This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json) Hash identifier: MTW0Uf6FcVElOYufUlSlWk+2IsoCsyutaAsrkP4xw48= Subject key identifier: C6:BE:6E:EC:47:05:38:C3:E3:20:23:A9:FF:51:F2:66:03:2D:02:3D Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Certificate serial: 019BF61A5634C0C204D1B26B7C6F1332E77C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft Manifest number: 086A Signing time: Sun 25 Jan 2026 17:01:19 +0000 Manifest this update: Sun 25 Jan 2026 17:01:19 +0000 Manifest next update: Mon 26 Jan 2026 17:01:19 +0000 Files and hashes: 1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=) 2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: KdGFeaJcA9hSEKNYgDjoF1pAkM1oHlcOQUWLEI9FsxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:56:34:c0:c2:04:d1:b2:6b:7c:6f:13:32:e7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Validity Not Before: Jan 25 17:01:19 2026 GMT Not After : Jan 26 17:01:19 2026 GMT Subject: CN=c6be6eec470538c3e32023a9ff51f266032d023d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:8a:73:ba:42:d0:61:68:12:2d:fa:50:61: 27:a2:39:96:79:d3:e4:e7:33:29:14:10:19:97:d0: be:b0:f2:c0:56:b8:c6:7a:ea:5b:7b:19:ae:e0:dd: d1:32:10:bb:60:4e:71:a2:d0:2f:4c:bf:f6:b4:1f: 9a:82:0d:df:b0:08:21:dd:7a:39:7d:3e:4b:15:d7: ac:a6:46:56:ba:45:b8:11:7a:af:73:17:2d:c5:b4: 6c:44:65:b5:0c:16:30:10:cd:e7:51:98:16:c9:98: f6:19:6e:06:9e:f7:e4:29:25:43:b7:8b:07:07:b4: aa:3f:c1:76:31:1d:b3:2e:fa:0e:03:81:c8:cf:c5: 4b:28:fd:de:b1:c8:06:86:f6:42:84:4d:ea:8f:8b: 62:69:8f:09:94:6c:cb:3f:60:1d:05:6a:ef:d8:8c: 1f:fd:3c:99:0d:bd:a0:54:23:62:2f:9d:8e:44:1b: a4:f2:fd:15:57:23:a2:c9:59:62:5d:51:a9:c0:d2: 3c:a0:53:06:8a:5b:2d:26:cd:70:bb:ed:76:27:9b: 53:f5:56:ea:c4:39:ba:fe:c1:e9:bd:d8:02:23:f8: d1:8f:b7:8d:8f:07:6f:39:4f:bb:09:97:32:48:c3: 83:58:e6:78:12:c7:71:c4:67:25:e6:f3:cb:c3:8a: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BE:6E:EC:47:05:38:C3:E3:20:23:A9:FF:51:F2:66:03:2D:02:3D X509v3 Authority Key Identifier: keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:0d:9d:cf:ea:d8:32:d4:be:0d:8b:23:49:9d:4b:eb:93: 98:43:65:83:65:2d:a3:5d:9c:7a:47:45:08:17:22:f9:08:3d: dc:23:44:ed:54:04:d3:75:3f:af:26:13:16:cb:51:48:05:b0: 63:98:1b:e8:c0:78:62:e5:69:53:05:d1:30:24:29:c5:9f:65: f3:85:fd:44:98:a9:94:7b:fc:4e:68:8a:18:b2:a7:e1:cc:1b: 67:aa:d7:7f:9f:0f:00:c1:9f:48:11:38:fe:d1:80:48:f0:a9: 09:81:63:a9:e6:22:d5:43:d7:ed:64:68:7e:eb:c3:3c:dc:f0: 54:fd:75:6d:37:a6:87:93:c0:a1:c0:8f:c5:0c:58:c7:19:74: 97:a2:77:38:a7:0b:a1:63:79:c7:8d:48:68:a4:ee:f7:f0:46: f7:1b:62:21:17:6c:9e:16:f9:97:d1:06:53:ac:a2:57:a2:c7: 80:40:9f:f4:76:d9:4d:d0:8f:3a:07:aa:02:7b:40:14:91:6c: 99:ff:0e:e0:a9:07:90:35:63:15:8b:17:06:db:46:2f:0b:7c: 92:ed:da:2a:7c:8a:05:54:4c:ca:e2:9b:ac:9e:91:88:79:27: 70:0f:ba:82:66:9b:0a:29:28:ae:d3:4b:73:37:26:44:89:bb: 95:74:06:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GlY0wMIE0bJrfG8TMud8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk MGVlZjUwHhcNMjYwMTI1MTcwMTE5WhcNMjYwMTI2MTcwMTE5WjAzMTEwLwYDVQQD EyhjNmJlNmVlYzQ3MDUzOGMzZTMyMDIzYTlmZjUxZjI2NjAzMmQwMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoaKc7pC0GFoEi36UGEnojmWedPk 5zMpFBAZl9C+sPLAVrjGeupbexmu4N3RMhC7YE5xotAvTL/2tB+agg3fsAgh3Xo5 fT5LFdespkZWukW4EXqvcxctxbRsRGW1DBYwEM3nUZgWyZj2GW4GnvfkKSVDt4sH B7SqP8F2MR2zLvoOA4HIz8VLKP3escgGhvZChE3qj4tiaY8JlGzLP2AdBWrv2Iwf /TyZDb2gVCNiL52ORBuk8v0VVyOiyVliXVGpwNI8oFMGilstJs1wu+12J5tT9Vbq xDm6/sHpvdgCI/jRj7eNjwdvOU+7CZcySMODWOZ4EsdxxGcl5vPLw4q3CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa+buxHBTjD4yAjqf9R8mYDLQI9MB8GA1UdIwQY MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5 LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFMNnc/q 2DLUvg2LI0mdS+uTmENlg2Uto12cekdFCBci+Qg93CNE7VQE03U/ryYTFstRSAWw Y5gb6MB4YuVpUwXRMCQpxZ9l84X9RJiplHv8TmiKGLKn4cwbZ6rXf58PAMGfSBE4 /tGASPCpCYFjqeYi1UPX7WRofuvDPNzwVP11bTemh5PAocCPxQxYxxl0l6J3OKcL oWN5x41IaKTu9/BG9xtiIRdsnhb5l9EGU6yiV6LHgECf9HbZTdCPOgeqAntAFJFs mf8O4KkHkDVjFYsXBttGLwt8ku3aKnyKBVRMyuKbrJ6RiHkncA+6gmabCikortNL czcmRIm7lXQGBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:24 2026 by rpki-client