This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json) Hash identifier: WnPMMRnvVbwDAy8N6683Xr6QVg1HKwQErwiSKbveWqQ= Subject key identifier: B4:FC:08:6F:87:69:F9:DF:3C:AF:7A:AF:25:6F:C1:23:EE:CB:9E:CE Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019BFCF859BFC061ADFCB5B5523938D3BBDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 01:01:32 +0000 Manifest this update: Tue 27 Jan 2026 01:01:32 +0000 Manifest next update: Wed 28 Jan 2026 01:01:32 +0000 Files and hashes: 1: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (hash: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws=) 2: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (hash: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU=) 3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: a9jQmZT/GulmdiaZWwpxWuEsFaYdsbMHq9YxMCm87XU=) 4: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (hash: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:59:bf:c0:61:ad:fc:b5:b5:52:39:38:d3:bb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Jan 27 01:01:32 2026 GMT Not After : Jan 28 01:01:32 2026 GMT Subject: CN=b4fc086f8769f9df3caf7aaf256fc123eecb9ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:3d:e8:56:67:c6:77:81:b1:0a:7e:1e:f4: 5f:04:3d:d9:13:91:3c:ad:ff:ed:7d:85:85:ff:c1: 1b:e0:0e:c7:39:cc:1e:1c:a9:0e:eb:54:e4:46:29: 94:86:e8:79:5b:5f:24:4e:25:81:db:18:d3:37:84: 0f:18:e0:07:db:c9:f3:ae:73:bd:19:68:1e:26:6f: f9:a9:50:06:1a:5f:c5:67:1b:26:9c:e4:45:5d:fa: 01:7d:1a:e4:e9:23:9d:c1:7a:20:62:3e:20:d0:17: 5b:54:ba:65:50:f1:7f:a6:a7:94:f6:22:e5:fc:76: 40:51:92:9f:a3:6f:2e:29:4f:2b:07:f3:1b:4d:4c: 05:06:ae:79:93:3b:bb:81:00:00:af:1f:f6:b4:00: 8d:fb:00:1e:c8:f5:a6:cf:85:c2:44:e2:6f:a5:e7: 54:7a:88:6d:a9:94:57:1b:b9:d3:cf:50:cc:b1:26: 74:ab:a8:5a:81:f0:d2:d2:33:a7:c8:56:0c:8a:37: c1:bb:6e:0e:34:14:65:30:fc:05:4f:34:fa:f0:78: a3:94:08:0d:52:c1:81:a3:78:8d:06:e5:d5:97:15: 48:99:6a:e0:a7:41:8d:4f:13:15:66:d8:fc:dd:49: 6b:1b:d1:0c:06:97:bf:e7:16:9c:22:4e:dd:b9:ad: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:08:6F:87:69:F9:DF:3C:AF:7A:AF:25:6F:C1:23:EE:CB:9E:CE X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4e:ea:95:35:f0:66:9d:c5:9f:f0:68:5e:b2:80:1c:50:b6: 4c:e4:d0:29:a1:94:ff:3b:15:72:07:0e:0a:b0:7e:6d:d2:80: 93:a4:12:a9:97:20:3e:02:ec:56:56:91:60:35:50:99:ba:4a: 53:a9:1b:66:38:d5:6f:bd:b2:85:3b:6f:c2:77:51:16:02:5b: cb:ed:7c:62:29:c8:7c:7a:76:63:53:5b:87:44:dc:f7:dd:37: 84:23:7f:fa:5d:4a:3e:e6:19:2a:b0:88:db:10:1a:72:40:af: bb:70:c7:be:f0:be:ba:8b:5a:b6:c3:64:07:b7:8b:6c:f7:30: bf:90:d5:99:66:af:ee:0b:17:dd:e7:c9:3e:a4:a7:98:7b:bd: 54:de:4a:d1:01:4e:ad:8d:1f:94:89:2e:12:7a:11:60:0f:24: 6e:09:10:b9:f4:f1:6b:24:80:d5:85:91:5b:df:37:2a:c5:43: c8:7a:71:1a:85:d4:0d:82:4d:dd:dc:f1:ee:05:4e:58:4a:fd: b7:bb:0a:a1:aa:d6:68:a0:ab:e0:26:55:50:36:80:b2:eb:66: 76:be:5a:b0:c3:52:54:f0:1f:05:c3:78:d2:a7:ec:27:24:87: 82:74:ca:7f:57:2a:af:d9:d4:32:98:e3:8f:5d:9e:68:33:02: 42:8a:5e:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+Fm/wGGt/LW1Ujk407vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjYwMTI3MDEwMTMyWhcNMjYwMTI4MDEwMTMyWjAzMTEwLwYDVQQD EyhiNGZjMDg2Zjg3NjlmOWRmM2NhZjdhYWYyNTZmYzEyM2VlY2I5ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ME96FZnxneBsQp+HvRfBD3ZE5E8 rf/tfYWF/8Eb4A7HOcweHKkO61TkRimUhuh5W18kTiWB2xjTN4QPGOAH28nzrnO9 GWgeJm/5qVAGGl/FZxsmnORFXfoBfRrk6SOdwXogYj4g0BdbVLplUPF/pqeU9iLl /HZAUZKfo28uKU8rB/MbTUwFBq55kzu7gQAArx/2tACN+wAeyPWmz4XCROJvpedU eohtqZRXG7nTz1DMsSZ0q6hagfDS0jOnyFYMijfBu24ONBRlMPwFTzT68HijlAgN UsGBo3iNBuXVlxVImWrgp0GNTxMVZtj83UlrG9EMBpe/5xacIk7dua1CewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT8CG+HafnfPK96ryVvwSPuy57OMB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuk7qlTXw Zp3Fn/BoXrKAHFC2TOTQKaGU/zsVcgcOCrB+bdKAk6QSqZcgPgLsVlaRYDVQmbpK U6kbZjjVb72yhTtvwndRFgJby+18YinIfHp2Y1Nbh0Tc9903hCN/+l1KPuYZKrCI 2xAackCvu3DHvvC+uotatsNkB7eLbPcwv5DVmWav7gsX3efJPqSnmHu9VN5K0QFO rY0flIkuEnoRYA8kbgkQufTxaySA1YWRW983KsVDyHpxGoXUDYJN3dzx7gVOWEr9 t7sKoarWaKCr4CZVUDaAsutmdr5asMNSVPAfBcN40qfsJySHgnTKf1cqr9nUMpjj j12eaDMCQopeog== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:40 2026 by rpki-client