This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json) Hash identifier: Lus0YVYdi4yiCjsS/ifuOEnPqx63JgfcLR5WXZGD4c0= Subject key identifier: 95:8E:A6:60:62:D8:CE:85:EA:D8:D9:F4:49:3A:9C:45:EC:DA:EB:B5 Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Certificate serial: 019BF5AC3992BFC8EBE1E1A82962444D00B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft Manifest number: 0FB3 Signing time: Sun 25 Jan 2026 15:01:03 +0000 Manifest this update: Sun 25 Jan 2026 15:01:03 +0000 Manifest next update: Mon 26 Jan 2026 15:01:03 +0000 Files and hashes: 1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: uZemp+qQhwhGbQixisEdy9vJz61ubmKAepsG36HOSuA=) 2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:39:92:bf:c8:eb:e1:e1:a8:29:62:44:4d:00:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Validity Not Before: Jan 25 15:01:03 2026 GMT Not After : Jan 26 15:01:03 2026 GMT Subject: CN=958ea66062d8ce85ead8d9f4493a9c45ecdaebb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:97:60:ed:f6:e3:81:89:37:80:61:dd:f2: f8:80:4a:63:2b:46:f6:ba:2c:8b:de:5e:e3:00:e8: 29:b4:ca:be:b6:01:78:f8:db:21:70:bd:73:fe:b3: d2:cf:f0:f6:a4:16:11:af:a6:90:10:62:f8:b6:bf: ff:47:ec:bd:06:9a:ac:fb:c9:05:11:e5:20:4a:68: b2:8d:c4:fd:22:f0:21:14:e8:33:0c:8c:4b:ff:67: f8:d8:1e:75:6f:7e:85:5f:ba:97:5f:c1:27:55:ca: 71:c9:1b:eb:f3:35:08:05:21:b8:10:cd:91:d0:64: 15:a3:0d:2c:72:e6:7d:92:a9:90:16:79:e9:8c:d4: 08:db:f2:6b:e8:04:d7:83:6a:37:0b:e9:83:9c:24: 5d:d7:46:90:fe:2d:23:c8:4a:06:a8:fe:97:85:8f: 19:31:3a:34:c8:66:56:72:b4:15:4c:74:f9:ca:d0: ac:00:fe:ab:91:56:63:6f:52:aa:db:ff:7d:6e:f7: e7:b9:b8:b2:08:a9:c2:23:0f:e2:a6:13:94:2f:9e: 2d:47:e5:00:ff:bd:79:78:85:af:8d:63:ce:e6:3f: 95:23:54:a3:a8:7a:4c:1d:1e:cf:d4:d5:40:29:c6: 4c:d3:6d:11:70:bc:76:c0:ac:d8:53:18:72:79:20: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8E:A6:60:62:D8:CE:85:EA:D8:D9:F4:49:3A:9C:45:EC:DA:EB:B5 X509v3 Authority Key Identifier: keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:61:f4:b8:68:58:a3:9d:6d:b8:a8:91:4d:2a:cf:6c:ae:05: ea:9f:30:2f:12:34:12:2b:cc:bd:d9:1f:e7:36:ad:c8:37:b0: 8c:dd:7a:51:84:d1:a8:8f:e7:5a:41:81:9d:93:b0:69:48:42: 14:f8:92:36:74:ed:b0:a3:78:03:4a:ac:ea:ab:31:54:2c:0d: 15:94:05:e5:aa:42:20:1b:0b:84:c5:c4:f8:d6:a4:32:27:86: 4c:5b:3d:3a:de:84:60:0d:58:53:d6:24:87:8d:98:a8:01:af: 10:77:44:7e:bb:1b:06:54:98:b3:fc:a4:cf:b4:c5:15:4e:a0: 58:fc:72:5b:15:1b:5d:4c:55:ac:40:0d:4c:d3:41:9e:ae:92: 0d:81:7f:2a:a7:4c:ea:ba:31:06:dd:b5:9d:61:0e:e9:14:39: 19:71:f1:e5:4f:a2:dd:d2:4f:68:bd:da:37:10:82:42:74:1c: 87:9c:7f:d0:88:fd:7c:e1:a5:3f:07:1a:34:c1:c5:55:41:d3: 28:60:07:0a:97:17:c6:98:19:a6:f3:fd:95:d7:31:54:74:f5: ed:9a:d4:f7:86:41:00:e3:55:9d:23:78:e3:66:49:38:49:5f: c6:09:0c:54:c5:81:f5:d2:63:7f:14:8a:9a:92:42:8e:d6:96: 42:a2:68:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDmSv8jr4eGoKWJETQCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz NmUyNmQwHhcNMjYwMTI1MTUwMTAzWhcNMjYwMTI2MTUwMTAzWjAzMTEwLwYDVQQD Eyg5NThlYTY2MDYyZDhjZTg1ZWFkOGQ5ZjQ0OTNhOWM0NWVjZGFlYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWmXYO3244GJN4Bh3fL4gEpjK0b2 uiyL3l7jAOgptMq+tgF4+NshcL1z/rPSz/D2pBYRr6aQEGL4tr//R+y9Bpqs+8kF EeUgSmiyjcT9IvAhFOgzDIxL/2f42B51b36FX7qXX8EnVcpxyRvr8zUIBSG4EM2R 0GQVow0scuZ9kqmQFnnpjNQI2/Jr6ATXg2o3C+mDnCRd10aQ/i0jyEoGqP6XhY8Z MTo0yGZWcrQVTHT5ytCsAP6rkVZjb1Kq2/99bvfnubiyCKnCIw/iphOUL54tR+UA /715eIWvjWPO5j+VI1SjqHpMHR7P1NVAKcZM020RcLx2wKzYUxhyeSDa4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWOpmBi2M6F6tjZ9Ek6nEXs2uu1MB8GA1UdIwQY MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGH0uGhY o51tuKiRTSrPbK4F6p8wLxI0EivMvdkf5zatyDewjN16UYTRqI/nWkGBnZOwaUhC FPiSNnTtsKN4A0qs6qsxVCwNFZQF5apCIBsLhMXE+NakMieGTFs9Ot6EYA1YU9Yk h42YqAGvEHdEfrsbBlSYs/ykz7TFFU6gWPxyWxUbXUxVrEANTNNBnq6SDYF/KqdM 6roxBt21nWEO6RQ5GXHx5U+i3dJPaL3aNxCCQnQch5x/0Ij9fOGlPwcaNMHFVUHT KGAHCpcXxpgZpvP9ldcxVHT17ZrU94ZBAONVnSN442ZJOElfxgkMVMWB9dJjfxSK mpJCjtaWQqJoRA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:47 2026 by rpki-client