This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json) Hash identifier: D3HH9X1WLMplBhXeqr392X4RB9p71iZOHgnoxx38Iwk= Subject key identifier: 2D:09:F7:10:7D:A7:F0:F6:0A:9D:42:A7:C2:EE:9D:86:7F:5E:A2:F9 Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9 Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9 Certificate serial: 019BAEDDEDEE497C416458DA745441712BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft Manifest number: 0B02 Signing time: Sun 11 Jan 2026 21:02:18 +0000 Manifest this update: Sun 11 Jan 2026 21:02:18 +0000 Manifest next update: Mon 12 Jan 2026 21:02:18 +0000 Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: XDo2Oy0FJaxz/zJYnSu8K0BZQZhPu7EfCRD6AS8fQZE=) 2: vDyYxaD_OvQHT43TMjNvoifQbS0.roa (hash: OGyJnll9v3Henpio/RUnMctAX/okbHPj8xqJsYAY++E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:ed:ee:49:7c:41:64:58:da:74:54:41:71:2b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9 Validity Not Before: Jan 11 21:02:18 2026 GMT Not After : Jan 12 21:02:18 2026 GMT Subject: CN=2d09f7107da7f0f60a9d42a7c2ee9d867f5ea2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:25:e9:9d:23:00:f7:7c:80:6f:2c:85:4e: f4:0c:58:93:c3:96:2e:a2:7e:64:13:63:bd:df:62: 52:35:5c:61:f0:45:ed:4d:7d:cc:d6:ac:42:e9:a7: a4:22:60:31:9e:c6:d6:3c:0e:88:ef:f9:e6:3c:30: 22:85:aa:7c:ba:5c:7d:7c:98:0e:51:62:cc:64:93: 1a:33:24:d4:be:39:37:53:b3:cd:60:bf:5f:97:01: 65:f9:e9:66:57:a9:44:9a:43:2f:43:3a:c1:de:5a: 05:00:64:a7:04:a5:bf:61:55:40:5e:3b:2d:2a:0c: 70:08:02:b7:9c:1d:c0:79:0d:a8:49:18:fc:3a:ee: e5:cd:dc:03:46:6f:47:0f:27:22:a5:49:a4:c7:7e: e7:99:f9:2f:8e:3d:2e:b6:6e:06:f2:12:ae:82:6a: 8e:a5:df:ed:d5:4d:f3:e1:1a:b3:92:d2:9f:87:a1: 13:bc:e0:b5:1a:46:62:6e:f0:7d:ac:76:49:03:ea: f0:c3:d9:97:59:df:83:6e:c1:d5:95:d5:c5:d4:fa: 14:e9:3d:2d:57:08:f5:2d:7c:5c:60:b4:43:fb:99: 69:f7:7f:f8:24:86:11:bd:8f:61:3b:67:de:1d:3f: ac:32:92:2c:72:60:0a:49:e4:cb:f4:ad:88:6a:c3: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:F7:10:7D:A7:F0:F6:0A:9D:42:A7:C2:EE:9D:86:7F:5E:A2:F9 X509v3 Authority Key Identifier: keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c2:0b:ca:f7:09:bc:bd:46:50:27:6f:12:f3:6b:77:dc:ad: 0f:6e:00:08:33:22:9b:3c:1b:28:34:c9:45:0f:9d:87:52:43: fc:a9:32:d5:63:06:6c:21:c2:0b:2b:b5:69:fd:3d:24:a6:fd: 51:e8:9f:fc:eb:d1:16:e6:95:88:5e:74:01:82:0b:f6:94:d3: 5e:d9:a1:77:58:65:3d:16:8c:00:cd:e6:fc:07:1a:c8:b7:41: 2c:0e:33:2a:c4:53:0c:60:76:dd:f2:55:55:9b:e6:18:82:15: 33:9e:3c:8a:20:55:48:17:e5:d4:77:b6:b7:ce:a4:e2:f3:06: 2d:5c:ae:f4:a6:ec:ae:1f:30:77:a3:25:3f:88:62:09:ba:34: 5d:ab:66:c5:2b:da:ef:f6:b1:cc:96:cf:f7:73:95:b6:a6:7e: 3a:8c:a2:65:68:97:9a:3e:a9:ed:b7:69:33:b2:98:c1:56:08: 13:e4:3e:72:16:ce:24:ef:23:53:29:f4:d1:18:4a:1b:53:18: 58:4f:0c:fd:a9:c4:8b:b9:45:61:89:5d:2e:7d:5e:29:fc:b7: c5:52:4e:f6:0b:9f:8b:5d:a2:30:c7:82:8b:c9:88:c3:1a:e2: f3:f8:9d:c5:fc:19:17:e2:d6:4f:7e:a6:3c:ad:72:1b:76:b3: dd:30:0f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3e3uSXxBZFjadFRBcSuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm ODg2ZTkwHhcNMjYwMTExMjEwMjE4WhcNMjYwMTEyMjEwMjE4WjAzMTEwLwYDVQQD EygyZDA5ZjcxMDdkYTdmMGY2MGE5ZDQyYTdjMmVlOWQ4NjdmNWVhMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgEl6Z0jAPd8gG8shU70DFiTw5Yu on5kE2O932JSNVxh8EXtTX3M1qxC6aekImAxnsbWPA6I7/nmPDAihap8ulx9fJgO UWLMZJMaMyTUvjk3U7PNYL9flwFl+elmV6lEmkMvQzrB3loFAGSnBKW/YVVAXjst KgxwCAK3nB3AeQ2oSRj8Ou7lzdwDRm9HDycipUmkx37nmfkvjj0utm4G8hKugmqO pd/t1U3z4RqzktKfh6ETvOC1GkZibvB9rHZJA+rww9mXWd+DbsHVldXF1PoU6T0t Vwj1LXxcYLRD+5lp93/4JIYRvY9hO2feHT+sMpIscmAKSeTL9K2IasPhRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0J9xB9p/D2Cp1Cp8LunYZ/XqL5MB8GA1UdIwQY MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct MTNkYTc0Y2QzNWE0LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0 LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsILyvcJ vL1GUCdvEvNrd9ytD24ACDMimzwbKDTJRQ+dh1JD/Kky1WMGbCHCCyu1af09JKb9 Ueif/OvRFuaViF50AYIL9pTTXtmhd1hlPRaMAM3m/AcayLdBLA4zKsRTDGB23fJV VZvmGIIVM548iiBVSBfl1He2t86k4vMGLVyu9Kbsrh8wd6MlP4hiCbo0XatmxSva 7/axzJbP93OVtqZ+OoyiZWiXmj6p7bdpM7KYwVYIE+Q+chbOJO8jUyn00RhKG1MY WE8M/anEi7lFYYldLn1eKfy3xVJO9gufi12iMMeCi8mIwxri8/idxfwZF+LWT36m PK1yG3az3TAPNg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:56:22 2026 by rpki-client