This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json) Hash identifier: U2OMSe1BIR0fZfuroYei28g2Umsov3Pl1oSuCzxtdsU= Subject key identifier: 7E:B0:FD:E1:98:5A:14:8C:A4:57:68:DC:1E:9A:9C:89:31:E7:11:DC Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Certificate serial: 019BF8ADB1B85F80DE80CAA085FA57A77A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft Manifest number: 0953 Signing time: Mon 26 Jan 2026 05:01:31 +0000 Manifest this update: Mon 26 Jan 2026 05:01:31 +0000 Manifest next update: Tue 27 Jan 2026 05:01:31 +0000 Files and hashes: 1: V4zAIgAoy_1XQ7dP32lAlqC0nxM.roa (hash: o+vrELIZ0yNZvQJf/bVnVUZJH4II7t1VE+Z62K1MGg8=) 2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: nACHyLOeTSlWRf1JqGYvb28GECkqjSe4wvPTHlsqxgY=) 3: wRsM-J-_RdemGYQhUq06PflenDM.asa (hash: pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:b1:b8:5f:80:de:80:ca:a0:85:fa:57:a7:7a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26 Validity Not Before: Jan 26 05:01:31 2026 GMT Not After : Jan 27 05:01:31 2026 GMT Subject: CN=7eb0fde1985a148ca45768dc1e9a9c8931e711dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:26:9a:9f:4e:42:99:58:05:2d:2a:be:9f: e0:38:f4:c7:80:39:e9:e4:18:88:5b:f0:fa:e8:88: c3:8a:b2:17:54:7a:c6:54:4b:eb:c9:1e:2b:f1:81: b1:29:8e:73:30:c5:77:46:d2:c2:37:80:d1:ac:b0: c4:64:b8:c5:87:d9:dd:49:d4:d2:29:bf:e6:c0:d0: e1:9f:8b:d0:9d:42:14:25:02:07:02:f9:48:30:9c: 82:e1:2a:fe:2a:3f:f9:ce:91:68:aa:82:fa:70:21: 96:e4:d7:f1:df:af:4d:98:1c:3c:5b:eb:e2:a9:de: 29:1f:e9:79:2f:a6:91:ee:fb:2a:66:e4:60:8f:dc: ab:f8:dd:6a:6f:c1:a5:66:4f:d2:16:7a:b6:15:cd: 38:fe:bd:12:5d:ae:e7:4d:44:25:39:8c:21:0d:d0: f7:d9:20:c9:08:c4:4e:6d:ca:04:37:ca:22:30:53: be:5e:b2:e5:06:9f:3e:de:26:2c:cc:ff:ec:a0:8b: d1:1e:e1:00:e1:4d:f9:35:77:5d:46:11:0e:c3:d6: 85:52:7b:11:ad:12:87:20:f4:d2:1e:f5:1e:99:80: 96:85:78:0d:48:0c:f5:4c:cd:66:63:cb:10:e6:77: de:35:70:81:9c:2f:8a:fb:0d:5c:a7:a0:0b:8b:cd: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B0:FD:E1:98:5A:14:8C:A4:57:68:DC:1E:9A:9C:89:31:E7:11:DC X509v3 Authority Key Identifier: keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6f:c6:02:15:0f:5b:db:e3:73:4a:37:fb:9f:3e:c5:ca:44: cd:1c:8a:28:ef:76:f1:81:3f:02:68:f8:63:4b:f4:db:67:24: 9a:e2:dc:18:b1:cd:cc:08:f3:fd:11:fa:76:cb:82:cb:f7:65: 8d:4c:4f:a8:a1:0d:cf:20:96:a2:93:2f:b6:5f:33:03:5a:68: d6:9b:a6:72:53:e0:5c:52:d5:20:e3:14:f9:d2:00:20:d9:87: c8:ec:64:ab:8a:d9:d3:30:92:48:3c:f3:54:43:6e:71:76:c9: 79:fb:f0:55:d1:0e:07:e3:d7:80:a5:99:82:cf:53:d0:94:23: b4:8f:09:d6:b4:1e:47:05:26:9c:fc:7a:50:7d:68:4f:cc:e4: 41:1a:c0:db:8b:9a:7a:5a:28:80:12:0e:f7:58:b2:4f:6e:3c: b2:d0:d2:c3:61:88:af:47:89:6d:52:b7:93:37:35:20:5c:d5: 04:78:df:43:33:7b:ac:83:88:75:64:09:9a:25:49:a5:93:3f: ef:8f:ac:1c:f3:41:a9:14:d3:4e:e2:7d:b0:c3:bb:2a:9f:11: da:f4:bd:00:d3:5f:33:c1:8b:76:81:38:7c:8c:c4:9f:0a:82: d6:b0:fe:57:db:bb:b1:d1:60:bb:c5:3f:f7:e1:03:58:d0:86: ba:63:b0:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rbG4X4DegMqghfpXp3piMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx YjNlMjYwHhcNMjYwMTI2MDUwMTMxWhcNMjYwMTI3MDUwMTMxWjAzMTEwLwYDVQQD Eyg3ZWIwZmRlMTk4NWExNDhjYTQ1NzY4ZGMxZTlhOWM4OTMxZTcxMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkkmmp9OQplYBS0qvp/gOPTHgDnp 5BiIW/D66IjDirIXVHrGVEvryR4r8YGxKY5zMMV3RtLCN4DRrLDEZLjFh9ndSdTS Kb/mwNDhn4vQnUIUJQIHAvlIMJyC4Sr+Kj/5zpFoqoL6cCGW5Nfx369NmBw8W+vi qd4pH+l5L6aR7vsqZuRgj9yr+N1qb8GlZk/SFnq2Fc04/r0SXa7nTUQlOYwhDdD3 2SDJCMRObcoEN8oiMFO+XrLlBp8+3iYszP/soIvRHuEA4U35NXddRhEOw9aFUnsR rRKHIPTSHvUemYCWhXgNSAz1TM1mY8sQ5nfeNXCBnC+K+w1cp6ALi82JYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6w/eGYWhSMpFdo3B6anIkx5xHcMB8GA1UdIwQY MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt N2E3NDczYzU0NWIxLzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm/GAhUP W9vjc0o3+58+xcpEzRyKKO928YE/Amj4Y0v022ckmuLcGLHNzAjz/RH6dsuCy/dl jUxPqKENzyCWopMvtl8zA1po1pumclPgXFLVIOMU+dIAINmHyOxkq4rZ0zCSSDzz VENucXbJefvwVdEOB+PXgKWZgs9T0JQjtI8J1rQeRwUmnPx6UH1oT8zkQRrA24ua eloogBIO91iyT248stDSw2GIr0eJbVK3kzc1IFzVBHjfQzN7rIOIdWQJmiVJpZM/ 74+sHPNBqRTTTuJ9sMO7Kp8R2vS9ANNfM8GLdoE4fIzEnwqC1rD+V9u7sdFgu8U/ 9+EDWNCGumOwwA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:08 2026 by rpki-client