This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json) Hash identifier: u6fcy6NxF+Uh1/LltSU9cQ0PdQRADMhyhX4J2OjbBRU= Subject key identifier: 9E:57:FB:27:A1:D4:EF:ED:ED:8E:9E:AD:B3:5B:D3:F6:94:B9:83:1A Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Certificate serial: 019B78CA8120D2521D8DE0E0ABEA0C060F31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft Manifest number: 0EA3 Signing time: Thu 01 Jan 2026 09:01:35 +0000 Manifest this update: Thu 01 Jan 2026 09:01:35 +0000 Manifest next update: Fri 02 Jan 2026 09:01:35 +0000 Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: JUDa9OcXZXb17LqFOrSbjIR8wR2uxb1D5YsJAFt5X0Q=) 2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:81:20:d2:52:1d:8d:e0:e0:ab:ea:0c:06:0f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Validity Not Before: Jan 1 09:01:35 2026 GMT Not After : Jan 2 09:01:35 2026 GMT Subject: CN=9e57fb27a1d4efeded8e9eadb35bd3f694b9831a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:37:5b:27:bd:d6:3d:d6:38:e7:e5:ea:65: 93:8b:f1:20:4d:85:73:53:77:68:a6:6c:64:00:16: f1:bc:19:71:83:7a:0e:ca:11:95:74:58:9c:d1:a9: d7:b0:f1:4b:ec:24:ed:20:d7:ab:c6:9e:40:98:c5: be:37:78:7a:90:4c:f5:af:45:7f:02:2c:5d:57:aa: 2b:3e:b1:c0:95:8a:d8:6f:79:35:96:33:57:29:0a: 24:04:8e:64:11:ad:13:6f:78:78:5e:cd:45:d6:e0: b4:f7:8c:7c:55:ad:26:28:b3:2d:ec:54:e8:28:dd: e2:75:e3:41:fb:03:e1:41:71:c7:c1:93:ac:1a:97: 41:22:38:27:ae:83:f1:7c:56:80:fb:5a:9e:4c:7b: 04:9d:f8:23:4a:ba:4d:ff:4f:69:3e:13:22:f6:a3: 30:10:5e:1e:47:57:b0:3b:d2:6d:7c:d5:63:56:c0: 13:3f:f1:94:c5:8c:86:12:50:76:d3:26:a9:7b:47: 95:10:49:24:dc:2c:b7:95:f0:10:6b:0e:16:16:c9: e0:fb:b4:67:4b:b5:d7:9c:37:76:fe:eb:a9:bd:53: 86:d1:2a:f2:8f:14:27:8a:9a:dc:36:81:e8:ec:ef: 4c:0a:c9:08:ab:02:9c:6c:6a:87:4c:b5:49:b8:39: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:FB:27:A1:D4:EF:ED:ED:8E:9E:AD:B3:5B:D3:F6:94:B9:83:1A X509v3 Authority Key Identifier: keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4b:86:e7:27:ff:c7:07:2c:4a:60:b2:c5:3d:3c:c4:f4:ce: 6d:7d:cc:15:cf:8e:9a:fc:af:e1:03:f0:0c:b6:b6:45:9c:84: 2b:fd:49:2d:e0:0e:66:a8:92:1f:f1:9e:b9:46:36:0c:77:7c: 1d:b6:b9:30:da:6e:ff:47:0e:8b:c8:4b:08:17:05:77:cb:1e: 1b:2d:ce:7b:70:4a:ce:9e:7f:e7:c3:ad:56:50:47:82:ee:62: 33:41:25:9e:a3:d8:d8:d7:87:92:f8:ef:4e:c3:1e:0c:f7:c5: ef:0f:bd:d2:ac:60:6e:34:40:79:e7:1b:f2:e4:3c:5d:51:39: cc:3e:ef:30:68:ac:1f:3a:97:8b:4a:b9:d8:55:53:dd:60:02: ab:d1:fe:fc:48:da:d7:7c:a2:eb:85:7e:80:41:70:31:45:c5: 34:9c:cc:b3:a6:86:3c:72:4f:b0:af:48:55:85:43:6e:2a:af: 6c:c8:46:98:f1:67:d3:79:2f:f6:ba:8e:09:4d:1e:4b:af:cb: 14:59:92:0b:6b:a8:65:e1:d8:1b:2e:72:f3:5b:dd:2a:29:b2: f8:b1:11:89:fd:51:a9:bf:82:30:48:a6:06:3f:d9:31:a2:8e: 55:b7:ae:45:39:1b:23:65:89:c9:bf:76:86:02:3b:cd:09:56: 31:03:67:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yoEg0lIdjeDgq+oMBg8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3 YjhiNGYwHhcNMjYwMTAxMDkwMTM1WhcNMjYwMTAyMDkwMTM1WjAzMTEwLwYDVQQD Eyg5ZTU3ZmIyN2ExZDRlZmVkZWQ4ZTllYWRiMzViZDNmNjk0Yjk4MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6E3Wye91j3WOOfl6mWTi/EgTYVz U3dopmxkABbxvBlxg3oOyhGVdFic0anXsPFL7CTtINerxp5AmMW+N3h6kEz1r0V/ AixdV6orPrHAlYrYb3k1ljNXKQokBI5kEa0Tb3h4Xs1F1uC094x8Va0mKLMt7FTo KN3ideNB+wPhQXHHwZOsGpdBIjgnroPxfFaA+1qeTHsEnfgjSrpN/09pPhMi9qMw EF4eR1ewO9JtfNVjVsATP/GUxYyGElB20yape0eVEEkk3Cy3lfAQaw4WFsng+7Rn S7XXnDd2/uupvVOG0SryjxQniprcNoHo7O9MCskIqwKcbGqHTLVJuDksnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5X+yeh1O/t7Y6erbNb0/aUuYMaMB8GA1UdIwQY MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0uG5yf/ xwcsSmCyxT08xPTObX3MFc+Omvyv4QPwDLa2RZyEK/1JLeAOZqiSH/GeuUY2DHd8 Hba5MNpu/0cOi8hLCBcFd8seGy3Oe3BKzp5/58OtVlBHgu5iM0ElnqPY2NeHkvjv TsMeDPfF7w+90qxgbjRAeecb8uQ8XVE5zD7vMGisHzqXi0q52FVT3WACq9H+/Eja 13yi64V+gEFwMUXFNJzMs6aGPHJPsK9IVYVDbiqvbMhGmPFn03kv9rqOCU0eS6/L FFmSC2uoZeHYGy5y81vdKimy+LERif1Rqb+CMEimBj/ZMaKOVbeuRTkbI2WJyb92 hgI7zQlWMQNnMw== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:23 2026 by rpki-client