This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json) Hash identifier: FbtF13mIXY7koQybYBQN9UKc3VPHpxS5mccWf+/Lv+g= Subject key identifier: C8:25:CA:4C:FB:8D:75:2B:CB:1D:DD:EF:B6:3D:AA:26:87:7C:3B:95 Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019B9FD83649AE2585714C964325D1D11A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft Manifest number: 17BC Signing time: Thu 08 Jan 2026 23:01:45 +0000 Manifest this update: Thu 08 Jan 2026 23:01:45 +0000 Manifest next update: Fri 09 Jan 2026 23:01:45 +0000 Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=) 2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=) 3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: hsDUpQns44eOkQj3FbmG7p5ZKkNsbOAH2ziJA+EqW4M=) 4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d8:36:49:ae:25:85:71:4c:96:43:25:d1:d1:1a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Jan 8 23:01:45 2026 GMT Not After : Jan 9 23:01:45 2026 GMT Subject: CN=c825ca4cfb8d752bcb1dddefb63daa26877c3b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:03:fd:e4:5a:c9:f9:dd:39:31:f3:14:da: ac:8d:11:02:1b:19:45:20:d5:da:9e:9f:92:3e:87: 52:fb:14:18:7e:16:88:a1:7f:7a:9a:5a:f6:b8:1a: 14:69:ba:e8:34:c2:8b:51:37:90:0b:41:ef:9b:cc: b2:64:5c:84:71:83:57:18:1e:7b:23:94:9e:bb:08: 88:42:3f:1d:04:1f:c5:58:44:e9:bc:4f:0a:e0:f3: b3:cf:c8:4e:a0:96:bc:da:f8:7c:63:e1:f9:c2:66: 48:54:d2:93:c3:75:4f:79:4d:25:5b:20:4b:ce:aa: ca:9e:a6:f3:be:ce:5f:61:1c:1b:8f:e2:3c:0c:c7: 16:a5:38:d0:25:37:8f:6c:66:72:45:c3:3c:ec:4e: 2a:a7:bb:5b:d2:4b:1e:39:93:fb:2e:78:29:e4:5a: 7b:20:95:33:b6:a0:e6:68:2d:a9:30:6a:fa:1e:70: b3:b2:47:6c:e1:82:a5:be:fa:4f:e3:70:b0:93:62: c0:e6:21:34:ba:32:ed:7e:1f:b9:e6:5c:82:73:e5: 66:8e:00:ba:2e:c1:e1:3e:48:48:a3:4b:b1:5a:67: bb:1d:9a:44:e9:99:38:a7:80:f0:71:e1:2b:42:b6: b6:18:15:8a:ea:97:00:16:22:b0:67:ed:2c:d8:6c: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:CA:4C:FB:8D:75:2B:CB:1D:DD:EF:B6:3D:AA:26:87:7C:3B:95 X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:93:b3:51:af:ad:21:9a:28:a2:d0:8c:48:5f:38:36:8b:e6: 1b:19:fc:17:83:fc:da:3d:42:10:db:ec:88:4e:da:a0:5a:66: 3a:87:9b:b2:3f:bf:fa:9d:2e:a8:ee:f6:39:7e:47:2d:58:f2: 7a:ad:0c:86:67:6d:87:d2:17:a3:8c:89:bb:64:9e:08:8c:5b: 32:5c:bb:45:7a:5e:cd:54:03:a6:2f:23:57:a4:f7:6a:10:10: 57:37:18:c6:90:28:6b:28:0a:d0:4b:f2:db:05:d9:64:f6:20: ea:45:90:d6:9d:d2:4a:2d:bc:fd:2b:7d:3d:eb:8a:89:c3:d9: 3f:15:84:c8:a8:52:e2:62:21:d2:08:56:65:54:e0:20:ad:ad: 71:ea:4a:ca:1c:a1:77:51:57:38:3c:61:7f:21:9e:9f:eb:61: ee:3d:8b:39:a8:35:5e:12:96:e4:b5:74:eb:ed:60:df:71:84: 76:62:16:59:66:6d:1a:1a:c1:aa:a7:07:18:18:44:8b:84:97: c8:26:26:5f:ae:2b:f8:22:31:1f:4f:a7:ea:0e:6a:c3:5f:57: b3:67:f5:44:28:ec:5e:d3:6b:f7:78:cf:16:f5:46:71:27:23: 6b:68:21:2e:65:35:15:58:2a:b5:fd:e2:f9:67:c3:b5:ff:9f: dd:ea:a9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf2DZJriWFcUyWQyXR0RowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjYwMTA4MjMwMTQ1WhcNMjYwMTA5MjMwMTQ1WjAzMTEwLwYDVQQD EyhjODI1Y2E0Y2ZiOGQ3NTJiY2IxZGRkZWZiNjNkYWEyNjg3N2MzYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwakD/eRayfndOTHzFNqsjRECGxlF INXanp+SPodS+xQYfhaIoX96mlr2uBoUabroNMKLUTeQC0Hvm8yyZFyEcYNXGB57 I5SeuwiIQj8dBB/FWETpvE8K4POzz8hOoJa82vh8Y+H5wmZIVNKTw3VPeU0lWyBL zqrKnqbzvs5fYRwbj+I8DMcWpTjQJTePbGZyRcM87E4qp7tb0kseOZP7Lngp5Fp7 IJUztqDmaC2pMGr6HnCzskds4YKlvvpP43Cwk2LA5iE0ujLtfh+55lyCc+VmjgC6 LsHhPkhIo0uxWme7HZpE6Zk4p4DwceErQra2GBWK6pcAFiKwZ+0s2GzGeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMglykz7jXUryx3d77Y9qiaHfDuVMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJOzUa+t IZoootCMSF84NovmGxn8F4P82j1CENvsiE7aoFpmOoebsj+/+p0uqO72OX5HLVjy eq0Mhmdth9IXo4yJu2SeCIxbMly7RXpezVQDpi8jV6T3ahAQVzcYxpAoaygK0Evy 2wXZZPYg6kWQ1p3SSi28/St9PeuKicPZPxWEyKhS4mIh0ghWZVTgIK2tcepKyhyh d1FXODxhfyGen+th7j2LOag1XhKW5LV06+1g33GEdmIWWWZtGhrBqqcHGBhEi4SX yCYmX64r+CIxH0+n6g5qw19Xs2f1RCjsXtNr93jPFvVGcScja2ghLmU1FVgqtf3i +WfDtf+f3eqpnA== -----END CERTIFICATE-----Generated at Fri Jan 9 01:11:43 2026 by rpki-client