This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json) Hash identifier: VGrV5JbTTSzTtLyYfUBIGZ4D8D2E1MO3msmBEhDdvN8= Subject key identifier: 80:FD:94:67:38:F6:66:E0:8E:BB:F3:41:47:73:9E:BD:B6:25:76:14 Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Certificate serial: 019BFCC0FD5DAE55EB76F4F5F8A68798180D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft Manifest number: 0C31 Signing time: Tue 27 Jan 2026 00:01:04 +0000 Manifest this update: Tue 27 Jan 2026 00:01:04 +0000 Manifest next update: Wed 28 Jan 2026 00:01:04 +0000 Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=) 2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=) 3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=) 4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: Co695MhdFCc27onQnTN2KTOKjjqBXAE2s/tyXoX3wWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:fd:5d:ae:55:eb:76:f4:f5:f8:a6:87:98:18:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8 Validity Not Before: Jan 27 00:01:04 2026 GMT Not After : Jan 28 00:01:04 2026 GMT Subject: CN=80fd946738f666e08ebbf34147739ebdb6257614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:cb:bb:30:39:d7:de:1b:4d:19:aa:3b:58: d8:cb:c2:0f:2a:25:ff:74:d9:6b:56:f1:4d:41:2a: a2:90:52:31:1d:23:dd:3d:3c:2c:e5:b4:f7:80:fc: 43:ed:7c:6a:2b:e8:77:2d:06:9c:3f:9b:71:0c:ba: 81:73:a4:dd:de:b2:dd:2f:ad:90:58:89:4c:fb:69: 61:6b:bf:a4:3d:d2:61:19:e3:3f:79:4b:7d:52:d9: 06:7f:e8:4d:b0:fb:64:d3:7f:75:93:80:5f:bd:36: ad:fb:55:1b:2b:6f:ee:e9:91:d9:5c:a7:de:fc:b1: d5:31:54:b9:2a:71:de:3f:df:fd:1f:06:52:d7:0d: 49:fc:b6:bd:f4:10:8f:8c:85:75:3b:2d:54:1c:70: aa:9f:f3:97:1d:08:00:60:9d:6f:e1:37:31:ab:cc: 3d:c8:4d:32:c9:a3:c9:73:d3:16:78:2d:58:a2:e2: 83:bc:fe:31:dd:eb:de:c4:0d:21:2f:ef:03:1b:82: b4:0a:33:69:e4:8f:da:63:00:0c:50:59:0e:6b:76: c7:07:b3:db:3d:bb:06:ed:49:91:16:92:ae:6b:4e: e9:2d:ce:e5:a4:4b:d3:d3:6c:e6:54:da:df:19:b9: de:02:94:26:68:21:0e:5c:4e:aa:0c:83:27:ac:d8: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FD:94:67:38:F6:66:E0:8E:BB:F3:41:47:73:9E:BD:B6:25:76:14 X509v3 Authority Key Identifier: keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0f:c9:f5:e3:14:87:c8:6a:84:35:fb:6f:43:d9:84:cd:dd: 9d:5b:02:30:ce:21:a6:a6:b5:5c:a6:c3:ce:80:86:7e:8e:25: 70:09:11:83:50:9f:3c:8c:b3:79:e8:3e:ef:33:f8:56:48:aa: b5:77:b2:e1:60:58:01:aa:2d:6f:9e:e9:3a:76:da:fb:a9:2a: 2c:a7:9a:27:c2:87:88:81:db:10:cc:a8:b9:ab:f0:60:9b:bb: f8:d2:73:c6:06:c2:64:0a:5f:aa:07:ee:6a:dc:f7:f1:21:e7: 9a:02:e3:f4:fe:d1:3a:c5:07:46:c8:98:00:45:27:55:56:7d: 72:ea:8a:ae:9f:f6:c5:f1:9f:12:d9:d9:e8:9c:06:9a:ae:de: d9:c2:5c:ea:1b:fe:2f:7e:01:c9:2a:8a:be:21:63:9b:59:6a: 92:c3:2f:0b:2b:9f:21:e3:10:3d:2a:43:7e:31:5e:55:72:c6: 16:41:bf:91:c4:33:32:0c:80:4c:63:84:af:eb:29:80:ec:cd: d5:99:38:a4:6a:bc:9a:13:05:72:5b:85:ff:56:45:cd:25:48: a0:45:33:cb:44:65:b6:72:d2:a7:18:d9:69:7d:90:cb:2e:a9: e5:cf:6b:ac:33:89:dc:43:93:13:13:13:2e:bf:de:72:42:85: 32:0f:83:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wP1drlXrdvT1+KaHmBgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz OTg3ZDgwHhcNMjYwMTI3MDAwMTA0WhcNMjYwMTI4MDAwMTA0WjAzMTEwLwYDVQQD Eyg4MGZkOTQ2NzM4ZjY2NmUwOGViYmYzNDE0NzczOWViZGI2MjU3NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJnLuzA5194bTRmqO1jYy8IPKiX/ dNlrVvFNQSqikFIxHSPdPTws5bT3gPxD7XxqK+h3LQacP5txDLqBc6Td3rLdL62Q WIlM+2lha7+kPdJhGeM/eUt9UtkGf+hNsPtk0391k4BfvTat+1UbK2/u6ZHZXKfe /LHVMVS5KnHeP9/9HwZS1w1J/La99BCPjIV1Oy1UHHCqn/OXHQgAYJ1v4Tcxq8w9 yE0yyaPJc9MWeC1YouKDvP4x3evexA0hL+8DG4K0CjNp5I/aYwAMUFkOa3bHB7Pb PbsG7UmRFpKua07pLc7lpEvT02zmVNrfGbneApQmaCEOXE6qDIMnrNgZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID9lGc49mbgjrvzQUdznr22JXYUMB8GA1UdIwQY MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA/J9eMU h8hqhDX7b0PZhM3dnVsCMM4hpqa1XKbDzoCGfo4lcAkRg1CfPIyzeeg+7zP4Vkiq tXey4WBYAaotb57pOnba+6kqLKeaJ8KHiIHbEMyouavwYJu7+NJzxgbCZApfqgfu atz38SHnmgLj9P7ROsUHRsiYAEUnVVZ9cuqKrp/2xfGfEtnZ6JwGmq7e2cJc6hv+ L34BySqKviFjm1lqksMvCyufIeMQPSpDfjFeVXLGFkG/kcQzMgyATGOEr+spgOzN 1Zk4pGq8mhMFcluF/1ZFzSVIoEUzy0RltnLSpxjZaX2Qyy6p5c9rrDOJ3EOTExMT Lr/eckKFMg+DTw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:37 2026 by rpki-client