This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json) Hash identifier: 9fdn5YlvWWukgeBZ+ImpnU9TsvKRAXUXGeulYaMo0Ps= Subject key identifier: 81:63:29:5A:C0:1B:CF:CE:41:57:54:C1:AE:BE:A0:E4:AC:A2:2A:03 Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Certificate serial: 019BF7D222F291E9FE92EF434BC3852C4CAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft Manifest number: 0AA8 Signing time: Mon 26 Jan 2026 01:01:42 +0000 Manifest this update: Mon 26 Jan 2026 01:01:42 +0000 Manifest next update: Tue 27 Jan 2026 01:01:42 +0000 Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: hU2LBik3Fn1lwf3loTb3tGohrbvHL1RHo5ofkCCl6mE=) 2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:22:f2:91:e9:fe:92:ef:43:4b:c3:85:2c:4c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Validity Not Before: Jan 26 01:01:42 2026 GMT Not After : Jan 27 01:01:42 2026 GMT Subject: CN=8163295ac01bcfce415754c1aebea0e4aca22a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:c2:2d:53:36:7d:b9:17:cc:77:c8:81:a7: da:0c:94:21:ac:60:f9:66:de:5c:ec:8c:b0:21:85: cb:47:a8:b8:a0:ea:43:7c:ce:d2:02:4e:58:1e:90: eb:44:ea:42:33:80:20:21:a4:14:80:e5:e5:46:7e: c8:c1:75:1f:3b:0d:b9:1c:21:71:67:8a:ea:9a:ed: 5e:6f:4d:25:2b:e1:e5:f3:07:44:67:ef:9f:0e:06: 0e:18:fd:66:c7:fe:b2:fb:f8:25:8a:cf:a7:05:f8: fd:fe:e7:20:04:55:5c:29:a7:be:a5:61:a4:f0:49: 82:b5:10:2d:7b:6a:70:9a:f2:e9:4e:40:78:e2:54: de:e4:25:8e:8e:c7:00:b0:32:99:ff:91:4f:c4:3f: 7f:2c:9c:cd:c7:c0:97:99:33:86:4f:b7:a2:ae:2c: a1:7e:0f:ab:bc:7c:e6:b0:46:16:70:4a:d1:a6:f2: 12:ef:de:92:ef:c8:c7:5b:8a:4e:86:89:74:c0:e6: 87:5e:98:1f:1f:9a:e8:de:5d:43:6e:af:c0:12:c9: 7e:b0:49:90:cf:0e:0d:ff:b7:74:62:34:21:0c:e7: 1e:92:5d:02:21:3b:a5:60:46:52:12:0b:ec:20:9c: 3f:0a:08:9b:2c:45:29:27:95:fa:cc:46:7e:61:1d: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:29:5A:C0:1B:CF:CE:41:57:54:C1:AE:BE:A0:E4:AC:A2:2A:03 X509v3 Authority Key Identifier: keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f5:36:0b:c4:37:0e:87:1a:12:e8:25:04:89:2e:44:e7:15: 53:21:4b:0a:d6:02:19:44:f9:04:63:fa:33:08:ed:1f:95:6c: ac:3c:6c:f1:56:c1:72:18:6b:e7:5a:76:73:40:09:fa:34:ad: b0:d0:cd:68:dd:01:27:73:41:63:8e:5b:c3:77:92:d8:5a:70: a9:62:f3:20:cb:0a:14:eb:66:b8:75:de:31:3a:7d:47:6c:b1: 0b:31:8b:e2:59:12:37:38:c6:37:7b:58:b8:bd:be:40:33:6c: c0:cc:89:1c:e8:39:65:52:77:2a:fe:1f:6a:de:04:4a:20:86: 78:7c:4e:06:bf:0b:4a:ab:5c:86:07:c4:b0:d8:ea:16:7f:e9: 45:5a:84:84:74:9e:61:dd:ea:14:16:49:21:6a:a1:03:36:f2: 23:2f:36:43:53:ad:9d:50:89:b6:e3:54:3b:52:c7:90:b4:4d: 66:af:54:cf:24:c1:5a:f9:e8:11:18:20:11:52:80:80:be:a3: 17:ed:15:23:a1:26:01:2f:8b:85:c7:b7:ee:0f:48:a6:dc:84: 82:b8:1e:22:8e:6c:a1:7f:f1:97:5b:8e:f7:56:1e:0e:2d:bc: ef:f5:cd:e0:9d:d4:c5:85:f4:d5:59:6a:9d:b6:21:41:15:18: 91:2c:19:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30iLyken+ku9DS8OFLEyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm MGMzNzYwHhcNMjYwMTI2MDEwMTQyWhcNMjYwMTI3MDEwMTQyWjAzMTEwLwYDVQQD Eyg4MTYzMjk1YWMwMWJjZmNlNDE1NzU0YzFhZWJlYTBlNGFjYTIyYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOzCLVM2fbkXzHfIgafaDJQhrGD5 Zt5c7IywIYXLR6i4oOpDfM7SAk5YHpDrROpCM4AgIaQUgOXlRn7IwXUfOw25HCFx Z4rqmu1eb00lK+Hl8wdEZ++fDgYOGP1mx/6y+/glis+nBfj9/ucgBFVcKae+pWGk 8EmCtRAte2pwmvLpTkB44lTe5CWOjscAsDKZ/5FPxD9/LJzNx8CXmTOGT7eiriyh fg+rvHzmsEYWcErRpvIS796S78jHW4pOhol0wOaHXpgfH5ro3l1Dbq/AEsl+sEmQ zw4N/7d0YjQhDOcekl0CITulYEZSEgvsIJw/CgibLEUpJ5X6zEZ+YR3aCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFjKVrAG8/OQVdUwa6+oOSsoioDMB8GA1UdIwQY MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfU2C8Q3 DocaEuglBIkuROcVUyFLCtYCGUT5BGP6MwjtH5VsrDxs8VbBchhr51p2c0AJ+jSt sNDNaN0BJ3NBY45bw3eS2FpwqWLzIMsKFOtmuHXeMTp9R2yxCzGL4lkSNzjGN3tY uL2+QDNswMyJHOg5ZVJ3Kv4fat4ESiCGeHxOBr8LSqtchgfEsNjqFn/pRVqEhHSe Yd3qFBZJIWqhAzbyIy82Q1OtnVCJtuNUO1LHkLRNZq9UzyTBWvnoERggEVKAgL6j F+0VI6EmAS+Lhce37g9IptyEgrgeIo5soX/xl1uO91YeDi287/XN4J3UxYX01Vlq nbYhQRUYkSwZhw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:41 2026 by rpki-client