This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json) Hash identifier: EvdqZ1WvpkPGKJUGlcp4f+t9+sKd4cbHrYC+pIhJEJ8= Subject key identifier: F3:E6:15:40:43:3C:36:F6:7F:C7:F7:66:AD:75:1D:87:18:FF:F7:E1 Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce Certificate serial: 019BD84745A89963AEB60A0485AAA6BB6DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft Manifest number: 0A44 Signing time: Mon 19 Jan 2026 22:01:47 +0000 Manifest this update: Mon 19 Jan 2026 22:01:47 +0000 Manifest next update: Tue 20 Jan 2026 22:01:47 +0000 Files and hashes: 1: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: PajG7zh6L2TQI2Yt534oGN1r8Uc7v1mNdzX7e6WoZ1s=) 2: bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa (hash: TI3RmrhW13Nq6yDFyJTeXpPjioYudBC6EapBtlWy/gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:47:45:a8:99:63:ae:b6:0a:04:85:aa:a6:bb:6d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df92658601094ed64985c64c6952be3416301ce Validity Not Before: Jan 19 22:01:47 2026 GMT Not After : Jan 20 22:01:47 2026 GMT Subject: CN=f3e61540433c36f67fc7f766ad751d8718fff7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:f2:b8:78:f7:ac:e0:fc:5b:28:bf:90:4c: f7:67:d3:75:fb:20:01:4c:d3:b1:44:a0:b1:89:88: d5:5a:69:0b:58:84:d5:76:4a:e5:f3:be:59:9e:4d: 66:33:d7:c8:03:f3:4f:74:e6:20:d2:d0:e8:5a:e1: 92:cb:b9:2e:d1:35:51:db:36:4f:d1:bf:d6:cc:30: 2c:95:d6:f7:d4:78:fb:8d:37:54:e1:bf:8d:a8:fb: 27:44:e9:4d:54:9c:44:76:db:69:f8:8e:00:29:b2: 8a:62:21:52:90:ee:c8:82:0f:4b:ac:43:8a:93:54: ef:94:f4:6e:60:2d:1a:7b:95:09:2a:01:a4:0c:1a: 29:9e:1a:b0:44:38:67:7e:f8:0d:ea:40:1d:ac:6d: e7:de:ea:e7:36:55:10:33:03:96:a6:82:f1:27:a0: 95:89:21:fa:b4:72:16:5e:8c:2c:2d:29:f1:45:d8: 0d:4c:c7:7f:29:ca:c2:4f:cb:e3:ac:69:75:aa:a6: 2f:29:16:5d:22:c0:56:f5:1b:51:ea:f9:16:0a:a5: 44:32:8d:33:d2:89:ee:1e:1c:54:b9:d2:e3:73:e7: 6c:d9:d8:9f:8f:e8:75:3e:b2:97:49:f2:88:17:63: 24:95:c7:35:bd:c4:e3:0e:99:04:2f:1e:e7:1a:84: c9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E6:15:40:43:3C:36:F6:7F:C7:F7:66:AD:75:1D:87:18:FF:F7:E1 X509v3 Authority Key Identifier: keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:68:5a:fd:9e:d9:6d:0b:cf:14:cb:8c:9b:c4:05:a9:b5:25: ca:3c:f7:da:d8:a6:68:ac:36:80:fd:2b:0c:a7:0f:7b:30:38: d6:f0:50:14:71:7c:c5:13:f0:04:b6:10:78:61:9e:ec:49:4a: 1b:2c:ed:0d:4d:17:00:a3:0f:f0:58:39:31:ae:85:8f:3f:4f: ed:ed:d6:26:44:1b:68:f3:0e:6d:b5:2f:ce:33:01:52:70:56: aa:5b:94:7c:f1:68:b0:6c:63:72:55:14:21:b3:a5:5f:6b:bf: 15:b7:5a:ad:9c:84:c4:b2:a1:41:a9:e5:ce:2a:e5:02:08:eb: e9:23:64:64:53:2e:5a:d5:3d:ad:33:f3:ea:47:14:79:ba:82: 59:ee:f6:52:ec:7b:6d:70:bb:df:58:4b:4b:b1:3b:6f:4d:43: 98:59:4d:83:55:9e:13:bd:cf:6f:71:69:57:53:29:ca:47:22: e2:5b:6f:40:75:ca:48:89:9a:af:64:6d:30:ee:dd:de:50:1a: 14:fc:74:8c:95:7f:e2:2e:c0:d7:cf:85:05:74:59:b6:c7:35: 25:52:fa:4a:76:ad:4b:a2:ec:4e:e8:73:c7:86:93:d5:c6:ed: a7:fe:91:f9:c5:e0:53:fb:b0:1e:71:ed:0f:06:55:d6:6c:7b: 99:e2:7c:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYR0WomWOutgoEhaqmu23MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2 MzAxY2UwHhcNMjYwMTE5MjIwMTQ3WhcNMjYwMTIwMjIwMTQ3WjAzMTEwLwYDVQQD EyhmM2U2MTU0MDQzM2MzNmY2N2ZjN2Y3NjZhZDc1MWQ4NzE4ZmZmN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1HyuHj3rOD8Wyi/kEz3Z9N1+yAB TNOxRKCxiYjVWmkLWITVdkrl875Znk1mM9fIA/NPdOYg0tDoWuGSy7ku0TVR2zZP 0b/WzDAsldb31Hj7jTdU4b+NqPsnROlNVJxEdttp+I4AKbKKYiFSkO7Igg9LrEOK k1TvlPRuYC0ae5UJKgGkDBopnhqwRDhnfvgN6kAdrG3n3urnNlUQMwOWpoLxJ6CV iSH6tHIWXowsLSnxRdgNTMd/KcrCT8vjrGl1qqYvKRZdIsBW9RtR6vkWCqVEMo0z 0onuHhxUudLjc+ds2difj+h1PrKXSfKIF2Mklcc1vcTjDpkELx7nGoTJuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPmFUBDPDb2f8f3Zq11HYcY//fhMB8GA1UdIwQY MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt ODc0MzMxNTdhMjViLzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmha/Z7Z bQvPFMuMm8QFqbUlyjz32timaKw2gP0rDKcPezA41vBQFHF8xRPwBLYQeGGe7ElK GyztDU0XAKMP8Fg5Ma6Fjz9P7e3WJkQbaPMObbUvzjMBUnBWqluUfPFosGxjclUU IbOlX2u/FbdarZyExLKhQanlzirlAgjr6SNkZFMuWtU9rTPz6kcUebqCWe72Uux7 bXC731hLS7E7b01DmFlNg1WeE73Pb3FpV1Mpykci4ltvQHXKSImar2RtMO7d3lAa FPx0jJV/4i7A18+FBXRZtsc1JVL6SnatS6LsTuhzx4aT1cbtp/6R+cXgU/uwHnHt DwZV1mx7meJ8pw== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:57 2026 by rpki-client