This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json) Hash identifier: gviiywpSMgNr4KiXzIoghogFi01rA+1jtRbfJNNLuGo= Subject key identifier: 7C:BB:47:77:EF:A9:71:91:D5:04:81:53:72:00:6A:16:D2:D7:A4:EC Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09 Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409 Certificate serial: 019B793756D50D2527A88989E97270150322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft Manifest number: 1783 Signing time: Thu 01 Jan 2026 11:00:28 +0000 Manifest this update: Thu 01 Jan 2026 11:00:28 +0000 Manifest next update: Fri 02 Jan 2026 11:00:28 +0000 Files and hashes: 1: DZHKsoKn60cOpPXOTjhxEjCZpns.roa (hash: I2eVheSuMQHjrqYiNeoQc5mmnUzluaRJ/Ixu6RKHy+k=) 2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: y9c9jy9oPYnj6dA6JsJv5QSBG2MkrRbC4L0HEfXZrVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:56:d5:0d:25:27:a8:89:89:e9:72:70:15:03:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409 Validity Not Before: Jan 1 11:00:28 2026 GMT Not After : Jan 2 11:00:28 2026 GMT Subject: CN=7cbb4777efa97191d504815372006a16d2d7a4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:3f:06:22:6d:7b:e8:d8:84:c4:12:d9:3e: 4e:75:85:14:de:83:09:d6:8a:9e:5a:7c:c6:a2:99: fb:ec:55:80:b5:e6:60:b2:8b:8a:81:43:99:b8:b7: 7b:58:f8:56:89:98:55:2d:4f:fc:62:27:8b:90:ae: 52:95:5b:9c:31:35:cf:5d:61:27:7c:5a:ec:03:00: cb:c6:dd:9d:45:20:72:a5:6f:96:1f:44:5b:db:4e: dc:57:b0:8a:5a:5b:29:27:6c:bb:dd:9f:7e:68:21: 4e:09:3a:36:72:8d:56:e6:35:ef:7b:7f:65:12:62: a3:2f:01:68:5d:4b:df:76:14:69:ff:1e:9a:41:07: 46:da:7f:71:65:10:96:ea:df:e4:a4:e6:94:1c:f3: 82:94:be:f3:a3:0e:11:25:e4:41:ad:79:26:19:45: 9d:c0:88:e1:e1:ff:68:d3:34:37:9a:f9:f9:84:69: 7c:bb:c4:9b:89:de:54:b4:a4:ab:4e:fc:78:c8:31: de:54:f2:1c:94:79:f0:e0:bf:8f:c6:28:84:84:65: de:2e:7e:6b:a9:06:65:be:d6:29:53:85:79:d4:86: 66:e2:90:d2:f7:38:19:91:59:8a:79:db:3b:fc:8b: 35:d8:2b:75:32:be:8d:da:e4:a2:04:f3:3c:2f:28: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BB:47:77:EF:A9:71:91:D5:04:81:53:72:00:6A:16:D2:D7:A4:EC X509v3 Authority Key Identifier: keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5f:a2:31:86:b4:df:79:39:d6:93:8d:01:e7:49:22:59:2a: 0e:73:d6:00:ef:d0:f3:67:dc:09:fe:67:48:08:df:b3:6d:1e: 43:ad:64:c0:86:ef:ad:e6:8a:51:1f:90:ad:23:9c:3b:c3:81: c2:30:b2:97:f3:3c:2a:8e:da:1a:45:34:33:44:a6:30:17:8f: 17:0d:76:f6:dd:fe:9e:0c:32:e7:41:8a:24:0b:09:e7:d2:2b: 5f:c1:4d:b1:18:f3:27:c9:eb:4b:9a:df:15:e7:22:34:a7:d0: d0:6f:0c:e8:2b:ad:61:24:a8:4d:2f:9d:92:9e:f6:93:84:13: a3:53:58:0a:94:ed:f7:22:dd:0a:eb:a8:2c:0d:b0:6f:70:09: 13:08:58:a2:3c:f6:ae:48:fa:16:0e:56:a2:82:c1:1d:e7:1b: b7:78:dd:54:4b:af:70:8d:94:4c:70:fb:1d:43:5e:8c:da:b5: ea:fe:06:04:2c:76:f6:a5:71:2c:d6:80:80:76:e6:32:01:71: d6:2d:f4:bb:5c:e8:41:15:3c:54:0f:65:32:89:1f:a4:3c:70: 94:c3:3b:ec:6f:54:d1:92:53:43:87:bb:87:de:04:99:11:2d: fc:75:ca:ea:f7:42:f7:1b:d0:76:b6:8c:61:bb:8f:56:2c:e0: 76:90:1e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N1bVDSUnqImJ6XJwFQMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOWQ2YzU1YmUxYmU4YTg0YWQyZGZkNWE3ZmZhNTg0OGY1 NGQ0MDkwHhcNMjYwMTAxMTEwMDI4WhcNMjYwMTAyMTEwMDI4WjAzMTEwLwYDVQQD Eyg3Y2JiNDc3N2VmYTk3MTkxZDUwNDgxNTM3MjAwNmExNmQyZDdhNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyY/BiJte+jYhMQS2T5OdYUU3oMJ 1oqeWnzGopn77FWAteZgsouKgUOZuLd7WPhWiZhVLU/8YieLkK5SlVucMTXPXWEn fFrsAwDLxt2dRSBypW+WH0Rb207cV7CKWlspJ2y73Z9+aCFOCTo2co1W5jXve39l EmKjLwFoXUvfdhRp/x6aQQdG2n9xZRCW6t/kpOaUHPOClL7zow4RJeRBrXkmGUWd wIjh4f9o0zQ3mvn5hGl8u8Sbid5UtKSrTvx4yDHeVPIclHnw4L+PxiiEhGXeLn5r qQZlvtYpU4V51IZm4pDS9zgZkVmKeds7/Is12Ct1Mr6N2uSiBPM8LyjClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHy7R3fvqXGR1QSBU3IAahbS16TsMB8GA1UdIwQY MBaAFEydbFW+G+ioStLf1af/pYSPVNQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEt MmQ1MDJlOTU2YzA0LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEtMmQ1MDJlOTU2YzA0 LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV+iMYa0 33k51pONAedJIlkqDnPWAO/Q82fcCf5nSAjfs20eQ61kwIbvreaKUR+QrSOcO8OB wjCyl/M8Ko7aGkU0M0SmMBePFw129t3+ngwy50GKJAsJ59IrX8FNsRjzJ8nrS5rf FeciNKfQ0G8M6CutYSSoTS+dkp72k4QTo1NYCpTt9yLdCuuoLA2wb3AJEwhYojz2 rkj6Fg5WooLBHecbt3jdVEuvcI2UTHD7HUNejNq16v4GBCx29qVxLNaAgHbmMgFx 1i30u1zoQRU8VA9lMokfpDxwlMM77G9U0ZJTQ4e7h94EmREt/HXK6vdC9xvQdraM YbuPVizgdpAeJw== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:42 2026 by rpki-client