This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json) Hash identifier: g+JBobCjLoGGzOZEp7oTQxXiLlOBBUD8OfFar8jFPww= Subject key identifier: 8A:A2:EC:A3:A2:6F:AE:21:6F:1F:25:8C:8F:3E:B8:D9:BE:D9:C0:BE Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019BA37D50BAC188B6BA7311A7140C6A5761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft Manifest number: 1351 Signing time: Fri 09 Jan 2026 16:00:57 +0000 Manifest this update: Fri 09 Jan 2026 16:00:57 +0000 Manifest next update: Sat 10 Jan 2026 16:00:57 +0000 Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=) 2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=) 3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=) 4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: rvLkUSgIXH5dOJ64fYvZ3aOfnNnYnI6p8/O4Avw9Y1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:7d:50:ba:c1:88:b6:ba:73:11:a7:14:0c:6a:57:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Jan 9 16:00:57 2026 GMT Not After : Jan 10 16:00:57 2026 GMT Subject: CN=8aa2eca3a26fae216f1f258c8f3eb8d9bed9c0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:61:05:c3:12:cf:f4:8b:34:c4:0f:16:b7: 65:c1:ca:d2:2f:01:7b:4a:e2:bc:6b:58:40:e1:08: f8:57:4d:d4:7c:8d:34:a5:4f:d2:08:25:15:cd:c3: d4:95:dc:78:12:5a:79:73:41:90:a6:ab:94:68:05: 17:98:fc:1d:46:2d:9f:94:b7:f3:4b:9e:85:97:30: 1c:d5:33:e8:33:d3:e2:1a:d6:41:95:b6:a6:3c:e1: fd:eb:ef:9f:c3:51:88:3c:46:a5:ee:32:b9:fc:f6: 25:ba:b5:92:93:f4:09:59:c0:78:b4:ad:13:85:10: f5:bb:52:db:80:54:76:a6:c8:35:cd:bb:b9:bb:29: 7b:12:78:cc:a2:80:8d:07:c2:23:f7:0d:a4:ce:db: 17:be:a4:b9:1e:54:32:ef:43:e8:d1:22:e9:e3:f8: 00:14:4f:7d:6c:40:b3:3d:d2:d6:74:ea:b7:44:7f: 4f:0b:e9:62:e2:bc:e1:e9:2f:3a:2d:0d:22:5d:72: 8e:84:66:31:7e:89:c4:2e:5e:1c:ea:f5:a4:76:70: 35:42:ee:80:03:07:26:53:2c:f2:24:a9:25:d4:bf: 3a:d6:08:6a:e2:25:4b:4f:74:2a:a8:94:94:75:98: 01:aa:63:cb:81:f8:ed:32:c3:73:99:df:4f:4f:cd: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A2:EC:A3:A2:6F:AE:21:6F:1F:25:8C:8F:3E:B8:D9:BE:D9:C0:BE X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:42:db:2f:8f:7f:d7:4b:2f:76:8e:86:d5:87:d6:c9:06: 2c:e3:d8:cb:30:8f:00:32:ec:09:f3:f6:0e:8e:6b:c4:1b:18: 8e:c4:1c:da:c2:48:7b:88:b1:27:8c:47:02:ee:6d:5c:72:16: 1a:9b:10:c2:86:79:a1:28:2e:4c:10:ef:84:8d:79:75:e9:1f: 77:3f:ea:3b:15:d2:01:b7:bc:99:38:ea:41:5b:5f:4f:6d:cb: f8:8c:9a:97:93:08:c1:4c:d8:3c:fb:57:67:5c:da:0d:2a:0d: 71:c1:a0:61:f0:c9:f4:80:3f:7b:e2:d2:9d:ca:8c:5b:ce:27: f8:21:56:97:ff:e1:2c:0a:77:ac:72:ca:bf:c2:ba:6c:6c:00: 97:68:80:6b:5a:18:95:a2:1f:f7:90:01:65:81:b2:20:5b:05: 8c:5d:26:4d:8f:e8:c7:43:01:e5:86:48:b9:e6:3e:7c:d5:d4: 0a:1d:7a:0d:96:17:9d:bd:74:02:b4:f9:24:1c:00:6d:55:97: 86:a2:1a:40:fb:ba:11:47:29:f3:31:75:99:fd:0f:6b:24:b3: ec:b7:c0:81:d3:9a:0d:b7:9b:87:c7:e7:f4:b0:3b:0d:43:5c: 54:07:4e:78:65:6b:ac:fa:95:57:2e:d2:a0:8e:d1:13:8c:b9: 68:eb:68:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujfVC6wYi2unMRpxQMaldhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjYwMTA5MTYwMDU3WhcNMjYwMTEwMTYwMDU3WjAzMTEwLwYDVQQD Eyg4YWEyZWNhM2EyNmZhZTIxNmYxZjI1OGM4ZjNlYjhkOWJlZDljMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pBhBcMSz/SLNMQPFrdlwcrSLwF7 SuK8a1hA4Qj4V03UfI00pU/SCCUVzcPUldx4Elp5c0GQpquUaAUXmPwdRi2flLfz S56FlzAc1TPoM9PiGtZBlbamPOH96++fw1GIPEal7jK5/PYlurWSk/QJWcB4tK0T hRD1u1LbgFR2psg1zbu5uyl7EnjMooCNB8Ij9w2kztsXvqS5HlQy70Po0SLp4/gA FE99bECzPdLWdOq3RH9PC+li4rzh6S86LQ0iXXKOhGYxfonELl4c6vWkdnA1Qu6A AwcmUyzyJKkl1L861ghq4iVLT3QqqJSUdZgBqmPLgfjtMsNzmd9PT81YEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqi7KOib64hbx8ljI8+uNm+2cC+MB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3RC2y+P f9dLL3aOhtWH1skGLOPYyzCPADLsCfP2Do5rxBsYjsQc2sJIe4ixJ4xHAu5tXHIW GpsQwoZ5oSguTBDvhI15dekfdz/qOxXSAbe8mTjqQVtfT23L+Iyal5MIwUzYPPtX Z1zaDSoNccGgYfDJ9IA/e+LSncqMW84n+CFWl//hLAp3rHLKv8K6bGwAl2iAa1oY laIf95ABZYGyIFsFjF0mTY/ox0MB5YZIueY+fNXUCh16DZYXnb10ArT5JBwAbVWX hqIaQPu6EUcp8zF1mf0PaySz7LfAgdOaDbebh8fn9LA7DUNcVAdOeGVrrPqVVy7S oI7RE4y5aOtohA== -----END CERTIFICATE-----Generated at Sat Jan 10 01:53:35 2026 by rpki-client