This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json) Hash identifier: gxhlc7YQSMjsbiR2tPpWUtfwxXfl8ZwoR6u1UK5dv7Y= Subject key identifier: EA:2B:75:5F:8F:E1:82:41:9C:17:DA:81:BE:57:5B:39:AF:75:95:59 Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc Certificate serial: 019BF7D1E05909D77BC9A9CD1DEB871E7B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 01:01:25 +0000 Manifest this update: Mon 26 Jan 2026 01:01:25 +0000 Manifest next update: Tue 27 Jan 2026 01:01:25 +0000 Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: oMYZi9viW2uLbrEc/8CYp1MYf2hpwmGPc/lVr0IB5Hg=) 2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=) 3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:e0:59:09:d7:7b:c9:a9:cd:1d:eb:87:1e:7b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc Validity Not Before: Jan 26 01:01:25 2026 GMT Not After : Jan 27 01:01:25 2026 GMT Subject: CN=ea2b755f8fe182419c17da81be575b39af759559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:f3:43:0b:aa:e9:d4:68:23:4e:1f:78:80: 3c:af:34:29:16:40:c7:95:1d:d7:c6:3c:bd:8a:d8: 29:df:6d:76:d8:17:b2:46:5b:19:e7:1c:70:04:d0: 5b:14:2d:df:e5:60:02:69:ba:62:a2:0e:00:ca:38: e3:98:d8:10:13:4b:2b:dc:00:8e:b6:3e:8f:da:78: 5b:86:6d:16:b5:85:a6:f4:a0:67:1f:79:1d:f2:df: 57:0c:f3:2a:eb:56:36:67:7a:20:d5:4e:fc:87:cf: 61:ab:c7:5e:83:f6:9b:71:63:9a:72:cb:44:91:36: 09:b5:2a:35:ef:d7:3a:09:ed:b4:59:78:51:9d:fb: 0b:42:cd:7c:ee:dd:65:91:56:d7:10:07:d2:e5:f5: 23:7f:65:0a:0a:3f:67:43:5b:36:c9:23:27:07:46: 70:20:81:0c:70:0b:07:b6:8b:0d:84:d9:a3:fb:49: 97:da:2e:49:32:5d:1a:4f:8e:46:73:1e:65:04:69: 95:d4:3e:ed:32:f2:50:ee:aa:9f:29:f7:da:98:24: 9b:58:c8:ee:be:18:13:e9:86:34:45:4d:bf:7f:19: a9:b6:a8:f4:c1:0b:d3:69:06:8f:59:61:48:db:d4: 52:cf:6f:7c:4f:d0:84:b7:db:83:6f:e0:83:47:8a: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:75:5F:8F:E1:82:41:9C:17:DA:81:BE:57:5B:39:AF:75:95:59 X509v3 Authority Key Identifier: keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e1:d2:cd:3a:82:f4:9f:87:df:cb:88:6e:ac:08:d7:91:18: ed:6f:4b:fd:23:94:57:29:7a:70:22:c1:f5:f9:38:33:37:a2: c0:82:e8:60:a8:2b:35:0a:a1:05:48:b3:73:a9:90:0c:8c:da: 85:69:da:f0:a6:0b:58:38:99:0b:5d:1e:58:bd:46:2d:93:2e: 21:23:d6:23:12:83:24:04:90:2e:f5:b9:4d:f5:c1:7a:8e:04: 17:35:51:ca:8b:99:94:20:17:c3:d3:cf:6d:e0:32:3b:08:bf: 4a:77:a2:26:6d:e8:7b:51:ad:4f:a5:96:c6:d1:3b:5d:e5:1c: 61:d4:26:a5:33:8a:8c:73:f2:7c:d3:5b:b1:f5:26:9d:19:dc: 73:b2:c8:51:b1:2e:d6:be:53:7b:d5:65:2d:9f:bc:db:3f:ba: dd:ea:94:3e:31:83:5a:e7:7f:ad:a9:7a:6a:91:a1:55:f9:9e: 8c:60:26:5b:1a:d4:c0:21:35:02:ae:e4:b2:01:c2:7f:db:6d: a4:60:ba:51:b0:0f:21:f4:3a:11:69:03:48:e7:3b:51:c9:24: 90:cc:51:4b:a5:a0:63:47:75:9c:1d:ff:d0:da:6b:9b:62:71: 0e:eb:d2:37:d7:86:f9:65:38:85:7e:dd:b8:33:07:3a:d9:2a: 26:f2:91:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30eBZCdd7yanNHeuHHnt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4 YTZhYmMwHhcNMjYwMTI2MDEwMTI1WhcNMjYwMTI3MDEwMTI1WjAzMTEwLwYDVQQD EyhlYTJiNzU1ZjhmZTE4MjQxOWMxN2RhODFiZTU3NWIzOWFmNzU5NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi33zQwuq6dRoI04feIA8rzQpFkDH lR3Xxjy9itgp32122BeyRlsZ5xxwBNBbFC3f5WACabpiog4AyjjjmNgQE0sr3ACO tj6P2nhbhm0WtYWm9KBnH3kd8t9XDPMq61Y2Z3og1U78h89hq8deg/abcWOacstE kTYJtSo179c6Ce20WXhRnfsLQs187t1lkVbXEAfS5fUjf2UKCj9nQ1s2ySMnB0Zw IIEMcAsHtosNhNmj+0mX2i5JMl0aT45Gcx5lBGmV1D7tMvJQ7qqfKffamCSbWMju vhgT6YY0RU2/fxmptqj0wQvTaQaPWWFI29RSz298T9CEt9uDb+CDR4pPxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOordV+P4YJBnBfagb5XWzmvdZVZMB8GA1UdIwQY MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+HSzTqC 9J+H38uIbqwI15EY7W9L/SOUVyl6cCLB9fk4MzeiwILoYKgrNQqhBUizc6mQDIza hWna8KYLWDiZC10eWL1GLZMuISPWIxKDJASQLvW5TfXBeo4EFzVRyouZlCAXw9PP beAyOwi/SneiJm3oe1GtT6WWxtE7XeUcYdQmpTOKjHPyfNNbsfUmnRncc7LIUbEu 1r5Te9VlLZ+82z+63eqUPjGDWud/ral6apGhVfmejGAmWxrUwCE1Aq7ksgHCf9tt pGC6UbAPIfQ6EWkDSOc7UckkkMxRS6WgY0d1nB3/0Nprm2JxDuvSN9eG+WU4hX7d uDMHOtkqJvKRKw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:39 2026 by rpki-client