This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json) Hash identifier: 7xVJeAUJIY49v6W+xh6PX/DsnrUng5wBz7iDarxMCz4= Subject key identifier: F6:E7:37:A2:68:02:72:EE:07:33:D1:5D:4E:E2:D1:5C:D7:C6:BB:0F Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce Certificate serial: 019BFBAEE5ACA5AE6CF52968C07845064B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft Manifest number: 04 Signing time: Mon 26 Jan 2026 19:01:41 +0000 Manifest this update: Mon 26 Jan 2026 19:01:41 +0000 Manifest next update: Tue 27 Jan 2026 19:01:41 +0000 Files and hashes: 1: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=) 2: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: EAt5QnFQvhcY5qKShXQUGTg3RqATsqsKU+L73HYrhE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e5:ac:a5:ae:6c:f5:29:68:c0:78:45:06:4b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce Validity Not Before: Jan 26 19:01:41 2026 GMT Not After : Jan 27 19:01:41 2026 GMT Subject: CN=f6e737a2680272ee0733d15d4ee2d15cd7c6bb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:dc:32:a9:6c:97:59:14:e7:88:f5:f0:45: 6e:6d:8b:c6:f5:7f:d8:c2:21:ef:c1:77:76:0f:10: 29:2a:ee:e9:3d:ae:11:73:31:1c:52:06:bd:7d:8a: 01:f1:d9:b4:2b:89:39:ed:c3:10:a1:bb:0e:36:80: 2a:f3:ff:88:89:a2:80:a9:20:46:a6:16:04:98:7f: 9c:b3:d1:ed:69:8a:f9:d6:16:58:35:be:9a:20:37: 19:52:75:0f:e3:80:be:9b:3b:bc:72:df:18:75:2e: f8:b9:63:32:e9:21:b8:a0:e0:47:54:c0:09:a1:b6: e2:f4:51:82:d8:fc:57:ff:30:90:d1:6e:13:64:c8: 70:8e:1d:5d:d7:8b:2b:18:e1:59:ce:7a:5f:df:58: f8:c2:a0:7b:43:0d:38:32:d7:fc:cc:ba:cf:01:d7: d3:ab:96:c0:98:60:a3:df:20:c6:01:f2:8a:22:92: 73:24:f4:3d:ff:fb:e3:b2:66:11:f4:d7:cc:da:27: e3:bb:60:52:b8:d7:05:d7:0c:29:58:9d:67:5f:a9: f6:39:ca:52:8a:b1:f1:6f:7d:23:04:49:1b:e5:49: fe:48:ff:24:4f:ab:4e:a6:7b:5b:b1:7d:ad:d1:cb: 5e:d5:17:c1:38:05:14:93:07:10:54:08:92:99:47: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E7:37:A2:68:02:72:EE:07:33:D1:5D:4E:E2:D1:5C:D7:C6:BB:0F X509v3 Authority Key Identifier: keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:75:ee:d2:84:49:71:d5:8e:fe:2c:a7:0f:74:4d:c1:10: 48:98:04:25:38:44:aa:89:67:ba:78:9d:2f:54:fe:d7:b0:71: 15:1f:0f:34:b3:12:1e:d2:5e:8d:34:45:a9:7a:20:ee:56:f2: 6f:9b:87:66:9d:74:d2:7c:3c:3f:4e:75:2e:83:f3:5f:51:49: 98:2a:90:52:a1:6e:84:42:f6:88:8c:36:e0:8d:05:68:d2:0d: 42:92:b3:39:20:44:77:d6:88:18:cf:e9:23:01:93:07:f2:84: bb:fc:76:bc:be:53:a8:9b:b3:17:e3:3c:31:8d:8d:38:48:3d: 2f:b9:1e:a3:62:a4:a4:c0:f2:44:dd:f9:28:cf:50:0f:1c:96: aa:19:dc:19:cd:2d:f4:04:62:59:51:b7:18:79:dd:10:c0:c4: bf:43:b8:14:3a:1b:22:54:a1:ac:39:b0:e9:de:76:4a:b2:ce: c5:e6:69:50:11:89:e0:78:16:2f:1d:58:0f:fa:51:85:5c:d9: cb:d0:2b:de:88:cb:d8:8b:2d:a1:3d:35:4f:f3:9d:fa:1a:ad: 15:05:3b:36:70:52:69:d9:94:f4:34:59:fa:ad:ea:e9:56:b7: 61:2d:87:e7:e1:a5:50:31:72:28:01:73:24:fe:7a:03:7b:1f: 21:54:08:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ruWspa5s9SlowHhFBktOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NWI2NWQ0MGE1OGY1ZTE0MmMwMGIyY2ViYjgxNGUxN2E0 ZDFjY2UwHhcNMjYwMTI2MTkwMTQxWhcNMjYwMTI3MTkwMTQxWjAzMTEwLwYDVQQD EyhmNmU3MzdhMjY4MDI3MmVlMDczM2QxNWQ0ZWUyZDE1Y2Q3YzZiYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bTcMqlsl1kU54j18EVubYvG9X/Y wiHvwXd2DxApKu7pPa4RczEcUga9fYoB8dm0K4k57cMQobsONoAq8/+IiaKAqSBG phYEmH+cs9HtaYr51hZYNb6aIDcZUnUP44C+mzu8ct8YdS74uWMy6SG4oOBHVMAJ obbi9FGC2PxX/zCQ0W4TZMhwjh1d14srGOFZznpf31j4wqB7Qw04Mtf8zLrPAdfT q5bAmGCj3yDGAfKKIpJzJPQ9//vjsmYR9NfM2ifju2BSuNcF1wwpWJ1nX6n2OcpS irHxb30jBEkb5Un+SP8kT6tOpntbsX2t0cte1RfBOAUUkwcQVAiSmUevNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbnN6JoAnLuBzPRXU7i0VzXxrsPMB8GA1UdIwQY MBaAFLZbZdQKWPXhQsALLOu4FOF6TRzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84YjE0YTMtMTkwZi00MWE0LWI2NmMt YmRmMWJhMDhkNWZlLzEvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84YjE0YTMtMTkwZi00MWE0LWI2NmMtYmRmMWJhMDhkNWZl LzEvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0517tKE SXHVjv4spw90TcEQSJgEJThEqolnunidL1T+17BxFR8PNLMSHtJejTRFqXog7lby b5uHZp100nw8P051LoPzX1FJmCqQUqFuhEL2iIw24I0FaNINQpKzOSBEd9aIGM/p IwGTB/KEu/x2vL5TqJuzF+M8MY2NOEg9L7keo2KkpMDyRN35KM9QDxyWqhncGc0t 9ARiWVG3GHndEMDEv0O4FDobIlShrDmw6d52SrLOxeZpUBGJ4HgWLx1YD/pRhVzZ y9Ar3ojL2IstoT01T/Od+hqtFQU7NnBSadmU9DRZ+q3q6Va3YS2H5+GlUDFyKAFz JP56A3sfIVQIaw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:31 2026 by rpki-client