This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json) Hash identifier: v/3ggU4URB9ANrVXdRCVN0FUg+9exlX0ejLsideGjos= Subject key identifier: 17:C7:E9:89:63:86:55:F9:DB:24:E0:BE:95:06:AD:71:EB:18:64:0F Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Certificate serial: 019BF91BD3EDF632D9E961D17DDA99BF25F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft Manifest number: 10FF Signing time: Mon 26 Jan 2026 07:01:49 +0000 Manifest this update: Mon 26 Jan 2026 07:01:49 +0000 Manifest next update: Tue 27 Jan 2026 07:01:49 +0000 Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=) 2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: gi9scZx94nx+LdgveZQTOn1Wikg2EwAOyvO10NTxbKI=) 3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:d3:ed:f6:32:d9:e9:61:d1:7d:da:99:bf:25:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Validity Not Before: Jan 26 07:01:49 2026 GMT Not After : Jan 27 07:01:49 2026 GMT Subject: CN=17c7e989638655f9db24e0be9506ad71eb18640f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:45:d6:22:e3:b6:20:df:ae:6b:35:91:7a: 44:07:66:02:d7:c9:e9:c0:e0:60:60:90:98:52:31: 9f:03:36:be:17:74:ce:02:27:ab:14:de:d8:a3:9e: c3:d9:a9:43:89:3b:63:48:58:8d:11:5e:8a:66:f7: 37:76:6b:ec:fa:33:4a:ab:b4:f5:1a:9f:71:cf:d5: 64:a5:3a:57:3a:44:91:ac:e0:c7:a5:d9:08:34:e6: 0e:74:5c:69:68:f7:bd:5e:cd:c9:3b:70:69:93:16: 24:5c:05:a6:e5:a7:c5:c3:16:24:b0:34:21:e1:cb: b3:5f:b7:ec:f2:07:77:c3:90:95:22:22:45:1f:a0: 8f:75:46:44:c1:85:4e:02:ad:cf:f5:18:59:d7:d7: 64:c4:5a:0f:9a:0e:a2:81:0b:c5:7c:46:19:93:ab: aa:ca:fa:56:21:6e:2d:07:a4:76:bf:0e:5b:fe:13: 3c:65:a3:91:36:4c:c2:68:de:12:78:df:17:3b:be: cf:ec:cf:82:d0:5a:ec:ad:53:f4:9a:93:d5:39:c7: 90:53:9d:a1:46:7b:e4:e6:3c:a5:c7:cc:5b:09:21: ce:f7:20:73:18:1a:56:7a:6d:39:31:c9:db:1b:07: fc:7b:a3:7a:88:e0:50:55:72:87:fc:6f:56:91:66: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C7:E9:89:63:86:55:F9:DB:24:E0:BE:95:06:AD:71:EB:18:64:0F X509v3 Authority Key Identifier: keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:53:34:31:53:53:d0:af:cc:ec:01:a6:85:cf:6a:15:8e:48: c5:4c:0f:dc:6a:3f:a9:22:e1:bf:71:bc:f2:47:4e:4f:e3:2e: d4:a2:92:05:0b:2a:65:84:8c:e8:45:3c:c4:e6:06:61:af:ab: 07:89:b2:01:4a:c4:25:98:81:ed:ea:c1:5d:96:72:c9:94:df: 5f:44:29:1d:5a:8c:fd:f1:6b:9d:d2:47:21:f7:82:e8:24:2e: 7d:b6:80:5b:1a:3f:ee:94:3f:79:3c:69:37:38:d2:09:ad:74: a7:0f:62:d7:50:69:04:df:ac:fa:02:28:97:50:ae:c2:c2:e2: 35:28:2d:31:1c:c0:da:d9:6f:62:c2:e6:50:d7:08:36:04:c9: 75:e3:01:8e:96:83:b3:84:35:95:d0:a3:26:f8:cf:7a:2c:db: f5:46:e1:67:2f:7d:9c:22:75:85:2b:41:23:40:a0:73:f7:49: e4:7b:b0:76:7c:74:7a:d2:a2:54:00:bb:09:9e:10:38:8f:f3: b7:48:84:d2:a1:d5:34:f4:ab:1f:f5:30:10:cc:c4:a5:52:f7: 7a:ab:f2:b8:54:57:6c:86:ef:40:46:f0:19:83:64:c9:fc:00: 20:c0:de:8e:a4:a6:8e:b1:21:94:0f:37:39:9f:39:18:12:02: 7b:46:2c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G9Pt9jLZ6WHRfdqZvyX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1 YzUwM2EwHhcNMjYwMTI2MDcwMTQ5WhcNMjYwMTI3MDcwMTQ5WjAzMTEwLwYDVQQD EygxN2M3ZTk4OTYzODY1NWY5ZGIyNGUwYmU5NTA2YWQ3MWViMTg2NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0hF1iLjtiDfrms1kXpEB2YC18np wOBgYJCYUjGfAza+F3TOAierFN7Yo57D2alDiTtjSFiNEV6KZvc3dmvs+jNKq7T1 Gp9xz9VkpTpXOkSRrODHpdkINOYOdFxpaPe9Xs3JO3BpkxYkXAWm5afFwxYksDQh 4cuzX7fs8gd3w5CVIiJFH6CPdUZEwYVOAq3P9RhZ19dkxFoPmg6igQvFfEYZk6uq yvpWIW4tB6R2vw5b/hM8ZaORNkzCaN4SeN8XO77P7M+C0FrsrVP0mpPVOceQU52h Rnvk5jylx8xbCSHO9yBzGBpWem05McnbGwf8e6N6iOBQVXKH/G9WkWZIAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfH6YljhlX52yTgvpUGrXHrGGQPMB8GA1UdIwQY MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0 LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1M0MVNT 0K/M7AGmhc9qFY5IxUwP3Go/qSLhv3G88kdOT+Mu1KKSBQsqZYSM6EU8xOYGYa+r B4myAUrEJZiB7erBXZZyyZTfX0QpHVqM/fFrndJHIfeC6CQufbaAWxo/7pQ/eTxp NzjSCa10pw9i11BpBN+s+gIol1CuwsLiNSgtMRzA2tlvYsLmUNcINgTJdeMBjpaD s4Q1ldCjJvjPeizb9UbhZy99nCJ1hStBI0Cgc/dJ5Huwdnx0etKiVAC7CZ4QOI/z t0iE0qHVNPSrH/UwEMzEpVL3eqvyuFRXbIbvQEbwGYNkyfwAIMDejqSmjrEhlA83 OZ85GBICe0Ysng== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:10 2026 by rpki-client