This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft File: toF3Ytn8jxGwHPUjS25DHPvsG80.mft (raw, json) Hash identifier: k63fdus/NS5gJZsYJDyrYOe6xY3IWFOGmzWEFa/LtKQ= Subject key identifier: 08:2D:8F:98:FF:2E:57:8C:55:57:C4:51:51:9D:DA:38:5F:9A:C1:5A Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD Certificate issuer: /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd Certificate serial: 019BAFB974CAF1B58C408DBBEFF758E057F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft Manifest number: 0B24 Signing time: Mon 12 Jan 2026 01:02:05 +0000 Manifest this update: Mon 12 Jan 2026 01:02:05 +0000 Manifest next update: Tue 13 Jan 2026 01:02:05 +0000 Files and hashes: 1: TCoBlMxDiguWCq2X4av9S4gQXEQ.roa (hash: 6msXgBjxx6Yi7xW5PUuzbdt4jO41s2SyXCfLVxtofm0=) 2: toF3Ytn8jxGwHPUjS25DHPvsG80.crl (hash: BogSvCj6+UghXlkxHRJWhZxXiGgQYM80h3ezvoryRYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b9:74:ca:f1:b5:8c:40:8d:bb:ef:f7:58:e0:57:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd Validity Not Before: Jan 12 01:02:05 2026 GMT Not After : Jan 13 01:02:05 2026 GMT Subject: CN=082d8f98ff2e578c5557c451519dda385f9ac15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:58:41:c9:d5:fd:0c:65:19:c5:7c:bf:1c: 2b:28:39:64:67:41:a2:64:44:eb:2c:3a:af:ee:69: b6:b1:5c:6b:58:54:ca:86:f7:c2:63:2f:69:18:da: f9:65:86:78:09:2b:be:9d:f2:a7:37:44:0c:fa:29: 44:76:89:69:bd:7e:51:7e:d8:d4:4e:da:75:d4:74: 67:d8:16:94:b1:d3:73:92:86:22:fa:59:27:41:21: a9:e4:53:23:5a:a9:54:e5:82:c6:60:82:90:dd:b9: 39:64:e6:2a:98:43:e7:13:d1:81:0c:e0:46:82:1f: 4b:a5:55:3c:16:ac:6f:57:2d:33:95:e6:cb:1d:1f: 21:63:b6:87:24:e0:be:5f:ed:85:2f:6d:47:3f:5f: 91:45:53:16:91:bf:2e:2a:bc:dd:2b:29:8c:c3:86: 3e:5e:c0:06:ed:bc:fd:89:8b:04:a4:46:7e:30:79: 38:04:1c:d7:c2:3d:8b:c0:b0:99:42:c5:64:c5:ca: 8c:2a:5d:39:de:4f:77:34:a3:57:59:2e:07:90:4e: 22:a2:b7:09:e9:9e:a3:30:43:e0:3b:1b:62:97:ba: 98:60:c8:77:7f:1f:ce:06:2a:5e:04:fe:13:a7:98: 47:82:ee:a4:39:9a:1d:56:f6:4d:ee:cb:8a:1e:f7: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2D:8F:98:FF:2E:57:8C:55:57:C4:51:51:9D:DA:38:5F:9A:C1:5A X509v3 Authority Key Identifier: keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:37:9e:2e:b0:85:d4:a5:ea:64:90:c1:9f:cf:52:0d:41: 73:74:04:c8:35:76:7b:98:24:2e:de:c1:a8:5e:fc:d0:f7:fb: 94:73:9c:2f:f5:eb:cc:4c:b6:fc:ba:43:ca:0f:f0:e6:e6:70: 2e:eb:ad:12:3f:c1:57:38:70:e4:9c:97:16:e4:c1:15:ce:6b: a5:95:93:69:57:ce:ab:92:9f:29:8c:f5:5f:d5:5c:70:45:61: 90:d8:1a:db:a8:b4:10:80:ab:c3:a1:1e:68:46:3f:7d:ff:a8: 87:63:f1:f1:1e:21:a9:05:48:60:18:1f:ca:a2:c9:22:f8:c8: 72:94:cd:35:22:c9:a5:8f:ab:96:08:e7:e2:9e:76:4a:f0:5e: 4e:5a:15:b8:db:f8:07:2e:9e:c8:68:54:03:58:b6:20:c7:d7: d7:7a:d2:08:4f:b4:a8:fe:d3:49:6a:3c:46:1d:cc:a1:43:8b: fd:a6:85:7c:1b:49:8f:2d:5a:a3:ec:a2:0a:29:5f:ad:f8:d1: 2f:ac:dd:a2:66:e0:4e:f1:0c:43:2f:67:d6:76:e6:62:31:ce: 21:3c:ea:92:f9:a1:8d:5b:52:de:7f:c6:f8:f7:d2:8a:64:18: 9d:8f:59:47:0b:8f:fd:79:cc:4d:67:54:75:30:1f:f8:44:a0: 14:b9:79:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuXTK8bWMQI277/dY4FfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODE3NzYyZDlmYzhmMTFiMDFjZjUyMzRiNmU0MzFjZmJl YzFiY2QwHhcNMjYwMTEyMDEwMjA1WhcNMjYwMTEzMDEwMjA1WjAzMTEwLwYDVQQD EygwODJkOGY5OGZmMmU1NzhjNTU1N2M0NTE1MTlkZGEzODVmOWFjMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziNYQcnV/QxlGcV8vxwrKDlkZ0Gi ZETrLDqv7mm2sVxrWFTKhvfCYy9pGNr5ZYZ4CSu+nfKnN0QM+ilEdolpvX5RftjU Ttp11HRn2BaUsdNzkoYi+lknQSGp5FMjWqlU5YLGYIKQ3bk5ZOYqmEPnE9GBDOBG gh9LpVU8FqxvVy0zlebLHR8hY7aHJOC+X+2FL21HP1+RRVMWkb8uKrzdKymMw4Y+ XsAG7bz9iYsEpEZ+MHk4BBzXwj2LwLCZQsVkxcqMKl053k93NKNXWS4HkE4iorcJ 6Z6jMEPgOxtil7qYYMh3fx/OBipeBP4Tp5hHgu6kOZodVvZN7suKHvdvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgtj5j/LleMVVfEUVGd2jhfmsFaMB8GA1UdIwQY MBaAFLaBd2LZ/I8RsBz1I0tuQxz77BvNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQt ZDNmMjY1YWQ1MTRmLzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQtZDNmMjY1YWQ1MTRm LzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJE3ni6w hdSl6mSQwZ/PUg1Bc3QEyDV2e5gkLt7BqF780Pf7lHOcL/XrzEy2/LpDyg/w5uZw LuutEj/BVzhw5JyXFuTBFc5rpZWTaVfOq5KfKYz1X9VccEVhkNga26i0EICrw6Ee aEY/ff+oh2Px8R4hqQVIYBgfyqLJIvjIcpTNNSLJpY+rlgjn4p52SvBeTloVuNv4 By6eyGhUA1i2IMfX13rSCE+0qP7TSWo8Rh3MoUOL/aaFfBtJjy1ao+yiCilfrfjR L6zdombgTvEMQy9n1nbmYjHOITzqkvmhjVtS3n/G+PfSimQYnY9ZRwuP/XnMTWdU dTAf+ESgFLl5UA== -----END CERTIFICATE-----Generated at Mon Jan 12 09:41:48 2026 by rpki-client