This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json) Hash identifier: RlsWzs3pcoM0puJIovSONqA+p5Om2MGGLJ7c129Iin8= Subject key identifier: 80:EF:C9:3F:B8:36:7B:4A:93:2C:AD:3E:D2:94:37:81:2C:B1:42:78 Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019BC263A026BFAA14852D5806A12599673D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft Manifest number: 17D2 Signing time: Thu 15 Jan 2026 16:01:07 +0000 Manifest this update: Thu 15 Jan 2026 16:01:07 +0000 Manifest next update: Fri 16 Jan 2026 16:01:07 +0000 Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=) 2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=) 3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=) 4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: qVvxOVaaK0hCuOntlUhuoEyhjcWM8SqpmXFUpqcjVPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:63:a0:26:bf:aa:14:85:2d:58:06:a1:25:99:67:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Jan 15 16:01:07 2026 GMT Not After : Jan 16 16:01:07 2026 GMT Subject: CN=80efc93fb8367b4a932cad3ed29437812cb14278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:d9:96:d3:a4:c9:9d:af:84:58:01:26:cd: f3:92:b3:22:6f:52:5d:0e:a8:16:a4:ad:03:a0:fb: c1:39:05:e6:f2:ab:0b:43:40:5e:c3:89:86:5b:f9: 19:59:56:61:9c:33:93:b4:49:f1:6d:f9:10:d5:e5: 72:69:15:d5:0b:09:54:ce:a7:32:d9:3f:16:12:70: e2:ee:da:bc:2d:9c:2f:ea:16:77:67:94:62:bb:05: 39:14:50:6b:77:cc:17:ea:4a:7e:18:0f:c4:69:f5: 34:93:64:f3:3c:df:8c:3f:77:62:6a:84:c7:07:24: 1a:c0:6c:61:06:1e:44:d5:d0:3c:e5:4e:5f:a2:2b: e8:90:05:35:b7:f5:df:2e:25:1f:a7:ce:41:d1:c7: 03:7d:5e:7c:cc:53:68:d9:17:e6:42:51:63:ae:bd: 55:ef:0f:2e:bb:2a:39:a0:f6:0a:2a:9d:d4:40:1b: e6:38:08:f2:b9:42:40:f5:45:f5:4e:fc:da:fe:cc: 9d:94:2a:32:db:74:25:be:09:94:b8:d8:d7:f0:cf: b1:f3:8e:f2:64:bf:2a:ca:83:f1:31:19:e7:60:cc: 31:4a:51:54:25:cc:fb:72:b4:ae:41:75:1d:63:46: 87:68:71:eb:90:0d:65:83:9a:3b:3e:bc:06:47:71: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EF:C9:3F:B8:36:7B:4A:93:2C:AD:3E:D2:94:37:81:2C:B1:42:78 X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bf:83:66:3b:da:21:24:12:a2:47:0c:37:c2:67:f5:76:84: a6:b3:8d:58:13:b9:b7:0d:7d:bd:72:8b:51:da:00:a8:80:eb: 69:88:68:1e:6d:4a:a8:08:e8:db:b0:30:ef:d5:f7:ee:b4:32: bf:39:4b:98:18:01:6c:32:a1:22:a3:db:48:3d:3a:c7:70:ab: 81:68:83:4d:bf:56:cb:93:a2:66:f3:5b:46:d9:bf:45:93:79: 60:f0:51:51:1f:e3:33:f3:01:0a:2c:f6:31:2d:d0:5d:ce:c0: ec:1e:ae:a3:44:24:f0:23:3d:a4:16:1f:81:a0:93:16:fa:7d: 1a:af:a7:b6:70:3a:4e:1d:e3:72:9c:00:15:20:fb:e3:ed:1f: 57:fd:e0:78:e4:8a:65:7f:7d:b0:24:d3:85:84:60:22:9d:38: e7:fe:0d:71:bb:ca:ac:e1:67:e3:85:cc:b2:cf:8d:6b:78:0a: 46:11:55:4b:78:68:1b:99:9f:fe:c9:f1:04:ee:cd:50:f3:f0: aa:17:fb:1c:48:f7:9b:8f:1f:b9:6d:8b:8b:8a:12:a9:37:6b: 0f:21:c7:9c:f1:07:92:b0:5f:03:39:a8:5c:8f:7a:90:a0:3e: b0:02:da:d0:c8:c3:a6:b2:5e:27:25:43:10:b1:88:0f:f6:bd: 3d:7d:7b:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvCY6Amv6oUhS1YBqElmWc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjYwMTE1MTYwMTA3WhcNMjYwMTE2MTYwMTA3WjAzMTEwLwYDVQQD Eyg4MGVmYzkzZmI4MzY3YjRhOTMyY2FkM2VkMjk0Mzc4MTJjYjE0Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqjZltOkyZ2vhFgBJs3zkrMib1Jd DqgWpK0DoPvBOQXm8qsLQ0Bew4mGW/kZWVZhnDOTtEnxbfkQ1eVyaRXVCwlUzqcy 2T8WEnDi7tq8LZwv6hZ3Z5RiuwU5FFBrd8wX6kp+GA/EafU0k2TzPN+MP3diaoTH ByQawGxhBh5E1dA85U5foivokAU1t/XfLiUfp85B0ccDfV58zFNo2RfmQlFjrr1V 7w8uuyo5oPYKKp3UQBvmOAjyuUJA9UX1Tvza/sydlCoy23QlvgmUuNjX8M+x847y ZL8qyoPxMRnnYMwxSlFUJcz7crSuQXUdY0aHaHHrkA1lg5o7PrwGR3HTbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDvyT+4NntKkyytPtKUN4EssUJ4MB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7+DZjva ISQSokcMN8Jn9XaEprONWBO5tw19vXKLUdoAqIDraYhoHm1KqAjo27Aw79X37rQy vzlLmBgBbDKhIqPbSD06x3CrgWiDTb9Wy5OiZvNbRtm/RZN5YPBRUR/jM/MBCiz2 MS3QXc7A7B6uo0Qk8CM9pBYfgaCTFvp9Gq+ntnA6Th3jcpwAFSD74+0fV/3geOSK ZX99sCTThYRgIp045/4NcbvKrOFn44XMss+Na3gKRhFVS3hoG5mf/snxBO7NUPPw qhf7HEj3m48fuW2Li4oSqTdrDyHHnPEHkrBfAzmoXI96kKA+sALa0MjDprJeJyVD ELGID/a9PX176A== -----END CERTIFICATE-----Generated at Thu Jan 15 20:02:42 2026 by rpki-client