This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json) Hash identifier: +blNMGlVYIuBMYKUhjzvHozxqvWPlOlX7UQbjuHAXis= Subject key identifier: B7:16:A7:20:FE:1C:19:B8:37:53:BE:4A:1F:92:A6:4C:74:05:B8:FB Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Certificate serial: 019BAEA63BE41317DDD1E36AF1661D85D575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 20:01:28 +0000 Manifest this update: Sun 11 Jan 2026 20:01:28 +0000 Manifest next update: Mon 12 Jan 2026 20:01:28 +0000 Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=) 2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: Byi9JBDb/FE4Lf9uBaffRwFqySuAQm4azUEoCUDFdZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:3b:e4:13:17:dd:d1:e3:6a:f1:66:1d:85:d5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Validity Not Before: Jan 11 20:01:28 2026 GMT Not After : Jan 12 20:01:28 2026 GMT Subject: CN=b716a720fe1c19b83753be4a1f92a64c7405b8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:db:92:12:b4:72:fb:36:17:fd:2d:4b:b0: bf:f1:18:3c:17:83:b3:73:7e:31:71:60:09:39:c7: e2:12:12:76:65:ac:d0:71:11:e2:a6:cf:96:62:b2: 41:eb:9c:5b:3f:19:9b:6a:a0:26:cc:09:43:07:22: a4:75:9a:c0:7c:16:0d:5b:19:4e:d4:9a:2c:57:06: 20:01:d6:8b:77:65:e1:58:5f:45:14:6c:14:6b:64: 04:95:c9:d0:65:b0:4b:77:d5:c6:79:b9:26:6d:c8: bc:4f:fe:cf:4c:26:4d:41:39:d1:db:a8:c4:34:7a: 6b:fa:7a:fc:d3:e1:e1:0e:88:ec:64:a6:96:c1:d3: 77:ad:0a:a9:b4:61:94:ac:94:9a:18:67:67:39:ac: 24:f5:67:3b:1a:cc:85:5e:63:a4:49:3f:80:26:66: eb:d0:5c:58:7b:ec:53:df:68:7f:e9:97:d4:5f:48: 93:88:66:fb:a4:f2:9a:05:5e:e3:aa:e9:80:b6:24: 3e:2d:98:8d:19:06:fe:23:70:96:51:d9:80:51:16: 3e:af:40:2d:3e:05:d7:bc:97:14:f8:64:fe:32:21: ca:05:8f:bb:18:4f:b4:e4:4b:f1:1d:59:48:a2:dd: cb:f7:c6:dd:65:95:36:3f:b0:b6:e6:25:e7:96:b2: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:16:A7:20:FE:1C:19:B8:37:53:BE:4A:1F:92:A6:4C:74:05:B8:FB X509v3 Authority Key Identifier: keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d4:4d:39:b1:b2:ca:3c:bd:cf:7d:3c:c1:95:10:5b:e0:cc: e1:09:df:b0:db:ca:04:06:a6:8a:c4:3a:ab:c0:0b:c1:a1:fb: b0:ca:68:00:7d:5f:bd:3d:7a:88:8d:ad:0d:70:95:96:7e:a5: 66:dc:16:8a:b9:f6:9e:70:71:62:d0:40:9f:ec:40:65:8c:dc: 95:3e:37:33:bf:c6:c2:e9:5a:52:a0:e4:88:30:97:a3:ca:55: aa:38:a0:b6:77:69:99:94:38:3f:ca:bd:70:ef:13:7f:05:c0: fb:40:0a:d8:44:91:ec:1a:48:f4:97:cf:42:57:d2:06:44:03: ec:4e:16:74:d7:ff:81:46:9b:1b:54:72:93:05:12:8b:51:49: a2:b1:f7:15:46:ec:ee:53:60:12:c9:7b:02:d8:b2:8c:f5:54: e9:1d:ba:63:70:dc:f4:36:15:60:e4:4b:5a:fd:2d:88:41:88: aa:c6:49:f0:51:f6:12:67:84:03:17:cb:51:54:31:9e:eb:0c: 10:eb:ec:86:33:2a:80:0e:d4:20:5a:1f:c9:33:fc:15:4b:fa: 89:aa:ab:f1:f2:f0:0b:dc:6a:cc:ea:23:73:5e:df:38:a1:1b: ca:54:fb:80:37:d7:47:04:ed:c6:d0:07:99:ab:b4:f8:3f:d5: 2f:c3:9a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupjvkExfd0eNq8WYdhdV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi ZTJiZDAwHhcNMjYwMTExMjAwMTI4WhcNMjYwMTEyMjAwMTI4WjAzMTEwLwYDVQQD EyhiNzE2YTcyMGZlMWMxOWI4Mzc1M2JlNGExZjkyYTY0Yzc0MDViOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpbbkhK0cvs2F/0tS7C/8Rg8F4Oz c34xcWAJOcfiEhJ2ZazQcRHips+WYrJB65xbPxmbaqAmzAlDByKkdZrAfBYNWxlO 1JosVwYgAdaLd2XhWF9FFGwUa2QElcnQZbBLd9XGebkmbci8T/7PTCZNQTnR26jE NHpr+nr80+HhDojsZKaWwdN3rQqptGGUrJSaGGdnOawk9Wc7GsyFXmOkST+AJmbr 0FxYe+xT32h/6ZfUX0iTiGb7pPKaBV7jqumAtiQ+LZiNGQb+I3CWUdmAURY+r0At PgXXvJcU+GT+MiHKBY+7GE+05EvxHVlIot3L98bdZZU2P7C25iXnlrJdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcWpyD+HBm4N1O+Sh+Spkx0Bbj7MB8GA1UdIwQY MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3 LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNRNObGy yjy9z308wZUQW+DM4QnfsNvKBAamisQ6q8ALwaH7sMpoAH1fvT16iI2tDXCVln6l ZtwWirn2nnBxYtBAn+xAZYzclT43M7/GwulaUqDkiDCXo8pVqjigtndpmZQ4P8q9 cO8TfwXA+0AK2ESR7BpI9JfPQlfSBkQD7E4WdNf/gUabG1RykwUSi1FJorH3FUbs 7lNgEsl7AtiyjPVU6R26Y3Dc9DYVYORLWv0tiEGIqsZJ8FH2EmeEAxfLUVQxnusM EOvshjMqgA7UIFofyTP8FUv6iaqr8fLwC9xqzOojc17fOKEbylT7gDfXRwTtxtAH mau0+D/VL8Oafg== -----END CERTIFICATE-----Generated at Mon Jan 12 00:52:19 2026 by rpki-client