This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json) Hash identifier: J2b0wsaG7Y2v8uzFvdyRz469IN5rIFfVFyRJ8f8IwlY= Subject key identifier: D0:17:C2:61:F9:B2:D3:0D:79:54:BF:67:62:67:3F:2D:8D:CF:CE:D3 Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Certificate serial: 019C1C838FE743A8AC3546951BE59757D288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft Manifest number: 178D Signing time: Mon 02 Feb 2026 04:01:49 +0000 Manifest this update: Mon 02 Feb 2026 04:01:49 +0000 Manifest next update: Tue 03 Feb 2026 04:01:49 +0000 Files and hashes: 1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=) 2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: uwFJn18/ls8QM7vPleh9OTJBnK0n0IfOEtSZ/Kzh+HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:83:8f:e7:43:a8:ac:35:46:95:1b:e5:97:57:d2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Validity Not Before: Feb 2 04:01:49 2026 GMT Not After : Feb 3 04:01:49 2026 GMT Subject: CN=d017c261f9b2d30d7954bf6762673f2d8dcfced3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:ed:20:aa:27:da:75:81:11:0d:46:60:5d: 78:68:94:66:8c:ad:a2:3c:1d:3e:e1:6e:63:6a:b7: ed:65:0f:c1:a3:3c:4d:c5:1c:f7:d8:a2:ae:42:20: 93:e4:03:8f:96:45:cc:f2:40:8c:f6:3a:4e:dd:f8: 46:4a:fe:73:1a:71:c1:81:78:90:48:8e:de:22:35: e5:58:6a:5a:40:02:a2:04:bf:48:a7:d3:2e:58:6f: fe:48:41:df:b7:31:3e:d5:40:27:93:7b:8f:25:cd: f8:76:dd:21:cd:75:8d:b6:46:52:54:76:e5:e7:4b: cb:78:98:1f:42:a2:db:99:8e:2c:50:a8:17:fa:63: 95:8c:4f:2c:a7:69:e8:29:e2:cd:87:29:47:61:8e: b9:ef:ac:97:9a:64:87:5a:9f:62:e7:20:20:7f:da: 77:29:73:eb:9c:f9:fa:1a:27:e0:5d:06:2b:bb:c1: 5d:78:01:89:b7:2f:26:bd:95:dd:37:10:fd:22:25: 2b:3e:5d:5a:1c:d7:40:f4:a5:e9:b6:d3:fd:2b:73: 34:8f:3e:78:84:bb:64:65:e9:d7:49:46:81:da:31: e5:b8:de:bc:6d:14:7a:6d:47:b3:13:8d:f7:cd:e9: b2:eb:3c:eb:6d:30:4b:77:c3:0b:46:3a:b2:b8:64: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:17:C2:61:F9:B2:D3:0D:79:54:BF:67:62:67:3F:2D:8D:CF:CE:D3 X509v3 Authority Key Identifier: keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:03:2f:d4:21:82:f2:ce:5a:c8:90:20:e7:08:41:ad:20: 80:4e:fc:f5:2f:41:81:75:94:e8:eb:8f:2e:23:f2:b9:60:1a: 89:c5:06:58:9f:c8:08:71:df:b1:3e:c1:a1:5d:a3:83:75:9a: e9:44:79:a4:b4:64:73:24:c1:76:19:3c:cf:6a:e0:8c:f2:4d: 20:3f:ea:8f:97:e4:6f:c1:91:f2:8e:b3:71:b4:9d:ee:94:49: 33:e8:ed:45:08:c3:a1:9b:95:5f:6c:ea:1d:d7:ea:d7:15:89: db:2c:12:99:37:8f:36:bb:ae:f8:5d:60:41:fe:0c:6f:0b:8b: ab:60:90:97:a6:16:12:f4:cf:50:60:1a:02:ea:db:4c:04:07: ec:ef:ab:82:ef:03:14:99:8d:0d:58:c2:5d:35:2b:07:57:2d: 87:a6:50:34:8e:63:87:0b:03:c6:d7:f4:60:ff:50:1a:a2:e2: cd:85:d2:c7:a6:44:b2:a0:b8:39:6a:ec:9e:ef:8f:d6:04:0c: ad:c4:19:a2:e5:63:eb:84:70:06:3f:26:fe:34:6a:32:25:39: 47:d4:04:50:67:20:85:02:8b:90:34:95:a0:14:df:2f:13:a8: fb:b4:3e:f3:79:7d:1b:a2:d6:56:5d:17:5d:18:23:99:e0:2d: bf:3e:c8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcg4/nQ6isNUaVG+WXV9KIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy OGY4MmIwHhcNMjYwMjAyMDQwMTQ5WhcNMjYwMjAzMDQwMTQ5WjAzMTEwLwYDVQQD EyhkMDE3YzI2MWY5YjJkMzBkNzk1NGJmNjc2MjY3M2YyZDhkY2ZjZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6TtIKon2nWBEQ1GYF14aJRmjK2i PB0+4W5jarftZQ/BozxNxRz32KKuQiCT5AOPlkXM8kCM9jpO3fhGSv5zGnHBgXiQ SI7eIjXlWGpaQAKiBL9Ip9MuWG/+SEHftzE+1UAnk3uPJc34dt0hzXWNtkZSVHbl 50vLeJgfQqLbmY4sUKgX+mOVjE8sp2noKeLNhylHYY6576yXmmSHWp9i5yAgf9p3 KXPrnPn6GifgXQYru8FdeAGJty8mvZXdNxD9IiUrPl1aHNdA9KXpttP9K3M0jz54 hLtkZenXSUaB2jHluN68bRR6bUezE433zemy6zzrbTBLd8MLRjqyuGRF3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAXwmH5stMNeVS/Z2JnPy2Nz87TMB8GA1UdIwQY MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0 LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa0DL9Qh gvLOWsiQIOcIQa0ggE789S9BgXWU6OuPLiPyuWAaicUGWJ/ICHHfsT7BoV2jg3Wa 6UR5pLRkcyTBdhk8z2rgjPJNID/qj5fkb8GR8o6zcbSd7pRJM+jtRQjDoZuVX2zq Hdfq1xWJ2ywSmTePNruu+F1gQf4MbwuLq2CQl6YWEvTPUGAaAurbTAQH7O+rgu8D FJmNDVjCXTUrB1cth6ZQNI5jhwsDxtf0YP9QGqLizYXSx6ZEsqC4OWrsnu+P1gQM rcQZouVj64RwBj8m/jRqMiU5R9QEUGcghQKLkDSVoBTfLxOo+7Q+83l9G6LWVl0X XRgjmeAtvz7IQw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:54 2026 by rpki-client