This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: tK/cjcS+lMUNC3pnOTkL0WxPZ0t2wgilp4g/45Qqyys= Subject key identifier: 47:02:6A:57:A1:F0:0C:39:6D:22:C1:69:42:B7:77:AE:F1:38:06:00 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019BD9904063D1401971A7A5E40AB7923C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1720 Signing time: Tue 20 Jan 2026 04:01:08 +0000 Manifest this update: Tue 20 Jan 2026 04:01:08 +0000 Manifest next update: Wed 21 Jan 2026 04:01:08 +0000 Files and hashes: 1: DUa5gfrd1mbJghmCA9wsPUgatiA.roa (hash: vgkaB+FL8lKIjouXupzJZRb3iZtU+i3kKGIirTBXniA=) 2: Jz8RZAWrUimyuGnjG5ub7oNokXU.roa (hash: IeObP/asysAN8PfUm4Hn659vFyCN9hWBT1PSEjvx9O8=) 3: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (hash: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc=) 4: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (hash: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI=) 5: R2uv8D1AC8qkVVlzoluUFlx0Uzc.roa (hash: Px0hZ7oJHqm6VJaRC8v/ew/nIaAHwORSGtXPvMgDntg=) 6: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (hash: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: Rn1Q9XK8wE1/3sHfqo7MhTgmOZJ2jzXEzG3QMZ1UlMs=) 8: Z9fUWXb8OIPHR8i0P4DDBbavjsM.roa (hash: YYmhifcK+2gNYjzHbIMtaIo+1gijW4PRQWGsmCHjKJg=) 9: aUcHGsfbW0LISPIyDevqEjn1Mp8.roa (hash: fbCvEiA8MdH3odLJSEwrCK+swIxRtwa+tYa7l/mkrVw=) 10: biH_EEWeOJOtLOQq6iGC0yelYn0.roa (hash: P54s2GoQrkvwJ9KXymJfJ8rzco9Uv1wsEklV2MlObyE=) 11: gAbatwVqafpDL9WTtIX0TlfDD98.roa (hash: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ=) 12: psnLTq9oj0zoEtX755KpVPy0ws8.roa (hash: 8tn9lCYFdmG1BOJcqSY0wLhBU8frfgy5f/M7MDD6IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:90:40:63:d1:40:19:71:a7:a5:e4:0a:b7:92:3c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jan 20 04:01:08 2026 GMT Not After : Jan 21 04:01:08 2026 GMT Subject: CN=47026a57a1f00c396d22c16942b777aef1380600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:c1:f6:00:fb:a5:ce:88:74:cd:7e:a1:58: 45:29:5e:61:00:ee:0b:01:f1:ad:aa:d7:89:8d:dd: 14:de:ce:25:18:08:c0:8c:f1:4a:cd:15:33:0e:2e: 9e:6d:1c:da:cb:df:63:95:36:5d:0b:96:1b:8b:90: 61:4b:3e:5d:ea:46:00:35:ed:d0:4d:35:6e:98:61: 05:7b:c1:43:fa:6f:90:12:c2:11:a1:68:a0:b4:20: f1:67:99:4e:7b:b0:02:62:31:d8:0e:9b:d6:5c:1f: d0:6e:24:f9:4f:26:85:df:01:fc:07:26:25:88:3f: 4d:61:78:97:45:73:dd:4b:e1:35:1e:e6:09:b5:d8: 05:c9:52:39:b0:e2:80:51:5f:0c:d7:4e:a0:54:4f: ad:ca:92:52:b5:94:7b:15:0b:f4:e9:e0:1e:d0:3d: 