This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json) Hash identifier: MyjmdY6TQtCfOtRDmGxwi+qHOrE173Di0iWw2yU0w30= Subject key identifier: 51:11:D1:4E:61:56:59:1C:55:E4:C0:B1:45:5C:37:E3:20:75:CD:EC Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Certificate serial: 019BDFFFC0CB8C593B25FA12ABB3D7C9727C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft Manifest number: 0A7B Signing time: Wed 21 Jan 2026 10:00:38 +0000 Manifest this update: Wed 21 Jan 2026 10:00:38 +0000 Manifest next update: Thu 22 Jan 2026 10:00:38 +0000 Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=) 2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: g3C812M6qY+yX5ReMzd6kL6w2VzGH9KKFUPC/fVIrgI=) 3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:ff:c0:cb:8c:59:3b:25:fa:12:ab:b3:d7:c9:72:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Validity Not Before: Jan 21 10:00:38 2026 GMT Not After : Jan 22 10:00:38 2026 GMT Subject: CN=5111d14e6156591c55e4c0b1455c37e32075cdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:8c:6e:3c:f7:fc:4a:85:be:68:50:b3:02: 5f:d5:93:fa:d8:7b:e7:03:1d:10:2c:56:6d:92:06: 4d:a4:3a:76:97:6a:66:8c:2d:ed:83:3d:dd:52:ec: 47:1e:35:5a:44:3b:c7:92:a2:90:13:4e:7a:05:d8: d6:84:c2:4d:8b:57:5f:60:7f:ce:0e:66:3d:04:ca: 35:aa:40:94:1b:ca:0f:fc:53:69:c4:11:59:2b:b6: 3f:8c:8a:6e:d1:79:6b:73:81:60:dc:29:28:b6:fa: 24:69:93:4c:75:d4:e6:33:89:53:6e:b8:15:17:3c: 50:68:f3:13:99:2d:31:43:a3:2d:1d:e2:1a:d6:47: a8:08:e6:88:e5:b8:fd:c0:31:63:fa:37:52:d3:a2: 60:f5:b7:f8:9b:44:f4:cf:03:f6:df:ec:bd:f8:94: f7:f5:41:2d:6e:9e:7b:2a:31:b9:d6:7e:ea:27:5c: 0a:14:8f:b3:30:5d:79:70:cf:f4:a0:92:f6:d4:df: 90:46:e8:76:4a:69:6c:d3:74:37:39:1b:96:3b:73: 31:d4:b2:89:9d:32:bb:eb:4b:03:5c:64:d6:b9:04: 1c:30:c9:05:f1:12:47:f5:8e:2a:83:e2:f6:f7:0f: f3:c4:bf:68:cb:d9:50:d8:12:95:88:b6:ff:e3:f9: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:11:D1:4E:61:56:59:1C:55:E4:C0:B1:45:5C:37:E3:20:75:CD:EC X509v3 Authority Key Identifier: keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:28:2a:a7:87:85:a3:c3:60:1d:e1:f0:eb:06:1f:80:02:48: 52:d3:ad:33:57:8f:85:75:42:84:cd:d1:82:8d:3e:27:3d:42: b4:ac:6d:b3:d0:0d:32:67:f1:d1:bc:15:7e:84:d3:cd:8d:91: 8e:85:ef:f2:32:ea:51:88:37:3b:f8:c9:0a:8d:a6:c6:42:8a: 1d:d5:d8:8b:74:a1:02:22:26:0d:47:34:44:c9:a6:7e:30:db: 47:7d:86:58:9e:32:1b:e3:cf:7b:2e:d6:c0:64:80:6e:46:d9: 44:4f:e0:6b:9e:d8:96:9f:6f:24:53:d2:b4:1e:0b:d7:cc:79: 03:5c:70:10:1c:e9:9c:40:42:2f:64:be:7d:6d:d6:2b:e2:63: 47:4c:f0:0d:a2:81:e5:15:4e:b9:b9:40:ad:84:69:12:b5:51: 34:70:60:99:21:b3:6f:1f:79:5e:71:05:b1:d0:33:f3:b6:dd: 8b:e3:ef:44:af:bd:3d:25:2c:fe:93:f5:35:37:f0:34:53:32: 97:94:4e:f7:55:40:70:e6:1e:6d:a4:f0:e1:09:b3:14:dd:16: 61:ee:d6:c7:e9:69:c0:19:c8:15:59:90:2c:64:d4:b4:12:d9: aa:c0:c5:8d:f6:7c:20:c1:b0:28:0a:f8:7b:24:89:fa:5f:e0: 91:38:ba:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvf/8DLjFk7JfoSq7PXyXJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi NDYyZTcwHhcNMjYwMTIxMTAwMDM4WhcNMjYwMTIyMTAwMDM4WjAzMTEwLwYDVQQD Eyg1MTExZDE0ZTYxNTY1OTFjNTVlNGMwYjE0NTVjMzdlMzIwNzVjZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3haMbjz3/EqFvmhQswJf1ZP62Hvn Ax0QLFZtkgZNpDp2l2pmjC3tgz3dUuxHHjVaRDvHkqKQE056BdjWhMJNi1dfYH/O DmY9BMo1qkCUG8oP/FNpxBFZK7Y/jIpu0Xlrc4Fg3CkotvokaZNMddTmM4lTbrgV FzxQaPMTmS0xQ6MtHeIa1keoCOaI5bj9wDFj+jdS06Jg9bf4m0T0zwP23+y9+JT3 9UEtbp57KjG51n7qJ1wKFI+zMF15cM/0oJL21N+QRuh2Smls03Q3ORuWO3Mx1LKJ nTK760sDXGTWuQQcMMkF8RJH9Y4qg+L29w/zxL9oy9lQ2BKViLb/4/kYuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFER0U5hVlkcVeTAsUVcN+Mgdc3sMB8GA1UdIwQY MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCgqp4eF o8NgHeHw6wYfgAJIUtOtM1ePhXVChM3Rgo0+Jz1CtKxts9ANMmfx0bwVfoTTzY2R joXv8jLqUYg3O/jJCo2mxkKKHdXYi3ShAiImDUc0RMmmfjDbR32GWJ4yG+PPey7W wGSAbkbZRE/ga57Ylp9vJFPStB4L18x5A1xwEBzpnEBCL2S+fW3WK+JjR0zwDaKB 5RVOublArYRpErVRNHBgmSGzbx95XnEFsdAz87bdi+PvRK+9PSUs/pP1NTfwNFMy l5RO91VAcOYebaTw4QmzFN0WYe7Wx+lpwBnIFVmQLGTUtBLZqsDFjfZ8IMGwKAr4 eySJ+l/gkTi6Rw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:53 2026 by rpki-client