This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json) Hash identifier: V1QZRN3g6G5Y3f8oShVS8hTgAosbRdom6WqKco5kxyU= Subject key identifier: 47:57:D3:25:72:98:56:68:DC:81:BF:FB:10:DA:59:A4:F1:54:E4:59 Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Certificate serial: 019C2360B8401507357C4A58F853EFDA026F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft Manifest number: 01E5 Signing time: Tue 03 Feb 2026 12:01:06 +0000 Manifest this update: Tue 03 Feb 2026 12:01:06 +0000 Manifest next update: Wed 04 Feb 2026 12:01:06 +0000 Files and hashes: 1: iMHns26Twh_iKXADF620qDAnTy0.roa (hash: GWSmHWITFYygfJHovjbtsHzKxtolOYsM+f2kV7+EZnY=) 2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: 5ZqjqO6zumTsDO8FHPh1QiJh9XCsr/cA1q3RJSVWYMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:60:b8:40:15:07:35:7c:4a:58:f8:53:ef:da:02:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Validity Not Before: Feb 3 12:01:06 2026 GMT Not After : Feb 4 12:01:06 2026 GMT Subject: CN=4757d32572985668dc81bffb10da59a4f154e459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:84:de:89:41:42:7f:45:68:f7:e2:99:65:08: f5:6a:07:3c:1a:7f:f6:ed:ba:fe:af:c1:70:fb:a3: a1:d6:8c:02:f5:03:25:08:e7:cf:ad:9f:35:d8:a8: e0:a0:12:7e:68:19:8c:03:1c:c4:ba:bc:0a:26:6e: 5b:ad:2a:1f:1c:7a:cd:d4:9b:e9:cc:19:a4:e4:9d: 54:90:02:92:6e:9c:00:15:34:37:0f:0d:1d:2b:e7: 2d:69:68:22:4b:3d:8d:b7:46:7e:fb:78:00:d2:0b: 6f:c2:df:7a:61:f2:2f:d7:62:55:11:9e:3e:58:55: 61:4f:40:0a:d1:48:bf:12:01:a7:34:03:92:fc:09: e4:8f:47:e6:92:0b:2a:e7:d6:0e:0c:4b:5c:02:98: ca:78:17:46:50:92:f5:0c:b6:7c:a9:08:4b:e1:56: 89:a7:0f:f3:ba:b5:78:71:c5:ca:b0:7c:e3:97:a7: d3:80:a6:ec:3f:8b:99:51:41:b1:70:39:ec:9f:84: 10:89:0e:a0:fb:83:f3:82:86:bf:50:d1:b2:10:38: 74:49:0e:86:0d:9d:28:15:73:da:89:26:4b:0c:95: 64:91:80:03:69:35:08:ef:9b:fe:5a:fd:e3:f6:a2: 61:13:67:52:ee:0c:68:cc:2b:58:46:6d:5a:d5:1f: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:57:D3:25:72:98:56:68:DC:81:BF:FB:10:DA:59:A4:F1:54:E4:59 X509v3 Authority Key Identifier: keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ad:96:54:c3:87:ca:ee:e5:ec:ea:fe:02:df:03:e1:fd:48: 7c:01:46:cb:a6:f9:75:6c:51:84:96:70:76:de:d8:33:b8:a1: ba:3e:30:5c:47:12:aa:8c:3f:38:fe:41:67:4c:4d:3d:db:bb: d6:28:15:65:82:cc:99:64:59:c1:82:08:46:bf:e4:5a:d6:33: a5:fb:22:2b:a4:d6:23:5c:01:36:24:7c:46:9c:26:1c:a1:87: e9:4e:a6:34:b5:fa:ca:91:a0:03:2c:ef:bc:9d:a4:59:e8:9f: 90:7d:16:bc:6a:c4:02:13:10:4d:42:ee:f6:c8:be:a0:5e:b6: 4a:b2:24:60:a2:b4:b2:e1:1b:ab:ba:f9:19:80:49:a9:e2:11: 6c:6b:0a:55:33:a0:53:ca:35:15:82:f1:4f:40:31:6d:04:e7: 31:32:91:20:4d:07:14:33:9f:38:e1:f7:12:fb:b2:19:5d:20: 68:9b:59:df:ab:09:69:0a:1e:f7:8b:21:e7:0e:c3:fe:67:bd: 15:56:63:3c:6e:07:ed:58:c1:72:a7:15:44:70:84:6d:79:ab: 08:c3:a6:93:e5:aa:22:97:cd:55:18:80:2a:54:62:57:ff:fe: af:56:b9:bb:47:b2:04:e4:0c:fc:24:b6:35:9d:70:aa:6a:4b: 2b:6e:b6:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwjYLhAFQc1fEpY+FPv2gJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl MjFhYjEwHhcNMjYwMjAzMTIwMTA2WhcNMjYwMjA0MTIwMTA2WjAzMTEwLwYDVQQD Eyg0NzU3ZDMyNTcyOTg1NjY4ZGM4MWJmZmIxMGRhNTlhNGYxNTRlNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoTeiUFCf0Vo9+KZZQj1agc8Gn/2 7br+r8Fw+6Oh1owC9QMlCOfPrZ812KjgoBJ+aBmMAxzEurwKJm5brSofHHrN1Jvp zBmk5J1UkAKSbpwAFTQ3Dw0dK+ctaWgiSz2Nt0Z++3gA0gtvwt96YfIv12JVEZ4+ WFVhT0AK0Ui/EgGnNAOS/Ankj0fmkgsq59YODEtcApjKeBdGUJL1DLZ8qQhL4VaJ pw/zurV4ccXKsHzjl6fTgKbsP4uZUUGxcDnsn4QQiQ6g+4Pzgoa/UNGyEDh0SQ6G DZ0oFXPaiSZLDJVkkYADaTUI75v+Wv3j9qJhE2dS7gxozCtYRm1a1R+RQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdX0yVymFZo3IG/+xDaWaTxVORZMB8GA1UdIwQY MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUa2WVMOH yu7l7Or+At8D4f1IfAFGy6b5dWxRhJZwdt7YM7ihuj4wXEcSqow/OP5BZ0xNPdu7 1igVZYLMmWRZwYIIRr/kWtYzpfsiK6TWI1wBNiR8RpwmHKGH6U6mNLX6ypGgAyzv vJ2kWeifkH0WvGrEAhMQTULu9si+oF62SrIkYKK0suEbq7r5GYBJqeIRbGsKVTOg U8o1FYLxT0AxbQTnMTKRIE0HFDOfOOH3EvuyGV0gaJtZ36sJaQoe94sh5w7D/me9 FVZjPG4H7VjBcqcVRHCEbXmrCMOmk+WqIpfNVRiAKlRiV//+r1a5u0eyBOQM/CS2 NZ1wqmpLK2628g== -----END CERTIFICATE-----Generated at Tue Feb 3 14:49:44 2026 by rpki-client