This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File: BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier: fAI2GuwzQjihM7XPpr3QPHuBzuqvPoSAxhK709HAxi4=
Subject key identifier: 7E:F9:63:F8:36:16:CA:E8:49:B7:1C:62:C2:17:B9:CF:BD:C1:02:03
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019BF5AC089231D4BCC0EEF24A6A0387668F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number: 040D
Signing time: Sun 25 Jan 2026 15:00:50 +0000
Manifest this update: Sun 25 Jan 2026 15:00:50 +0000
Manifest next update: Mon 26 Jan 2026 15:00:50 +0000
Files and hashes: 1: 1-TF_DNYPytFCDM9ob70FwezU19M.roa (hash: d02a+8r6UEOH7tUcT4ldHX7Qn837ccWleqSz8aMVP1Y=)
2: 1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa (hash: JGYkH4jrc0W9U8ZV3mJqPcgKRn06DtzcgGerdHLNLUc=)
3: 5n2b9maD-WKBvGsJL4HCi6NMYJI.roa (hash: Nn5OtfAxQwpd29OmMbi7586ulW0AdmiqrnApRdvkbGg=)
4: 8JBVMlgJrEeMkQUmPSoIQ2RUnn4.roa (hash: VZnlb0yKuhiG0Ts3EoKkO1PeRAsc+rIKQY3PrkAaF7E=)
5: 9EjUnibhEJq5bLfdbGt92aCmGYY.roa (hash: DnS2jnsGqE15sINmHwk3fDd3mcW2MTDLdlWaO67YF34=)
6: 9LQRctI2YftbEKVnyItaOOy3d_M.roa (hash: pgk2Inrux/7lL/EYb6kKY+A+qh5ghGB3qij7g35sOh8=)
7: A1bQAOXZNhA4xD0DYsbXMY1DEE4.roa (hash: eGOJmOh8umGTdfiUy3BddRThCQh7xj1QJBNZ6Dmw0So=)
8: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: 6ue6iA22fYVHA7xnsfsocyILeHEcYqdJ6rUQADjmfTA=)
9: FS2smUh78VcAx1pJo864e-lr3gI.roa (hash: mixZibFB0hFz56z+JYqSccSF9Jdi9meBEB5gjBMrGmw=)
10: GyzajySXFNptPE7l10xphbAf9qs.roa (hash: VEbjGiU3gcrEFTJiy6XlNzZm8FBAw6pBZ84W77N6V9E=)
11: HUfPguDLv61FjwhE83RjHvo6SG0.roa (hash: TVSqZsAvt2m9gNwVr8IK6jrYRpSQJdNbVnyELUQDzIY=)
12: HvvYce2lyVlZo0K5qONasUupbiM.roa (hash: kk/JmVvld/s18l7uimHCEPJ58RJkP9Sl4O6TUSKa5vQ=)
13: HyAI8oS_M9RrtnBFX4mgVsfZ3EI.roa (hash: tOuIfCuuSHHG5cx/angD7pz9vkeVH3Nbhnif6O6zKS8=)
14: J_dwoac2_h9_W-5D3aMWAkrgLHg.roa (hash: SCIAKzIm+vtezURZIxJ2QGlLa7UQxEem2JdisgUb7+M=)
15: LEC1offLjwJrFzx8Dpv7xkLNEyg.roa (hash: dFznU7yxG8+kgv1O/dEk2D3HMFQlxv6V3RwD+q16duc=)
16: LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa (hash: V2v+4vi1fkAuP3HFSTiQqZk5Ych9yvJZ2q3KENPbMwg=)
17: MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa (hash: jJ9eXrKVZallfBng8qzQIoukBNtwZT2XORL8UeAPSWU=)
18: ON_ctMOAUZaapm2VNE4MUGlm5s0.roa (hash: 4OAfdVogeIliIwtkxx+7QSj3X/gCNixWQKVjGlrxtEc=)
19: QKCRwXV0KlqGb8GAJmYwpUO-0EA.roa (hash: Rr+NwshtCQpa7LHQuWVgydY+wZTnKwGAZ6E2PxjHpcw=)
20: SVPLS2ubDGmz996fszQp7r_8WjM.roa (hash: zb6o8Pz5mahpV7VTvHHDSV5gjebzFr1Ex6x7GDwi1/I=)
21: VkW9wv564hDafmgem7iN4Pq0eg0.roa (hash: rHiCzFG5HzMXM3bkuQnCSkoGdPunuITBDMRZQXzh+hU=)
22: XBrtcFkYFYn1d8wOUs-MH4MggIg.roa (hash: 3la0XwUD6TEcGr6MZx4dbGc7QsVb0VebdIcmX6590Pg=)
23: Xb1Ypft5Y54bcYQ8b79qIwrScbE.roa (hash: Ptw9WulLvCzzd5LJ241CpZZU4h4IU0B2dm9/idnoGHM=)
24: XcMHnxKZY2e5dQr9lhfnKoyrzgg.roa (hash: uL7kMGiEjQGkL0k1PwdcqBNO3gC59+oxrHmDwgqaEOM=)
25: YB5-PVFC4-1M_27aTkD19hw9m_E.roa (hash: GP+RmSVrQepJPKNkXbeY0l/FXQ7OQNxujEOGXoYX2Ug=)
26: ZDi90lCOoT-neW4pUMgJFdXU8PI.roa (hash: azZat8GbEZpHjBhSI2j6PNAQyebDIp1fU7Eg9y7wZrs=)
27: apcs4_oanmR8NCDusffG9AvEfsM.roa (hash: sHeaDVArieWiT+UWIxgi2mojPq8GGVCZyBNdboptcLo=)
