This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json) Hash identifier: ZQojcpcyvOLtbnCFXMn82dPnaqTZHMsFW/HeQhoRo/k= Subject key identifier: 93:15:B2:6E:70:F5:27:55:55:FA:08:4C:05:7A:A1:4E:01:F4:E4:DA Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6 Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6 Certificate serial: 019C1C150FB8D30B98383D3A48D27138B761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft Manifest number: 0A44 Signing time: Mon 02 Feb 2026 02:01:08 +0000 Manifest this update: Mon 02 Feb 2026 02:01:08 +0000 Manifest next update: Tue 03 Feb 2026 02:01:08 +0000 Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: 9n56Gs5U83qv13rL8AgT+vOzi4vhWf7dE+xBQpp/hIc=) 2: aC8UNmy0l7OgPQTZ2nVPiNtSCxQ.roa (hash: L0i81KYUigHRpwI1gm1ehZ81UJds6Brs5hjYir4TlR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:15:0f:b8:d3:0b:98:38:3d:3a:48:d2:71:38:b7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6 Validity Not Before: Feb 2 02:01:08 2026 GMT Not After : Feb 3 02:01:08 2026 GMT Subject: CN=9315b26e70f5275555fa084c057aa14e01f4e4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:c1:90:9a:45:f8:4e:10:96:eb:99:f8:d8: 95:5e:7a:e5:fc:03:9b:58:10:9b:e3:c0:25:2a:fa: 1b:32:56:d7:e3:4a:6c:9e:04:37:25:a1:8c:1d:e4: fe:68:5f:ec:2d:9e:a3:0b:44:08:f9:30:55:5f:05: 09:15:d5:97:2a:82:62:a5:44:f4:cc:6f:7d:7e:07: 47:d8:08:dc:78:a2:dd:26:11:a6:2b:aa:0f:e9:85: 6e:46:ef:78:d6:76:d6:fd:ff:d6:f4:ff:17:a2:f4: 23:23:c5:20:62:de:c1:49:9d:6a:2c:e3:4d:ee:d3: ca:4b:9d:e5:69:03:74:ba:11:74:69:9f:c3:41:59: cf:25:8c:4a:3c:03:2a:63:de:6a:6b:d5:ec:0b:73: 30:a4:57:5a:fc:4e:65:96:ef:77:07:d1:02:7c:8b: 3a:93:c9:3c:96:ee:08:f4:34:b8:6e:5b:f8:ea:fd: 05:28:33:87:a9:b2:c6:17:de:06:25:cd:dd:86:34: 2e:c7:b3:f8:86:66:de:15:d7:0f:f9:3f:89:d7:80: 71:b5:a7:ba:48:5c:a7:3e:22:3a:78:4d:1a:29:4f: 2a:85:f5:86:e6:02:0f:88:d9:b9:bf:98:7f:af:45: ec:da:34:e6:67:a3:2e:72:ad:c3:73:2f:af:9b:70: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:15:B2:6E:70:F5:27:55:55:FA:08:4C:05:7A:A1:4E:01:F4:E4:DA X509v3 Authority Key Identifier: keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1b:6a:03:85:57:13:7e:ff:94:34:76:ae:a8:5f:3f:8f:54: e1:e1:f7:61:2c:ea:eb:a9:5e:5e:d8:47:38:ac:03:6e:aa:b4: 29:8e:33:fa:e5:3e:a5:13:84:dd:59:fc:4b:f7:9b:cd:57:72: 5e:e2:41:54:41:dc:8f:de:c3:b7:1b:ac:34:3f:2b:b8:77:91: fd:f5:95:cf:2a:7b:b8:29:4d:98:c5:f1:64:e2:20:ee:6d:59: 8c:33:86:ec:ec:a1:5b:e4:ac:b0:4c:4c:df:ec:f4:a9:74:40: 70:5b:8b:aa:60:fa:3d:0e:c1:49:d0:df:de:68:d5:77:fd:5b: cb:7e:fa:87:b2:79:e4:95:ae:03:26:6b:c1:31:7e:27:1d:23: 3b:77:fb:4d:7b:e1:20:69:09:9e:18:28:7d:44:b1:43:45:a6: 3e:e8:f0:23:ea:be:b1:0b:b0:25:6f:85:fe:c1:76:a9:4a:e2: 43:24:6a:31:8c:29:e9:e8:74:24:99:25:14:c7:c7:51:03:8b: a2:58:1e:e6:6f:91:a0:96:1b:67:ef:99:52:8a:8d:0c:d8:10: 80:2b:ef:da:8d:5c:2b:01:29:2a:31:8b:a5:7f:6c:2f:7c:68: 72:9e:18:53:8f:6d:cc:0b:85:6e:98:13:6d:69:08:61:36:e9: 8b:a8:26:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFQ+40wuYOD06SNJxOLdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOWZiZTQ3NTYwMjhmYTQxODdhMzk5NTk1ZmFjNjVjM2Mx YzQzYzYwHhcNMjYwMjAyMDIwMTA4WhcNMjYwMjAzMDIwMTA4WjAzMTEwLwYDVQQD Eyg5MzE1YjI2ZTcwZjUyNzU1NTVmYTA4NGMwNTdhYTE0ZTAxZjRlNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLHBkJpF+E4QluuZ+NiVXnrl/AOb WBCb48AlKvobMlbX40psngQ3JaGMHeT+aF/sLZ6jC0QI+TBVXwUJFdWXKoJipUT0 zG99fgdH2AjceKLdJhGmK6oP6YVuRu941nbW/f/W9P8XovQjI8UgYt7BSZ1qLONN 7tPKS53laQN0uhF0aZ/DQVnPJYxKPAMqY95qa9XsC3MwpFda/E5llu93B9ECfIs6 k8k8lu4I9DS4blv46v0FKDOHqbLGF94GJc3dhjQux7P4hmbeFdcP+T+J14Bxtae6 SFynPiI6eE0aKU8qhfWG5gIPiNm5v5h/r0Xs2jTmZ6Mucq3Dcy+vm3C5awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMVsm5w9SdVVfoITAV6oU4B9OTaMB8GA1UdIwQY MBaAFEyfvkdWAo+kGHo5lZX6xlw8HEPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYt ODU4ZjhhY2EzMjNmLzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYtODU4ZjhhY2EzMjNm LzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxtqA4VX E37/lDR2rqhfP49U4eH3YSzq66leXthHOKwDbqq0KY4z+uU+pROE3Vn8S/ebzVdy XuJBVEHcj97DtxusND8ruHeR/fWVzyp7uClNmMXxZOIg7m1ZjDOG7OyhW+SssExM 3+z0qXRAcFuLqmD6PQ7BSdDf3mjVd/1by376h7J55JWuAyZrwTF+Jx0jO3f7TXvh IGkJnhgofUSxQ0WmPujwI+q+sQuwJW+F/sF2qUriQyRqMYwp6eh0JJklFMfHUQOL olge5m+RoJYbZ++ZUoqNDNgQgCvv2o1cKwEpKjGLpX9sL3xocp4YU49tzAuFbpgT bWkIYTbpi6gmVQ== -----END CERTIFICATE-----Generated at Mon Feb 2 05:05:37 2026 by rpki-client