This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json) Hash identifier: TgyzoPlIwGZFfC3BLAIWEhiKXgfs1sKqnWDWrogsH7Q= Subject key identifier: 04:30:AB:F6:7D:3D:19:98:7F:B3:73:9A:03:B3:05:49:9A:E6:8C:63 Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c Certificate serial: 019BFC1C644620B10BED77AA2419C014A251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft Manifest number: 50 Signing time: Mon 26 Jan 2026 21:01:17 +0000 Manifest this update: Mon 26 Jan 2026 21:01:17 +0000 Manifest next update: Tue 27 Jan 2026 21:01:17 +0000 Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=) 2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=) 3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: TPoW8y37ZHuL4CSi0Oe/WokAHqeua4m548dJczZXZus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:64:46:20:b1:0b:ed:77:aa:24:19:c0:14:a2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c Validity Not Before: Jan 26 21:01:17 2026 GMT Not After : Jan 27 21:01:17 2026 GMT Subject: CN=0430abf67d3d19987fb3739a03b305499ae68c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:b7:c4:58:7f:88:87:51:db:a9:85:e3:81: 84:17:69:07:33:1d:8b:2f:ac:e5:65:e6:8b:15:f3: fb:1b:6f:a0:b4:f3:8c:d5:93:ca:e2:52:01:df:17: 6d:9f:67:f8:3c:7d:4c:bd:50:b4:ad:4c:52:f2:7f: 2a:dc:b2:93:78:00:01:ef:60:6b:b0:cf:49:58:2f: 1e:21:23:70:51:f5:c1:26:39:7d:8e:bc:08:8d:3f: ff:d3:18:d3:14:dd:87:9c:59:26:43:65:06:a4:58: 48:db:61:f1:b2:41:72:1e:aa:a8:15:ea:ee:87:c7: 4d:48:28:4d:e8:50:eb:93:08:e0:9d:ed:f2:5b:55: de:8a:24:a7:e6:f8:df:dd:d6:96:fc:5f:40:12:99: 3e:43:f3:1a:25:75:a8:f6:db:67:ce:2c:60:5b:82: d9:4d:bd:03:e2:45:06:3c:cd:10:16:63:24:3f:a9: a8:1f:1c:b2:fc:e1:b6:80:7a:4d:81:99:a0:8d:7f: 94:28:e3:47:a0:cd:66:80:e9:b7:13:61:64:e4:80: 6c:12:44:bd:d9:6d:87:93:7d:d5:e2:50:bc:90:f6: 28:b2:8f:21:44:c6:21:4e:c0:77:b0:f8:1b:71:5d: 4b:a0:5f:40:94:30:27:31:29:62:09:55:42:cb:30: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:30:AB:F6:7D:3D:19:98:7F:B3:73:9A:03:B3:05:49:9A:E6:8C:63 X509v3 Authority Key Identifier: keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:55:b1:26:c5:92:7c:7a:8a:fa:1c:3b:5f:e9:69:f4:9d:94: 32:8e:2c:b9:44:55:f0:6c:9c:f7:86:3e:fd:30:27:13:c1:a6: 94:01:ee:b9:07:b2:e3:9a:a5:ab:50:04:9f:5b:2d:1e:ba:bf: 31:fd:3b:da:a8:4f:dc:a6:02:a2:36:bb:29:e5:23:6c:90:95: 71:93:9b:ab:cf:9f:f0:d5:ec:62:d3:9c:53:4f:30:9c:cc:e6: af:1e:4f:51:7d:8d:4d:3b:ab:60:4c:56:25:90:6d:1c:ba:b9: 36:b3:89:5f:ec:e6:0f:1d:7b:b4:66:74:f5:57:3d:6b:60:db: 22:97:3a:6f:9f:5b:fe:ba:a7:b4:f7:b6:0e:82:6e:d4:2a:91: 3a:00:94:d7:f1:fe:df:22:03:3c:86:5d:49:97:af:31:43:e8: 47:92:c9:13:64:9e:22:ae:93:64:0b:f4:80:e3:09:a8:f6:d9: 1a:43:2d:de:89:a1:1a:89:e5:d0:5f:34:0f:bd:a0:f4:94:9e: 32:97:b0:72:9d:6e:6a:8c:a4:4f:47:1a:98:22:53:6b:64:14: 70:88:52:50:0d:e4:e0:c1:4b:34:19:bc:36:21:d4:fc:8b:6b: 67:62:71:20:63:b0:8e:e2:45:2a:95:28:3a:ae:49:bb:af:42: 83:e5:e6:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HGRGILEL7XeqJBnAFKJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTY2N2MwNTU3ZDhlNzdhODlmZDJmNjc1Mzg3ODM1Yzky OTkwM2MwHhcNMjYwMTI2MjEwMTE3WhcNMjYwMTI3MjEwMTE3WjAzMTEwLwYDVQQD EygwNDMwYWJmNjdkM2QxOTk4N2ZiMzczOWEwM2IzMDU0OTlhZTY4YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJC3xFh/iIdR26mF44GEF2kHMx2L L6zlZeaLFfP7G2+gtPOM1ZPK4lIB3xdtn2f4PH1MvVC0rUxS8n8q3LKTeAAB72Br sM9JWC8eISNwUfXBJjl9jrwIjT//0xjTFN2HnFkmQ2UGpFhI22HxskFyHqqoFeru h8dNSChN6FDrkwjgne3yW1XeiiSn5vjf3daW/F9AEpk+Q/MaJXWo9ttnzixgW4LZ Tb0D4kUGPM0QFmMkP6moHxyy/OG2gHpNgZmgjX+UKONHoM1mgOm3E2Fk5IBsEkS9 2W2Hk33V4lC8kPYoso8hRMYhTsB3sPgbcV1LoF9AlDAnMSliCVVCyzCnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQwq/Z9PRmYf7NzmgOzBUma5oxjMB8GA1UdIwQY MBaAFLTmZ8BVfY53qJ/S9nU4eDXJKZA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYzg1YjItOWUyYi00MjA5LWJiZGMt MTczNjg4NjhlOTRiLzEvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYzg1YjItOWUyYi00MjA5LWJiZGMtMTczNjg4NjhlOTRi LzEvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClWxJsWS fHqK+hw7X+lp9J2UMo4suURV8Gyc94Y+/TAnE8GmlAHuuQey45qlq1AEn1stHrq/ Mf072qhP3KYCoja7KeUjbJCVcZObq8+f8NXsYtOcU08wnMzmrx5PUX2NTTurYExW JZBtHLq5NrOJX+zmDx17tGZ09Vc9a2DbIpc6b59b/rqntPe2DoJu1CqROgCU1/H+ 3yIDPIZdSZevMUPoR5LJE2SeIq6TZAv0gOMJqPbZGkMt3omhGonl0F80D72g9JSe Mpewcp1uaoykT0camCJTa2QUcIhSUA3k4MFLNBm8NiHU/ItrZ2JxIGOwjuJFKpUo Oq5Ju69Cg+Xm8g== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:48 2026 by rpki-client