This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json) Hash identifier: kINAF/qBA+mBhYHxkbxe2xcdHLjVbdetWKgGsMiN8Qk= Subject key identifier: DB:E7:CE:AD:AF:B5:6B:CC:F7:DA:C3:BC:E6:52:0F:9C:CF:C2:CF:05 Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87 Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887 Certificate serial: 019BF6883B5DA72AC89A1512B491BC78689B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft Manifest number: 0DF1 Signing time: Sun 25 Jan 2026 19:01:21 +0000 Manifest this update: Sun 25 Jan 2026 19:01:21 +0000 Manifest next update: Mon 26 Jan 2026 19:01:21 +0000 Files and hashes: 1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=) 2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: Cma7oyCkXOOjPw3SwZR8x203ez7XMkeWKcATa3cK3iU=) 3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:3b:5d:a7:2a:c8:9a:15:12:b4:91:bc:78:68:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887 Validity Not Before: Jan 25 19:01:21 2026 GMT Not After : Jan 26 19:01:21 2026 GMT Subject: CN=dbe7ceadafb56bccf7dac3bce6520f9ccfc2cf05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:85:9a:db:39:af:20:7e:79:40:0b:37:02: 55:fd:08:df:a7:19:f0:3f:19:0a:cb:12:23:15:ea: d1:e7:d1:17:a2:1f:fe:82:64:d5:15:05:03:46:ad: 93:69:30:f7:7d:a4:93:46:99:9b:70:87:10:16:0a: c6:1a:be:77:f2:b2:cc:15:68:08:ab:44:42:1e:c5: 1c:8b:ac:94:96:aa:08:c5:0d:0f:dc:39:d3:dd:03: d7:ad:bf:9d:83:50:a2:c2:d3:dd:d6:b7:03:37:dd: 24:c2:3d:73:54:9a:e4:24:5e:24:e7:0f:70:b5:05: c4:19:03:f8:1f:57:03:e8:57:38:b9:dd:47:e3:e8: ff:f6:11:17:ad:a2:57:e8:b6:dd:0c:61:7e:18:f9: 11:65:84:35:cb:c3:5f:7e:b6:3d:19:c9:42:79:4b: e3:53:fb:d9:eb:dd:43:34:fd:cd:88:82:98:8d:48: 50:27:3e:3e:9b:f6:53:bf:7e:f5:27:97:57:6a:a0: 0e:76:32:b3:db:e8:bf:22:83:f9:b8:3a:be:f1:d0: 94:b3:6d:6f:e3:12:b3:ca:6a:5b:34:1b:2d:ec:e2: a4:5d:e8:e3:0b:fb:aa:1b:e1:43:5f:c8:40:23:4c: ea:8a:48:46:8d:23:bf:74:9b:93:62:7c:37:77:0f: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E7:CE:AD:AF:B5:6B:CC:F7:DA:C3:BC:E6:52:0F:9C:CF:C2:CF:05 X509v3 Authority Key Identifier: keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ff:97:e7:89:d5:9a:9c:ca:0e:96:37:e3:4c:05:db:f1:f8: d2:48:69:f7:61:67:79:64:21:74:76:c5:aa:48:33:49:b8:73: 2b:15:8f:3f:2e:e4:a0:82:17:12:76:81:1f:d7:cd:dc:9a:61: 1a:9f:c2:0d:54:53:ab:41:d6:ac:af:a8:96:f2:42:59:5c:37: 84:af:1e:5c:fd:a8:53:d5:c1:15:3e:92:23:99:39:bd:0e:f5: c4:fe:7b:7d:3b:2c:92:fa:13:5f:03:39:59:b1:d5:46:5b:35: 65:1f:4a:a2:8f:7a:5d:ac:7c:7a:9d:20:74:47:63:fc:4c:41: 8a:ea:1e:18:f8:a8:d3:25:ea:8e:9a:97:5d:d7:5a:86:b7:05: 17:3c:1f:ea:74:87:3b:15:7e:55:38:ba:59:93:ba:78:6e:8e: 38:6a:99:0c:d7:43:60:0e:6d:b9:81:30:70:a9:dd:41:51:66: c4:83:f2:60:ea:66:52:ab:e6:c9:2a:09:e6:a9:ed:7f:70:3f: 3a:88:4a:4d:07:ea:0f:bf:ea:f7:01:89:30:62:b2:78:bd:8c: c1:b3:de:e0:60:d7:27:5e:5f:80:9c:66:d9:9b:54:4a:fd:e4: 0e:36:42:74:19:e2:90:67:d5:5c:d0:5f:bb:ef:f8:74:93:56: 4d:83:33:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iDtdpyrImhUStJG8eGibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl ZDE4ODcwHhcNMjYwMTI1MTkwMTIxWhcNMjYwMTI2MTkwMTIxWjAzMTEwLwYDVQQD EyhkYmU3Y2VhZGFmYjU2YmNjZjdkYWMzYmNlNjUyMGY5Y2NmYzJjZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyOFmts5ryB+eUALNwJV/Qjfpxnw PxkKyxIjFerR59EXoh/+gmTVFQUDRq2TaTD3faSTRpmbcIcQFgrGGr538rLMFWgI q0RCHsUci6yUlqoIxQ0P3DnT3QPXrb+dg1CiwtPd1rcDN90kwj1zVJrkJF4k5w9w tQXEGQP4H1cD6Fc4ud1H4+j/9hEXraJX6LbdDGF+GPkRZYQ1y8NffrY9GclCeUvj U/vZ691DNP3NiIKYjUhQJz4+m/ZTv371J5dXaqAOdjKz2+i/IoP5uDq+8dCUs21v 4xKzympbNBst7OKkXejjC/uqG+FDX8hAI0zqikhGjSO/dJuTYnw3dw9l2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvnzq2vtWvM99rDvOZSD5zPws8FMB8GA1UdIwQY MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt MGQxZDE3NGM0MzUxLzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP+X54nV mpzKDpY340wF2/H40khp92FneWQhdHbFqkgzSbhzKxWPPy7koIIXEnaBH9fN3Jph Gp/CDVRTq0HWrK+olvJCWVw3hK8eXP2oU9XBFT6SI5k5vQ71xP57fTsskvoTXwM5 WbHVRls1ZR9Koo96Xax8ep0gdEdj/ExBiuoeGPio0yXqjpqXXddahrcFFzwf6nSH OxV+VTi6WZO6eG6OOGqZDNdDYA5tuYEwcKndQVFmxIPyYOpmUqvmySoJ5qntf3A/ OohKTQfqD7/q9wGJMGKyeL2MwbPe4GDXJ15fgJxm2ZtUSv3kDjZCdBnikGfVXNBf u+/4dJNWTYMzAA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:49 2026 by rpki-client