This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json) Hash identifier: uf3FHjuLYZGZqbEzFEdwXPRcq0G8K3ludcUDwL4TNu4= Subject key identifier: 7B:26:DB:32:73:12:18:E7:57:18:FD:B4:C7:6E:3E:36:82:5E:9D:59 Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Certificate serial: 019BDDDB5809F304BE6A0369418A92AF226C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft Manifest number: 0464 Signing time: Wed 21 Jan 2026 00:01:38 +0000 Manifest this update: Wed 21 Jan 2026 00:01:38 +0000 Manifest next update: Thu 22 Jan 2026 00:01:38 +0000 Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=) 2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=) 3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: nw2WChPpbM6rfMQkbhZrnR7dkvs+NfbhmkbliOo/kyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:db:58:09:f3:04:be:6a:03:69:41:8a:92:af:22:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Validity Not Before: Jan 21 00:01:38 2026 GMT Not After : Jan 22 00:01:38 2026 GMT Subject: CN=7b26db32731218e75718fdb4c76e3e36825e9d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:6f:bf:0b:93:e9:df:6f:70:9a:a8:53:6b: f1:28:36:45:90:4e:ae:e2:f4:f2:d0:69:b3:83:f6: 46:5f:ae:9c:b7:89:77:14:ff:c9:e6:5e:98:99:fb: 36:9e:fc:1a:e0:c0:d0:58:47:55:71:54:52:1a:67: e1:66:44:9a:6b:88:dd:55:da:65:0e:db:1e:44:20: 5e:1c:16:10:24:fa:01:e6:61:30:ac:0a:55:82:1c: 9f:9a:9e:34:d2:c3:95:d2:f8:2b:3c:41:9f:06:d5: 97:d8:5f:e5:24:5e:98:b4:45:e9:75:64:6f:e9:d4: a2:fb:75:82:91:85:18:08:15:38:81:9e:0d:ab:33: 09:d1:df:b6:ea:54:8f:e1:a8:ed:84:03:3d:01:20: 01:58:d4:8d:12:ce:2d:ee:f8:c5:00:59:95:5b:17: 82:f3:5f:6a:29:d8:42:e5:79:52:46:07:46:1c:68: 96:30:13:f4:bc:79:f8:66:ae:39:8a:de:5e:2b:68: 9f:13:ec:37:ce:3a:f4:94:cf:43:8c:99:10:b1:33: fc:da:8d:db:42:c7:12:b2:7f:4e:8b:66:74:a4:73: 0e:91:b6:27:32:83:c6:e4:a5:33:e7:21:62:59:28: fb:b6:e4:6b:5d:6a:04:e2:f6:05:83:5d:eb:c8:ee: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:26:DB:32:73:12:18:E7:57:18:FD:B4:C7:6E:3E:36:82:5E:9D:59 X509v3 Authority Key Identifier: keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b3:b0:ec:0d:27:f8:b2:2f:88:10:13:b7:b4:52:10:45:68: 5e:be:b0:65:56:ed:cd:f7:af:03:24:e5:bf:8a:eb:bb:b1:e6: 7f:5b:d9:e6:3b:6a:c0:60:c2:a2:fa:33:a7:d7:8d:6a:60:4d: 2a:10:cd:9e:ca:7b:b5:d2:e0:c6:47:89:99:9d:d7:a9:d5:92: aa:db:9f:9c:ed:c2:a3:d5:e1:2d:e9:7e:68:a8:47:9c:1e:1d: 10:fa:84:d7:8f:22:76:9e:3a:33:3e:4e:fd:ed:81:27:37:4a: 7a:ac:03:bc:37:0a:47:31:ce:07:a9:77:9c:3d:e0:a5:00:fb: 0a:83:31:51:16:78:bf:85:d6:e3:bf:d7:79:0f:ba:73:cc:12: 28:b2:88:4b:a4:e3:36:d8:aa:ad:c5:64:43:57:c4:56:b4:cd: b0:cb:62:dd:ad:e2:a0:18:50:fb:0b:fb:80:cf:7f:97:32:31: 1e:ec:50:67:ae:bf:b8:ae:1f:76:2b:9a:34:9b:50:bc:7f:d8: 3d:ae:13:6e:5e:bb:bf:44:75:26:62:40:aa:d4:a0:13:e9:0f: 22:bb:2f:1a:a9:93:bd:37:79:93:88:69:96:3f:40:66:95:10: 42:ed:57:71:cc:a3:bb:43:e5:9d:e4:4c:4f:ad:c1:20:0c:bd: 8a:0c:98:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvd21gJ8wS+agNpQYqSryJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh MDEzZDcwHhcNMjYwMTIxMDAwMTM4WhcNMjYwMTIyMDAwMTM4WjAzMTEwLwYDVQQD Eyg3YjI2ZGIzMjczMTIxOGU3NTcxOGZkYjRjNzZlM2UzNjgyNWU5ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHhvvwuT6d9vcJqoU2vxKDZFkE6u 4vTy0Gmzg/ZGX66ct4l3FP/J5l6Ymfs2nvwa4MDQWEdVcVRSGmfhZkSaa4jdVdpl DtseRCBeHBYQJPoB5mEwrApVghyfmp400sOV0vgrPEGfBtWX2F/lJF6YtEXpdWRv 6dSi+3WCkYUYCBU4gZ4NqzMJ0d+26lSP4ajthAM9ASABWNSNEs4t7vjFAFmVWxeC 819qKdhC5XlSRgdGHGiWMBP0vHn4Zq45it5eK2ifE+w3zjr0lM9DjJkQsTP82o3b QscSsn9Oi2Z0pHMOkbYnMoPG5KUz5yFiWSj7tuRrXWoE4vYFg13ryO5R6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsm2zJzEhjnVxj9tMduPjaCXp1ZMB8GA1UdIwQY MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5 LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrOw7A0n +LIviBATt7RSEEVoXr6wZVbtzfevAyTlv4rru7Hmf1vZ5jtqwGDCovozp9eNamBN KhDNnsp7tdLgxkeJmZ3XqdWSqtufnO3Co9XhLel+aKhHnB4dEPqE148idp46Mz5O /e2BJzdKeqwDvDcKRzHOB6l3nD3gpQD7CoMxURZ4v4XW47/XeQ+6c8wSKLKIS6Tj NtiqrcVkQ1fEVrTNsMti3a3ioBhQ+wv7gM9/lzIxHuxQZ66/uK4fdiuaNJtQvH/Y Pa4Tbl67v0R1JmJAqtSgE+kPIrsvGqmTvTd5k4hplj9AZpUQQu1Xccyju0PlneRM T63BIAy9igyYXQ== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:31 2026 by rpki-client