This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json) Hash identifier: +Ma/ZwRX3wfgyohXwVzLv+XrekeAw1XaSBtBBQodOp0= Subject key identifier: 47:00:BD:41:D3:8C:B2:29:86:18:C5:90:12:D4:92:A3:83:E0:75:65 Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Certificate serial: 019BF8ADC31CF386E9B6B191998425F5BF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft Manifest number: 177C Signing time: Mon 26 Jan 2026 05:01:35 +0000 Manifest this update: Mon 26 Jan 2026 05:01:35 +0000 Manifest next update: Tue 27 Jan 2026 05:01:35 +0000 Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 76/SgW1Kw0IQDJKh2evLr2SJkoiChX4yx/IWszQG5V4=) 2: ZyTWugoefki0oz6k0H0j3uSA6D0.roa (hash: 8RbuK4aoWVsFj9ZjDN4iwth9lW8pdbJFx/Taog1hSJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:c3:1c:f3:86:e9:b6:b1:91:99:84:25:f5:bf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Validity Not Before: Jan 26 05:01:35 2026 GMT Not After : Jan 27 05:01:35 2026 GMT Subject: CN=4700bd41d38cb2298618c59012d492a383e07565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:03:d3:a8:46:68:1d:fc:8d:3c:4b:91:bd: 66:63:44:49:03:2a:e8:54:23:08:cb:e1:ca:5f:2a: 59:0a:96:ca:a4:72:bf:29:d3:4b:78:2d:0e:ff:f4: aa:6b:93:c5:06:be:66:c0:d5:84:34:27:a6:5b:45: f5:f1:f5:e7:ab:56:91:41:47:66:6d:3a:c5:d7:c2: 0f:6d:30:33:b1:6f:73:9b:9b:2a:69:54:8a:64:76: e4:7a:3b:49:df:96:40:38:43:26:20:da:c8:c2:33: 3b:04:4c:1f:8d:34:04:86:f8:f6:a8:ff:8f:77:5d: 57:40:e1:0f:24:33:ee:57:a7:16:40:fc:00:58:52: 27:e1:f7:10:f2:f8:21:cb:4f:c2:63:48:9c:77:5d: 55:ad:84:51:fc:f4:61:c0:5a:a2:29:f4:c4:e6:b3: 88:12:f2:b7:ae:a4:4e:53:de:32:1d:b9:cc:43:e0: 93:f1:eb:b9:fc:19:7d:75:dd:6c:16:7f:d2:e6:ca: a5:ef:ea:31:b6:0f:ba:44:85:e9:ee:2e:85:b8:b5: cc:06:76:05:4a:b4:bd:1c:45:07:2c:c0:57:18:d9: 36:1f:a9:ae:d1:a5:49:3f:f1:cb:c2:e9:60:52:df: 71:e8:f2:d8:a3:10:51:55:2d:82:9e:fc:85:d5:02: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:BD:41:D3:8C:B2:29:86:18:C5:90:12:D4:92:A3:83:E0:75:65 X509v3 Authority Key Identifier: keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:60:0d:70:7a:ff:08:2e:12:9a:1e:79:0e:c5:4e:bf:01:6d: d7:27:00:af:19:04:8e:cd:a1:f3:22:86:5b:80:93:14:ca:95: 36:68:7d:bd:5c:c3:43:e2:f9:6c:ce:32:54:11:11:86:a3:31: c2:1e:72:e8:67:3e:4e:2c:e2:29:4f:f3:ab:35:50:8d:52:ce: 7e:53:7e:67:6f:45:9f:cd:61:e9:d1:14:4e:15:fe:71:b9:76: ba:23:a1:c4:7c:30:ca:f9:62:e0:b0:dd:1c:9d:12:60:5e:d4: 80:cd:8b:34:a0:13:9d:28:34:fa:b6:ab:15:b9:f3:a6:53:14: fd:25:76:e9:a7:35:5b:72:a8:61:29:71:8d:62:56:66:ba:3a: 72:fd:c7:4d:d7:94:1e:70:9b:f8:d2:2d:cf:d5:94:12:9b:2f: 5e:03:5e:44:25:5b:dd:b7:1f:9f:83:cf:a0:62:e9:d7:8c:e9: 8b:75:47:ba:73:e8:84:83:7c:28:c5:cf:b1:22:c4:66:75:09: cd:ce:78:2c:e0:4e:53:09:40:7a:78:f2:5b:9d:01:b9:e5:37: ab:8a:9f:05:ac:7c:93:87:8f:1d:2a:02:28:11:75:20:e3:14: 3a:00:f5:4d:7d:cb:0b:ab:1a:71:4f:d2:d1:57:59:d2:8e:08: d5:4f:90:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rcMc84bptrGRmYQl9b9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx MWEzMTgwHhcNMjYwMTI2MDUwMTM1WhcNMjYwMTI3MDUwMTM1WjAzMTEwLwYDVQQD Eyg0NzAwYmQ0MWQzOGNiMjI5ODYxOGM1OTAxMmQ0OTJhMzgzZTA3NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5MD06hGaB38jTxLkb1mY0RJAyro VCMIy+HKXypZCpbKpHK/KdNLeC0O//Sqa5PFBr5mwNWENCemW0X18fXnq1aRQUdm bTrF18IPbTAzsW9zm5sqaVSKZHbkejtJ35ZAOEMmINrIwjM7BEwfjTQEhvj2qP+P d11XQOEPJDPuV6cWQPwAWFIn4fcQ8vghy0/CY0icd11VrYRR/PRhwFqiKfTE5rOI EvK3rqROU94yHbnMQ+CT8eu5/Bl9dd1sFn/S5sql7+oxtg+6RIXp7i6FuLXMBnYF SrS9HEUHLMBXGNk2H6mu0aVJP/HLwulgUt9x6PLYoxBRVS2CnvyF1QJMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcAvUHTjLIphhjFkBLUkqOD4HVlMB8GA1UdIwQY MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4 LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWANcHr/ CC4Smh55DsVOvwFt1ycArxkEjs2h8yKGW4CTFMqVNmh9vVzDQ+L5bM4yVBERhqMx wh5y6Gc+TiziKU/zqzVQjVLOflN+Z29Fn81h6dEUThX+cbl2uiOhxHwwyvli4LDd HJ0SYF7UgM2LNKATnSg0+rarFbnzplMU/SV26ac1W3KoYSlxjWJWZro6cv3HTdeU HnCb+NItz9WUEpsvXgNeRCVb3bcfn4PPoGLp14zpi3VHunPohIN8KMXPsSLEZnUJ zc54LOBOUwlAenjyW50BueU3q4qfBax8k4ePHSoCKBF1IOMUOgD1TX3LC6sacU/S 0VdZ0o4I1U+QEA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:30:33 2026 by rpki-client