This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: 0j41vAbxDKCIC2vxML47sibyUUQmoyrf1Xp4KHioLLQ= Subject key identifier: 2F:66:B3:99:22:4D:55:29:AE:7F:40:B6:81:DA:74:4C:E3:9E:7A:69 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019BD621998CFCCCBDF4D3F2276090802616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 98 Signing time: Mon 19 Jan 2026 12:01:24 +0000 Manifest this update: Mon 19 Jan 2026 12:01:24 +0000 Manifest next update: Tue 20 Jan 2026 12:01:24 +0000 Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=) 2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=) 3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=) 4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=) 5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=) 6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=) 7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=) 8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=) 9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=) 10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=) 11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: ISd7BB0WDrWq4OUMIX28koN/WkQfGbmB2c/uFZykOwI=) 12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=) 13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:21:99:8c:fc:cc:bd:f4:d3:f2:27:60:90:80:26:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 19 12:01:24 2026 GMT Not After : Jan 20 12:01:24 2026 GMT Subject: CN=2f66b399224d5529ae7f40b681da744ce39e7a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:00:dd:03:c7:fe:53:c9:20:f5:ac:d6:24: 44:c6:52:52:71:d5:5b:ac:fd:42:a1:9e:1f:1c:8c: a5:6e:88:3f:91:54:61:d0:78:59:0b:01:6b:cd:09: a7:69:05:78:07:46:39:63:f2:e7:24:0d:3b:9d:7c: b9:a5:69:e7:d1:f4:99:ff:88:a6:fd:f4:db:0d:42: 5f:4b:1a:ef:f3:27:65:8a:37:ca:d2:35:43:97:94: 82:43:87:78:81:51:7c:53:f0:77:a6:cb:a8:94:28: 1e:18:1e:28:73:a4:7e:07:88:03:2b:7e:48:34:f8: 9b:71:ca:1e:8d:3b:86:25:84:be:ff:50:77:2f:60: 54:6c:49:07:63:bb:07:09:e5:98:83:fe:54:07:e5: 50:e1:eb:a0:39:18:c7:14:02:0e:69:77:c7:c6:7a: ff:1e:cb:f7:4f:d3:fe:80:b9:e9:45:20:f4:99:e2: 15:74:c2:77:03:76:61:6f:9a:e2:c5:9d:a5:4c:51: 08:23:fe:51:e0:53:08:02:03:39:12:b6:71:47:3d: 95:61:77:61:7b:a3:f3:dc:68:2a:0c:ad:f9:c3:ad: a4:ca:b9:43:f8:98:6c:36:c5:3d:dd:2b:24:90:ed: 32:89:1c:4d:85:61:54:8c:af:89:b9:61:d8:e4:49: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:66:B3:99:22:4D:55:29:AE:7F:40:B6:81:DA:74:4C:E3:9E:7A:69 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:30:d6:a8:36:5b:c9:17:4b:46:69:3f:60:9d:25:69:1a:42: ae:ab:15:6b:fb:ae:42:03:3c:da:2a:00:eb:38:50:ef:7c:cf: 6d:4f:2a:69:4e:b8:ca:b0:77:61:d3:ad:9c:c7:e5:1f:d4:c1: 3b:e2:49:98:ef:54:1d:e6:c2:2c:75:16:19:c0:55:dd:98:1a: 7f:f1:1c:cf:a9:24:b6:53:75:3e:3b:8e:bc:92:76:ae:45:a1: b6:65:3d:5a:d6:ed:9e:ca:bc:0f:33:df:6e:a3:1e:0b:2f:19: 86:c4:2d:2d:f3:71:49:4b:ba:48:c7:03:7f:79:4f:3f:68:12: 28:17:1a:99:f1:6d:f8:d8:d8:0c:43:76:2a:e5:7c:e6:bd:e1: 84:8b:89:db:51:78:a1:db:07:1e:1f:d6:ec:91:80:c7:a0:b3: b9:8c:74:7e:5d:88:16:56:82:88:4a:52:51:7c:25:90:2d:c8: f2:4e:73:75:33:f3:d1:ec:fe:fc:14:26:3b:bc:3a:e2:d1:fc: 3b:42:50:4b:79:ee:09:ec:ca:e1:78:71:e1:a1:13:dd:cd:d1: 9f:ec:7e:f4:76:00:23:2b:f6:3a:92:0a:6d:84:b3:75:ae:b3: 25:aa:6c:9c:db:74:64:d3:9e:62:6f:ff:ff:00:cd:a7:bc:93: 0c:f1:f2:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWIZmM/My99NPyJ2CQgCYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTE5MTIwMTI0WhcNMjYwMTIwMTIwMTI0WjAzMTEwLwYDVQQD EygyZjY2YjM5OTIyNGQ1NTI5YWU3ZjQwYjY4MWRhNzQ0Y2UzOWU3YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2oA3QPH/lPJIPWs1iRExlJScdVb rP1CoZ4fHIylbog/kVRh0HhZCwFrzQmnaQV4B0Y5Y/LnJA07nXy5pWnn0fSZ/4im /fTbDUJfSxrv8ydlijfK0jVDl5SCQ4d4gVF8U/B3psuolCgeGB4oc6R+B4gDK35I NPibccoejTuGJYS+/1B3L2BUbEkHY7sHCeWYg/5UB+VQ4eugORjHFAIOaXfHxnr/ Hsv3T9P+gLnpRSD0meIVdMJ3A3Zhb5rixZ2lTFEII/5R4FMIAgM5ErZxRz2VYXdh e6Pz3GgqDK35w62kyrlD+JhsNsU93SskkO0yiRxNhWFUjK+JuWHY5EkN5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9ms5kiTVUprn9AtoHadEzjnnppMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzDWqDZb yRdLRmk/YJ0laRpCrqsVa/uuQgM82ioA6zhQ73zPbU8qaU64yrB3YdOtnMflH9TB O+JJmO9UHebCLHUWGcBV3Zgaf/Ecz6kktlN1PjuOvJJ2rkWhtmU9Wtbtnsq8DzPf bqMeCy8ZhsQtLfNxSUu6SMcDf3lPP2gSKBcamfFt+NjYDEN2KuV85r3hhIuJ21F4 odsHHh/W7JGAx6CzuYx0fl2IFlaCiEpSUXwlkC3I8k5zdTPz0ez+/BQmO7w64tH8 O0JQS3nuCezK4Xhx4aET3c3Rn+x+9HYAIyv2OpIKbYSzda6zJapsnNt0ZNOeYm// /wDNp7yTDPHytg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:02:22 2026 by rpki-client