This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json) Hash identifier: E7VFvVDQXbNsO+CUu9h4iRImB3sA1mYvUc3+rQ6B4xY= Subject key identifier: 3B:42:29:9D:65:55:A3:B2:29:8B:CB:78:C9:76:B4:F9:B8:65:D0:F7 Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Certificate serial: 019BF7D1DBC07EF515171C0DB979C06FD7D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 01:01:24 +0000 Manifest this update: Mon 26 Jan 2026 01:01:24 +0000 Manifest next update: Tue 27 Jan 2026 01:01:24 +0000 Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: x+Ftu2JFHRYZJykQEjym+hLOj0gEnMHSuJI5uc3LuOg=) 2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:db:c0:7e:f5:15:17:1c:0d:b9:79:c0:6f:d7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6 Validity Not Before: Jan 26 01:01:24 2026 GMT Not After : Jan 27 01:01:24 2026 GMT Subject: CN=3b42299d6555a3b2298bcb78c976b4f9b865d0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:72:10:87:15:37:2d:e3:06:87:88:5c:e5: 0b:ec:28:28:c7:f7:df:68:fd:f0:dd:96:d1:ea:8d: a4:41:9c:67:3c:7f:7c:7d:c1:09:31:97:16:f1:e0: 0b:0c:47:73:41:a2:4a:98:4b:a7:1a:fa:0b:6b:84: cd:a5:e5:37:de:2b:a5:76:b8:cd:88:0c:b8:2e:d2: 7a:6a:ea:c5:a3:01:ee:ec:89:80:f7:f3:d1:a3:e3: 46:2d:43:73:42:24:21:83:2d:76:f8:aa:93:66:d8: 02:f2:f2:9c:e8:78:a1:65:fc:1d:33:42:48:04:36: c1:c6:94:47:e5:19:c3:5d:71:3c:4c:e7:31:b2:ac: 35:ee:d1:84:15:15:b9:35:6f:8d:6f:b1:48:5f:a5: 18:7e:fc:77:57:0b:f6:c4:aa:b3:eb:2d:fc:a5:63: 32:1c:b1:8b:38:24:b8:f0:2b:d8:98:df:ca:54:6b: 84:2e:8a:d8:e2:0f:f5:4d:6b:36:65:77:c7:6b:6a: 70:74:54:09:4c:3f:59:d0:ca:8d:b0:76:33:53:f1: dc:e7:bb:bb:c9:ae:cf:70:90:07:6f:ba:9b:42:64: 83:dc:fa:20:c3:58:c3:1d:f5:32:b4:78:f6:fb:d6: 18:8b:53:1e:30:86:d6:17:64:da:eb:4c:95:5a:e3: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:42:29:9D:65:55:A3:B2:29:8B:CB:78:C9:76:B4:F9:B8:65:D0:F7 X509v3 Authority Key Identifier: keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:43:84:83:8c:d9:a3:69:69:da:a2:15:a8:a1:0c:00:90:1c: 81:66:e1:2d:ea:7d:b6:dd:db:52:5a:df:6a:5c:fd:22:96:10: b5:fd:fd:af:dc:a2:d7:f1:86:bd:1f:29:64:c8:5c:9d:7e:58: f2:af:7e:af:7a:70:0e:2b:8a:fc:6c:5a:89:73:ef:84:26:d1: fa:1f:01:5d:dd:e8:bc:9f:8c:96:e3:93:0b:88:8b:45:86:60: ff:3c:8d:69:25:e8:30:b8:50:d1:f0:1b:fb:7f:d2:0d:b9:72: 02:5d:83:05:0c:db:72:49:ad:45:15:0e:7b:0c:05:6d:91:9a: 7b:59:99:57:ca:a0:d8:6e:a5:9b:ba:b7:59:6c:c8:13:27:41: e6:22:85:91:82:cd:dd:e8:96:5b:63:f5:b9:0c:ff:8d:c3:60: 63:f5:ea:56:cd:7a:e3:f8:21:9c:ec:ec:0a:53:07:1d:d5:d9: f3:6e:39:3f:93:f0:e8:90:5d:67:c9:9d:8a:cd:e5:63:1a:6f: f4:fb:a8:8e:a2:f0:13:25:b4:ab:c7:f6:0d:5b:4a:96:6c:19: f8:aa:3b:e2:9a:8b:36:2a:7a:96:eb:bf:32:d2:4a:8e:ba:6d: 4a:09:1f:3a:18:5e:60:c8:f5:49:d7:e6:a3:e6:80:88:3b:db: 6e:81:62:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30dvAfvUVFxwNuXnAb9fVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk OTdhZjYwHhcNMjYwMTI2MDEwMTI0WhcNMjYwMTI3MDEwMTI0WjAzMTEwLwYDVQQD EygzYjQyMjk5ZDY1NTVhM2IyMjk4YmNiNzhjOTc2YjRmOWI4NjVkMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUhyEIcVNy3jBoeIXOUL7Cgox/ff aP3w3ZbR6o2kQZxnPH98fcEJMZcW8eALDEdzQaJKmEunGvoLa4TNpeU33iuldrjN iAy4LtJ6aurFowHu7ImA9/PRo+NGLUNzQiQhgy12+KqTZtgC8vKc6HihZfwdM0JI BDbBxpRH5RnDXXE8TOcxsqw17tGEFRW5NW+Nb7FIX6UYfvx3Vwv2xKqz6y38pWMy HLGLOCS48CvYmN/KVGuELorY4g/1TWs2ZXfHa2pwdFQJTD9Z0MqNsHYzU/Hc57u7 ya7PcJAHb7qbQmSD3Pogw1jDHfUytHj2+9YYi1MeMIbWF2Ta60yVWuNiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtCKZ1lVaOyKYvLeMl2tPm4ZdD3MB8GA1UdIwQY MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUOEg4zZ o2lp2qIVqKEMAJAcgWbhLep9tt3bUlrfalz9IpYQtf39r9yi1/GGvR8pZMhcnX5Y 8q9+r3pwDiuK/GxaiXPvhCbR+h8BXd3ovJ+MluOTC4iLRYZg/zyNaSXoMLhQ0fAb +3/SDblyAl2DBQzbckmtRRUOewwFbZGae1mZV8qg2G6lm7q3WWzIEydB5iKFkYLN 3eiWW2P1uQz/jcNgY/XqVs164/ghnOzsClMHHdXZ8245P5Pw6JBdZ8mdis3lYxpv 9PuojqLwEyW0q8f2DVtKlmwZ+Ko74pqLNip6luu/MtJKjrptSgkfOhheYMj1Sdfm o+aAiDvbboFifA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:46 2026 by rpki-client