This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json) Hash identifier: l7PzQrGBJ2W5x32MoknAhCVSQ/m5+mGdBn9NF0dYWYc= Subject key identifier: DD:21:53:33:FE:72:29:79:51:81:DB:BC:4B:64:FE:87:03:15:C8:E8 Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Certificate serial: 019BDFFFD5F790DE61C3935B910F55D5F21A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft Manifest number: 072C Signing time: Wed 21 Jan 2026 10:00:44 +0000 Manifest this update: Wed 21 Jan 2026 10:00:44 +0000 Manifest next update: Thu 22 Jan 2026 10:00:44 +0000 Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: NysTA3b5jvZfXsMCy167ZGf0neDY3hdC0xzqpsLhDls=) 2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=) 3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:ff:d5:f7:90:de:61:c3:93:5b:91:0f:55:d5:f2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Validity Not Before: Jan 21 10:00:44 2026 GMT Not After : Jan 22 10:00:44 2026 GMT Subject: CN=dd215333fe7229795181dbbc4b64fe870315c8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:e8:bb:f8:b2:95:85:45:b6:72:1b:cb:bf: 50:01:30:7c:42:0a:5e:ce:51:92:75:78:a9:ad:23: 5c:0f:75:b4:aa:89:c0:33:c5:2b:57:a5:3a:2e:da: 07:88:03:83:00:26:59:82:76:ae:5d:f5:9b:65:0f: 69:ae:43:a2:b0:2d:a7:28:dc:1e:4c:87:0c:c4:92: 2a:93:fd:45:fd:20:28:cb:73:88:4b:05:52:08:b4: a0:15:5d:be:6d:46:77:23:93:97:96:76:1c:24:9b: 91:f2:ad:45:85:04:74:30:cd:08:b5:d1:37:b2:ea: 77:cd:0f:d2:58:41:9c:3c:43:b0:ca:08:b4:18:18: b8:0d:55:79:31:69:89:57:b8:f8:64:3a:d0:50:1c: a9:f2:f1:92:d1:6b:91:09:5a:fa:ee:be:6d:cb:a2: dd:d8:05:a9:8f:b9:3f:8e:3c:b7:82:d8:d9:4e:c7: 9f:09:c9:eb:3e:87:02:d2:a7:9d:48:ba:e7:f3:2f: 2a:99:6f:03:76:f8:9b:0b:fb:f1:9c:13:f2:50:31: 06:4a:91:87:22:1a:00:d9:72:76:9f:95:e0:15:32: 81:19:e4:0e:ee:ae:8d:d0:9f:cf:b6:ae:65:ac:dd: 06:bb:ea:0f:35:f7:54:3a:b8:15:c7:59:2a:ff:cc: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:21:53:33:FE:72:29:79:51:81:DB:BC:4B:64:FE:87:03:15:C8:E8 X509v3 Authority Key Identifier: keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c7:83:58:cb:a7:59:5f:38:1e:04:f2:47:5e:fc:33:fe:42: 2c:4f:fe:b6:73:f7:1b:ec:c3:74:37:63:22:98:74:1e:e1:da: bc:14:35:23:23:4d:1d:26:7f:de:07:2f:ae:8b:d9:35:d0:f1: 45:47:1c:35:c8:60:1c:fb:69:51:02:81:f5:c2:e1:e0:31:15: 12:bf:d4:2c:cb:e5:e4:3f:80:c1:34:9a:31:7f:66:c6:76:15: 96:3e:a1:55:7d:f8:55:5a:d0:75:38:ac:5a:de:8a:5d:4e:16: 11:73:a7:1c:78:5c:fe:e8:48:52:06:ba:cf:49:c4:5a:54:80: 3c:7f:f0:e7:10:57:bf:e2:20:aa:76:b1:9d:09:e2:18:ee:6f: aa:bc:04:b4:6e:86:8e:5b:1d:b5:82:2a:ca:55:ce:1e:7e:45: 15:8c:eb:79:51:a9:43:e1:b5:b2:de:6a:38:6f:e2:b0:85:c3: 7f:c9:7b:31:a7:fe:22:0f:44:a5:5d:fc:ad:06:5d:7a:57:33: e6:a7:57:1c:4e:47:00:db:65:c8:2a:2a:68:31:cb:10:36:f6: 71:0f:ed:6e:91:51:a4:99:de:29:7b:46:14:07:f4:7e:d7:a0: 1e:b8:1a:be:e4:5b:cb:fd:62:19:8f:43:c3:81:c3:96:ec:a2: 49:ec:7c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvf/9X3kN5hw5NbkQ9V1fIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh MzBhNDIwHhcNMjYwMTIxMTAwMDQ0WhcNMjYwMTIyMTAwMDQ0WjAzMTEwLwYDVQQD EyhkZDIxNTMzM2ZlNzIyOTc5NTE4MWRiYmM0YjY0ZmU4NzAzMTVjOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs53ou/iylYVFtnIby79QATB8Qgpe zlGSdXiprSNcD3W0qonAM8UrV6U6LtoHiAODACZZgnauXfWbZQ9prkOisC2nKNwe TIcMxJIqk/1F/SAoy3OISwVSCLSgFV2+bUZ3I5OXlnYcJJuR8q1FhQR0MM0ItdE3 sup3zQ/SWEGcPEOwygi0GBi4DVV5MWmJV7j4ZDrQUByp8vGS0WuRCVr67r5ty6Ld 2AWpj7k/jjy3gtjZTsefCcnrPocC0qedSLrn8y8qmW8DdvibC/vxnBPyUDEGSpGH IhoA2XJ2n5XgFTKBGeQO7q6N0J/Ptq5lrN0Gu+oPNfdUOrgVx1kq/8xBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0hUzP+cil5UYHbvEtk/ocDFcjoMB8GA1UdIwQY MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0 LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABceDWMun WV84HgTyR178M/5CLE/+tnP3G+zDdDdjIph0HuHavBQ1IyNNHSZ/3gcvrovZNdDx RUccNchgHPtpUQKB9cLh4DEVEr/ULMvl5D+AwTSaMX9mxnYVlj6hVX34VVrQdTis Wt6KXU4WEXOnHHhc/uhIUga6z0nEWlSAPH/w5xBXv+IgqnaxnQniGO5vqrwEtG6G jlsdtYIqylXOHn5FFYzreVGpQ+G1st5qOG/isIXDf8l7Maf+Ig9EpV38rQZdelcz 5qdXHE5HANtlyCoqaDHLEDb2cQ/tbpFRpJneKXtGFAf0ftegHrgavuRby/1iGY9D w4HDluyiSex83A== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:15 2026 by rpki-client