This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json) Hash identifier: DFGAHQRgTrHEUyLJfwV28BpAp4uEYnuB5Qi0xekimq8= Subject key identifier: A6:58:A3:1F:5A:95:4A:25:5F:8E:7D:F2:F5:CE:DD:15:6B:D2:80:6A Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19 Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19 Certificate serial: 019C1CF0C5018AE9F5DFA192AC8B46D7504D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft Manifest number: 17FF Signing time: Mon 02 Feb 2026 06:01:06 +0000 Manifest this update: Mon 02 Feb 2026 06:01:06 +0000 Manifest next update: Tue 03 Feb 2026 06:01:06 +0000 Files and hashes: 1: Su31KPktHrFLkChT839zTFn3AuI.roa (hash: GbFfc/EFmP9DxZo0ut8vt6TPNx0g+x1F1pn5dExPpXM=) 2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: wSsT0cwdmqZCOaSafbCjCxp/aNrBrcw7QuAVoQPyUMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:c5:01:8a:e9:f5:df:a1:92:ac:8b:46:d7:50:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19 Validity Not Before: Feb 2 06:01:06 2026 GMT Not After : Feb 3 06:01:06 2026 GMT Subject: CN=a658a31f5a954a255f8e7df2f5cedd156bd2806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:2d:07:58:23:5c:7e:39:e7:f9:56:6c:a8: 01:91:7c:c7:f7:47:ac:34:b7:cd:1b:66:60:83:be: ac:61:f8:21:a2:5d:d6:10:c4:7c:df:fd:19:22:dd: 8b:0d:13:61:6e:21:2e:88:77:89:53:03:91:ec:09: e0:2d:8e:ed:7e:43:44:ed:63:26:f5:b9:78:c9:cb: 74:d9:6b:e0:b4:c4:38:f9:d3:84:44:3f:5e:a6:05: a4:a9:d4:37:4c:3b:b0:02:3e:ec:43:c1:1c:e7:39: c8:10:2c:10:5b:11:e2:50:58:4c:35:ea:f0:a3:55: 95:5f:8f:c3:fe:84:78:de:eb:f9:fc:1f:02:b1:40: 18:3a:d4:d7:93:55:3a:dd:38:f5:56:c3:46:1b:44: ce:1e:d5:11:34:b1:59:75:06:71:2b:5b:ae:a4:72: f8:b4:45:7f:58:e2:03:8a:60:a8:ef:74:b4:70:c5: fc:73:3a:d0:9a:56:a7:f8:ed:e0:4e:cf:a9:b7:b0: 06:68:02:b3:3d:d4:f4:3d:9d:60:c8:fb:3d:36:9b: 7d:12:bb:9d:07:d3:e0:7d:6d:8f:1f:0f:26:db:7a: 02:59:db:12:a7:9f:f6:61:21:93:e3:99:63:99:ff: d3:3f:d1:b2:59:dc:f8:f8:8b:79:70:d5:ed:c9:6d: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:58:A3:1F:5A:95:4A:25:5F:8E:7D:F2:F5:CE:DD:15:6B:D2:80:6A X509v3 Authority Key Identifier: keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ba:81:3c:f7:69:6e:8e:cd:24:a8:ac:e7:64:2d:ab:89:68: 29:d9:5b:d4:15:75:4b:8f:2e:77:a9:b5:27:03:45:21:0b:df: d8:31:4a:97:50:b3:22:44:81:99:b7:66:a8:07:7f:f8:de:f2: 6e:0c:6d:4c:e7:e2:09:65:ef:e6:fe:71:d3:09:0b:2c:9c:ff: bc:8c:7a:39:9d:e7:4b:c1:4c:9c:1a:80:24:1e:70:35:43:7f: 89:21:c3:6c:1a:aa:e5:aa:7a:7e:96:69:fc:fb:7f:d3:b2:98: 99:b2:66:9f:30:1d:73:ef:4f:74:a8:67:d5:da:3f:91:10:f0: 5e:0f:4b:b7:dd:6b:05:10:0a:a7:78:5a:d9:5a:6d:7c:2a:d3: 3b:f1:61:f1:50:d5:1d:c3:6d:e2:a9:73:06:97:b1:60:64:a9: dd:e7:9c:b7:e7:a5:aa:c3:ea:3f:6c:53:91:0a:8c:63:10:b9: 64:3b:d3:12:b2:4b:cb:be:c6:5c:a7:ce:01:be:79:c4:d6:34: 9f:dc:69:69:9f:06:a2:52:08:5a:fb:38:4c:ce:99:21:35:b1: c0:52:0f:34:2b:83:96:e4:6f:46:bf:17:b1:71:40:25:02:6f: 8e:dc:18:17:21:ce:a7:35:e3:b5:8c:5a:28:7a:e9:c7:fd:4d: 42:d5:e1:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8MUBiun136GSrItG11BNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmNiMTc5YjNkYjVjNmIzNmNkMzMwODM0MDgwMWZlZGIy YjdkMTkwHhcNMjYwMjAyMDYwMTA2WhcNMjYwMjAzMDYwMTA2WjAzMTEwLwYDVQQD EyhhNjU4YTMxZjVhOTU0YTI1NWY4ZTdkZjJmNWNlZGQxNTZiZDI4MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfwtB1gjXH455/lWbKgBkXzH90es NLfNG2Zgg76sYfghol3WEMR83/0ZIt2LDRNhbiEuiHeJUwOR7AngLY7tfkNE7WMm 9bl4yct02WvgtMQ4+dOERD9epgWkqdQ3TDuwAj7sQ8Ec5znIECwQWxHiUFhMNerw o1WVX4/D/oR43uv5/B8CsUAYOtTXk1U63Tj1VsNGG0TOHtURNLFZdQZxK1uupHL4 tEV/WOIDimCo73S0cMX8czrQmlan+O3gTs+pt7AGaAKzPdT0PZ1gyPs9Npt9Erud B9PgfW2PHw8m23oCWdsSp5/2YSGT45ljmf/TP9GyWdz4+It5cNXtyW1jCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZYox9alUolX4598vXO3RVr0oBqMB8GA1UdIwQY MBaAFLVssXmz21xrNs0zCDQIAf7bK30ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAt NmU5ZDNiNzMyYjA4LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAtNmU5ZDNiNzMyYjA4 LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7qBPPdp bo7NJKis52Qtq4loKdlb1BV1S48ud6m1JwNFIQvf2DFKl1CzIkSBmbdmqAd/+N7y bgxtTOfiCWXv5v5x0wkLLJz/vIx6OZ3nS8FMnBqAJB5wNUN/iSHDbBqq5ap6fpZp /Pt/07KYmbJmnzAdc+9PdKhn1do/kRDwXg9Lt91rBRAKp3ha2VptfCrTO/Fh8VDV HcNt4qlzBpexYGSp3eect+elqsPqP2xTkQqMYxC5ZDvTErJLy77GXKfOAb55xNY0 n9xpaZ8GolIIWvs4TM6ZITWxwFIPNCuDluRvRr8XsXFAJQJvjtwYFyHOpzXjtYxa KHrpx/1NQtXhBg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:13 2026 by rpki-client