28: ci0ptYRrl3soT0-X9BF8_u2tuDM.roa (hash: JO6OUsm1lQx/mMSgHEn0FT4Fg0+OMrrpuHf6e9wSXno=)
29: eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa (hash: DE4ibWon9YTdJq0az/Rzpdn4yRH/8+IxBFpWlTJrvso=)
30: fay_KIPQYeRk21dJN7RLGfTf3ig.roa (hash: rgA8dGwQgdG2uChHAnDIz4pqzfnVDZx8vl1RsRoyjNc=)
31: fq4Ew_A_fioISiNqHSgmJitAwlY.roa (hash: I1TA5DBYGE2CE9MFt2QJJ+Lh1L2n39xQZ1WwsXssVQ0=)
32: gpt4tsVlr92QGxcr1kp4hk9GZLk.roa (hash: ynZtdfE+YEDV/1HH49Virb4Hc0ZG8v+eXOdK/wc+KcU=)
33: kqwgQwpaGv-qjbJtnBbAhvql_1M.roa (hash: IaMnuVL7JGmrqGqpSLQSd14hY/SD7WineiRtNHWYaGI=)
34: oK-l_3d_vcNuFOm12ibmb0cbNHs.roa (hash: lVkSdNlZrQRcuVVCpchBeA9OcY08H6oNlvysY5acQSI=)
35: ogG7djAUZ8yRMRdAyuw_W5nzzh8.roa (hash: 1t+gbYROFrlM9v5CjlELwyTvLHT7IFgBhc/IPtaYyfY=)
36: wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa (hash: PlqJyT9jtqG0tUJWI/AH+Gyp3H4OOPzXZR3URdxEA3U=)
37: ybFM2VhDt-PJfuRiqUD4GxYaaCg.roa (hash: RDvUS8pHVizW8pmNMU1sdXDcvQ1oYZCPSqetmqO0J8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:08:92:31:d4:bc:c0:ee:f2:4a:6a:03:87:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jan 25 15:00:50 2026 GMT
Not After : Jan 26 15:00:50 2026 GMT
Subject: CN=7ef963f83616cae849b71c62c217b9cfbdc10203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:82:6a:6d:b4:e8:a5:b3:e0:f0:07:d3:2f:
c6:7d:25:0d:ae:3c:94:12:9d:a9:7a:11:91:d5:a5:
41:1d:85:5c:e8:30:f6:32:3a:9b:3a:0e:0c:d6:9e:
bd:d6:36:71:2e:d6:8a:2f:6c:c4:96:9c:ac:4a:60:
6b:fc:44:51:9b:04:f4:bc:6b:dc:07:13:bf:9e:c0:
a3:64:f0:18:d1:97:f5:64:72:c8:de:2d:93:3c:91:
c7:d8:78:3e:f2:20:4e:ba:8c:ac:1c:db:7b:16:6e:
f8:05:fd:4d:8b:a8:d9:ad:96:96:ec:76:bc:b2:8d:
da:3a:ab:65:ca:fa:a7:2c:47:da:7c:7e:db:de:7a:
ff:e2:1a:fb:35:2c:b6:5e:3e:aa:01:9c:70:42:7c:
43:04:15:f2:3c:c9:96:4d:65:43:7c:73:df:1a:05:
e1:4f:70:c9:5e:16:20:63:be:5e:4d:88:0d:93:35:
99:ed:50:ae:38:07:2e:a1:f3:ea:71:af:5d:3a:8c:
9c:de:76:f3:93:a3:0a:a8:fb:19:d6:ea:cf:c1:ad:
36:33:a7:08:f2:11:5f:86:09:01:ae:d0:1a:37:cd:
cb:50:af:ef:9c:3f:77:a4:1b:b2:20:0c:f0:9a:c7:
78:57:dc:8f:e9:db:27:bd:25:eb:7b:f1:9e:0d:ad:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:63:F8:36:16:CA:E8:49:B7:1C:62:C2:17:B9:CF:BD:C1:02:03
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2e:aa:bf:97:91:7e:ee:24:71:18:5e:e3:27:47:15:56:28:
1c:ba:e0:ba:9c:b8:57:d2:62:22:58:85:b4:a4:ed:d1:a3:27:
e3:54:75:1f:e3:ba:0a:4d:a9:f2:0e:50:23:76:cd:af:ee:8d:
73:fc:06:bf:d3:3e:7c:19:77:44:14:6a:d3:9c:09:22:b4:13:
31:72:59:76:9f:3b:5d:77:a0:ea:3c:77:90:66:3f:87:27:53:
72:ff:88:b9:5c:41:e5:f2:09:da:a8:a8:77:e7:9e:a1:d9:6e:
80:e8:e1:ef:e9:1a:51:9d:dd:63:f1:55:59:50:be:85:d1:b2:
db:5d:cb:7e:3e:54:c8:8b:77:14:ad:15:fd:1c:ae:2c:f4:d3:
ab:10:55:cf:ef:06:e0:2c:e5:bc:80:6b:f8:07:91:8f:2f:65:
5a:d7:53:0f:58:b9:41:e8:94:d4:24:b5:ec:68:a1:2b:ea:d1:
d3:c3:0c:0b:ca:6d:d7:dc:c2:07:a4:ad:00:a1:2e:c9:f8:1d:
27:e0:04:bf:10:68:4c:96:b4:ff:ee:9e:a1:69:b9:db:54:b3:
5a:58:41:b6:c2:76:ed:ab:aa:49:cd:53:e9:20:28:3a:59:05:
53:2b:45:c3:8f:c6:ab:c8:1b:b8:50:c2:39:73:aa:64:df:c3:
21:33:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:07:35 2026 by rpki-client