This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft File: tPljRdPyLts5XSR_e4bS1z5KAJE.mft (raw, json) Hash identifier: MRWcEFv1L224u5+tr/3HdYYA/WOVfPpf4KFKnKXsFHE= Subject key identifier: 9A:3E:10:B0:F0:3E:AF:14:FD:C8:AB:EC:89:38:F6:0F:54:91:01:3C Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Certificate serial: 019BE08DEDE908015A07ACE9E5097C1CB014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft Manifest number: 1468 Signing time: Wed 21 Jan 2026 12:35:56 +0000 Manifest this update: Wed 21 Jan 2026 12:35:56 +0000 Manifest next update: Thu 22 Jan 2026 12:35:56 +0000 Files and hashes: 1: 04uw-mPVsZPyokPmUXcT4483PPE.roa (hash: cKR9IH8O8dSbu/1KnD9tUmBzwrnTGRKB/kY1E5KQJkY=) 2: AWGd68shTEaJdIwm-eD1c5mJEEU.roa (hash: Eu8z5DEQ2T0MYvpLKK2G7NXxLpkdiyINRJz0oFPzHM0=) 3: HHIfdZOfDQjAFs6n92mrCehRLp4.roa (hash: b1qQO0GNcv2HIIXTCKPYnEMobaqImRUtd0v45gQ7ux4=) 4: XGQk8mKRuUWf2K0hfHEhGRX-7yg.roa (hash: 9AVgJF3kBN7gznc85zDD9pXOlEPjjyEf4ik+hG7Q6JA=) 5: h78eW0HaB6TtxqatuSxfNSAXOkA.roa (hash: tEITXnp9qQOzLg/Cn5ZNGDUBT24xzW0m36AeoNbl9+E=) 6: tPljRdPyLts5XSR_e4bS1z5KAJE.crl (hash: 5SbyKuSdHLwVCvWw8PWOWV4KPLyCJrbCsAI+v7fc518=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:8d:ed:e9:08:01:5a:07:ac:e9:e5:09:7c:1c:b0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Validity Not Before: Jan 21 12:35:56 2026 GMT Not After : Jan 22 12:35:56 2026 GMT Subject: CN=9a3e10b0f03eaf14fdc8abec8938f60f5491013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:99:e4:a6:bd:42:5c:09:a3:d4:db:dd:36: a0:2e:47:21:47:ae:09:2e:24:ff:50:90:1e:6c:9c: 3f:a3:1a:d8:55:cd:ff:3a:1d:3f:61:61:6d:ec:2d: 67:7a:26:4c:3b:65:8e:45:a3:77:34:91:8a:77:49: b1:70:d0:88:36:3d:c3:a3:3f:5f:43:1e:f5:49:ec: 4c:19:a0:c2:a9:e6:e2:0d:12:52:2d:a7:d8:de:d2: 5e:fa:4b:87:e4:20:bf:d1:5d:f6:0f:7a:4a:30:d9: 98:c7:16:e1:4c:33:cd:4e:b0:b9:37:8e:b1:81:8b: 16:33:8c:4c:b7:a6:5c:e8:1b:c7:0c:f0:7c:c8:10: f9:9f:85:c5:6c:72:f6:98:62:26:50:33:05:ce:06: 9b:f5:99:ac:b1:cc:c4:ff:69:70:c6:31:cc:ac:04: 33:d3:62:ad:28:af:91:b1:26:ec:9f:66:e1:59:28: 7c:89:7d:cf:41:38:84:ca:c5:24:da:15:3f:6e:e8: 5c:0a:d8:f0:f7:b8:e7:47:93:0c:80:e0:74:70:09: e4:9a:d8:97:d9:76:08:ec:00:6b:0e:5e:aa:db:b2: 35:dc:00:4f:e3:9e:66:b6:bb:dd:6b:4d:9c:ba:f9: 