This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json) Hash identifier: oyt1f1u8PL4VXoM1aP/1Ky3aLE+71pSeme/oP0TWGR0= Subject key identifier: B1:65:C8:14:95:1B:5B:6E:8A:F7:EC:3B:B2:98:EF:7F:AB:4D:77:5E Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Certificate serial: 019BD87D8CCC31F4936420261423D590BC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft Manifest number: 0116 Signing time: Mon 19 Jan 2026 23:01:05 +0000 Manifest this update: Mon 19 Jan 2026 23:01:05 +0000 Manifest next update: Tue 20 Jan 2026 23:01:05 +0000 Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: bQTH8NKfq6O7RH8uHnJzHY3TqaJv9sWR87E4P6XfEik=) 2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:7d:8c:cc:31:f4:93:64:20:26:14:23:d5:90:bc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Validity Not Before: Jan 19 23:01:05 2026 GMT Not After : Jan 20 23:01:05 2026 GMT Subject: CN=b165c814951b5b6e8af7ec3bb298ef7fab4d775e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:02:2e:29:48:bc:d8:1a:77:3f:88:88:b5: d7:49:78:1e:ef:21:bd:1e:8a:fa:65:d3:19:0c:c2: 30:dd:c3:c8:3b:f7:e9:25:c5:23:11:88:dd:ec:35: 2f:df:92:4f:5f:25:08:5f:b6:d6:e2:13:84:61:4f: 2a:94:35:52:79:8d:f5:d1:1a:cc:41:e7:52:83:6a: e3:84:76:db:ed:3b:b8:27:e4:1a:45:a5:4f:cb:7c: cb:1c:7b:75:0a:e9:91:89:30:4a:ee:5a:ed:e9:d3: 36:e0:0b:f2:5d:68:2d:60:52:7a:75:93:dc:46:ad: a2:ca:0f:61:fc:9a:2f:67:b0:c9:34:4f:2c:7e:99: 28:a8:e1:e0:6c:19:71:dc:85:b5:fd:d7:62:62:88: 54:5b:8b:5a:6a:39:0e:13:28:ed:4d:19:6d:cd:6f: d5:f6:8c:77:14:56:79:71:2a:e5:59:82:65:6c:2b: 45:fc:99:08:36:b4:68:83:b7:79:f3:fd:1f:11:8c: f4:68:5a:77:6c:d4:7a:d0:3b:4c:d7:a3:d0:6b:3b: 7c:1f:b2:64:1f:cb:9a:f8:27:04:d0:50:8f:23:c3: 6c:f1:6b:91:1a:b6:01:5f:26:e7:42:6c:1e:40:a4: 84:58:c6:fb:8e:4a:73:78:f3:f9:d6:0a:c7:6c:60: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:65:C8:14:95:1B:5B:6E:8A:F7:EC:3B:B2:98:EF:7F:AB:4D:77:5E X509v3 Authority Key Identifier: keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b8:78:da:98:f2:03:60:94:6e:b5:29:1e:33:53:5b:52:ec: 2a:a1:24:cf:1e:de:c4:be:2e:a9:c5:78:6c:4b:df:f7:90:4a: 07:20:0b:49:9e:87:80:7a:2b:6a:72:6e:48:aa:7f:98:6d:b5: 6c:43:52:36:85:73:f0:cf:84:f7:ff:4f:53:48:f0:9b:32:be: b9:31:75:2b:5f:21:b6:52:86:22:63:86:e6:21:21:92:d2:c1: d5:2c:d4:13:f9:ba:a5:9f:3f:00:78:da:b3:bb:eb:7e:8a:73: 61:0e:5b:41:19:45:b2:2e:a9:11:12:0f:b9:fd:ee:59:a9:2b: 95:6f:5b:45:9d:82:12:e5:3f:1a:5b:a2:9b:06:79:26:f1:12: 7d:2b:25:ff:a8:49:f1:85:3f:91:f0:7b:db:8e:ee:c7:90:d2: dc:65:ed:4f:89:a2:6d:ed:70:ac:ef:2c:95:9d:3d:6f:55:a7: 06:bc:f6:62:98:65:31:40:8f:02:9b:a7:94:ca:22:54:dd:3a: ff:6f:1c:9e:83:f0:c3:1a:46:52:07:7b:1e:d1:65:c3:53:fc: 37:00:e6:6a:91:6d:3b:d8:ea:17:4a:96:78:46:03:71:13:38: a3:14:8a:b9:4f:0e:72:28:36:ba:d4:c5:63:9f:08:cc:83:47: ca:e6:8f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYfYzMMfSTZCAmFCPVkLwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYmMyNmFiMzRjODMxOTc0MzMyZGQzOTlhOGU1NmU5YWE5 YjdiODUwHhcNMjYwMTE5MjMwMTA1WhcNMjYwMTIwMjMwMTA1WjAzMTEwLwYDVQQD EyhiMTY1YzgxNDk1MWI1YjZlOGFmN2VjM2JiMjk4ZWY3ZmFiNGQ3NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKoCLilIvNgadz+IiLXXSXge7yG9 Hor6ZdMZDMIw3cPIO/fpJcUjEYjd7DUv35JPXyUIX7bW4hOEYU8qlDVSeY310RrM QedSg2rjhHbb7Tu4J+QaRaVPy3zLHHt1CumRiTBK7lrt6dM24AvyXWgtYFJ6dZPc Rq2iyg9h/JovZ7DJNE8sfpkoqOHgbBlx3IW1/ddiYohUW4taajkOEyjtTRltzW/V 9ox3FFZ5cSrlWYJlbCtF/JkINrRog7d58/0fEYz0aFp3bNR60DtM16PQazt8H7Jk H8ua+CcE0FCPI8Ns8WuRGrYBXybnQmweQKSEWMb7jkpzePP51grHbGAfQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFlyBSVG1tuivfsO7KY73+rTXdeMB8GA1UdIwQY MBaAFE68Jqs0yDGXQzLdOZqOVumqm3uFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQt YmViNzkwZGE1YjRmLzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQtYmViNzkwZGE1YjRm LzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLh42pjy A2CUbrUpHjNTW1LsKqEkzx7exL4uqcV4bEvf95BKByALSZ6HgHoranJuSKp/mG21 bENSNoVz8M+E9/9PU0jwmzK+uTF1K18htlKGImOG5iEhktLB1SzUE/m6pZ8/AHja s7vrfopzYQ5bQRlFsi6pERIPuf3uWakrlW9bRZ2CEuU/GluimwZ5JvESfSsl/6hJ 8YU/kfB7247ux5DS3GXtT4mibe1wrO8slZ09b1WnBrz2YphlMUCPApunlMoiVN06 /28cnoPwwxpGUgd7HtFlw1P8NwDmapFtO9jqF0qWeEYDcRM4oxSKuU8Ocig2utTF Y58IzINHyuaPpA== -----END CERTIFICATE-----Generated at Tue Jan 20 02:18:39 2026 by rpki-client