82:bc:4c:fb:bc:c4:e2:60:07:05:b0:e8:67:aa:a0: 6f:e4:1a:20:de:c0:6a:0f:d3:a3:88:57:76:ae:ed: fb:a3:48:83:75:fd:6e:ae:4e:21:67:2a:0d:a8:54: 1a:9e:ce:40:04:48:5a:fe:24:7a:55:a5:0b:46:e6: 10:ff:50:ed:06:47:cc:3a:c0:05:81:27:78:04:0a: 9c:8c:db:b3:8d:de:20:31:15:45:29:d7:a1:63:0b: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:02:6A:57:A1:F0:0C:39:6D:22:C1:69:42:B7:77:AE:F1:38:06:00 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a7:0e:d6:b4:c5:55:79:91:f0:08:97:78:1f:ee:33:1d:b6: fe:a7:d1:11:91:4b:f1:13:ac:15:ea:a9:e4:d8:f4:91:bc:93: e2:0a:1e:ac:b5:70:a8:12:8c:ec:d1:bb:c3:37:ae:82:bf:6b: 08:11:23:e1:29:4e:43:32:ff:15:53:47:47:ef:84:b6:89:87: b0:3e:ef:d4:d7:42:01:b8:64:5f:fd:64:4b:82:45:f9:51:ca: d1:63:a1:fe:c1:4a:b2:33:d6:b2:68:3c:db:1d:67:07:ad:6a: 54:63:c5:24:c8:3f:10:96:fa:eb:1b:6b:64:33:0c:65:62:00: 35:0f:70:51:69:35:66:3e:4d:d0:77:54:43:7c:a8:d6:fb:ea: 9a:56:ed:5c:0a:c9:a5:b4:69:f0:80:02:31:ad:1c:2d:ae:c5: 1c:ab:9e:8a:58:83:d9:7b:39:ac:52:03:bc:b3:d1:5f:57:1a: 68:61:ca:a8:b7:44:12:54:4a:e9:17:a0:ed:b6:34:39:04:62: 62:47:6d:11:a3:62:b5:0a:53:2c:d6:b1:8b:51:6b:cb:d7:48: a9:11:48:f0:b8:43:f2:6b:9f:04:d1:5d:e6:0f:85:a4:50:4c: 45:1a:c4:af:68:fd:ed:ae:da:91:0f:9d:cc:c8:bf:7d:4f:f1: 28:43:b3:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZkEBj0UAZcael5Aq3kjyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMTIwMDQwMTA4WhcNMjYwMTIxMDQwMTA4WjAzMTEwLwYDVQQD Eyg0NzAyNmE1N2ExZjAwYzM5NmQyMmMxNjk0MmI3NzdhZWYxMzgwNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYnB9gD7pc6IdM1+oVhFKV5hAO4L AfGtqteJjd0U3s4lGAjAjPFKzRUzDi6ebRzay99jlTZdC5Ybi5BhSz5d6kYANe3Q TTVumGEFe8FD+m+QEsIRoWigtCDxZ5lOe7ACYjHYDpvWXB/QbiT5TyaF3wH8ByYl iD9NYXiXRXPdS+E1HuYJtdgFyVI5sOKAUV8M106gVE+typJStZR7FQv06eAe0D2C vEz7vMTiYAcFsOhnqqBv5Bog3sBqD9OjiFd2ru37o0iDdf1urk4hZyoNqFQans5A BEha/iR6VaULRuYQ/1DtBkfMOsAFgSd4BAqcjNuzjd4gMRVFKdehYwsbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcCaleh8Aw5bSLBaUK3d67xOAYAMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQacO1rTF VXmR8AiXeB/uMx22/qfREZFL8ROsFeqp5Nj0kbyT4goerLVwqBKM7NG7wzeugr9r CBEj4SlOQzL/FVNHR++EtomHsD7v1NdCAbhkX/1kS4JF+VHK0WOh/sFKsjPWsmg8 2x1nB61qVGPFJMg/EJb66xtrZDMMZWIANQ9wUWk1Zj5N0HdUQ3yo1vvqmlbtXArJ pbRp8IACMa0cLa7FHKueiliD2Xs5rFIDvLPRX1caaGHKqLdEElRK6Reg7bY0OQRi YkdtEaNitQpTLNaxi1Fry9dIqRFI8LhD8mufBNFd5g+FpFBMRRrEr2j97a7akQ+d zMi/fU/xKEOzXg== -----END CERTIFICATE-----Generated at Tue Jan 20 14:08:15 2026 by rpki-client