This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json) Hash identifier: AW/WSYRRttkZm98eTDSZKQM/wdEgreYXsSaxokJjDbg= Subject key identifier: 10:29:38:53:D7:D6:6E:8D:0A:1D:FB:33:7F:CC:28:4E:40:BA:32:39 Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81 Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081 Certificate serial: 019BAF1401F11BBE5682B2C0CCCE5CF599FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft Manifest number: 0732 Signing time: Sun 11 Jan 2026 22:01:22 +0000 Manifest this update: Sun 11 Jan 2026 22:01:22 +0000 Manifest next update: Mon 12 Jan 2026 22:01:22 +0000 Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: N+ySVbH6eGbozmLQK4IyKfDNDXhAqKU6vvxrI8iUQg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:14:01:f1:1b:be:56:82:b2:c0:cc:ce:5c:f5:99:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081 Validity Not Before: Jan 11 22:01:22 2026 GMT Not After : Jan 12 22:01:22 2026 GMT Subject: CN=10293853d7d66e8d0a1dfb337fcc284e40ba3239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:18:0f:30:4d:9e:f3:e5:d2:db:47:97:3d:c0: 43:51:55:87:28:bc:11:f4:74:60:20:38:84:d4:7d: d2:18:79:a6:00:18:fc:38:6d:31:af:22:02:6c:4c: dc:37:35:59:2b:f3:40:e7:b5:ca:79:d4:93:5d:f4: f6:5c:65:b1:20:5c:8c:d5:a2:68:19:94:a2:ba:8c: 08:12:ed:b6:8d:23:92:db:e8:30:45:24:a9:22:a0: 84:1c:43:df:03:71:b3:fc:6b:ea:46:cb:3b:6b:67: 7a:a7:f6:01:40:d1:e8:9a:b4:81:85:c2:b6:76:08: dc:01:a7:10:00:6a:ef:61:66:3e:ab:f9:de:91:12: 9d:b6:13:1f:b6:d7:6c:3a:b2:15:1b:b4:7a:f2:8c: 64:22:91:31:1a:4c:e7:e8:d1:a2:af:f5:c4:3f:fe: 84:69:d6:85:95:4f:14:a7:3c:ae:03:e8:c6:bd:c5: 04:d2:8a:b1:6d:36:51:9b:6b:d3:12:83:11:63:9b: 5d:43:ce:fa:5a:0b:a9:b3:62:ed:47:2d:6a:2b:1c: e2:76:dd:51:30:f1:9e:7d:9c:8f:eb:26:59:61:2f: f9:4e:58:6c:86:71:35:25:2c:3a:ef:b7:7c:b5:c0: 7a:e9:73:8b:63:28:66:57:63:b5:0c:5a:28:58:8b: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:29:38:53:D7:D6:6E:8D:0A:1D:FB:33:7F:CC:28:4E:40:BA:32:39 X509v3 Authority Key Identifier: keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7f:2b:dc:6f:86:8a:f2:c1:9b:c2:db:29:18:f5:26:65:23: 80:b4:fa:55:6d:98:78:a5:a4:e7:b7:4f:49:c3:51:20:91:a4: d9:1a:c7:da:a4:06:84:da:3d:b6:f0:24:23:8c:4e:3f:e1:39: 71:0c:b7:a0:d1:71:7d:6b:3b:ad:28:2f:fa:eb:86:df:ae:88: 38:74:12:5d:a9:8e:5d:1d:cc:ed:5b:68:2d:76:92:be:f4:2d: 7e:a4:42:e9:29:82:62:61:76:5d:3c:ef:6a:5f:a4:ea:c7:e0: 89:69:22:b6:5e:68:41:93:4e:9c:13:cd:42:35:7f:7d:8a:c0: 62:ad:17:71:73:bc:6e:9a:0b:e2:ce:bc:47:9a:02:d5:02:44: 5c:c3:19:50:65:60:c1:43:7b:04:9e:16:87:60:7b:98:30:eb: e1:33:a1:4f:b6:ec:ed:76:f8:f7:cb:ec:97:5d:c1:04:76:ab: 3e:25:1e:62:b7:b1:95:30:f9:1d:54:55:a1:83:cc:44:cf:0d: 5d:29:9b:a3:ec:c9:49:ca:f5:7d:1d:95:16:cf:b5:e1:87:f9: 1c:bc:50:b8:bc:94:1d:81:b4:ae:55:47:d3:10:7e:b6:53:9e: f4:c0:c9:bd:f6:51:00:37:97:49:10:13:aa:da:75:b0:c6:84: ca:06:5d:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvFAHxG75WgrLAzM5c9Zn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjEzNzRkYTczMTMxNGYwYTA1MTc1ZDI1YjBkODlhNzZm NmUwODEwHhcNMjYwMTExMjIwMTIyWhcNMjYwMTEyMjIwMTIyWjAzMTEwLwYDVQQD EygxMDI5Mzg1M2Q3ZDY2ZThkMGExZGZiMzM3ZmNjMjg0ZTQwYmEzMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xgPME2e8+XS20eXPcBDUVWHKLwR 9HRgIDiE1H3SGHmmABj8OG0xryICbEzcNzVZK/NA57XKedSTXfT2XGWxIFyM1aJo GZSiuowIEu22jSOS2+gwRSSpIqCEHEPfA3Gz/GvqRss7a2d6p/YBQNHomrSBhcK2 dgjcAacQAGrvYWY+q/nekRKdthMfttdsOrIVG7R68oxkIpExGkzn6NGir/XEP/6E adaFlU8UpzyuA+jGvcUE0oqxbTZRm2vTEoMRY5tdQ876Wgups2LtRy1qKxzidt1R MPGefZyP6yZZYS/5TlhshnE1JSw677d8tcB66XOLYyhmV2O1DFooWIviuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBApOFPX1m6NCh37M3/MKE5AujI5MB8GA1UdIwQY MBaAFE0hN02nMTFPCgUXXSWw2Jp29uCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAt ZWIxZWQwYjQ4N2IxLzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAtZWIxZWQwYjQ4N2Ix LzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH8r3G+G ivLBm8LbKRj1JmUjgLT6VW2YeKWk57dPScNRIJGk2RrH2qQGhNo9tvAkI4xOP+E5 cQy3oNFxfWs7rSgv+uuG366IOHQSXamOXR3M7VtoLXaSvvQtfqRC6SmCYmF2XTzv al+k6sfgiWkitl5oQZNOnBPNQjV/fYrAYq0XcXO8bpoL4s68R5oC1QJEXMMZUGVg wUN7BJ4Wh2B7mDDr4TOhT7bs7Xb498vsl13BBHarPiUeYrexlTD5HVRVoYPMRM8N XSmbo+zJScr1fR2VFs+14Yf5HLxQuLyUHYG0rlVH0xB+tlOe9MDJvfZRADeXSRAT qtp1sMaEygZdrg== -----END CERTIFICATE-----Generated at Mon Jan 12 07:57:53 2026 by rpki-client