This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json) Hash identifier: C5b0fqn1H8XzaLXlsgZyGPgOYN+ifS6/tUxaLrlZ0Sk= Subject key identifier: A4:97:45:E6:88:71:F0:75:C4:78:01:6B:9A:46:F9:F8:69:C0:E9:91 Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22 Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222 Certificate serial: 019C1BDE2CA532A11D67E4A34084E1710AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft Manifest number: 1790 Signing time: Mon 02 Feb 2026 01:01:11 +0000 Manifest this update: Mon 02 Feb 2026 01:01:11 +0000 Manifest next update: Tue 03 Feb 2026 01:01:11 +0000 Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=) 2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: Z+DXjWg8s5FqRK5EhF1XiindOXfqH1HgXgEM2utUcqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:2c:a5:32:a1:1d:67:e4:a3:40:84:e1:71:0a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222 Validity Not Before: Feb 2 01:01:11 2026 GMT Not After : Feb 3 01:01:11 2026 GMT Subject: CN=a49745e68871f075c478016b9a46f9f869c0e991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:c4:ab:e3:43:e7:65:ad:22:b2:09:0b:17: 5c:15:19:6a:b4:1e:b1:c0:19:a3:7b:3e:53:65:fb: 57:9c:49:bb:b0:7b:ca:97:b3:4b:22:80:4c:c8:ee: ab:bf:9f:8c:c2:61:4a:4c:ba:d2:fc:0a:1f:35:23: 79:f9:63:f2:c0:86:33:72:25:3d:f9:da:ef:a7:1a: cc:7e:29:51:96:d3:18:b6:5c:f0:c2:72:08:b4:6a: 35:24:75:77:0c:75:6a:0f:a9:06:58:06:04:f9:c0: 81:39:51:15:85:f6:44:43:5a:9b:ae:39:c1:40:4b: c7:14:66:a4:80:32:80:dd:8b:c0:b6:0d:cf:b0:a5: 06:bc:65:52:dd:7a:39:36:63:f2:c9:11:fb:a0:0f: e1:7e:b3:a5:be:29:52:12:ea:ba:60:3c:21:d5:f8: 68:8f:c9:65:32:28:b2:2b:f1:7e:b6:26:8b:fb:c9: ad:f1:40:da:2b:c2:6a:71:bf:51:62:81:90:7c:ac: 3e:a8:fc:be:8a:ae:32:70:93:e4:88:e9:06:4b:81: 43:f4:bc:9f:ad:38:cb:8d:2a:85:8f:57:d2:0e:3f: df:37:7c:cf:cd:ea:2c:28:d0:de:b1:70:38:9c:b6: b8:30:71:11:d6:a4:b6:80:dd:99:7c:21:07:1d:19: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:97:45:E6:88:71:F0:75:C4:78:01:6B:9A:46:F9:F8:69:C0:E9:91 X509v3 Authority Key Identifier: keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:c5:ee:c3:97:a2:3a:9d:7a:0e:2d:1c:0a:03:ba:a8:63: 1d:9a:1e:1e:8e:73:5c:25:f9:ea:f1:cb:c8:b2:0f:10:2d:1c: fc:94:c2:f5:76:14:f7:65:2b:62:a8:de:f9:d3:e2:35:87:cf: 07:c4:dc:40:4b:22:a3:12:ab:35:56:2a:9f:6f:43:99:f8:cf: 4c:85:8c:b7:5d:3e:44:be:56:c6:23:fd:5d:95:d3:c6:87:bb: 5f:c3:af:e0:98:9b:75:30:d7:bc:08:ae:de:a9:ba:c5:4f:62: a4:69:b7:61:5b:9b:e9:c6:9d:1b:c3:22:42:39:54:58:8c:fe: 78:87:10:62:cb:01:f7:30:1c:d0:82:88:9b:15:6b:43:ef:d6: df:7f:81:df:8c:2a:6c:b2:75:57:06:de:86:49:4d:26:f0:b5: 23:0f:bf:40:2a:f2:dd:c8:85:1a:b3:7b:19:36:dc:6f:d9:b8: 27:93:29:0e:21:d4:bb:e6:b3:bd:fd:18:8c:09:35:7e:ed:bf: 31:d5:30:30:00:37:77:49:01:11:f0:91:62:3e:b6:28:a1:69: 75:9a:76:e1:93:df:a9:6e:df:25:ad:65:90:64:40:11:67:f5: 49:5b:9f:6a:f4:ad:c6:90:43:6d:23:25:67:89:17:08:5f:9b: d1:e6:bf:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3iylMqEdZ+SjQIThcQqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWQxODU0MTRjMTZhZTVkMjI5YThhYTJiZmExNWZlZmM3 MWEyMjIwHhcNMjYwMjAyMDEwMTExWhcNMjYwMjAzMDEwMTExWjAzMTEwLwYDVQQD EyhhNDk3NDVlNjg4NzFmMDc1YzQ3ODAxNmI5YTQ2ZjlmODY5YzBlOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEDEq+ND52WtIrIJCxdcFRlqtB6x wBmjez5TZftXnEm7sHvKl7NLIoBMyO6rv5+MwmFKTLrS/AofNSN5+WPywIYzciU9 +drvpxrMfilRltMYtlzwwnIItGo1JHV3DHVqD6kGWAYE+cCBOVEVhfZEQ1qbrjnB QEvHFGakgDKA3YvAtg3PsKUGvGVS3Xo5NmPyyRH7oA/hfrOlvilSEuq6YDwh1fho j8llMiiyK/F+tiaL+8mt8UDaK8Jqcb9RYoGQfKw+qPy+iq4ycJPkiOkGS4FD9Lyf rTjLjSqFj1fSDj/fN3zPzeosKNDesXA4nLa4MHER1qS2gN2ZfCEHHRmy8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSXReaIcfB1xHgBa5pG+fhpwOmRMB8GA1UdIwQY MBaAFEytGFQUwWrl0imoqiv6Ff78caIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQt OTY0Y2NhNzIyZjczLzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQtOTY0Y2NhNzIyZjcz LzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6zF7sOX ojqdeg4tHAoDuqhjHZoeHo5zXCX56vHLyLIPEC0c/JTC9XYU92UrYqje+dPiNYfP B8TcQEsioxKrNVYqn29DmfjPTIWMt10+RL5WxiP9XZXTxoe7X8Ov4JibdTDXvAiu 3qm6xU9ipGm3YVub6cadG8MiQjlUWIz+eIcQYssB9zAc0IKImxVrQ+/W33+B34wq bLJ1VwbehklNJvC1Iw+/QCry3ciFGrN7GTbcb9m4J5MpDiHUu+azvf0YjAk1fu2/ MdUwMAA3d0kBEfCRYj62KKFpdZp24ZPfqW7fJa1lkGRAEWf1SVufavStxpBDbSMl Z4kXCF+b0ea/PA== -----END CERTIFICATE-----Generated at Mon Feb 2 12:56:01 2026 by rpki-client