This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft File: TpisyG9BxHFbEMHdUmMcMqgZSjA.mft (raw, json) Hash identifier: gS1B4MmIUMz6j121k9rNheEvTVSrtrTYKIgbhvkkM5g= Subject key identifier: C1:DA:BA:F3:25:FC:BE:22:57:6D:7F:7F:A9:55:EC:E6:6B:BB:01:36 Authority key identifier: 4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30 Certificate issuer: /CN=4e98acc86f41c4715b10c1dd52631c32a8194a30 Certificate serial: 019BA2341267C0FBD16E69A7C7E22CDCD03D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft Manifest number: 12A6 Signing time: Fri 09 Jan 2026 10:01:19 +0000 Manifest this update: Fri 09 Jan 2026 10:01:19 +0000 Manifest next update: Sat 10 Jan 2026 10:01:19 +0000 Files and hashes: 1: TpisyG9BxHFbEMHdUmMcMqgZSjA.crl (hash: S5bnrrMtutYrgIvCgH5PTrCfq8wfGK/c6QpDHJevvt0=) 2: h6PxJ4P9fw2mPiB1bzbloLD9ySY.roa (hash: +EZ5CMikkFb7fdg5EIxG+t8LZY1EVs5DyG4OFvuf94U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:34:12:67:c0:fb:d1:6e:69:a7:c7:e2:2c:dc:d0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e98acc86f41c4715b10c1dd52631c32a8194a30 Validity Not Before: Jan 9 10:01:19 2026 GMT Not After : Jan 10 10:01:19 2026 GMT Subject: CN=c1dabaf325fcbe22576d7f7fa955ece66bbb0136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:19:29:54:51:46:dc:7b:d9:c5:d8:d6:e0: a6:71:c3:bc:20:5c:57:7e:bf:6b:20:10:3b:57:29: 93:48:9b:3a:c5:f5:2e:7b:5e:1c:c1:83:e9:4e:ca: a3:13:73:bf:5c:66:09:dc:8c:df:91:66:fc:59:e9: 7b:da:05:69:a6:b2:05:af:77:07:52:26:0e:75:ed: 7a:f2:72:ee:0d:52:1b:19:d4:92:8d:e1:12:3e:76: e5:8b:25:33:b2:b4:17:04:98:8e:d4:03:45:6e:18: 1d:c9:5f:42:c9:d0:5a:57:ca:1c:7a:23:e6:39:0c: a7:79:e3:8f:2f:c2:22:3a:55:0b:eb:b0:be:7b:77: b8:a3:a4:7d:e0:a3:12:e1:b2:97:2d:e0:e0:72:67: 43:e6:97:c9:82:0c:1a:ee:eb:92:16:e7:f6:f7:c9: 11:a2:aa:41:79:04:4f:3f:1c:ec:ed:e7:19:ed:5e: 02:3e:f3:bd:16:09:01:46:cf:46:9d:2d:2d:08:08: 46:c2:04:9a:4c:76:67:bd:73:c3:28:0b:ec:de:3c: 48:5e:7c:79:4c:52:bb:fa:83:a9:70:ea:f9:b5:3a: e3:1e:9d:3d:fa:89:d3:98:b2:2d:ed:aa:08:16:80: 05:e6:2d:dd:50:5a:c6:d4:aa:b8:92:42:75:65:ed: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:BA:F3:25:FC:BE:22:57:6D:7F:7F:A9:55:EC:E6:6B:BB:01:36 X509v3 Authority Key Identifier: keyid:4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:89:77:3f:38:6c:b3:5d:a9:d1:c9:94:24:0b:8c:ed:8b:aa: 83:51:34:28:7c:ac:55:58:95:cd:2e:31:6b:da:68:b3:ae:52: d5:d5:fe:ce:a1:00:7d:95:a3:6d:42:a6:83:a9:04:1c:06:65: b5:9d:9f:49:bd:1b:ab:0a:b5:51:7f:23:99:00:8e:2a:14:a3: 1c:9c:b5:b4:37:0a:27:2e:9f:31:d9:fb:ee:ae:bb:1e:88:1d: 0d:e4:cd:9e:55:bb:16:df:e4:fd:d2:86:28:e1:68:21:a3:ec: 2e:43:3d:42:ae:79:7b:68:73:d0:73:8c:62:35:ae:eb:95:2b: db:1d:01:f4:62:b1:bd:a6:af:65:2d:07:a6:ce:01:c7:25:f4: 07:93:0d:67:00:c4:a5:f0:fb:7b:2b:ca:ac:02:41:f1:2e:5c: 83:9c:27:c7:e6:d7:fd:84:47:b4:17:75:f3:59:8d:08:84:73: e2:70:f5:d3:90:66:08:f6:a1:ac:02:a0:3a:7f:d1:28:28:eb: 46:03:e6:f1:3d:aa:8f:fb:bc:8d:54:53:53:7f:ad:c0:84:76: fa:0e:f6:18:3e:a6:fa:81:25:f8:f2:db:e5:38:58:31:38:7b: 5f:c1:e4:46:b2:b0:6c:ad:ec:08:b9:28:e8:2a:83:5f:b9:85: 94:5e:39:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiNBJnwPvRbmmnx+Is3NA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOThhY2M4NmY0MWM0NzE1YjEwYzFkZDUyNjMxYzMyYTgx OTRhMzAwHhcNMjYwMTA5MTAwMTE5WhcNMjYwMTEwMTAwMTE5WjAzMTEwLwYDVQQD EyhjMWRhYmFmMzI1ZmNiZTIyNTc2ZDdmN2ZhOTU1ZWNlNjZiYmIwMTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yAZKVRRRtx72cXY1uCmccO8IFxX fr9rIBA7VymTSJs6xfUue14cwYPpTsqjE3O/XGYJ3IzfkWb8Wel72gVpprIFr3cH UiYOde168nLuDVIbGdSSjeESPnbliyUzsrQXBJiO1ANFbhgdyV9CydBaV8oceiPm OQyneeOPL8IiOlUL67C+e3e4o6R94KMS4bKXLeDgcmdD5pfJggwa7uuSFuf298kR oqpBeQRPPxzs7ecZ7V4CPvO9FgkBRs9GnS0tCAhGwgSaTHZnvXPDKAvs3jxIXnx5 TFK7+oOpcOr5tTrjHp09+onTmLIt7aoIFoAF5i3dUFrG1Kq4kkJ1Ze0CfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHauvMl/L4iV21/f6lV7OZruwE2MB8GA1UdIwQY MBaAFE6YrMhvQcRxWxDB3VJjHDKoGUowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgt NDkxZDMwZjRhMmM4LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgtNDkxZDMwZjRhMmM4 LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYl3Pzhs s12p0cmUJAuM7Yuqg1E0KHysVViVzS4xa9pos65S1dX+zqEAfZWjbUKmg6kEHAZl tZ2fSb0bqwq1UX8jmQCOKhSjHJy1tDcKJy6fMdn77q67HogdDeTNnlW7Ft/k/dKG KOFoIaPsLkM9Qq55e2hz0HOMYjWu65Ur2x0B9GKxvaavZS0Hps4BxyX0B5MNZwDE pfD7eyvKrAJB8S5cg5wnx+bX/YRHtBd181mNCIRz4nD105BmCPahrAKgOn/RKCjr RgPm8T2qj/u8jVRTU3+twIR2+g72GD6m+oEl+PLb5ThYMTh7X8HkRrKwbK3sCLko 6CqDX7mFlF45vA== -----END CERTIFICATE-----Generated at Fri Jan 9 16:29:27 2026 by rpki-client