This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json) Hash identifier: eVUSXIxEub6fi4cxDENOSZ8KwpLAZR28P1A7O145L0o= Subject key identifier: 21:08:46:C1:B0:D1:63:8F:55:1C:8F:8E:90:EF:08:07:7E:2A:84:B5 Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121 Certificate serial: 019BD95A1CCD5C5267830B46768B2B752944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft Manifest number: 0F62 Signing time: Tue 20 Jan 2026 03:02:00 +0000 Manifest this update: Tue 20 Jan 2026 03:02:00 +0000 Manifest next update: Wed 21 Jan 2026 03:02:00 +0000 Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=) 2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=) 3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: 8Xaq9iF2x/D5v2AWkwNtfmMQLm9DPsWNPdrljBkUPLs=) 4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:5a:1c:cd:5c:52:67:83:0b:46:76:8b:2b:75:29:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Validity Not Before: Jan 20 03:02:00 2026 GMT Not After : Jan 21 03:02:00 2026 GMT Subject: CN=210846c1b0d1638f551c8f8e90ef08077e2a84b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:5d:be:ee:91:13:cc:30:fa:e9:c7:79:4a: 99:cb:8b:55:15:09:1c:e4:af:1a:05:21:91:7c:bd: 3f:92:09:1e:7e:f2:08:99:7a:be:bb:aa:91:ee:a5: 84:d1:bd:7f:f7:52:d0:6d:36:06:4c:c1:2a:fb:65: b4:87:bf:80:05:ec:4c:15:c0:f4:03:10:b5:84:ec: 28:15:53:3b:2e:42:f2:af:49:96:ff:0e:fd:2c:1e: 54:25:e9:aa:de:f1:20:9f:c8:41:07:61:57:29:30: c6:ba:1d:9b:a1:31:f3:bd:f0:00:11:d5:89:28:8f: 36:4d:71:44:72:4d:63:aa:98:58:16:87:8d:53:56: 0c:10:ef:8d:2d:c1:b6:de:19:c2:71:0d:dc:29:c7: dc:14:31:ae:ee:35:45:af:70:ff:d0:43:1b:ea:f3: 07:cc:7a:48:7e:38:b5:33:1c:68:b8:cc:bb:0f:b0: bc:f2:d5:6e:96:e0:da:36:6a:53:4b:64:28:36:66: 99:3e:51:d5:38:72:04:df:e1:b0:f2:ea:c6:ca:3f: 2c:f5:24:7f:ed:c7:5b:5f:e4:e1:7a:81:87:8a:18: a4:8b:6b:62:b3:53:a0:37:7a:f6:33:6d:dc:64:79: fa:e1:9a:76:3b:da:e7:d0:1c:20:d5:d3:f5:a1:f8: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:08:46:C1:B0:D1:63:8F:55:1C:8F:8E:90:EF:08:07:7E:2A:84:B5 X509v3 Authority Key Identifier: keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0b:7f:9e:e4:63:cd:f5:ef:68:d1:3d:9e:7b:de:26:57:d3: 1e:15:df:ba:b4:66:87:99:c9:8c:af:a1:ad:4b:4a:4d:78:8a: f2:86:38:ce:71:1e:5c:9f:24:87:79:e8:81:fa:90:96:8d:9a: 08:0d:15:06:9d:70:15:1e:03:1f:a9:a7:3c:d5:f9:ae:dd:01: 2d:66:d8:24:38:06:0d:e6:0d:16:2a:0c:d4:27:ea:b5:77:b5: 98:25:9c:c7:ef:1b:a8:12:20:98:c0:ef:14:6b:a3:e4:6c:ad: 43:5f:0b:be:c7:6f:e8:08:3a:22:5b:c5:57:96:8e:92:ef:f4: 62:fe:a5:9f:d9:9f:8b:63:fd:f3:4e:17:7f:61:04:6b:ac:63: 6d:46:e8:4e:a3:ff:e1:5d:68:32:b6:35:39:61:48:80:03:d3: 13:b4:10:a8:1a:4f:37:e3:30:84:b0:43:ae:1f:15:f0:b8:1c: 10:2e:99:75:34:d3:56:b3:41:43:f7:f4:9a:86:f6:a2:51:04: d7:b4:44:f5:6e:a8:4f:39:2f:6d:b5:3b:de:91:86:48:9c:9d: df:85:c1:96:ae:3f:bd:3f:68:be:c8:0c:c6:b5:77:87:4b:31: a5:35:87:c4:79:ce:e6:f3:50:3f:10:55:2f:68:7d:89:bf:1b: 8f:f5:28:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWhzNXFJngwtGdosrdSlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY5NDBmMWNjNTc3ZjM3MGYyODQyODg1MGRjN2JmNzQx OGYxMjEwHhcNMjYwMTIwMDMwMjAwWhcNMjYwMTIxMDMwMjAwWjAzMTEwLwYDVQQD EygyMTA4NDZjMWIwZDE2MzhmNTUxYzhmOGU5MGVmMDgwNzdlMmE4NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Ndvu6RE8ww+unHeUqZy4tVFQkc 5K8aBSGRfL0/kgkefvIImXq+u6qR7qWE0b1/91LQbTYGTMEq+2W0h7+ABexMFcD0 AxC1hOwoFVM7LkLyr0mW/w79LB5UJemq3vEgn8hBB2FXKTDGuh2boTHzvfAAEdWJ KI82TXFEck1jqphYFoeNU1YMEO+NLcG23hnCcQ3cKcfcFDGu7jVFr3D/0EMb6vMH zHpIfji1MxxouMy7D7C88tVuluDaNmpTS2QoNmaZPlHVOHIE3+Gw8urGyj8s9SR/ 7cdbX+TheoGHihiki2tis1OgN3r2M23cZHn64Zp2O9rn0Bwg1dP1ofgx0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEIRsGw0WOPVRyPjpDvCAd+KoS1MB8GA1UdIwQY MBaAFLaPlA8cxXfzcPKEKIUNx790GPEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt ZTA0ZGFjNjFjZTlkLzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk LzEvdG8tVUR4ekZkX053OG9Rb2hRM0h2M1FZOFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgt/nuRj zfXvaNE9nnveJlfTHhXfurRmh5nJjK+hrUtKTXiK8oY4znEeXJ8kh3nogfqQlo2a CA0VBp1wFR4DH6mnPNX5rt0BLWbYJDgGDeYNFioM1CfqtXe1mCWcx+8bqBIgmMDv FGuj5GytQ18Lvsdv6Ag6IlvFV5aOku/0Yv6ln9mfi2P9804Xf2EEa6xjbUboTqP/ 4V1oMrY1OWFIgAPTE7QQqBpPN+MwhLBDrh8V8LgcEC6ZdTTTVrNBQ/f0mob2olEE 17RE9W6oTzkvbbU73pGGSJyd34XBlq4/vT9ovsgMxrV3h0sxpTWHxHnO5vNQPxBV L2h9ib8bj/UoDg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:47 2026 by rpki-client