This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json) Hash identifier: w53eFGri+oSbDy0C9v6Xd9+kv3d+rVPgMo/zBHGrpS0= Subject key identifier: 5F:BE:21:A1:8F:E6:50:DC:39:A1:AA:16:5E:6B:F2:DF:DF:28:32:C4 Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Certificate serial: 019BFB4036469E2A7E39E0056217F609BCF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft Manifest number: 90 Signing time: Mon 26 Jan 2026 17:00:47 +0000 Manifest this update: Mon 26 Jan 2026 17:00:47 +0000 Manifest next update: Tue 27 Jan 2026 17:00:47 +0000 Files and hashes: 1: 9h9e6R0rqbyhkdydEjqTZrkWQxM.asa (hash: L3iLuEzCPk6Gw29gfGqHU9jLoff62sEQn25lEVcMyvM=) 2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: D1297HzQz8UOkzL9rqxPZ2f+bAS3TnvG3D2iussHv2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:36:46:9e:2a:7e:39:e0:05:62:17:f6:09:bc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566 Validity Not Before: Jan 26 17:00:47 2026 GMT Not After : Jan 27 17:00:47 2026 GMT Subject: CN=5fbe21a18fe650dc39a1aa165e6bf2dfdf2832c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:29:dc:0f:b1:0c:13:0f:2d:12:a0:d8:83: 04:e6:c3:d4:9c:f1:e9:b2:b0:09:ff:5e:8e:da:1e: c7:d6:ec:82:4e:f9:ee:bb:09:f5:1a:7a:d9:14:2f: fe:88:b8:87:88:06:93:77:82:87:e4:c8:44:77:c8: c0:5d:98:e8:36:d5:d7:90:a6:6b:bb:92:72:63:ea: e5:16:59:0c:bf:5a:5a:42:27:a1:0e:26:34:e8:c7: e4:e0:fb:2c:7e:19:5f:e0:61:54:14:9c:a2:72:c2: 12:1d:78:2b:cd:89:4f:0d:35:f0:be:38:77:a9:97: 83:47:6f:ef:89:cd:94:7f:bd:62:8f:e1:ff:19:e1: 2a:30:60:44:ac:fb:fc:cb:1e:53:a1:53:96:d9:52: 1d:05:2b:5d:e5:35:30:ce:f4:d5:02:82:f4:0b:50: e8:1c:55:1e:ef:fd:cf:15:25:18:d0:5b:82:19:92: d8:2f:02:87:3d:69:12:5e:2a:27:ba:e2:b3:01:f0: 4a:cd:54:15:c9:6b:e9:eb:64:9e:c6:7b:8d:a4:94: 52:fd:bf:bf:13:61:dc:c4:0a:0e:ec:37:fb:da:88: cc:07:e6:1f:51:cf:13:51:36:79:ee:a9:e1:20:b0: e7:70:99:f0:df:2d:7f:1a:2b:34:94:30:0a:04:1b: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BE:21:A1:8F:E6:50:DC:39:A1:AA:16:5E:6B:F2:DF:DF:28:32:C4 X509v3 Authority Key Identifier: keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4a:78:f9:f6:b5:02:59:07:61:92:bc:44:19:34:2a:e8:90: b7:d3:1a:5f:67:3d:8e:5c:c6:56:46:ea:88:5f:08:f7:c3:69: e2:03:2c:b1:18:41:22:10:43:5b:37:32:22:7a:14:5d:91:ed: 50:4d:88:46:3e:73:a1:58:37:39:71:40:f5:c2:cd:54:80:50: b5:98:63:89:5e:35:0f:7d:2d:5a:75:a5:75:f7:73:8a:02:de: a9:6e:fc:f1:d3:71:38:55:a9:20:3e:18:32:56:34:c8:1d:00: 91:f4:c6:7f:cc:55:f8:1f:43:fe:ef:11:dc:e3:ed:de:ed:0c: 55:88:9f:42:d7:ab:bc:0a:1c:8d:db:63:0b:48:b3:a4:99:9b: a5:d6:38:40:84:e3:8f:57:87:9a:12:e9:95:8d:78:83:97:a5: 56:11:bd:e8:e5:6e:42:ab:4d:51:78:d1:d2:9a:8b:59:fa:ed: c6:93:ff:e5:d5:24:35:4c:89:49:ff:2c:fb:c0:e1:0d:df:66: cd:4e:6b:6d:9f:37:1e:aa:5e:38:69:ca:2b:29:7c:46:ee:62: 88:3b:b8:7e:ed:ac:e8:82:99:e1:a4:ba:cc:24:b4:d6:88:56: 41:5e:06:0e:f1:73:c9:bc:80:ed:2b:24:3a:c5:28:c9:b3:b0: 69:ed:b3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QDZGnip+OeAFYhf2Cbz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzAwZGQ2YjEzOGQ2YWRiOGY3Yzg0MzhkZDBiMmQ4NTgz ZGM1NjYwHhcNMjYwMTI2MTcwMDQ3WhcNMjYwMTI3MTcwMDQ3WjAzMTEwLwYDVQQD Eyg1ZmJlMjFhMThmZTY1MGRjMzlhMWFhMTY1ZTZiZjJkZmRmMjgzMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnYp3A+xDBMPLRKg2IME5sPUnPHp srAJ/16O2h7H1uyCTvnuuwn1GnrZFC/+iLiHiAaTd4KH5MhEd8jAXZjoNtXXkKZr u5JyY+rlFlkMv1paQiehDiY06Mfk4Pssfhlf4GFUFJyicsISHXgrzYlPDTXwvjh3 qZeDR2/vic2Uf71ij+H/GeEqMGBErPv8yx5ToVOW2VIdBStd5TUwzvTVAoL0C1Do HFUe7/3PFSUY0FuCGZLYLwKHPWkSXionuuKzAfBKzVQVyWvp62SexnuNpJRS/b+/ E2HcxAoO7Df72ojMB+YfUc8TUTZ57qnhILDncJnw3y1/Gis0lDAKBBtiqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF++IaGP5lDcOaGqFl5r8t/fKDLEMB8GA1UdIwQY MBaAFLbADdaxONatuPfIQ43QsthYPcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUt NTY0ZDE4YzY4NjJiLzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MzFkYWYtMDAyYi00NDU4LWJiZjUtNTY0ZDE4YzY4NjJi LzEvdHNBTjFyRTQxcTI0OThoRGpkQ3kyRmc5eFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0p4+fa1 AlkHYZK8RBk0KuiQt9MaX2c9jlzGVkbqiF8I98Np4gMssRhBIhBDWzcyInoUXZHt UE2IRj5zoVg3OXFA9cLNVIBQtZhjiV41D30tWnWldfdzigLeqW788dNxOFWpID4Y MlY0yB0AkfTGf8xV+B9D/u8R3OPt3u0MVYifQtervAocjdtjC0izpJmbpdY4QITj j1eHmhLplY14g5elVhG96OVuQqtNUXjR0pqLWfrtxpP/5dUkNUyJSf8s+8DhDd9m zU5rbZ83HqpeOGnKKyl8Ru5iiDu4fu2s6IKZ4aS6zCS01ohWQV4GDvFzybyA7Ssk OsUoybOwae2z1g== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:49 2026 by rpki-client