This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json) Hash identifier: /z/4GzyrW7m5BJosav6V694e/IL2GqUMWVUM64tyjPE= Subject key identifier: DC:6B:46:BD:D1:DC:A7:5E:29:CF:B6:C1:A8:BA:62:FB:7B:70:97:9E Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d Certificate serial: 019C1BDE8A442252452DFCD7245D3476CA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft Manifest number: 1788 Signing time: Mon 02 Feb 2026 01:01:35 +0000 Manifest this update: Mon 02 Feb 2026 01:01:35 +0000 Manifest next update: Tue 03 Feb 2026 01:01:35 +0000 Files and hashes: 1: 2bQPYE6C1xPKacn71h7uNUfwW5k.asa (hash: S/35bcKz6xhuKu6KdcMaM7TFCVzuh91pCLHJRPyRwag=) 2: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: 5x1A+uaqptapWW2KGBCAvFCG27wq0CvV05o1rDw1sMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:8a:44:22:52:45:2d:fc:d7:24:5d:34:76:ca:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d Validity Not Before: Feb 2 01:01:35 2026 GMT Not After : Feb 3 01:01:35 2026 GMT Subject: CN=dc6b46bdd1dca75e29cfb6c1a8ba62fb7b70979e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:7a:6b:0e:95:62:8d:6d:93:88:c9:e8:25: 80:0c:9e:1d:db:d8:20:f6:41:70:38:72:90:cd:e8: 1a:5d:5c:e7:56:01:aa:e4:93:a6:d0:5f:0b:21:d3: 8c:17:78:cd:6c:e7:0a:a2:b1:5f:d4:ee:68:99:d5: 32:d4:b2:72:6b:a0:98:87:d5:19:68:e8:26:2e:7a: 40:4a:3c:25:3c:c7:02:40:0a:bb:66:74:7c:3a:b9: 01:95:cc:b7:2d:4c:69:67:0c:23:01:6b:7a:f2:af: 23:d8:02:33:94:ac:a5:ba:30:ff:83:39:8e:10:66: 4a:33:d7:a7:3a:dd:81:11:90:27:92:7d:53:9b:9b: e3:73:ea:b1:db:88:4d:fe:7c:7f:81:52:cf:c7:2e: b3:eb:f9:bb:9d:c5:ea:a0:b7:37:88:b1:91:e8:f8: 42:81:2d:d2:9f:1b:01:6b:cb:5f:0c:b1:53:3c:11: b5:74:74:5a:8b:74:ee:e8:06:40:01:07:c3:f3:29: 7c:5f:ed:9a:e9:93:48:1f:84:6e:c5:bd:7b:1b:9a: 11:2a:82:fa:c8:07:99:17:45:93:2c:51:5b:c7:40: cb:f5:df:d3:fa:51:2e:90:59:b6:4f:4b:4b:1c:ed: c0:e8:c3:be:73:8f:94:11:80:2e:4f:e3:30:2f:6d: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6B:46:BD:D1:DC:A7:5E:29:CF:B6:C1:A8:BA:62:FB:7B:70:97:9E X509v3 Authority Key Identifier: keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b0:48:65:d6:7b:aa:4c:3d:ff:a7:69:9c:e8:4f:ce:25:49: db:9d:32:da:1f:35:d2:1c:cc:e9:e2:b2:ea:53:b4:3f:42:e3: 76:51:0d:2a:24:3a:ac:86:35:73:ca:e5:47:7c:4f:69:ff:69: cd:c7:29:9e:ff:ee:d9:77:8b:8e:e4:b9:cc:3e:78:a6:68:ae: b5:ca:bd:6e:d3:69:8a:f5:29:73:9b:a3:d8:d4:b5:cb:42:80: 61:c8:2e:1e:3e:3d:d1:c0:b6:5d:9b:10:b4:63:2b:28:14:64: f3:b4:e4:bd:0e:83:08:30:06:a8:3e:34:c9:dc:98:65:01:0a: 4b:a1:db:8c:f5:be:fa:34:d9:ab:3d:d8:e5:53:25:aa:d4:03: df:ce:fc:21:45:eb:7f:98:ee:3f:ca:bd:59:6f:92:fd:e2:2c: cf:bf:45:aa:65:93:42:72:bd:a7:99:d4:fa:3e:30:8f:06:d3: d2:23:53:89:00:4f:22:4d:06:75:0b:10:a1:c4:dc:62:5c:93: 3e:e7:fd:0b:d7:4a:36:a6:b1:cf:eb:62:ee:fa:19:8a:93:b6: 87:e2:51:7c:2d:d0:2a:27:03:27:9a:2a:09:7b:17:26:30:06: f9:8f:26:64:24:a9:b5:29:36:8c:8d:a4:41:51:65:79:ec:97: 9f:81:48:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3opEIlJFLfzXJF00dsovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl OGIyOWQwHhcNMjYwMjAyMDEwMTM1WhcNMjYwMjAzMDEwMTM1WjAzMTEwLwYDVQQD EyhkYzZiNDZiZGQxZGNhNzVlMjljZmI2YzFhOGJhNjJmYjdiNzA5NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl96aw6VYo1tk4jJ6CWADJ4d29gg 9kFwOHKQzegaXVznVgGq5JOm0F8LIdOMF3jNbOcKorFf1O5omdUy1LJya6CYh9UZ aOgmLnpASjwlPMcCQAq7ZnR8OrkBlcy3LUxpZwwjAWt68q8j2AIzlKylujD/gzmO EGZKM9enOt2BEZAnkn1Tm5vjc+qx24hN/nx/gVLPxy6z6/m7ncXqoLc3iLGR6PhC gS3SnxsBa8tfDLFTPBG1dHRai3Tu6AZAAQfD8yl8X+2a6ZNIH4Ruxb17G5oRKoL6 yAeZF0WTLFFbx0DL9d/T+lEukFm2T0tLHO3A6MO+c4+UEYAuT+MwL23NiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxrRr3R3KdeKc+2wai6Yvt7cJeeMB8GA1UdIwQY MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt YTEwNTZmNTg5MzU0LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0 LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7BIZdZ7 qkw9/6dpnOhPziVJ250y2h810hzM6eKy6lO0P0LjdlENKiQ6rIY1c8rlR3xPaf9p zccpnv/u2XeLjuS5zD54pmiutcq9btNpivUpc5uj2NS1y0KAYcguHj490cC2XZsQ tGMrKBRk87TkvQ6DCDAGqD40ydyYZQEKS6HbjPW++jTZqz3Y5VMlqtQD3878IUXr f5juP8q9WW+S/eIsz79FqmWTQnK9p5nU+j4wjwbT0iNTiQBPIk0GdQsQocTcYlyT Puf9C9dKNqaxz+ti7voZipO2h+JRfC3QKicDJ5oqCXsXJjAG+Y8mZCSptSk2jI2k QVFleeyXn4FIQQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:18:11 2026 by rpki-client