This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft File: txC5vh4ts3SC4fjyWzX9pTgNMsY.mft (raw, json) Hash identifier: TribFyQ/5bh+vGFEsMx0T+na2rg4tHzeRQRwYp6AzvU= Subject key identifier: 97:6C:CF:A8:0F:08:D0:7C:91:BE:BC:7B:5B:07:E6:E8:AA:9C:0E:D9 Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6 Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6 Certificate serial: 019BB35ED63267B1223B4EFBB441E4E17130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft Manifest number: 1490 Signing time: Mon 12 Jan 2026 18:01:35 +0000 Manifest this update: Mon 12 Jan 2026 18:01:35 +0000 Manifest next update: Tue 13 Jan 2026 18:01:35 +0000 Files and hashes: 1: Nqvx372xUmimo9ZdUTyVh5yr2QM.roa (hash: 9UD1Q1TZiTOZORrcHimyQBc+ib1NndvdcOScKV3bLr4=) 2: txC5vh4ts3SC4fjyWzX9pTgNMsY.crl (hash: h9FR9QtFYJERXQ0kiICPi7Qt0UQQEW3FqAM4qw8uM5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:5e:d6:32:67:b1:22:3b:4e:fb:b4:41:e4:e1:71:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6 Validity Not Before: Jan 12 18:01:35 2026 GMT Not After : Jan 13 18:01:35 2026 GMT Subject: CN=976ccfa80f08d07c91bebc7b5b07e6e8aa9c0ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:78:5f:81:50:b0:cc:32:f7:04:a9:e4:70: c8:cf:91:57:28:93:0a:48:2b:49:fd:3a:43:9e:a9: 2f:a7:4d:e1:65:6f:98:3b:53:b3:79:b9:36:f1:c1: 3a:fa:bb:0c:f5:5f:45:de:50:50:4d:05:e3:0d:4c: a7:cc:39:d1:2a:6d:eb:78:9a:5f:ea:eb:0b:20:8d: 60:98:57:7d:bf:48:78:05:e4:4a:b0:fa:7e:c1:49: 3e:3b:65:16:f1:15:f6:19:29:47:51:cd:6e:cf:e4: 2d:00:9a:a8:a1:a6:58:8b:99:5a:c6:f0:c8:b8:ea: 7e:6a:14:66:1c:45:fd:c3:a9:80:a1:fc:80:12:eb: ad:95:ed:47:ba:a1:2f:c0:ea:73:fa:84:57:5d:49: da:a2:4e:35:d9:61:9f:b5:05:9e:dd:65:b2:13:70: 70:26:bd:f5:c8:cd:50:2f:ef:b6:03:aa:3c:19:22: d4:0e:35:31:c7:a7:cb:95:5b:33:ce:d0:92:92:c8: eb:84:99:4d:bf:fd:42:80:23:2b:e5:04:bf:2f:21: 4e:9c:35:05:90:7f:28:87:68:f0:0d:1a:dd:60:24: 8f:2c:03:1a:44:dc:0d:1f:11:40:25:bf:88:c6:5f: 86:1e:25:5c:73:5f:c5:92:b7:f6:93:48:0d:2d:e3: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:CF:A8:0F:08:D0:7C:91:BE:BC:7B:5B:07:E6:E8:AA:9C:0E:D9 X509v3 Authority Key Identifier: keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:7a:50:c8:07:ae:e6:13:47:c0:e1:f5:56:a8:f1:04:75:8b: 64:b2:ea:6c:a8:c1:34:f8:b4:df:a2:51:0d:ba:1a:d0:39:58: 09:80:9f:97:ef:e1:67:b6:88:c1:86:45:11:32:ab:10:3c:e0: 