This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json) Hash identifier: TzgkEsF5Yo1y6qnxMdECNS5P+39cn3fNvqGLTw3C/hk= Subject key identifier: 0C:B7:68:32:E3:AB:D4:5F:22:E5:29:5B:B8:53:0A:A3:30:C3:B1:CB Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Certificate serial: 019BD87D3B962C6E9A53EAEDF1C932C21244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft Manifest number: 14C7 Signing time: Mon 19 Jan 2026 23:00:44 +0000 Manifest this update: Mon 19 Jan 2026 23:00:44 +0000 Manifest next update: Tue 20 Jan 2026 23:00:44 +0000 Files and hashes: 1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=) 2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 93q6lkR8WAVVIaYhlNOF9uxx4AWC24fqSPZNQKIHLEc=) 3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:7d:3b:96:2c:6e:9a:53:ea:ed:f1:c9:32:c2:12:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Validity Not Before: Jan 19 23:00:44 2026 GMT Not After : Jan 20 23:00:44 2026 GMT Subject: CN=0cb76832e3abd45f22e5295bb8530aa330c3b1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:00:84:f5:ad:af:09:81:7d:6d:8f:62:ba: c9:56:ab:fb:e0:be:71:66:e6:5c:28:75:60:b5:dd: d8:31:30:19:7f:d1:b6:9d:7e:a2:ac:77:7e:df:09: 00:ce:fd:14:45:03:dc:7f:0d:86:6f:12:ec:20:8f: 4f:06:0e:8e:8d:ae:15:3e:0e:49:52:69:67:6f:4d: b0:f9:3c:a4:7e:0f:be:97:65:b3:84:aa:ca:08:7e: 14:10:c4:4a:12:4f:06:dd:17:83:e5:2e:cd:67:46: 00:8b:5e:27:6f:01:b2:67:58:fc:ac:13:a5:32:a4: ba:54:81:d1:d1:34:39:e2:0f:b5:2e:ce:91:ed:9b: d5:c8:35:f9:47:89:4e:d2:cd:61:b5:99:d4:1f:b5: 08:f1:92:2a:23:37:e4:80:54:24:8d:3a:85:1f:ba: 2e:88:1e:e1:66:5d:37:08:ce:26:c7:89:ea:40:5a: 1b:26:ad:8e:d2:60:12:b2:b6:30:17:46:36:cb:f9: ab:91:a8:b9:9f:05:59:23:b2:64:fa:d6:bd:f5:95: 2b:73:a0:ef:1e:bb:23:f1:bd:d0:96:bd:4f:48:60: 93:16:b4:5d:3e:eb:6d:45:cd:a6:fe:0d:87:57:b4: 44:4e:e1:1e:bf:a8:de:a9:52:c3:1a:45:4c:0a:13: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B7:68:32:E3:AB:D4:5F:22:E5:29:5B:B8:53:0A:A3:30:C3:B1:CB X509v3 Authority Key Identifier: keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:07:ff:3f:46:84:d2:92:76:a8:1e:18:df:32:f7:c3:b5:3b: e2:3e:4a:33:2f:b1:51:34:9d:38:f5:b2:37:07:e2:19:60:c1: f5:a2:61:7c:b8:77:31:0d:87:2b:b2:81:9a:fb:b8:4d:f9:66: 9d:33:85:ab:be:33:70:83:a5:e7:26:57:1a:ee:a5:96:a8:ab: 42:dc:c6:80:03:56:39:a8:03:89:70:c8:02:a1:bb:4a:ed:23: bb:78:01:6a:8a:cf:0d:d8:09:a2:de:1a:36:78:a1:9b:a5:be: 49:f2:47:c9:bd:50:1e:ec:15:88:fd:33:17:63:38:30:e7:d6: 2b:10:27:c9:4c:1c:ae:8d:44:02:24:24:b2:e9:8c:4b:88:5c: d2:ed:89:6a:75:19:5a:af:3c:ba:82:66:62:cc:9c:7a:1d:ca: 9c:1b:30:e2:22:86:10:f2:10:21:fa:e8:c8:e4:82:2e:7a:f9: a4:e3:98:18:50:f2:96:dc:81:84:c3:4f:f6:50:61:08:74:09: 16:7d:44:8b:ca:08:e2:c4:a9:ae:a9:97:2c:39:99:9c:d3:8b: 6b:32:02:fd:f2:46:f2:3e:1b:f1:f9:bd:1b:aa:2b:95:63:a9: b6:46:d8:46:72:2c:2c:c4:e4:83:95:51:06:48:9f:fa:ca:85: 74:ef:42:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYfTuWLG6aU+rt8ckywhJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4 YmY1ZGMwHhcNMjYwMTE5MjMwMDQ0WhcNMjYwMTIwMjMwMDQ0WjAzMTEwLwYDVQQD EygwY2I3NjgzMmUzYWJkNDVmMjJlNTI5NWJiODUzMGFhMzMwYzNiMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluUAhPWtrwmBfW2PYrrJVqv74L5x ZuZcKHVgtd3YMTAZf9G2nX6irHd+3wkAzv0URQPcfw2GbxLsII9PBg6Oja4VPg5J Umlnb02w+Tykfg++l2WzhKrKCH4UEMRKEk8G3ReD5S7NZ0YAi14nbwGyZ1j8rBOl MqS6VIHR0TQ54g+1Ls6R7ZvVyDX5R4lO0s1htZnUH7UI8ZIqIzfkgFQkjTqFH7ou iB7hZl03CM4mx4nqQFobJq2O0mASsrYwF0Y2y/mrkai5nwVZI7Jk+ta99ZUrc6Dv Hrsj8b3Qlr1PSGCTFrRdPuttRc2m/g2HV7RETuEev6jeqVLDGkVMChPwnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy3aDLjq9RfIuUpW7hTCqMww7HLMB8GA1UdIwQY MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3 LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgf/P0aE 0pJ2qB4Y3zL3w7U74j5KMy+xUTSdOPWyNwfiGWDB9aJhfLh3MQ2HK7KBmvu4Tflm nTOFq74zcIOl5yZXGu6llqirQtzGgANWOagDiXDIAqG7Su0ju3gBaorPDdgJot4a Nnihm6W+SfJHyb1QHuwViP0zF2M4MOfWKxAnyUwcro1EAiQksumMS4hc0u2JanUZ Wq88uoJmYsyceh3KnBsw4iKGEPIQIfroyOSCLnr5pOOYGFDyltyBhMNP9lBhCHQJ Fn1Ei8oI4sSprqmXLDmZnNOLazIC/fJG8j4b8fm9G6orlWOptkbYRnIsLMTkg5VR Bkif+sqFdO9C9A== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:50 2026 by rpki-client