57:09:51:f6:04:6d:c7:af:7d:c8:d0:1b:31:cf:ad: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3E:10:B0:F0:3E:AF:14:FD:C8:AB:EC:89:38:F6:0F:54:91:01:3C X509v3 Authority Key Identifier: keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8d:c6:31:30:7b:05:e6:b9:de:93:92:cf:04:24:82:db:15: 83:52:86:4c:1b:ee:72:1f:80:f3:f8:1d:d8:2d:f0:62:4d:30: 48:aa:e8:ec:36:54:f5:ff:63:a2:60:cf:21:15:23:aa:cf:b7: 7d:f3:42:05:f9:11:0a:01:5e:be:57:07:a6:1c:78:d3:8b:68: 7a:95:ac:ed:5e:0b:fc:6f:92:0b:dc:78:5a:99:db:f2:21:ee: f7:12:15:37:05:dc:3e:5f:5d:a4:e5:07:04:c2:ef:ab:9a:6b: 67:6f:74:3a:83:0e:62:b5:81:9e:fd:40:fa:44:bc:3c:9a:46: c9:ae:f8:75:a3:65:64:eb:4b:8f:f0:82:76:a3:c0:14:de:a3: 0c:9a:4c:e5:54:16:0e:cb:62:1c:52:17:27:8e:01:a4:7a:67: d7:4d:59:af:84:00:1f:f6:c7:8a:5f:2e:8c:35:2b:c0:21:a0: 59:9e:47:9d:67:bb:34:3d:f3:e1:ae:27:58:e5:e5:8b:28:92: ab:d2:89:b4:2b:8d:83:de:93:78:3d:78:74:7d:e8:d8:6c:ee: 04:57:93:e2:15:c7:27:86:98:6b:2c:4b:15:e2:95:d4:d5:d4: 90:20:ec:34:70:c4:90:ff:f5:ac:af:62:58:84:42:ce:68:7a: cb:5d:51:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgje3pCAFaB6zp5Ql8HLAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0 YTAwOTEwHhcNMjYwMTIxMTIzNTU2WhcNMjYwMTIyMTIzNTU2WjAzMTEwLwYDVQQD Eyg5YTNlMTBiMGYwM2VhZjE0ZmRjOGFiZWM4OTM4ZjYwZjU0OTEwMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoeZ5Ka9QlwJo9Tb3TagLkchR64J LiT/UJAebJw/oxrYVc3/Oh0/YWFt7C1neiZMO2WORaN3NJGKd0mxcNCINj3Doz9f Qx71SexMGaDCqebiDRJSLafY3tJe+kuH5CC/0V32D3pKMNmYxxbhTDPNTrC5N46x gYsWM4xMt6Zc6BvHDPB8yBD5n4XFbHL2mGImUDMFzgab9ZmssczE/2lwxjHMrAQz 02KtKK+RsSbsn2bhWSh8iX3PQTiEysUk2hU/buhcCtjw97jnR5MMgOB0cAnkmtiX 2XYI7ABrDl6q27I13ABP455mtrvda02cuvlXCVH2BG3Hr33I0Bsxz60yDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo+ELDwPq8U/cir7Ik49g9UkQE8MB8GA1UdIwQY MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt NmZjMzQzZDc3Y2QyLzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAco3GMTB7 Bea53pOSzwQkgtsVg1KGTBvuch+A8/gd2C3wYk0wSKro7DZU9f9jomDPIRUjqs+3 ffNCBfkRCgFevlcHphx404toepWs7V4L/G+SC9x4Wpnb8iHu9xIVNwXcPl9dpOUH BMLvq5prZ290OoMOYrWBnv1A+kS8PJpGya74daNlZOtLj/CCdqPAFN6jDJpM5VQW DstiHFIXJ44BpHpn101Zr4QAH/bHil8ujDUrwCGgWZ5HnWe7ND3z4a4nWOXliyiS q9KJtCuNg96TeD14dH3o2GzuBFeT4hXHJ4aYayxLFeKV1NXUkCDsNHDEkP/1rK9i WIRCzmh6y11ReA== -----END CERTIFICATE-----Generated at Wed Jan 21 18:27:00 2026 by rpki-client