwLwYDVQQD Eyg0NmE3OTkwMjQ5YTM4ZWRjNGRlNDNiMDE4OTQ4ZjA1ZDBmNjQyMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8WK/JA20Wu26gidC4h6QK76T8QW zsEiUn7IhRoI0ufgj270mxhJ5OG5q1utZ6Ec9k9W9RaygqzISZzQJxHT8au9aYLq /zgk26l/oVgXs4mzPh+rNHKnoaYwL5aRNQ6u7+22fhUU1pmJVE5srRipF8dlaK42 hFqxziJZ5jEGhji+0iodxcwmmjK0A5Pk848MN352loy9zGUr4nATaHvpy3OLGckL tRy6dRrT3r5bgz0SHkl33NNLON2FE1L9IBpwEl+9n62WZGPPJ0R3osjzlB90jf2Q Z2FyTG/s4Cq94U3H/g3DrR/j6PjJxHcApr4nHSKf34e9QFg5N9Bn9mf3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEanmQJJo47cTeQ7AYlI8F0PZCKOMB8GA1UdIwQY MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBoPbb5K 4EkAn7XPqXMbxweOfmcQUZnZHCUoy+GUPSz5oCgP9SLQd80nWEMhwXopFAIzKrWu e62nZUurogJ9ZUskvq99e+StSLTpd8ItSTV6uuvv1WMR19QSOG8CHXp2RLvDtfl4 yM+5OJ1+XBf7BNfZmU4QwXPWhw8WxKkpJbALLqlsoA40F5Ytx2MW0HbYAZe+eaiB H2HsHhiLxuYTPr+8VjJyG212aDtiRVdgIShrIY++v52j3K16zzwZWKsLS/Vl3cSD MxYBar504plWOzUNTlcwq2hlU38eg7gEku9AZSQ61xxdyVqo3H2mwltUd1UzgJ1K lwQmtLTOVihDIQ== -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:57 2026 by rpki-client