This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json) Hash identifier: lbMK9Kw266o0XHuUH7a9uxZp65us4bE5y1/s+WU5gzM= Subject key identifier: 0A:E5:75:AF:21:B4:47:11:F9:9E:1D:DA:3E:1C:4B:7C:07:C9:1B:50 Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87 Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087 Certificate serial: 019BFCF8824A8B335E093F7AA9E1AAE3C7DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 01:01:43 +0000 Manifest this update: Tue 27 Jan 2026 01:01:43 +0000 Manifest next update: Wed 28 Jan 2026 01:01:43 +0000 Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=) 2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=) 3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: aPnANHlufvmDLKsYyqlVHGYCeUK7Z7vTRDzcRlkpm9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:82:4a:8b:33:5e:09:3f:7a:a9:e1:aa:e3:c7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b65918f25d56000f881da98de323d91a064e0087 Validity Not Before: Jan 27 01:01:43 2026 GMT Not After : Jan 28 01:01:43 2026 GMT Subject: CN=0ae575af21b44711f99e1dda3e1c4b7c07c91b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:de:6e:d9:bf:36:d0:83:37:f4:f8:17:87: 2a:f0:07:91:5f:1a:db:f6:d4:c5:a7:96:50:61:64: 5a:05:2f:65:06:dc:37:7d:11:b9:0d:cf:82:10:c0: 9e:28:21:d8:6b:6b:79:27:d5:8c:7d:46:88:f5:5b: 9f:3e:d9:f0:49:a9:7d:99:bc:6d:5e:75:1f:0f:77: dd:24:81:84:a1:f7:cf:8b:f6:e7:5d:71:18:02:38: ad:14:56:ab:5c:78:bd:e9:7e:54:29:09:d7:13:35: d5:1c:65:0f:43:fd:70:eb:17:09:17:05:62:cb:b1: ad:a2:42:3e:d6:b5:03:0c:3f:82:9d:fa:cd:74:3b: eb:36:66:52:d0:03:56:5d:b6:45:7b:43:ee:10:7b: 25:cf:4b:8c:84:10:d7:01:93:f1:2f:07:b2:e3:55: 2c:7e:48:02:c8:ab:cd:1c:ce:3b:00:a7:20:09:e0: 6b:53:eb:eb:94:8c:a7:79:a9:14:81:fb:aa:bb:48: 69:35:ee:3d:b2:03:e6:07:b8:ea:e7:e6:b9:5d:89: 51:4f:99:70:4f:70:09:f9:5c:26:78:9f:9c:4a:98: 3c:1d:c9:52:1f:6e:8f:2b:1a:c9:5a:26:52:b5:66: f3:86:23:f4:b6:6c:ca:a3:da:9b:50:18:65:10:bb: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E5:75:AF:21:B4:47:11:F9:9E:1D:DA:3E:1C:4B:7C:07:C9:1B:50 X509v3 Authority Key Identifier: keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:48:9a:01:58:4d:51:79:51:7c:aa:53:14:cd:3d:dc:ca:c3: 62:0f:f1:2f:7a:b7:ff:24:c2:28:99:82:5b:5f:8d:a0:55:01: b4:a2:13:4f:36:e8:b4:45:63:03:7d:d8:00:c1:47:c0:02:8f: 22:d3:75:54:9d:93:51:0e:6f:7e:5b:04:99:fc:d6:74:91:df: e5:90:94:3d:19:f6:d2:fa:4d:39:a8:79:1b:b5:a6:48:86:97: db:17:1b:8d:4c:06:8a:df:44:6b:b2:77:e0:05:0d:95:22:23: eb:5e:81:27:65:fe:c0:d2:e4:6e:db:53:63:05:48:87:fc:2e: 8a:64:ae:df:8c:f5:da:4c:81:40:19:2f:7d:4e:61:c4:32:ba: 86:f5:3f:99:60:b3:9e:2f:30:fd:21:83:a2:f6:62:13:84:a2: 32:f2:4d:c5:18:ed:4c:75:e2:9d:ff:53:81:0c:5a:2f:9e:e4: f6:e9:e3:1d:93:c8:9d:3f:8b:20:dd:e8:d6:bb:5c:fd:1e:f0: b2:05:87:52:ef:be:6d:17:d0:91:a5:12:32:92:34:30:57:52: aa:12:1c:ec:45:38:eb:9a:b0:10:b4:24:81:af:60:8e:34:56: 1a:0f:98:8d:9e:69:d1:d6:67:03:02:ee:36:94:44:57:24:2c: 4e:14:86:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+IJKizNeCT96qeGq48feMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NTkxOGYyNWQ1NjAwMGY4ODFkYTk4ZGUzMjNkOTFhMDY0 ZTAwODcwHhcNMjYwMTI3MDEwMTQzWhcNMjYwMTI4MDEwMTQzWjAzMTEwLwYDVQQD EygwYWU1NzVhZjIxYjQ0NzExZjk5ZTFkZGEzZTFjNGI3YzA3YzkxYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoDebtm/NtCDN/T4F4cq8AeRXxrb 9tTFp5ZQYWRaBS9lBtw3fRG5Dc+CEMCeKCHYa2t5J9WMfUaI9VufPtnwSal9mbxt XnUfD3fdJIGEoffPi/bnXXEYAjitFFarXHi96X5UKQnXEzXVHGUPQ/1w6xcJFwVi y7GtokI+1rUDDD+CnfrNdDvrNmZS0ANWXbZFe0PuEHslz0uMhBDXAZPxLwey41Us fkgCyKvNHM47AKcgCeBrU+vrlIyneakUgfuqu0hpNe49sgPmB7jq5+a5XYlRT5lw T3AJ+VwmeJ+cSpg8HclSH26PKxrJWiZStWbzhiP0tmzKo9qbUBhlELtTgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArlda8htEcR+Z4d2j4cS3wHyRtQMB8GA1UdIwQY MBaAFLZZGPJdVgAPiB2pjeMj2RoGTgCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEt YTUyMGQ0MzQ2NTRhLzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEtYTUyMGQ0MzQ2NTRh LzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkiaAVhN UXlRfKpTFM093MrDYg/xL3q3/yTCKJmCW1+NoFUBtKITTzbotEVjA33YAMFHwAKP ItN1VJ2TUQ5vflsEmfzWdJHf5ZCUPRn20vpNOah5G7WmSIaX2xcbjUwGit9Ea7J3 4AUNlSIj616BJ2X+wNLkbttTYwVIh/wuimSu34z12kyBQBkvfU5hxDK6hvU/mWCz ni8w/SGDovZiE4SiMvJNxRjtTHXinf9TgQxaL57k9unjHZPInT+LIN3o1rtc/R7w sgWHUu++bRfQkaUSMpI0MFdSqhIc7EU465qwELQkga9gjjRWGg+YjZ5p0dZnAwLu NpREVyQsThSGcA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:16:57 2026 by rpki-client