This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json) Hash identifier: Q4H+v2UzFjdCYEu0yrCVCX2Qu5aaAIEIMumBdmj6a/c= Subject key identifier: B3:EA:5C:EF:E9:C5:D2:14:53:8A:C2:81:9A:28:33:3D:23:32:36:2E Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c Certificate serial: 019BF9C0D64BC6DEB5E21785FE7A76DA5D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft Manifest number: 150F Signing time: Mon 26 Jan 2026 10:02:03 +0000 Manifest this update: Mon 26 Jan 2026 10:02:03 +0000 Manifest next update: Tue 27 Jan 2026 10:02:03 +0000 Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=) 2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: mIT1ZvfudBjftvbBR/49sX5BQnpoVg91DTVk603787s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:d6:4b:c6:de:b5:e2:17:85:fe:7a:76:da:5d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c Validity Not Before: Jan 26 10:02:03 2026 GMT Not After : Jan 27 10:02:03 2026 GMT Subject: CN=b3ea5cefe9c5d214538ac2819a28333d2332362e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:cd:18:6f:5f:06:fb:e7:98:ee:d1:78:e8: bd:5e:02:ff:64:ea:53:b7:a2:f8:4b:5e:af:1e:38: 54:bf:da:10:75:b2:2e:0b:dd:9b:94:51:cb:c1:7f: 98:1f:c3:f7:64:ca:bb:98:8e:18:27:b7:33:42:9a: e2:3a:b9:6d:17:5a:bd:5b:53:51:43:42:b0:0e:0a: 57:af:ee:ed:57:33:25:17:7e:5b:62:a4:4c:f4:c0: ce:91:aa:92:23:4b:b5:ab:85:73:40:57:92:3b:67: 27:2f:b0:e0:00:5b:fa:42:71:a2:4b:42:06:c9:87: 42:6a:b7:e5:e5:46:29:d0:d0:28:64:bd:46:5b:2d: 50:42:f3:b8:94:e3:b0:18:88:89:a3:38:fe:d9:c3: 8b:98:5f:6f:d9:63:a4:b0:96:3a:da:66:f8:97:7e: 58:6f:47:66:da:84:73:a8:29:38:f3:b3:44:83:e1: f2:97:57:d5:9c:ea:fb:4d:74:e8:17:36:ab:a8:d3: c2:9f:e3:1a:8b:8f:31:15:db:db:3a:3c:93:e8:77: eb:50:19:11:bd:08:1e:5b:31:40:a4:dd:4a:0d:4e: bc:37:35:13:d6:c7:2d:a0:0d:0d:65:f2:85:dd:86: a6:d6:97:59:8e:99:78:11:6c:33:51:82:e1:5b:e9: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:5C:EF:E9:C5:D2:14:53:8A:C2:81:9A:28:33:3D:23:32:36:2E X509v3 Authority Key Identifier: keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:25:24:28:dc:6b:75:80:29:59:a2:1c:b6:dd:3e:e9:34:70: 12:0f:95:7a:99:77:19:0a:5d:77:08:46:90:d9:d1:da:db:66: f3:06:b4:11:b6:cb:c7:0b:e4:4c:fc:0b:b2:ed:ff:ca:b8:13: 79:91:cb:34:56:09:07:33:11:51:4d:44:34:64:a6:f9:b5:d3: 83:b3:28:9a:9e:52:93:0d:cd:b2:0a:77:57:f8:6f:81:8d:f1: 4f:c8:61:37:7a:32:81:44:97:03:c6:ec:2e:8a:29:6a:4a:93: 0f:79:3c:15:4f:59:5e:f2:32:13:20:a5:37:2d:35:d9:30:6d: e4:aa:55:c3:33:36:2d:16:03:2e:92:5c:fa:49:8d:c5:e7:b4: 33:88:b9:ca:f4:09:2f:06:04:43:be:43:ff:2f:4a:5a:02:6c: aa:dd:38:74:76:47:de:3f:8c:70:59:74:41:f0:9d:c6:1e:f5: ac:a7:cb:a8:e8:74:53:d4:d0:36:e9:df:cb:eb:55:dc:20:06: a5:30:cd:ac:54:33:fa:1a:5d:ed:c7:fc:9c:57:ed:5b:0f:fc: 0a:2a:d8:46:dc:3f:2d:81:da:1b:89:69:dd:00:24:b7:76:2c: 02:ba:3b:ae:c2:e8:bc:1b:5d:7a:73:04:7c:70:5d:56:37:a0: 09:2b:89:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wNZLxt614heF/np22l0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWU4NmIyMmMyNGJjYTc3MTMwNzFkZTk1ZDY4MjJjMzM5 Y2ZkMWMwHhcNMjYwMTI2MTAwMjAzWhcNMjYwMTI3MTAwMjAzWjAzMTEwLwYDVQQD EyhiM2VhNWNlZmU5YzVkMjE0NTM4YWMyODE5YTI4MzMzZDIzMzIzNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV3NGG9fBvvnmO7ReOi9XgL/ZOpT t6L4S16vHjhUv9oQdbIuC92blFHLwX+YH8P3ZMq7mI4YJ7czQpriOrltF1q9W1NR Q0KwDgpXr+7tVzMlF35bYqRM9MDOkaqSI0u1q4VzQFeSO2cnL7DgAFv6QnGiS0IG yYdCarfl5UYp0NAoZL1GWy1QQvO4lOOwGIiJozj+2cOLmF9v2WOksJY62mb4l35Y b0dm2oRzqCk487NEg+Hyl1fVnOr7TXToFzarqNPCn+Mai48xFdvbOjyT6HfrUBkR vQgeWzFApN1KDU68NzUT1sctoA0NZfKF3Yam1pdZjpl4EWwzUYLhW+lnHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPqXO/pxdIUU4rCgZooMz0jMjYuMB8GA1UdIwQY MBaAFE7uhrIsJLyncTBx3pXWgiwznP0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmIt Mzg2ZWVhOGQ4ZGQ2LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmItMzg2ZWVhOGQ4ZGQ2 LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiUkKNxr dYApWaIctt0+6TRwEg+Vepl3GQpddwhGkNnR2ttm8wa0EbbLxwvkTPwLsu3/yrgT eZHLNFYJBzMRUU1ENGSm+bXTg7Momp5Skw3Nsgp3V/hvgY3xT8hhN3oygUSXA8bs LoopakqTD3k8FU9ZXvIyEyClNy012TBt5KpVwzM2LRYDLpJc+kmNxee0M4i5yvQJ LwYEQ75D/y9KWgJsqt04dHZH3j+McFl0QfCdxh71rKfLqOh0U9TQNunfy+tV3CAG pTDNrFQz+hpd7cf8nFftWw/8CirYRtw/LYHaG4lp3QAkt3YsAro7rsLovBtdenME fHBdVjegCSuJ8g== -----END CERTIFICATE-----Generated at Mon Jan 26 20:45:15 2026 by rpki-client