This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json) Hash identifier: FJzGQeqgGs/cn4szdMlvApbStNVrx6ysb25DnZ4nhxw= Subject key identifier: A6:5B:63:B9:3B:7B:64:EA:35:A4:DD:38:7B:BF:FA:B2:D9:96:54:57 Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Certificate serial: 019BF9F6E024C37D441B230586603291D5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft Manifest number: 04CE Signing time: Mon 26 Jan 2026 11:01:04 +0000 Manifest this update: Mon 26 Jan 2026 11:01:04 +0000 Manifest next update: Tue 27 Jan 2026 11:01:04 +0000 Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: tNkSneLtqQasYHcEXAgHhVi0uR3Bd/THJLL/8d7YBLI=) 2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:e0:24:c3:7d:44:1b:23:05:86:60:32:91:d5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Validity Not Before: Jan 26 11:01:04 2026 GMT Not After : Jan 27 11:01:04 2026 GMT Subject: CN=a65b63b93b7b64ea35a4dd387bbffab2d9965457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:d3:f3:3b:01:61:c9:a7:00:44:5c:f3:8e: 45:4f:66:0e:ed:8d:a0:d1:b3:9c:65:77:57:f8:c8: 21:7c:de:ad:9e:62:44:e1:f3:5f:13:71:67:07:6c: 67:8c:db:2c:09:b9:ff:a3:43:23:49:e6:df:b2:de: e5:32:77:6e:6d:49:2e:07:ec:64:f4:94:b3:a9:86: 92:5b:73:31:fc:17:52:d1:bf:fd:de:f7:49:2d:56: 43:76:e2:2f:99:cb:57:8e:f1:37:e0:f6:06:7a:b3: 88:c1:3c:f4:49:fe:72:71:b3:ce:72:5b:2f:83:c8: 25:24:b5:80:64:7f:87:d2:c0:9d:11:8b:fa:0d:2d: 51:7d:f7:6f:ee:15:10:4b:ed:31:6e:88:17:95:5e: d6:3b:32:ab:70:67:95:f3:ce:26:ec:ab:95:0b:79: ee:0a:7c:44:be:dd:c4:c7:a1:4c:4c:49:59:f7:56: 7a:99:9b:c2:c8:ff:c8:00:aa:c0:32:d8:2c:5d:16: 67:7e:39:7f:1e:7e:ce:f4:dd:2a:9f:6f:46:04:57: ea:87:66:de:d9:b8:1f:4c:59:7e:78:81:7f:7d:ce: 18:55:7a:64:ce:93:7e:99:df:80:34:3b:78:6f:01: 8b:2d:88:18:97:02:a2:f9:7b:59:ae:b5:53:26:17: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5B:63:B9:3B:7B:64:EA:35:A4:DD:38:7B:BF:FA:B2:D9:96:54:57 X509v3 Authority Key Identifier: keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:28:e6:3a:92:25:b0:ab:1b:c2:40:a0:35:08:ae:df:08:03: 83:5d:82:62:df:e2:77:fd:40:77:15:69:3d:ae:05:22:8f:81: 23:57:6d:73:68:27:95:3f:e8:b1:44:f4:90:fd:77:66:93:0d: 79:30:4f:d5:06:d8:66:1a:a7:69:f6:e0:06:f0:7f:57:53:e5: d9:f5:97:a8:c5:91:06:f2:ff:7e:f1:7a:55:bd:91:1a:50:79: e1:57:72:93:9b:e4:87:fc:2e:57:54:c2:c3:70:b3:1c:58:2a: 95:09:b8:42:a0:9b:d2:cc:af:40:b7:12:bd:88:da:d6:fd:b9: 6e:cc:cf:0e:9e:65:49:b1:0e:66:77:6f:5c:ec:05:e1:95:88: 02:62:75:db:ef:cf:f6:51:8d:6d:47:90:d0:1c:f4:1d:70:7e: 52:c6:bf:f6:56:fe:e2:b8:50:17:62:d5:0d:10:33:68:96:ce: c8:77:d0:04:91:95:cf:6e:97:a9:c9:1e:f5:a8:e1:fb:3b:e5: b6:8f:81:9e:81:3d:69:d9:58:cb:b8:b8:66:75:a0:ea:58:59: 99:41:3e:55:7d:bd:12:8b:c1:e1:85:f3:02:70:c0:29:48:f7: 80:c7:88:85:9f:68:e7:6d:d3:93:36:f4:c3:87:3c:a1:e5:f2: ce:e1:a8:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59uAkw31EGyMFhmAykdXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3 ZmZhZjEwHhcNMjYwMTI2MTEwMTA0WhcNMjYwMTI3MTEwMTA0WjAzMTEwLwYDVQQD EyhhNjViNjNiOTNiN2I2NGVhMzVhNGRkMzg3YmJmZmFiMmQ5OTY1NDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9zT8zsBYcmnAERc845FT2YO7Y2g 0bOcZXdX+MghfN6tnmJE4fNfE3FnB2xnjNssCbn/o0MjSebfst7lMndubUkuB+xk 9JSzqYaSW3Mx/BdS0b/93vdJLVZDduIvmctXjvE34PYGerOIwTz0Sf5ycbPOclsv g8glJLWAZH+H0sCdEYv6DS1Rffdv7hUQS+0xbogXlV7WOzKrcGeV884m7KuVC3nu CnxEvt3Ex6FMTElZ91Z6mZvCyP/IAKrAMtgsXRZnfjl/Hn7O9N0qn29GBFfqh2be 2bgfTFl+eIF/fc4YVXpkzpN+md+ANDt4bwGLLYgYlwKi+XtZrrVTJhfVsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZbY7k7e2TqNaTdOHu/+rLZllRXMB8GA1UdIwQY MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt NjYxYmIwZTllNmVjLzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVijmOpIl sKsbwkCgNQiu3wgDg12CYt/id/1AdxVpPa4FIo+BI1dtc2gnlT/osUT0kP13ZpMN eTBP1QbYZhqnafbgBvB/V1Pl2fWXqMWRBvL/fvF6Vb2RGlB54Vdyk5vkh/wuV1TC w3CzHFgqlQm4QqCb0syvQLcSvYja1v25bszPDp5lSbEOZndvXOwF4ZWIAmJ12+/P 9lGNbUeQ0Bz0HXB+Usa/9lb+4rhQF2LVDRAzaJbOyHfQBJGVz26Xqcke9ajh+zvl to+BnoE9adlYy7i4ZnWg6lhZmUE+VX29EovB4YXzAnDAKUj3gMeIhZ9o523Tkzb0 w4c8oeXyzuGofQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:34 2026 by rpki-client