This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: 0RGYhi0nc4CA3xY+Racui26dCKEsF6Jx4NUrBh08MCU= Subject key identifier: F0:51:B8:2C:64:B9:08:D8:3D:AE:8B:14:8C:70:4A:05:81:B8:7B:13 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019BE03714ED2D72D0241584847F7787DF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1800 Signing time: Wed 21 Jan 2026 11:01:04 +0000 Manifest this update: Wed 21 Jan 2026 11:01:04 +0000 Manifest next update: Thu 22 Jan 2026 11:01:04 +0000 Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=) 2: Lbd7OlSYZZwy_6X1BIMG6Koz7d4.roa (hash: tiYUvDBlf1LQU9lfVQg2G8kbpiC1hXVYCRazqiEsZus=) 3: O0rfOGz-McmMnU1eCY2sEgNi7PU.roa (hash: 4rQUZ3pnpaJVp0N8CW/NojdvUgqmwQuyE4ZpcBYicXU=) 4: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: U9X9DV09T3U911iphn/ZUl+f1ilXoXvkdxiehomIkAY=) 5: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=) 6: UKBFNmW-avu0y-ZELfNkwrzKuSM.roa (hash: SdZuGRpwFqsC6fwO8VFNthsAajlBrQzgt1h1a3a0ulc=) 7: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=) 8: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (hash: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0=) 9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=) 10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=) 11: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (hash: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:37:14:ed:2d:72:d0:24:15:84:84:7f:77:87:df:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jan 21 11:01:04 2026 GMT Not After : Jan 22 11:01:04 2026 GMT Subject: CN=f051b82c64b908d83dae8b148c704a0581b87b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:01:23:c7:0e:35:19:da:da:28:4f:8a:03: 11:7b:49:9b:ec:32:0a:f0:ce:5f:04:d5:76:45:50: dc:0a:d5:95:28:57:20:c6:e3:fe:e4:9d:b8:24:d6: 51:16:b6:38:db:31:af:e5:a0:90:f7:51:d3:5d:8e: 48:1c:49:fb:13:9f:6d:32:04:cd:11:bf:3c:9e:7e: 70:ba:9e:01:51:45:94:bc:9d:95:93:83:cc:96:45: 85:0b:43:1c:13:af:3d:05:83:52:6a:90:ae:37:5f: b2:e1:70:3b:c1:27:85:41:cf:59:fb:7f:2c:5d:3c: dc:86:98:c7:f0:49:1e:29:3b:cf:62:78:14:40:39: 1b:4c:6a:15:45:56:ea:5c:a7:4b:c5:78:dd:8a:5f: 14:7c:68:75:79:a4:31:f7:89:10:2d:ce:72:97:78: 7f:ba:ec:92:ac:3c:7a:e4:07:26:78:f5:11:46:9c: 77:e4:47:aa:f3:ae:63:06:c5:da:21:2b:17:51:fb: 5e:c8:05:39:86:69:23:1b:d5:50:d0:51:fb:66:3b: b3:34:b1:6b:37:cf:c7:18:6a:b9:cc:13:78:cf:0b: f0:18:6c:ce:7b:df:c3:89:a9:60:07:34:c8:37:12: bb:44:55:8a:06:12:6c:70:41:a3:20:bd:f5:af:25: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:51:B8:2C:64:B9:08:D8:3D:AE:8B:14:8C:70:4A:05:81:B8:7B:13 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:5e:5c:39:08:b3:02:d3:2a:f7:b0:df:44:40:4b:4d:95: 55:50:33:46:a9:58:2b:05:5a:88:ce:51:07:4a:8a:1b:6f:63: 98:b0:0c:ad:e6:82:36:74:e9:6e:1f:0f:c1:e0:60:9e:a6:03: 24:1a:54:d8:e7:d3:0e:bf:a9:6f:2d:00:65:74:49:4c:9b:53: a3:a8:4c:30:4d:0b:6d:92:f9:07:a7:a9:60:c1:bc:bd:c1:b2: e3:50:46:40:0f:9f:f8:aa:7e:e7:63:d5:2b:cf:af:b6:bc:5e: be:1d:dd:b0:5a:6c:87:13:29:d9:9d:fc:57:6a:07:52:cf:72: f6:04:2f:e4:25:a3:40:9a:be:54:5d:ac:11:86:91:a5:cf:23: 47:1c:bf:ad:a2:1a:8b:96:1e:e0:e9:f8:8d:d9:8a:9d:74:d6: 24:c5:53:cd:75:d5:45:60:99:3e:a2:7d:04:aa:56:b5:7f:f7: 0d:aa:d1:15:95:96:09:28:45:49:f7:c2:76:31:07:b9:e9:60: 37:af:8a:72:fd:c9:d5:ff:99:9c:4a:75:fa:63:ee:4d:34:02: 96:ec:0e:ca:38:d1:1d:f5:b3:0f:68:4a:3e:9b:b4:34:55:cb: bf:3e:d7:35:77:e5:cf:6a:a0:4d:0a:95:df:9b:9c:af:34:4b: 94:69:2b:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNxTtLXLQJBWEhH93h9+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMTIxMTEwMTA0WhcNMjYwMTIyMTEwMTA0WjAzMTEwLwYDVQQD EyhmMDUxYjgyYzY0YjkwOGQ4M2RhZThiMTQ4YzcwNGEwNTgxYjg3YjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnABI8cONRna2ihPigMRe0mb7DIK 8M5fBNV2RVDcCtWVKFcgxuP+5J24JNZRFrY42zGv5aCQ91HTXY5IHEn7E59tMgTN Eb88nn5wup4BUUWUvJ2Vk4PMlkWFC0McE689BYNSapCuN1+y4XA7wSeFQc9Z+38s XTzchpjH8EkeKTvPYngUQDkbTGoVRVbqXKdLxXjdil8UfGh1eaQx94kQLc5yl3h/ uuySrDx65AcmePURRpx35Eeq865jBsXaISsXUfteyAU5hmkjG9VQ0FH7ZjuzNLFr N8/HGGq5zBN4zwvwGGzOe9/DialgBzTINxK7RFWKBhJscEGjIL31ryUarQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBRuCxkuQjYPa6LFIxwSgWBuHsTMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY9eXDkI swLTKvew30RAS02VVVAzRqlYKwVaiM5RB0qKG29jmLAMreaCNnTpbh8PweBgnqYD JBpU2OfTDr+pby0AZXRJTJtTo6hMME0LbZL5B6epYMG8vcGy41BGQA+f+Kp+52PV K8+vtrxevh3dsFpshxMp2Z38V2oHUs9y9gQv5CWjQJq+VF2sEYaRpc8jRxy/raIa i5Ye4On4jdmKnXTWJMVTzXXVRWCZPqJ9BKpWtX/3DarRFZWWCShFSffCdjEHuelg N6+Kcv3J1f+ZnEp1+mPuTTQCluwOyjjRHfWzD2hKPpu0NFXLvz7XNXflz2qgTQqV 35ucrzRLlGkrLg== -----END CERTIFICATE-----Generated at Wed Jan 21 17:37:25 2026 by rpki-client