This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json) Hash identifier: mopVpLFYwPVKkVbqnZCyg3uMnwL8VUCRlhZ1judEi84= Subject key identifier: 97:20:74:1C:72:D5:52:83:7B:EF:91:9B:69:07:49:19:2F:D2:F3:0B Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16 Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016 Certificate serial: 019B7AC9D23EC2F258D04D29510C12456D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 18:20:05 +0000 Manifest this update: Thu 01 Jan 2026 18:20:05 +0000 Manifest next update: Fri 02 Jan 2026 18:20:05 +0000 Files and hashes: 1: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (hash: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=) 2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: ZjFS+POwtHaMIOX/6YVsWLreOPZOIWKQXlC64skgjW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:d2:3e:c2:f2:58:d0:4d:29:51:0c:12:45:6d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016 Validity Not Before: Jan 1 18:20:05 2026 GMT Not After : Jan 2 18:20:05 2026 GMT Subject: CN=9720741c72d552837bef919b690749192fd2f30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:54:bc:fa:11:76:d2:8f:7c:e4:03:43:96: 99:9b:48:a3:33:e3:58:b5:e6:08:e7:f3:3e:79:11: 72:bd:70:e1:d7:b8:7b:48:a4:ca:08:cb:62:1d:d2: c9:6e:a5:47:a2:cf:7a:59:4f:6f:a1:1e:80:95:fe: bd:dc:59:31:9b:6d:d4:00:f0:fd:14:8c:f7:ac:a0: 06:cf:ae:f5:92:55:08:43:0d:9c:55:80:97:a9:d4: b4:bd:e8:84:a3:47:88:7a:e3:78:85:02:36:3f:3c: fb:6b:bf:9d:58:6d:17:8c:6b:1a:a9:05:59:16:db: e9:1f:b4:61:dc:1b:09:9c:11:60:f0:bb:99:89:7b: db:02:52:01:f1:23:b7:f7:7e:9f:dd:57:60:4d:5b: 37:5b:96:7d:76:8c:f2:71:bc:b7:68:f8:e4:ae:bf: ff:16:69:0d:a2:02:f6:61:4f:4a:25:8d:9b:80:ba: 56:10:a5:9c:d3:5a:58:1f:b4:e2:77:71:4e:04:78: 83:c5:15:fe:8d:5d:c5:5d:95:3b:3f:10:2b:e9:fa: 0d:a7:9e:d2:ee:52:4b:ff:42:38:98:ad:77:eb:84: 97:14:51:19:16:1d:b1:88:7d:b1:48:07:82:d0:73: b1:a0:d7:f1:9c:5b:5b:5d:7a:5b:63:72:5c:68:10: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:20:74:1C:72:D5:52:83:7B:EF:91:9B:69:07:49:19:2F:D2:F3:0B X509v3 Authority Key Identifier: keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1b:1a:a6:f9:12:b5:2f:71:01:2c:09:f0:ed:dd:78:9a:3e: 28:52:94:c5:d2:a2:ab:45:f8:42:76:28:33:96:54:d3:e3:db: 5d:e4:23:d3:bd:e3:66:9b:44:df:13:cd:11:53:83:a4:0b:3c: fb:80:df:9c:99:42:1a:2a:9a:5b:22:72:cf:14:84:ae:ce:77: 2c:96:7c:4d:12:fe:76:3b:a9:14:19:79:ad:6f:13:00:9b:39: 56:9e:79:55:4e:e5:15:0b:c5:28:80:b0:0b:2c:34:7f:3e:d8: c9:21:78:9b:14:08:c3:98:7b:bf:4d:ca:7d:95:df:64:7a:98: 56:6e:c2:aa:43:d4:27:e0:79:16:a7:4f:22:7d:27:c8:01:ff: ca:62:a3:b6:32:66:8e:66:a0:f4:4c:40:5f:1c:58:3c:e2:ac: c4:42:42:1a:04:81:e9:77:64:1c:ae:66:e9:62:70:33:fe:3b: 87:dc:37:2e:44:41:1c:dc:e1:4d:8e:d3:c5:23:a7:9b:81:66: ee:9a:e8:36:91:eb:10:52:df:a2:f9:30:11:19:c7:f0:31:b3: 66:61:22:4e:91:ee:14:0b:15:e9:81:ad:3b:20:b5:c4:fa:27: 7d:44:d0:35:6a:f2:ad:25:b6:70:ba:53:6f:2f:f6:4a:b8:ec: 0f:71:43:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6ydI+wvJY0E0pUQwSRW0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDg5Zjg0NDgzMDU3YWMzNjQ2NDdjODBhMWIyM2M5NzZi OTMwMTYwHhcNMjYwMTAxMTgyMDA1WhcNMjYwMTAyMTgyMDA1WjAzMTEwLwYDVQQD Eyg5NzIwNzQxYzcyZDU1MjgzN2JlZjkxOWI2OTA3NDkxOTJmZDJmMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcVUvPoRdtKPfOQDQ5aZm0ijM+NY teYI5/M+eRFyvXDh17h7SKTKCMtiHdLJbqVHos96WU9voR6Alf693Fkxm23UAPD9 FIz3rKAGz671klUIQw2cVYCXqdS0veiEo0eIeuN4hQI2Pzz7a7+dWG0XjGsaqQVZ FtvpH7Rh3BsJnBFg8LuZiXvbAlIB8SO3936f3VdgTVs3W5Z9dozycby3aPjkrr// FmkNogL2YU9KJY2bgLpWEKWc01pYH7Tid3FOBHiDxRX+jV3FXZU7PxAr6foNp57S 7lJL/0I4mK1364SXFFEZFh2xiH2xSAeC0HOxoNfxnFtbXXpbY3JcaBAoOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcgdBxy1VKDe++Rm2kHSRkv0vMLMB8GA1UdIwQY MBaAFLQIn4RIMFesNkZHyAobI8l2uTAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUt MWY4Nzk3NjEzN2EwLzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUtMWY4Nzk3NjEzN2Ew LzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxsapvkS tS9xASwJ8O3deJo+KFKUxdKiq0X4QnYoM5ZU0+PbXeQj073jZptE3xPNEVODpAs8 +4DfnJlCGiqaWyJyzxSErs53LJZ8TRL+djupFBl5rW8TAJs5Vp55VU7lFQvFKICw Cyw0fz7YySF4mxQIw5h7v03KfZXfZHqYVm7CqkPUJ+B5FqdPIn0nyAH/ymKjtjJm jmag9ExAXxxYPOKsxEJCGgSB6XdkHK5m6WJwM/47h9w3LkRBHNzhTY7TxSOnm4Fm 7proNpHrEFLfovkwERnH8DGzZmEiTpHuFAsV6YGtOyC1xPonfUTQNWryrSW2cLpT by/2SrjsD3FDQg== -----END CERTIFICATE-----Generated at Thu Jan 1 22:59:44 2026 by rpki-client