This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json) Hash identifier: YCTGJ4sQh5kTHiHRDJ8NGMZCaSNv2nLcjRCmBiKv0fY= Subject key identifier: 1B:5C:E8:8A:1B:52:4A:B3:CB:FA:5B:7D:59:40:55:E6:E0:A7:88:C1 Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Certificate serial: 019C01B088B2622CF5AE3D4D07C764F30265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft Manifest number: 172F Signing time: Tue 27 Jan 2026 23:01:12 +0000 Manifest this update: Tue 27 Jan 2026 23:01:12 +0000 Manifest next update: Wed 28 Jan 2026 23:01:12 +0000 Files and hashes: 1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: OXPg7zn5Vm8UPMTyZd+p3dkacaGM4ZoeX/MIvDAEbK4=) 2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:b0:88:b2:62:2c:f5:ae:3d:4d:07:c7:64:f3:02:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Validity Not Before: Jan 27 23:01:12 2026 GMT Not After : Jan 28 23:01:12 2026 GMT Subject: CN=1b5ce88a1b524ab3cbfa5b7d594055e6e0a788c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:a5:ff:a4:5c:80:fc:da:5d:dc:c6:aa:f9: a8:04:20:da:31:98:4e:1b:87:f6:62:be:ea:fa:67: f6:3d:10:61:6f:4e:08:bf:a7:e1:72:2d:7f:69:4f: 59:bf:62:c1:d3:fc:3e:6f:1b:8e:34:c1:37:78:e1: 13:77:f2:c2:42:c9:3e:33:80:03:31:fe:60:40:2c: 35:9e:87:da:cf:5e:67:45:09:0e:02:d5:fd:15:9a: a6:30:fb:81:53:3c:cf:26:d5:d1:06:35:cc:80:d7: 25:51:9f:d1:03:25:6b:da:cf:65:36:02:2d:63:b5: 31:c7:20:d9:0d:98:8b:66:2e:c3:b4:1f:7f:7d:84: 24:d2:9a:5b:9d:6f:91:00:71:4c:13:94:56:73:1b: 9a:8e:c6:f3:7a:9b:b7:2c:92:b5:28:fc:27:1f:48: 1f:d2:82:0c:9f:80:70:fe:2a:48:bf:72:af:d6:1d: cb:40:d6:6b:0c:2e:1d:aa:78:19:41:79:92:92:32: 1f:45:e6:5b:16:ae:0e:4d:8f:31:5f:8f:5f:e4:92: 41:18:de:b4:1d:b1:42:97:c8:71:8f:3c:e4:54:d6: 16:79:0a:28:16:e7:50:8f:e2:35:95:fe:ed:a1:f4: 5e:44:43:13:47:6b:b7:1a:b1:16:8a:9e:44:9a:9b: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:E8:8A:1B:52:4A:B3:CB:FA:5B:7D:59:40:55:E6:E0:A7:88:C1 X509v3 Authority Key Identifier: keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:11:15:39:8f:dd:fa:f7:64:79:61:25:55:eb:3c:27:2b: 64:03:49:81:23:4e:29:ca:a7:29:c1:01:ef:4c:1b:03:94:12: 73:e2:c5:e2:c3:d5:16:24:9d:66:34:68:b1:06:a7:26:fa:90: 78:78:11:6c:b7:de:8b:bd:14:29:57:ba:69:aa:02:9f:07:6b: 83:19:49:27:c9:c2:ba:09:3e:e4:3d:01:1e:36:d2:97:d3:f0: 4b:85:4d:24:5f:e0:c2:84:46:74:bb:d4:0e:cf:49:ac:ed:93: 3c:55:c9:ee:eb:28:d2:1f:ec:59:bb:06:b6:b1:65:0d:f2:50: bf:2a:f6:6f:db:40:be:28:39:9e:50:a5:a6:68:a2:ed:08:7a: b4:69:80:58:b9:3e:02:fc:b7:0e:97:72:94:cc:53:f5:c4:7f: c2:b9:10:02:95:41:a0:88:60:c3:64:e5:08:ff:b8:f3:33:aa: 13:c5:59:2b:72:cd:d9:9a:ef:6e:ed:55:08:93:4e:11:f5:de: 3b:0e:93:b5:5c:ca:c8:3e:62:a1:09:f8:af:f3:ba:14:d2:98: 59:f3:cf:7c:5d:4c:fa:0e:82:8a:8c:94:b8:71:cd:e2:5c:ee: 4c:38:92:37:7e:80:99:32:b0:fa:0b:83:30:fa:75:5f:6c:10: c1:b0:df:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBsIiyYiz1rj1NB8dk8wJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm NThjOGQwHhcNMjYwMTI3MjMwMTEyWhcNMjYwMTI4MjMwMTEyWjAzMTEwLwYDVQQD EygxYjVjZTg4YTFiNTI0YWIzY2JmYTViN2Q1OTQwNTVlNmUwYTc4OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA152l/6RcgPzaXdzGqvmoBCDaMZhO G4f2Yr7q+mf2PRBhb04Iv6fhci1/aU9Zv2LB0/w+bxuONME3eOETd/LCQsk+M4AD Mf5gQCw1nofaz15nRQkOAtX9FZqmMPuBUzzPJtXRBjXMgNclUZ/RAyVr2s9lNgIt Y7UxxyDZDZiLZi7DtB9/fYQk0ppbnW+RAHFME5RWcxuajsbzepu3LJK1KPwnH0gf 0oIMn4Bw/ipIv3Kv1h3LQNZrDC4dqngZQXmSkjIfReZbFq4OTY8xX49f5JJBGN60 HbFCl8hxjzzkVNYWeQooFudQj+I1lf7tofReREMTR2u3GrEWip5EmpsaAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtc6IobUkqzy/pbfVlAVebgp4jBMB8GA1UdIwQY MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4 LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6URFTmP 3fr3ZHlhJVXrPCcrZANJgSNOKcqnKcEB70wbA5QSc+LF4sPVFiSdZjRosQanJvqQ eHgRbLfei70UKVe6aaoCnwdrgxlJJ8nCugk+5D0BHjbSl9PwS4VNJF/gwoRGdLvU Ds9JrO2TPFXJ7uso0h/sWbsGtrFlDfJQvyr2b9tAvig5nlClpmii7Qh6tGmAWLk+ Avy3DpdylMxT9cR/wrkQApVBoIhgw2TlCP+48zOqE8VZK3LN2Zrvbu1VCJNOEfXe Ow6TtVzKyD5ioQn4r/O6FNKYWfPPfF1M+g6CioyUuHHN4lzuTDiSN36AmTKw+guD MPp1X2wQwbDfIg== -----END CERTIFICATE-----Generated at Wed Jan 28 00:43:43 2026 by rpki-client