06:31:a2:10:97:2d:c3:fe:b8:a3:12:29:01:2e:5e:99:78:23: 1a:08:8e:eb:a5:e8:2c:fb:f0:02:20:0c:01:52:0e:68:cf:32: 57:ac:37:ab:49:60:00:fb:b0:3c:9c:bf:36:d5:fd:d9:94:ee: 54:29:b1:67:8d:7b:40:8a:38:a0:4f:7d:1d:f4:49:e3:c5:75: 08:84:cc:67:58:51:e4:7c:9f:8c:df:f2:71:d7:e4:79:ec:47: 8a:41:cb:ad:25:46:a6:d5:cf:4c:51:99:b5:8b:da:ad:3d:ef: db:bb:75:7b:2b:5c:a9:5c:7f:d5:9f:ef:3d:ee:2b:c0:b6:66: ef:96:b2:ef:18:b3:af:ac:a1:87:cb:b8:80:e0:15:ae:e7:1f: c4:e7:88:97:a4:9f:1b:3f:4a:3e:dd:3a:46:8e:69:61:c8:83: 2e:e3:e0:42:d1:3f:b6:f6:83:d6:a9:17:3a:c1:1f:ce:cb:41: 62:79:3c:ab:e6:47:22:d2:b4:de:bd:48:85:8f:b7:55:9e:35: 67:ce:a1:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzXtYyZ7EiO077tEHk4XEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTBiOWJlMWUyZGIzNzQ4MmUxZjhmMjViMzVmZGE1Mzgw ZDMyYzYwHhcNMjYwMTEyMTgwMTM1WhcNMjYwMTEzMTgwMTM1WjAzMTEwLwYDVQQD Eyg5NzZjY2ZhODBmMDhkMDdjOTFiZWJjN2I1YjA3ZTZlOGFhOWMwZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z94X4FQsMwy9wSp5HDIz5FXKJMK SCtJ/TpDnqkvp03hZW+YO1Ozebk28cE6+rsM9V9F3lBQTQXjDUynzDnRKm3reJpf 6usLII1gmFd9v0h4BeRKsPp+wUk+O2UW8RX2GSlHUc1uz+QtAJqooaZYi5laxvDI uOp+ahRmHEX9w6mAofyAEuutle1HuqEvwOpz+oRXXUnaok412WGftQWe3WWyE3Bw Jr31yM1QL++2A6o8GSLUDjUxx6fLlVszztCSksjrhJlNv/1CgCMr5QS/LyFOnDUF kH8oh2jwDRrdYCSPLAMaRNwNHxFAJb+Ixl+GHiVcc1/Fkrf2k0gNLeO/YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdsz6gPCNB8kb68e1sH5uiqnA7ZMB8GA1UdIwQY MBaAFLcQub4eLbN0guH48ls1/aU4DTLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhDNXZoNHRzM1NDNGZqeVd6WDlwVGdOTXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81Nzg3ODgtMjUwZi00N2YyLWJkM2Ut MjcyY2NjMTdkZmVhLzEvdHhDNXZoNHRzM1NDNGZqeVd6WDlwVGdOTXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81Nzg3ODgtMjUwZi00N2YyLWJkM2UtMjcyY2NjMTdkZmVh LzEvdHhDNXZoNHRzM1NDNGZqeVd6WDlwVGdOTXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXpQyAeu 5hNHwOH1VqjxBHWLZLLqbKjBNPi036JRDboa0DlYCYCfl+/hZ7aIwYZFETKrEDzg BjGiEJctw/64oxIpAS5emXgjGgiO66XoLPvwAiAMAVIOaM8yV6w3q0lgAPuwPJy/ NtX92ZTuVCmxZ417QIo4oE99HfRJ48V1CITMZ1hR5HyfjN/ycdfkeexHikHLrSVG ptXPTFGZtYvarT3v27t1eytcqVx/1Z/vPe4rwLZm75ay7xizr6yhh8u4gOAVrucf xOeIl6SfGz9KPt06Ro5pYciDLuPgQtE/tvaD1qkXOsEfzstBYnk8q+ZHItK03r1I hY+3VZ41Z86hfw== -----END CERTIFICATE-----Generated at Tue Jan 13 04:56:20 2026 by rpki-client