This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json) Hash identifier: EF04MBBaSewhEW8Fhd7oK/3tDyYoXvMhM4WV1iN0LTc= Subject key identifier: 61:06:E6:B5:F0:FB:CE:F7:32:12:2D:61:06:59:56:A9:B9:DE:36:31 Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47 Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047 Certificate serial: 019BFCC0EE338F597E891C98906A46453F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft Manifest number: 0665 Signing time: Tue 27 Jan 2026 00:01:00 +0000 Manifest this update: Tue 27 Jan 2026 00:01:00 +0000 Manifest next update: Wed 28 Jan 2026 00:01:00 +0000 Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: 1dlTu+WAI4wlN6B/j66ps8mgQgEtO/jiE/4fvqTHy7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:ee:33:8f:59:7e:89:1c:98:90:6a:46:45:3f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047 Validity Not Before: Jan 27 00:01:00 2026 GMT Not After : Jan 28 00:01:00 2026 GMT Subject: CN=6106e6b5f0fbcef732122d61065956a9b9de3631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:c8:7d:20:c3:6a:78:64:4c:5e:b1:5f:a7: 30:62:81:0b:08:b3:ab:d9:f7:06:b0:2d:b7:4f:c5: d7:18:fc:ba:e4:48:d4:f0:cd:e2:b8:01:bc:d0:cd: 33:80:20:a0:8d:90:97:0f:3e:6d:58:76:69:a3:71: 05:47:86:95:b4:c3:79:2b:da:f4:e9:ec:20:36:25: 53:a2:85:f4:45:4a:c4:47:55:11:79:db:f4:4a:16: 80:a7:ba:6a:a8:f9:23:1a:7d:e5:79:33:40:e7:66: b9:67:68:57:89:55:24:cf:b6:6f:83:b9:ae:0f:e3: 7e:0f:3e:f3:86:92:84:81:03:85:67:a4:81:27:35: c3:ba:81:5b:90:63:00:d1:7c:a0:9a:cd:96:b5:47: 39:66:5d:c0:3f:78:17:6b:86:e2:a3:9a:f6:be:19: d4:1f:f2:2b:d9:7f:92:35:be:d0:72:e9:58:9e:30: 85:d9:f4:07:cc:a2:cc:1a:a1:be:c0:72:e4:89:05: f6:66:f0:cc:7e:1e:94:c8:4a:5b:bb:03:b2:90:b8: 3e:70:c6:69:e3:11:98:87:71:e7:23:f3:0b:90:c9: 0d:f2:81:9f:dc:97:6b:0f:30:f2:d8:ad:4b:53:90: 45:a4:3f:e7:f8:bc:d1:37:3b:74:d8:b4:90:3b:55: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:06:E6:B5:F0:FB:CE:F7:32:12:2D:61:06:59:56:A9:B9:DE:36:31 X509v3 Authority Key Identifier: keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:3e:14:77:59:fc:b1:ee:91:5c:fb:20:2a:86:d3:9d:3b: 64:52:a9:b7:69:eb:c1:79:6c:76:ae:fa:82:0f:82:c7:c7:1b: 2a:0a:cf:8f:0a:66:e4:40:81:bf:40:f2:f0:d2:09:0b:57:5f: 1d:55:cc:e9:ea:90:7a:db:74:9f:58:29:8e:14:b3:00:35:8f: aa:10:14:b7:7f:95:75:ce:3a:57:41:35:77:76:88:4d:b3:79: 20:92:8f:b6:2c:4b:b7:11:e6:9a:c8:b9:35:bc:3e:7b:4d:ac: c4:09:af:50:bc:52:3f:7a:46:3e:65:15:1a:e4:23:94:eb:40: 97:ea:36:7b:e5:a7:8d:15:90:61:73:9d:77:13:67:e7:c9:ce: ed:0d:2c:f2:c5:7e:4c:10:dc:e1:e9:8d:8c:20:6c:72:57:87: d9:a1:c3:d8:b7:55:30:e1:8a:18:eb:67:09:70:de:54:be:7f: 07:21:79:4e:b7:13:14:d9:42:37:84:75:e3:68:f9:d3:a1:7f: 8b:9e:70:7a:32:61:51:02:5d:97:b6:3e:66:88:d8:0e:16:f0: c8:38:b6:f3:af:b8:12:c0:66:5c:da:14:be:48:aa:3f:75:2a: bb:c2:e0:b0:f3:17:74:9a:b0:14:aa:9e:31:02:fc:09:99:34: 7f:71:e0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wO4zj1l+iRyYkGpGRT8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmEzODViZTA1MmJmYTQwNWRmYWNkMjlmMjZhYjZmMDAx ZTYwNDcwHhcNMjYwMTI3MDAwMTAwWhcNMjYwMTI4MDAwMTAwWjAzMTEwLwYDVQQD Eyg2MTA2ZTZiNWYwZmJjZWY3MzIxMjJkNjEwNjU5NTZhOWI5ZGUzNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCDIfSDDanhkTF6xX6cwYoELCLOr 2fcGsC23T8XXGPy65EjU8M3iuAG80M0zgCCgjZCXDz5tWHZpo3EFR4aVtMN5K9r0 6ewgNiVTooX0RUrER1URedv0ShaAp7pqqPkjGn3leTNA52a5Z2hXiVUkz7Zvg7mu D+N+Dz7zhpKEgQOFZ6SBJzXDuoFbkGMA0Xygms2WtUc5Zl3AP3gXa4bio5r2vhnU H/Ir2X+SNb7QculYnjCF2fQHzKLMGqG+wHLkiQX2ZvDMfh6UyEpbuwOykLg+cMZp 4xGYh3HnI/MLkMkN8oGf3JdrDzDy2K1LU5BFpD/n+LzRNzt02LSQO1Ug8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEG5rXw+873MhItYQZZVqm53jYxMB8GA1UdIwQY MBaAFLT6OFvgUr+kBd+s0p8mq28AHmBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82NzcxMDYtNDA5OS00YWVmLThjYzYt ZTk2MGE1MGNkYzgxLzEvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi82NzcxMDYtNDA5OS00YWVmLThjYzYtZTk2MGE1MGNkYzgx LzEvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACro+FHdZ /LHukVz7ICqG0507ZFKpt2nrwXlsdq76gg+Cx8cbKgrPjwpm5ECBv0Dy8NIJC1df HVXM6eqQett0n1gpjhSzADWPqhAUt3+Vdc46V0E1d3aITbN5IJKPtixLtxHmmsi5 Nbw+e02sxAmvULxSP3pGPmUVGuQjlOtAl+o2e+WnjRWQYXOddxNn58nO7Q0s8sV+ TBDc4emNjCBscleH2aHD2LdVMOGKGOtnCXDeVL5/ByF5TrcTFNlCN4R142j506F/ i55wejJhUQJdl7Y+ZojYDhbwyDi286+4EsBmXNoUvkiqP3Uqu8LgsPMXdJqwFKqe MQL8CZk0f3HgTw== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:40 2026 by rpki-client