This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json) Hash identifier: vC/kcPiKUdbglD7BHuQ+XK81LDrBNKg37mLWNwvtIGI= Subject key identifier: 46:7F:E8:D9:4E:E0:3D:21:3C:73:18:E0:CC:09:F1:98:EF:91:68:6A Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb Certificate serial: 019BF650DC98F6564DA7293D29EEED71DA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft Manifest number: 024E Signing time: Sun 25 Jan 2026 18:00:52 +0000 Manifest this update: Sun 25 Jan 2026 18:00:52 +0000 Manifest next update: Mon 26 Jan 2026 18:00:52 +0000 Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: grm9oLEYnvPudmLB9w2Nidxb57lY+RoKSUWRwxg64ho=) 2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:dc:98:f6:56:4d:a7:29:3d:29:ee:ed:71:da:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073848d8281be439e77750885b547a28152801bb Validity Not Before: Jan 25 18:00:52 2026 GMT Not After : Jan 26 18:00:52 2026 GMT Subject: CN=467fe8d94ee03d213c7318e0cc09f198ef91686a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:e5:61:fa:40:58:a0:0c:76:29:5b:9b:db: a1:d2:57:fa:5a:74:41:ca:9f:98:07:f4:46:f2:5c: d8:32:31:17:1b:18:ee:9d:6e:6e:c4:cf:d7:99:8f: db:20:18:ae:59:ed:0d:d2:9a:27:e7:b5:44:9c:c1: be:67:ad:1e:c6:f1:29:10:2d:15:85:41:23:f6:99: 39:42:e8:c0:67:69:20:65:63:51:ce:8d:69:04:8b: 52:93:fe:55:1e:ed:93:54:1e:24:7b:33:60:ee:77: f5:20:a1:c0:d2:a3:ab:6b:8d:67:8a:b3:cb:22:7e: 5c:03:27:64:18:cd:dc:b2:98:75:0a:7d:ae:9b:20: 10:f1:81:39:c1:3b:76:71:f1:6c:6b:05:fb:8c:d2: 33:3a:8d:36:e7:95:d7:a2:bb:a7:c0:14:af:8d:f6: ad:f3:0f:ac:0e:65:a3:c0:7d:de:d2:45:11:87:f1: 86:75:34:b5:ac:4a:de:07:08:f9:43:47:80:61:4b: 08:95:5c:44:70:5a:6e:6c:1a:1e:81:d6:40:a0:72: d5:05:11:6e:25:63:c5:3e:25:33:a0:9b:cd:d0:31: 02:77:89:52:8b:70:e9:b5:42:b2:58:d7:c2:32:fa: b3:f2:ad:81:d5:72:c3:42:03:7f:21:d6:f8:d3:56: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7F:E8:D9:4E:E0:3D:21:3C:73:18:E0:CC:09:F1:98:EF:91:68:6A X509v3 Authority Key Identifier: keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c4:93:9a:cd:c8:14:32:26:0a:ca:41:d9:27:a0:d5:6a:ab: 38:96:15:51:61:70:6a:4b:e2:e9:eb:da:bd:5a:94:d7:28:7d: 8f:d0:2b:70:2e:d8:78:84:0d:9f:24:70:7e:ce:99:97:e3:ce: b0:5b:2a:8c:e7:ec:9d:6f:67:63:e7:13:6f:2f:ee:fe:0e:44: e1:0b:e2:f9:39:59:71:ff:32:dc:3b:5b:68:cb:aa:13:ac:73: 3c:13:8d:ad:aa:a5:a9:24:e3:80:c7:7c:5c:1b:69:09:55:6c: b5:51:e3:ef:f5:db:6e:12:bf:cd:7b:3c:2d:b2:73:c3:02:8b: e9:64:5e:19:1e:84:d6:d4:e7:1a:cb:cb:6a:d3:b1:b1:c7:9b: 24:26:8c:0d:0b:75:bc:c7:51:35:61:5b:20:43:77:7d:cf:5e: ad:32:4e:d6:1f:e0:2c:f6:52:c5:b8:ca:9f:97:5b:cf:97:e7: 09:9b:93:eb:5a:09:67:61:93:c3:45:17:60:f9:75:d6:09:f7: a3:b7:9b:38:df:60:05:c3:e4:be:5e:b6:d5:8e:0f:d8:ce:79: 6c:dc:26:c3:69:ed:e6:09:04:ed:80:bf:10:a2:44:df:c0:24: 7d:49:cb:60:37:0f:e2:f0:d3:61:ff:62:cc:9e:f8:25:8b:3f: 64:66:9f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UNyY9lZNpyk9Ke7tcdokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy ODAxYmIwHhcNMjYwMTI1MTgwMDUyWhcNMjYwMTI2MTgwMDUyWjAzMTEwLwYDVQQD Eyg0NjdmZThkOTRlZTAzZDIxM2M3MzE4ZTBjYzA5ZjE5OGVmOTE2ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pLlYfpAWKAMdilbm9uh0lf6WnRB yp+YB/RG8lzYMjEXGxjunW5uxM/XmY/bIBiuWe0N0pon57VEnMG+Z60exvEpEC0V hUEj9pk5QujAZ2kgZWNRzo1pBItSk/5VHu2TVB4kezNg7nf1IKHA0qOra41nirPL In5cAydkGM3csph1Cn2umyAQ8YE5wTt2cfFsawX7jNIzOo0255XXorunwBSvjfat 8w+sDmWjwH3e0kURh/GGdTS1rEreBwj5Q0eAYUsIlVxEcFpubBoegdZAoHLVBRFu JWPFPiUzoJvN0DECd4lSi3DptUKyWNfCMvqz8q2B1XLDQgN/Idb401ZxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ/6NlO4D0hPHMY4MwJ8ZjvkWhqMB8GA1UdIwQY MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5 LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsSTms3I FDImCspB2Seg1WqrOJYVUWFwakvi6evavVqU1yh9j9ArcC7YeIQNnyRwfs6Zl+PO sFsqjOfsnW9nY+cTby/u/g5E4Qvi+TlZcf8y3DtbaMuqE6xzPBONraqlqSTjgMd8 XBtpCVVstVHj7/XbbhK/zXs8LbJzwwKL6WReGR6E1tTnGsvLatOxscebJCaMDQt1 vMdRNWFbIEN3fc9erTJO1h/gLPZSxbjKn5dbz5fnCZuT61oJZ2GTw0UXYPl11gn3 o7ebON9gBcPkvl621Y4P2M55bNwmw2nt5gkE7YC/EKJE38AkfUnLYDcP4vDTYf9i zJ74JYs/ZGafWg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:00 2026 by rpki-client