This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json) Hash identifier: at5EPNtRxKK8dLrjMZlCLyANLx1qF52P22wic44r0VU= Subject key identifier: 89:2F:86:6D:7F:4C:50:2E:5D:75:6A:E3:C1:A9:83:85:EE:1F:0C:00 Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7 Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7 Certificate serial: 019BB39618D71A6DBDAECB4F9FB091ED6C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft Manifest number: 0861 Signing time: Mon 12 Jan 2026 19:01:56 +0000 Manifest this update: Mon 12 Jan 2026 19:01:56 +0000 Manifest next update: Tue 13 Jan 2026 19:01:56 +0000 Files and hashes: 1: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: L1k3/vM6b4KFgiqz1q3t8ZyDNlBCUETykS7IjghGVXA=) 2: uN4DAu7bK-c8JvVTn8OEeV-CJp4.roa (hash: jyCJgBnbF1uD+bUHsVKg/2HvPpHhs/dR1060/6K0LU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:96:18:d7:1a:6d:bd:ae:cb:4f:9f:b0:91:ed:6c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7 Validity Not Before: Jan 12 19:01:56 2026 GMT Not After : Jan 13 19:01:56 2026 GMT Subject: CN=892f866d7f4c502e5d756ae3c1a98385ee1f0c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:55:af:7a:06:05:2b:a1:49:02:e7:6a:16:79: e1:79:3f:b2:70:c3:dc:2b:23:7f:74:0d:61:ff:46: c4:fc:e1:5c:f3:c0:d0:2d:9f:87:1b:9d:81:7b:f4: b2:ce:f2:86:72:18:8e:8d:a3:73:64:1d:79:b9:71: 93:8e:1a:62:af:77:86:66:95:8c:2e:3d:a5:0e:cf: e8:45:92:36:93:de:1c:c8:ed:0b:6f:e5:33:d1:fd: 59:1d:b7:02:dc:6c:eb:ba:10:1e:72:bb:63:82:64: 72:66:b5:6b:88:58:56:bc:3c:33:ac:67:34:9e:95: 88:1c:b1:ea:3d:5a:ab:4e:56:7e:26:63:cf:a9:27: 67:2d:33:18:56:0e:04:48:14:b7:61:3b:2c:b9:41: c9:4d:51:9e:ea:48:49:6f:91:0c:da:6b:cf:dd:95: 23:f1:1d:cf:5a:26:1d:74:b4:ad:3c:b3:15:52:e9: 3f:65:4f:9b:7d:41:19:36:fe:ee:f7:ad:23:87:54: ba:3a:94:ad:0d:b3:7c:b4:9f:ac:69:04:44:2b:fe: 77:28:7d:b6:2d:5e:70:4b:d6:8b:6e:41:51:19:02: 79:b4:78:b6:ac:cb:2b:3d:fc:5e:57:13:87:48:bb: 89:2a:91:03:52:6d:0f:b8:00:a7:00:0e:bf:44:e9: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:86:6D:7F:4C:50:2E:5D:75:6A:E3:C1:A9:83:85:EE:1F:0C:00 X509v3 Authority Key Identifier: keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:60:83:d0:fe:9a:4d:06:f4:9b:a9:6d:ab:d3:03:8f:21:e8: b4:b8:ec:71:92:50:d5:28:8c:b1:87:89:5a:4b:2e:65:f4:d9: 2f:fc:9b:8e:6b:df:c3:18:65:14:4e:c4:22:22:be:7a:bf:0b: ad:fd:dd:ca:eb:ae:47:4d:79:6d:0d:12:ec:d2:37:78:5f:d3: 22:32:17:c7:ad:7e:29:13:be:31:23:0e:08:81:5a:95:6e:ef: 74:6e:1e:51:eb:d6:c9:42:f9:c1:e5:3d:1d:17:00:11:0a:47: 26:35:d9:8b:4a:d8:9c:e3:4f:03:4d:55:74:bf:0c:cb:f5:9a: 68:bb:5e:75:58:e9:ee:1e:ff:7b:98:99:10:35:67:91:ea:5c: bd:23:5a:21:15:cd:c5:71:c2:94:bd:5b:8d:b0:b9:a1:a6:02: 20:14:ff:4b:ee:81:29:f3:24:2f:69:8b:33:02:46:4a:79:89: 26:78:49:c1:f5:0b:10:84:3b:05:72:29:08:53:81:1b:7d:7f: 80:b5:f4:61:c2:81:03:24:92:23:3b:f5:0c:f3:07:87:1f:3c: 37:7d:e3:ca:b2:e3:9c:c7:a3:7f:1e:66:a1:e0:91:b9:b4:03: 30:23:ae:75:6f:37:23:f8:26:f7:83:76:81:7c:ca:a4:d3:8f: 21:55:20:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlhjXGm29rstPn7CR7WxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OGIyNDFmN2NhYzdkMWU1MjFlMjgzMTQ3ZWM2MTc2M2M0 MjJhYTcwHhcNMjYwMTEyMTkwMTU2WhcNMjYwMTEzMTkwMTU2WjAzMTEwLwYDVQQD Eyg4OTJmODY2ZDdmNGM1MDJlNWQ3NTZhZTNjMWE5ODM4NWVlMWYwYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FWvegYFK6FJAudqFnnheT+ycMPc KyN/dA1h/0bE/OFc88DQLZ+HG52Be/SyzvKGchiOjaNzZB15uXGTjhpir3eGZpWM Lj2lDs/oRZI2k94cyO0Lb+Uz0f1ZHbcC3GzruhAecrtjgmRyZrVriFhWvDwzrGc0 npWIHLHqPVqrTlZ+JmPPqSdnLTMYVg4ESBS3YTssuUHJTVGe6khJb5EM2mvP3ZUj 8R3PWiYddLStPLMVUuk/ZU+bfUEZNv7u960jh1S6OpStDbN8tJ+saQREK/53KH22 LV5wS9aLbkFRGQJ5tHi2rMsrPfxeVxOHSLuJKpEDUm0PuACnAA6/ROlaTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkvhm1/TFAuXXVq48Gpg4XuHwwAMB8GA1UdIwQY MBaAFLeLJB98rH0eUh4oMUfsYXY8QiqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTIt YzBkOTczY2EyNWQ4LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTItYzBkOTczY2EyNWQ4 LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmCD0P6a TQb0m6ltq9MDjyHotLjscZJQ1SiMsYeJWksuZfTZL/ybjmvfwxhlFE7EIiK+er8L rf3dyuuuR015bQ0S7NI3eF/TIjIXx61+KRO+MSMOCIFalW7vdG4eUevWyUL5weU9 HRcAEQpHJjXZi0rYnONPA01VdL8My/WaaLtedVjp7h7/e5iZEDVnkepcvSNaIRXN xXHClL1bjbC5oaYCIBT/S+6BKfMkL2mLMwJGSnmJJnhJwfULEIQ7BXIpCFOBG31/ gLX0YcKBAySSIzv1DPMHhx88N33jyrLjnMejfx5moeCRubQDMCOudW83I/gm94N2 gXzKpNOPIVUgeA== -----END CERTIFICATE-----Generated at Mon Jan 12 23:49:13 2026 by rpki-client