This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft File: T2wXG0x11lCorxdohtAjWjTlnfA.mft (raw, json) Hash identifier: OvR4JlApBtF+Q/KOMaA3YMlUois4+BRrqCYxV1puLGI= Subject key identifier: A7:AD:C9:3E:BB:61:60:24:F4:4F:EC:F9:BA:93:C1:53:CF:B0:90:4D Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Certificate serial: 019C1CB97BC4C45E469F7E0AF6468EABCFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft Manifest number: A4 Signing time: Mon 02 Feb 2026 05:00:43 +0000 Manifest this update: Mon 02 Feb 2026 05:00:43 +0000 Manifest next update: Tue 03 Feb 2026 05:00:43 +0000 Files and hashes: 1: QNFQGcJqwR5MgwCVhTDShs1p8JI.asa (hash: XnQ5Pgw+Hdb0Urr0tyXEs7v/2CmocEBJocw3nGIv1c8=) 2: T2wXG0x11lCorxdohtAjWjTlnfA.crl (hash: xpYk7Y5QAQi/b5dAqeNrxacr0ScsS2KmfjIe1W8fkbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:7b:c4:c4:5e:46:9f:7e:0a:f6:46:8e:ab:cf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Validity Not Before: Feb 2 05:00:43 2026 GMT Not After : Feb 3 05:00:43 2026 GMT Subject: CN=a7adc93ebb616024f44fecf9ba93c153cfb0904d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:b2:ed:ee:34:45:cd:74:5d:c0:8d:e4:ed: 23:22:a7:5f:56:4b:43:f7:08:54:c0:c9:33:e9:30: ef:33:af:86:f3:5b:32:a7:93:61:27:d0:77:cf:82: 5b:62:6c:7e:ed:c2:1b:8d:26:fc:9f:66:ab:57:bf: 93:4a:45:27:83:ea:52:64:37:d2:19:96:dd:5b:0d: fb:69:ff:40:f2:67:71:f3:ec:c6:54:7a:3a:ea:9b: 40:aa:1c:cf:e1:02:fa:8c:2c:b0:10:5c:c2:89:83: 4c:e3:ed:f0:17:69:55:0b:c1:8e:39:bb:02:bf:c5: 11:3f:93:ef:75:68:56:66:f6:8e:a8:64:99:c4:85: fa:a8:46:be:b4:14:28:4a:bb:a5:82:61:fd:71:0b: 26:f9:e2:96:5a:63:54:cc:8e:b5:c5:46:fd:93:42: e4:fb:d4:d6:d4:7f:d3:0e:be:f3:a1:47:91:db:41: 1f:c3:a2:88:82:bb:30:0e:72:5e:fa:bc:5b:85:b3: 77:44:d7:34:de:19:a5:b3:68:0e:00:bc:04:24:e9: a1:72:57:04:52:0b:3e:58:fd:53:eb:c3:b9:09:a5: 4d:48:cf:da:ba:02:d8:c2:86:3a:d7:48:6a:8c:fc: f7:81:2a:fe:4c:a3:ac:98:38:c7:81:26:62:af:96: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AD:C9:3E:BB:61:60:24:F4:4F:EC:F9:BA:93:C1:53:CF:B0:90:4D X509v3 Authority Key Identifier: keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:df:40:c8:cf:97:84:a6:b6:ff:6c:f2:66:d8:19:93:e7:91: 59:24:46:e5:c4:1e:83:c2:6c:80:c8:00:91:c9:a3:98:23:41: 60:54:de:34:9f:73:29:ea:e4:fa:55:87:4a:c5:35:72:60:b2: 8f:ee:51:3b:77:7a:7a:4c:cb:62:ae:8e:00:eb:f1:49:de:3c: 8d:40:7a:77:81:6f:64:de:0e:5f:6a:15:bd:fc:8f:c9:f4:36: 3d:d1:c1:83:e4:83:5c:f6:dd:a8:5c:56:a6:4b:83:fb:ac:d7: 06:db:c8:f9:5d:09:e8:47:3b:b9:a9:ea:92:9f:87:74:a8:11: 92:6f:37:5e:37:f4:a4:ad:c2:80:a2:44:b7:e0:04:d6:c1:03: 0f:21:ca:e9:6a:76:57:8a:43:7b:e4:f1:4c:91:c5:6d:16:34: 97:00:31:d8:47:13:1d:d9:1c:3e:e0:8f:ae:1b:ce:cb:d7:2d: fb:0d:5d:a0:fc:38:0d:56:00:f0:0b:9a:51:d7:28:de:a2:b6: 9a:ea:39:2e:6c:ab:f2:dc:aa:3f:18:3e:b6:84:5f:ff:28:25: 18:7e:94:8e:4a:1d:91:f7:ef:e3:02:4f:df:47:ed:c4:de:44: 57:77:45:b8:06:33:27:81:d0:14:14:60:32:af:c2:98:c4:7b: a6:cc:66:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcuXvExF5Gn34K9kaOq8/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl NTlkZjAwHhcNMjYwMjAyMDUwMDQzWhcNMjYwMjAzMDUwMDQzWjAzMTEwLwYDVQQD EyhhN2FkYzkzZWJiNjE2MDI0ZjQ0ZmVjZjliYTkzYzE1M2NmYjA5MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1my7e40Rc10XcCN5O0jIqdfVktD 9whUwMkz6TDvM6+G81syp5NhJ9B3z4JbYmx+7cIbjSb8n2arV7+TSkUng+pSZDfS GZbdWw37af9A8mdx8+zGVHo66ptAqhzP4QL6jCywEFzCiYNM4+3wF2lVC8GOObsC v8URP5PvdWhWZvaOqGSZxIX6qEa+tBQoSrulgmH9cQsm+eKWWmNUzI61xUb9k0Lk +9TW1H/TDr7zoUeR20Efw6KIgrswDnJe+rxbhbN3RNc03hmls2gOALwEJOmhclcE Ugs+WP1T68O5CaVNSM/augLYwoY610hqjPz3gSr+TKOsmDjHgSZir5Z8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKetyT67YWAk9E/s+bqTwVPPsJBNMB8GA1UdIwQY MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt ZTJmZWRhYjNjYjA5LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5 LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd9AyM+X hKa2/2zyZtgZk+eRWSRG5cQeg8JsgMgAkcmjmCNBYFTeNJ9zKerk+lWHSsU1cmCy j+5RO3d6ekzLYq6OAOvxSd48jUB6d4FvZN4OX2oVvfyPyfQ2PdHBg+SDXPbdqFxW pkuD+6zXBtvI+V0J6Ec7uanqkp+HdKgRkm83Xjf0pK3CgKJEt+AE1sEDDyHK6Wp2 V4pDe+TxTJHFbRY0lwAx2EcTHdkcPuCPrhvOy9ct+w1doPw4DVYA8AuaUdco3qK2 muo5Lmyr8tyqPxg+toRf/yglGH6Ujkodkffv4wJP30ftxN5EV3dFuAYzJ4HQFBRg Mq/CmMR7psxmnA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:44 2026 by rpki-client