This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json) Hash identifier: Jdo5Nnj0DRAO13MYIwBQEk0Nj5zJ6MZb3Ae0G3kdKxc= Subject key identifier: D8:84:EE:1F:E0:AE:59:C6:32:E4:E5:1E:1E:6A:9A:DD:DF:94:CF:F7 Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019BAAC996AFC8DE3A13FCA8E34CFD4EFF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 02:01:36 +0000 Manifest this update: Sun 11 Jan 2026 02:01:36 +0000 Manifest next update: Mon 12 Jan 2026 02:01:36 +0000 Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=) 2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=) 3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: mWy/fHdYdp9+o0HnPw6zawlPBt3y4FYURC9fJAHy384=) 4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:c9:96:af:c8:de:3a:13:fc:a8:e3:4c:fd:4e:ff:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Jan 11 02:01:36 2026 GMT Not After : Jan 12 02:01:36 2026 GMT Subject: CN=d884ee1fe0ae59c632e4e51e1e6a9adddf94cff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:fb:6b:75:1f:85:37:7c:b3:b0:8c:62:a7: 41:ea:27:16:34:61:3b:1e:25:01:a9:7c:52:53:67: 05:a5:74:af:52:30:4e:88:98:85:5c:94:0d:68:b9: 1f:16:d9:60:92:52:c0:e3:40:83:c0:01:9b:b1:e5: 86:3d:a6:11:a2:7b:f8:d3:fd:d0:99:6c:58:cf:95: b6:88:b7:e1:36:a1:81:41:bc:0c:2b:c1:01:42:fd: 72:a5:b8:da:c2:ef:cf:49:81:4f:af:4e:3a:9e:c9: fd:84:08:3e:69:7a:ea:8f:78:86:06:ad:6d:3c:b9: 8e:10:fb:6d:b6:e7:bc:b8:06:50:cc:3c:0c:61:c1: b1:44:f6:02:fa:76:1b:ba:12:7a:b7:fd:32:65:18: 37:da:36:d7:bd:2c:53:99:f8:6f:98:42:cb:8e:55: 85:a9:01:9d:ea:92:06:24:9b:b2:7c:50:92:50:12: 9f:63:45:54:54:d3:a3:ea:82:ca:e6:e2:6b:07:7d: d3:4f:77:ec:94:0d:29:d1:ac:5e:13:e7:04:03:d7: dd:58:3c:2c:60:66:8e:77:a0:ab:ae:f5:66:46:23: cf:a9:ee:a7:3d:d5:05:9f:16:86:c0:67:fc:9a:a9: e8:21:4f:ca:4b:a2:bc:6d:aa:67:e8:d6:94:d0:31: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:84:EE:1F:E0:AE:59:C6:32:E4:E5:1E:1E:6A:9A:DD:DF:94:CF:F7 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d4:a1:61:b2:4c:07:32:1e:90:cb:0a:0a:47:78:5b:a0:92: 4e:25:f9:97:b4:77:4a:50:d2:01:b4:c9:b8:1c:91:11:fb:43: e1:97:d4:95:e4:2b:76:ce:20:84:f2:4c:9e:3a:de:9c:fe:ab: 8a:4d:28:ab:99:ff:10:1f:3a:a3:2e:a5:51:e6:a2:e8:b1:a4: 93:ba:dc:f8:24:ad:fc:0e:b0:46:f1:b9:ef:43:f4:7c:25:68: 90:9b:b3:2d:ff:3c:2e:1a:6d:c3:4e:3a:78:ad:7b:0a:8a:08: 6a:48:dc:bc:94:1f:76:94:c5:3c:1b:31:d7:7b:82:10:a4:a4: 3d:09:9e:28:41:32:a2:d4:79:4e:46:69:05:8e:00:17:7f:9e: 99:23:98:61:1f:73:c9:09:6e:59:91:6f:70:8e:95:a0:3e:ea: 9a:ac:db:ce:95:f1:10:3b:21:89:a2:c9:b9:c0:db:8a:2e:15: db:3d:97:93:fb:bf:7e:44:b0:8a:20:fa:f6:63:46:83:86:9f: 5d:68:fc:f5:60:fb:de:68:b8:06:d8:81:04:8e:ec:b9:05:96: 77:6c:eb:ab:50:d8:f9:7c:78:ab:77:a5:71:ca:f9:97:c3:42: 07:5b:f3:77:95:41:85:2b:db:a7:1a:4e:b6:ff:ae:e2:00:09: d1:55:3a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuqyZavyN46E/yo40z9Tv+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjYwMTExMDIwMTM2WhcNMjYwMTEyMDIwMTM2WjAzMTEwLwYDVQQD EyhkODg0ZWUxZmUwYWU1OWM2MzJlNGU1MWUxZTZhOWFkZGRmOTRjZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05/7a3UfhTd8s7CMYqdB6icWNGE7 HiUBqXxSU2cFpXSvUjBOiJiFXJQNaLkfFtlgklLA40CDwAGbseWGPaYRonv40/3Q mWxYz5W2iLfhNqGBQbwMK8EBQv1ypbjawu/PSYFPr046nsn9hAg+aXrqj3iGBq1t PLmOEPtttue8uAZQzDwMYcGxRPYC+nYbuhJ6t/0yZRg32jbXvSxTmfhvmELLjlWF qQGd6pIGJJuyfFCSUBKfY0VUVNOj6oLK5uJrB33TT3fslA0p0axeE+cEA9fdWDws YGaOd6CrrvVmRiPPqe6nPdUFnxaGwGf8mqnoIU/KS6K8bapn6NaU0DGaAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiE7h/grlnGMuTlHh5qmt3flM/3MB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNShYbJM BzIekMsKCkd4W6CSTiX5l7R3SlDSAbTJuByREftD4ZfUleQrds4ghPJMnjrenP6r ik0oq5n/EB86oy6lUeai6LGkk7rc+CSt/A6wRvG570P0fCVokJuzLf88Lhptw046 eK17CooIakjcvJQfdpTFPBsx13uCEKSkPQmeKEEyotR5TkZpBY4AF3+emSOYYR9z yQluWZFvcI6VoD7qmqzbzpXxEDshiaLJucDbii4V2z2Xk/u/fkSwiiD69mNGg4af XWj89WD73mi4BtiBBI7suQWWd2zrq1DY+Xx4q3elccr5l8NCB1vzd5VBhSvbpxpO tv+u4gAJ0VU66w== -----END CERTIFICATE-----Generated at Sun Jan 11 11:27:37 2026 by rpki-client